devoralime
Let's talk

Privacy

Privacy
notice

This notice explains how Devora Lime Kft. handles the personal data of visitors to devoralime.com: what we ask for in the contact, demo request and application forms, what we use it for, who has access to it, how long we keep it and what rights you have.

Effective from 5 October 2026.

The data controller

The data controller is Devora Lime Korlátolt Felelősségű Társaság (short name: Devora Lime Kft.), a Hungarian limited liability company. We process personal data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.).

  • Registered office: 1172 Budapest, Tarcsai út 7. B. ép., Hungary
  • Company registration number: 01-09-192752
  • Tax number: 24980092-2-42
  • Email: sales@devoralime.com
  • Phone: +36 30 576 0126

Contact and demo request form

In the contact and demo request forms we ask for your name, email address, phone number and message, and you can choose a topic. We also send the language of the page so that we can reply in that language.

Purpose: answering your enquiry and preparing an offer. Legal basis: Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) and, for general enquiries, Article 6(1)(f) GDPR (our legitimate interest in answering the people who contact us).

We do not store the content of the form in a database: our server forwards it in a single email to the sales@devoralime.com mailbox, with your email address as the reply-to address. A delivery log entry without personal data is created (see Delivery log).

Application form

In the application form we ask for your name, email address, phone number, earliest start date, message and CV (a PDF, DOC or DOCX file of up to 5 MB). If you apply for a specific job posting, we also send the posting’s identifier, together with the language of the page.

Purpose: assessing your application and keeping in touch with you during the selection. Legal basis: your consent (Article 6(1)(a) GDPR), which you give with the form’s checkbox. You can withdraw your consent at any time by writing to karrier@devoralime.com; the withdrawal does not affect the lawfulness of the processing before it.

We do not store your application or CV in a database: our server only keeps them in memory while processing the submission and forwards them in a single email, with the CV attached, to the karrier@devoralime.com mailbox.

Bot protection (Google reCAPTCHA)

We protect the contact, demo request and application forms against automated abuse (spam and mass submissions sent by bots) with Google reCAPTCHA. Legal basis: Article 6(1)(f) GDPR, our legitimate interest in the security of the website and our mailboxes.

Google’s script only loads when you first interact with a form (a field gets the focus or you start typing), never when the page loads. It serves a security purpose, so it does not depend on the analytics consent: your choice in the cookie banner does not affect it.

For its risk analysis reCAPTCHA processes your IP address, browser and device information and signals of your interactions with the page, and sets the _GRECAPTCHA cookie. On submission the browser receives a verification token, which our server sends to Google once; Google answers with a score between 0 and 1.

We do not store the token. The score is written to the delivery log without any personal data; if the check rejects a submission, no email is sent, no case number is assigned and the log records only the rejection’s reason code besides the technical fields.

For reCAPTCHA, Google has acted as a data processor since 2 April 2026: it acts on our behalf under the Google Cloud terms of service and the Cloud Data Processing Addendum (https://cloud.google.com/terms/data-processing-addendum); the contracting party is Google Cloud EMEA Limited (Ireland).

The data may also be processed outside the European Economic Area (EEA), for example in the United States; the safeguard for these transfers is the standard contractual clauses adopted by the European Commission, which are part of the Cloud Data Processing Addendum.

Delivery log

Every submission creates a log entry in our database so that its delivery can be traced. The entry holds: case number, type (contact or application form), timestamp, language, the delivery result (sent, skipped, failed or rejected) and its reason code, plus technical data: an error code for a failed send or a rejection, a flag showing whether the mail was redirected to a test address, the identifier of the chosen topic or job posting, the CV size in bytes, the reCAPTCHA score, the processing time and a random request identifier.

The log holds no name, email address, phone number, message, file name, IP address or browser identifier. When the bot protection rejects a submission, no case number is assigned and, besides the technical data, the entry records only the rejection’s reason code. Entries are deleted automatically after two years.

Analytics (Google Analytics 4)

We load Google Analytics 4 only on devoralime.com and only if you explicitly accept analytics in the cookie banner. Before you accept, and after you decline, Google Analytics is not loaded and no analytics cookie is set in your browser.

Purpose: measuring how visitors use the site (pages viewed, successful form submissions – without the data you typed) so that we can improve it. Legal basis: your consent (Article 6(1)(a) GDPR). Google signals and ad personalisation are switched off. The service is provided by Google Ireland Limited (Ireland); the data may be transferred outside the EEA.

Once you accept, Google Analytics sets the _ga and _ga_* cookies (valid for up to two years). We keep your choice in your browser’s local storage under the devoralime.consent.analytics.v1 key, not in a cookie, so our server never sees it.

You can withdraw your consent at any time with “Cookie settings” in the footer: measurement stops, we delete the _ga and _ga_* cookies and the cookie banner asks you again.

Embedded videos (YouTube)

The portfolio page and some job postings contain YouTube videos. A video only loads when you click its play button; until then your browser requests nothing from YouTube.

After the click we load the video in YouTube’s privacy-enhanced mode from youtube-nocookie.com. From then on YouTube (Google Ireland Limited) processes your data, such as your IP address, as an independent controller.

Hosting and email (processors)

The following processors may access your data, only on our instructions and under a contract with us:

  • Contabo GmbH (Welfenstrasse 22, 81541 München, Germany) – hosting: the virtual server that runs the website and its backend. To serve your requests the server receives your IP address and browser information, which the web server’s operating log may record for security purposes.
  • Google Workspace (contracting party: Google Cloud EMEA Limited, Ireland) – the email of the sales@devoralime.com and karrier@devoralime.com mailboxes and the delivery of the forms’ emails, under the Cloud Data Processing Addendum.
  • Google reCAPTCHA (Google Cloud EMEA Limited) – bot protection of the forms, as described under Bot protection above.

Retention periods

We keep the data only for as long as the purpose requires:

  • Contact and demo requests: in the sales@devoralime.com mailbox for one year after the enquiry is closed; if we enter into a contract, for the retention period the law sets for that contract.
  • Applications and CVs: in the karrier@devoralime.com mailbox for 6 months after the position is closed, or until you withdraw your consent, if that is earlier.
  • Delivery log: two years, after which the entries are deleted automatically.
  • Analytics choice and cookies: your choice stays in your browser until you withdraw it or clear your browser data; the _ga and _ga_* cookies are valid for up to two years.
  • reCAPTCHA: we do not store the token; your browser keeps the _GRECAPTCHA cookie for the period set by Google.

Your rights

Under Articles 15–22 GDPR you have the right to:

  • request information about the data we hold about you and access to it (including a copy);
  • have inaccurate data rectified;
  • have your data erased;
  • have the processing restricted;
  • object to processing based on our legitimate interest;
  • receive the data you provided on the basis of consent or a contract in a structured, machine-readable format (data portability);
  • withdraw your consent at any time, without affecting the lawfulness of the processing before the withdrawal.

Remedies

If you feel that we have infringed your data protection rights, please contact us first so that we can put it right. You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or with the supervisory authority of your EU country of residence, and you can also go to court; in Hungary you may bring the action before the regional court of your place of residence or stay.

  • Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
  • Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
  • Postal address: 1363 Budapest, Pf. 9.
  • Email: ugyfelszolgalat@naih.hu
  • Website: https://www.naih.hu

Contact for privacy matters

For questions about privacy and requests to exercise your rights, write to sales@devoralime.com (about applications: karrier@devoralime.com) or by post to Devora Lime Kft., 1172 Budapest, Tarcsai út 7. B. ép., Hungary. We reply without undue delay and within one month at the latest.

We update this notice when our data processing changes; the version in force is always available on this page.