Privacy Notice
Effective from: 24 July 2026 · Version: 1.0
1. The data controller
| Data controller | Lénárt Ádám Tamás, sole trader |
|---|---|
| Registered / mailing address | 3421 Mezőnyárád, Petőfi út 17/a, Hungary |
| Registering authority | Ministry of the Interior – register of sole traders |
| Tax number | 48987701-1-25 (EU VAT: HU48987701) |
| E-mail (data-protection contact) | support@filamio.com |
The controller does not carry out processing that would require the designation of a Data Protection Officer (DPO).
2. Data processed, purposes and legal bases
| Data | Purpose | Legal basis (GDPR Art. 6) |
|---|---|---|
| E-mail address, password (encrypted hash), name | Account creation, identification, login, providing the service | (1)(b) – performance of a contract |
| E-mail verification and password-reset codes | Account security, e-mail verification | (1)(b) – contract; (1)(f) – legitimate interest (security) |
| Content data entered by the User (spools, warehouses, brands, weight data, etc.) | Core function of the inventory service | (1)(b) – performance of a contract |
| Subscription and billing data (plan, subscription status, Stripe customer ID) | Subscription management, fee collection, accounting obligation | (1)(b) – contract; (1)(c) – legal obligation (accounting) |
| Technical log data (IP address, timestamp, error logs) | Operation, troubleshooting, abuse prevention | (1)(f) – legitimate interest |
Card data: payments are processed by Stripe; the controller does not access or store the full card number.
3. Retention period
- Account and content data: for as long as the account exists. On account deletion the data is deleted without delay, and from technical backups during their regular rotation.
- Billing data: under Hungarian Act C of 2000 on accounting, documents must be retained for 8 years.
- Technical logs: typically up to 12 months.
4. Processors and data transfers
To provide the service the controller uses the following processors. Transfers outside the European Union take place with appropriate safeguards (the European Commission's Standard Contractual Clauses – SCC, or the EU-US Data Privacy Framework).
| Processor | Activity | Data |
|---|---|---|
| Stripe Payments Europe, Ltd. (Ireland) | Payment processing, subscription management | E-mail, name, payment data |
| Plus Five Five, Inc. ("Resend") – United States | Sending transactional e-mails (verification, password reset, invitation) | E-mail address, name |
| HostingBazis Bt. – 4642 Tornyospálca, Mándoki u. 40., Hungary | Website, application and e-mail hosting | Data stored on the web and in e-mail |
| Hetzner Online GmbH – Industriestr. 25, 91710 Gunzenhausen, Germany | Operation of the application server and database | All application data |
The controller does not transfer data to third parties for marketing purposes and does not trade in it.
5. Rights of the data subject
Under the GDPR the User has the following rights, which may be exercised at support@filamio.com:
- Access to the personal data processed.
- Rectification – correction of inaccurate data (partly available within the app as well).
- Erasure ("right to be forgotten") – the account can also be deleted independently in the app.
- Data portability – provision of data in a machine-readable (e.g. CSV) format; spool data can be exported from the app.
- Restriction of processing and objection to processing based on legitimate interest.
- Withdrawal of consent – for consent-based processing; withdrawal does not affect the lawfulness of prior processing.
The controller fulfils the request without undue delay, within 1 month at the latest.
6. Data security
The controller applies appropriate technical and organisational measures to protect data: passwords are stored only in encrypted (hashed) form, communication uses HTTPS/TLS encryption, database access is restricted, and regular backups are made. Data is stored in EU data centres.
7. Remedies
If the User considers that their rights have been infringed during processing, they may lodge a complaint with the supervisory authority:
| Authority | Hungarian National Authority for Data Protection and Freedom of Information (NAIH) |
|---|---|
| Address | 1055 Budapest, Falk Miksa utca 9-11. |
| Website | naih.hu |
| ugyfelszolgalat@naih.hu |
In case of infringement of their rights, the User may also turn to a court.
8. Changes to this notice
The controller reserves the right to amend this notice. The current version is available at filamio.com; in case of a material change the User is informed by e-mail or in the application.