Privacy notice

Controller: Dr Bod-Ri Állategészségügyi Szolgáltató és Kereskedelmi Kft. (Dr Bod-Ri Kft.)

4030 Debrecen, Monostorpályi út 5., Hungary · Company registration number: 09-09-024464 · VAT number: 24295994-2-09 · drbodrilabor@gmail.com

Data protection questions are answered on our behalf by the site’s developer and maintainer, Karner Kristóf e.v. (sole trader): kristof@kristofkarner.com

We are not required to appoint a data protection officer, so we have none; for any data protection question, contact us at the email address above or by post at the company’s address.

Data: your name, email address, the subject (optional) and text of your message, and the time it was sent.

Purpose: so that we can reply. After sending, you receive an automatic confirmation at the email address you gave, including the text of your message.

Legal basis: your consent, given by submitting the form (GDPR Article 6(1)(a)). You may withdraw it at any time by writing to us; this does not affect the lawfulness of processing before the withdrawal.

How long: until your matter is dealt with, and at most one year. If the message is a complaint, we keep the complaint and our reply for three years, as required by the Hungarian Consumer Protection Act (Act CLV of 1997, section 17/A(7); GDPR Article 6(1)(c)).

The form cannot be sent without your name, email address and message — if you prefer not to give them, please call us.

Please do not include special categories of data in your message, such as information about your own health; information about your animal’s health is fine.

Data: your name, phone number, email address (if you give one), a description of the problem, the preferred day and time of day, and your comments.

Purpose: to call you back and arrange the appointment. If you also give an email address, we send an automatic confirmation there with a summary of your request.

Legal basis: steps taken at your request before you use our services (GDPR Article 6(1)(b)).

How long: until the appointment is arranged, and at most one year.

The request cannot be sent without your name, phone number and a description of the problem — you can also ask for an appointment by phone.

To keep bots from flooding the forms, the site counts how many messages arrived from the same internet address (IP address) in the past hour. We do not store the address itself, only a code derived from it with a secret key, and the count.

How long: it expires after one hour, and the system deletes expired entries daily.

Legal basis: our legitimate interest in keeping the forms usable (GDPR Article 6(1)(f)). You may object to this; without the limit, however, we cannot run the form safely.

Bot filtering also uses a timestamp and an invisible field; these contain no personal data.

Like every web server, our hosting provider’s server logs requests: the IP address, the time, the page requested, where the visitor came from, and the browser type.

Purpose: running the site, finding errors and fending off attacks. We do not use the logs for analysis or profiling.

Legal basis: legitimate interest (GDPR Article 6(1)(f)).

How long: at most two months on the hosting, and at most a further 30 days in the hosting provider’s daily backups.

On the home page we show a selection of reviews published on the practice’s public Google Business Profile: the reviewer’s name as used on Google, the star rating, the text of the review (for reviews in another language, Google’s translation), the month of the review, and a link to the reviewer’s Google profile.

Source: Google (Places API). Our server fetches and stores this data; your browser does not contact Google for it.

Legal basis: our legitimate interest in presenting experiences of the practice that were shared publicly (GDPR Article 6(1)(f)).

How long: for as long as the review is shown. The system does not notice by itself if a review is later deleted on Google — if you wrote one and do not want it to appear here, write to kristof@kristofkarner.com and we will remove it.

Your data is accessed by the practice’s staff and by the following providers acting on our behalf, only as far as their task requires:

Rackforest Zrt. (1132 Budapest, Victor Hugo utca 11. 5. em. B05001., Hungary) — hosting of the site, forwarding of emails and backups.

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — the Gmail mailbox that receives messages sent from the site.

Karner Kristóf e.v., sole trader (registration number: 59509570) — development and maintenance of the site, with access to the hosting for this purpose; also answers data protection questions on our behalf (kristof@kristofkarner.com).

We do not sell your data or use it for advertising. We disclose data to authorities only when the law requires it.

Google may also store Gmail data outside the European Union, for example in the United States. This is based on the European Commission’s adequacy decision on the EU–US Data Privacy Framework, in which Google LLC participates, and on the standard contractual clauses adopted by the Commission. There are no other transfers.

This site uses no cookies and does not write to your browser’s storage. There is no visitor analytics (such as Google Analytics), no social media plug-in and no embedded map: the map is drawn, and the typeface is also served from our own server. That is why there is no cookie banner.

The site links to external pages: Google Maps route planning, the practice’s Google Business Profile and its Facebook page. If you follow these links, the provider’s own privacy rules apply.

The site uses an encrypted connection (HTTPS). Form messages are not saved in the site’s database: they reach us by email. Only authorised persons have access to the hosting.

The hosting provider makes a daily backup of the hosting and keeps it for 30 days; data deleted from the site may remain in these backups for that long.

There is no automated decision-making or profiling.

You may ask us to tell you what data we hold about you and to give you a copy; to correct or delete it; or to restrict its processing. Data you gave with your consent or at your request can also be provided in a machine-readable format (data portability).

You may object to processing based on legitimate interest, and you may withdraw your consent at any time.

Send your request to kristof@kristofkarner.com, or by post to the company’s address. We reply within one month at the latest; for complex requests this may be extended by two months, and we will let you know. There is no charge. If we have doubts about the identity of the person making the request, we may ask for further information to confirm it.

Please write to kristof@kristofkarner.com first — we will try to resolve it quickly.

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság): 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; email: ugyfelszolgalat@naih.hu; naih.hu.

You may also go to court: at your choice, you may bring the action before the regional court (törvényszék) competent for your place of residence or stay.

We update this notice when the way the site works or the law changes.

Last updated: 13 September 2026.

This English version is a translation; in case of any difference, the Hungarian version prevails.