Privacy Policy

    Last updated: 22 October 2026

    This Privacy Policy explains how JóSzaki Kft., as the data controller, collects, uses, and protects your personal data when you use the LeadToWork and SuperProfik services (together: the Platform). LeadToWork and SuperProfik are each a service brand owned and operated by JóSzaki Kft.; the data controller is in all cases JóSzaki Kft. The processing complies with the European Union's General Data Protection Regulation (GDPR) and applicable Hungarian data protection laws.

    1. Data Controller Information

    Data Controller: JóSzaki Kft.

    Registered seat: 1068 Budapest, Király utca 82. 4. em. 3. ajtó, Hungary.

    Email: info@joszaki.hu

    You can contact the data controller regarding any privacy matter at info@joszaki.hu.

    2. Data We Process

    During the use of the platform, the following data may be processed: name; email address; phone number; the type of service requested; the location of the service; the text of the quotation request and any uploaded descriptions; the content of message exchanges; IP address, device and browser information; and log data generated during use.

    3. Purpose of Processing

    The purpose of processing is to handle quotation requests, to establish contact between clients and specialists, to deliver messages and notifications, to operate and improve the service, to respond to support requests, to prevent fraud and abuse, and to carry out marketing activities.

    4. Legal Basis for Processing

    The legal basis for processing under Article 6 of the GDPR is:

    – performance of a contract (Art. 6(1)(b)): to process the quotation request and establish the connection;

    – the User's consent (Art. 6(1)(a)): for example, for marketing communications and optional features;

    – legitimate interest (Art. 6(1)(f)): for the security of the service, fraud prevention, and service improvement;

    – legal obligation (Art. 6(1)(c)): to comply with applicable legislation.

    5. WhatsApp, Facebook, and Meta Integration (Messaging)

    To deliver job leads and messages, the Platform integrates with the services of Meta Platforms, Inc., including the WhatsApp Business platform and the Facebook/Messenger surfaces.

    If you contact the service through Facebook or WhatsApp (for example by responding to a Facebook advertisement or lead form, or by sending a WhatsApp message), we may process the following data: your name, phone number, Facebook/WhatsApp profile identifier, the content of messages, and the data you provide in the quotation request.

    We process this data and share it with Meta's messaging infrastructure in order to forward your quotation request to the appropriate specialist and to enable the exchange of messages between the two parties over the WhatsApp / Messenger channel. We transmit to Meta only the data necessary to deliver messages (message content and delivery identifiers).

    The legal basis for this processing is the performance of a contract and, where applicable, your consent (Art. 6(1)(b) and (a) GDPR). WhatsApp and Facebook messaging also operate under Meta's own data processing terms; information on Meta's processing is provided in Meta's and WhatsApp's privacy policies. You may opt out of messages at any time and request the deletion of message-exchange data.

    6. Processors and Data Sharing

    The Provider does not sell personal data. The following types of processors may be involved in processing, under appropriate data processing agreements: hosting and database providers (e.g. Supabase), application hosting (e.g. Vercel), authentication providers (e.g. Google), and Meta's messaging services (Facebook, Messenger, WhatsApp Business).

    As part of forwarding a quotation request, data may be shared with the specialist to whom the request is directed, only to the extent necessary for establishing contact.

    In the case of bank card payment, the data required for the payment (surname, first name, country, e-mail address and the transaction identifiers) are transferred to Barion Payment Zrt. (1117 Budapest, Irinyi József utca 4–20, 2nd floor, Hungary), which processes them as an independent data controller for the purposes of completing the payment, preventing fraud and fulfilling its legal obligations regarding the prevention of money laundering. Information: https://www.barion.com/hu/adatvedelmi-tajekoztato/

    7. International Data Transfers

    Some processors may process data outside the European Economic Area (EEA). In such cases, the Provider ensures appropriate safeguards, such as Standard Contractual Clauses (SCCs) approved by the European Commission or an adequacy decision.

    8. Data Retention Period

    The Provider stores personal data only for as long as necessary to achieve the purposes above, or as required by law. Billing and accounting data are retained for the period prescribed by the applicable legislation.

    9. Rights of Data Subjects

    Under the GDPR you have the right to: access the data processed about you; request its rectification; request its erasure; request restriction of processing; exercise the right to data portability; object to processing; and withdraw your consent at any time.

    To exercise your rights, write to info@joszaki.hu. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., www.naih.hu).

    10. Data Security and Contact

    The Provider applies appropriate technical and organizational measures to protect personal data (encrypted data transmission, access controls, backups).

    For any questions regarding data processing, please contact us at info@joszaki.hu.

    11. Call Recording for Quality Review

    Where a representative records a telephone call with a professional using the in-app call-recording feature, we process the audio of the call and a speaker-labeled transcript generated from it. Call recording is never automatic: it starts only when the representative explicitly enables it for a specific call and confirms that the other party was informed that the call is being recorded.

    We process this data solely for quality-review purposes — so that customer-service call quality can be reviewed and improved. Recordings and their transcripts are stored privately and are accessible only to the brand's managers (owners) and system administrators; other representatives cannot access them.

    The legal basis for this processing is our legitimate interest in maintaining and improving service quality (Art. 6(1)(f) GDPR) and, where applicable, consent (Art. 6(1)(a) GDPR). Recordings are retained only as long as needed for quality review; a manager can delete a recording (audio and transcript) at any time. You may request access to, or deletion of, a recording concerning you by writing to info@joszaki.hu.

    12. Barion Pixel

    The website runs the Barion Pixel tracking code of Barion Payment Zrt., which uses cookies to collect data about the visitor's device and browsing habits directly for Barion Payment Zrt.; the controller of these data is Barion Payment Zrt., and the Provider does not process them. Barion processes the data for the purpose of preventing bank card fraud, on the basis of its legitimate interest (the necessary cookies are essential for operation). Details: https://www.barion.com/hu/adatvedelmi-tajekoztato/

    Version 2.0, effective 22 October 2026.