Privacy & Cookie Policy
Last updated:
This Privacy & Cookie Policy explains how FrontEndART Szoftver Kft. ("FrontEndART", "we", "us"), the developer and operator of QualityGate, processes personal data when you visit quality-gate.com or contact us through the website, and how the website handles cookies. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Hungarian Privacy Act) and Section 155(4) of Act C of 2003 on Electronic Communications.
This policy covers the quality-gate.com website. The QualityGate cloud service (cloud.quality-gate.com) is a separate service with its own terms of use – see Section 2.4.
1.Data controller
- FrontEndART Szoftver Kft.
- Registered seat: 6721 Szeged, Szilágyi utca 5-2., Hungary
- Company registration number: 06-09-007548 · Tax number: 12702644-2-06
- Email: info@frontendart.com · Phone: +36 30 438 6099
- Further statutory details: see our Impressum.
We have not appointed a data protection officer, as we are not required to do so under Article 37 GDPR. Any question about this policy can be sent to the contact details above.
2.What personal data we process, why, and for how long
2.1Contact form and email enquiries
| Data | Name, email address, message (required); phone number, company name (optional). Any further data you include in your message. |
|---|---|
| Purpose | Answering your question about QualityGate or our services, arranging a product demo or consultation, sending requested information and, where applicable, preparing a proposal. |
| Legal basis | Where your enquiry concerns QualityGate or our services: steps taken at your request prior to entering into a contract – Art. 6(1)(b) GDPR. For any other enquiry: our legitimate interest in responding to people who contact us – Art. 6(1)(f) GDPR. We have assessed that this interest does not override your interests or rights, since you initiate the contact and reasonably expect a reply. |
| Is providing the data mandatory? | Fields marked with an asterisk are required; without them we cannot reply. The other fields are optional. |
| Retention | If no business relationship follows: we delete your enquiry 12 months after our last correspondence. If a business relationship follows: for the duration of the relationship, then for 5 years after its end (general limitation period, Section 6:22 of the Hungarian Civil Code); documents supporting accounting records are kept for 8 years (Section 169 of Act C of 2000 on Accounting). |
2.2Server logs and website security
| Data | IP address, date and time of access, requested URL, HTTP status, browser type and version, operating system, referring page. |
|---|---|
| Purpose | Delivering the website, ensuring its security and stability, detecting and investigating attacks and misuse. |
| Legal basis | Our legitimate interest in the secure operation of the website – Art. 6(1)(f) GDPR. |
| Retention | 30 days, unless a longer retention is needed to investigate a specific security incident. |
2.3Job applications (via the contact form or by email)
| Data | Name, email address and the message you send us through the contact form or by email, and optionally your phone number; the CV / résumé or other documents you attach to an email and everything they contain (education, work history, skills, languages, and any photo or other information you choose to include), and the position you apply for. Notes taken during interviews and the outcome of the selection process. Please do not include special categories of data (for example health, religious or political information) in your application – we do not need them and will not take them into account. |
|---|---|
| Purpose | Assessing your application for the advertised position or, for spontaneous applications, for roles currently or soon open; contacting you about interviews; deciding on employment. |
| Legal basis | Steps taken at your request prior to entering into an employment contract – Art. 6(1)(b) GDPR. For spontaneous applications and for documenting how the selection was carried out: our legitimate interest in recruiting suitable staff and in being able to demonstrate a fair process – Art. 6(1)(f) GDPR. |
| Is providing the data mandatory? | Name, email address and a message or CV describing your application are required to consider your application. Everything else is optional. |
| Retention | Your data is kept for the duration of the selection process. If you are not hired, we delete your application within 30 days after the position is filled or the process is closed. Spontaneous applications for which we have no suitable role are deleted within 30 days. If you are hired, your application becomes part of your personnel file and is processed under our employee privacy notice. |
| Who has access | Only HR staff, the hiring manager and the colleagues who take part in the interviews. We do not pass your application to third parties, and we do not contact references or previous employers without your prior agreement. |
| Automated decision-making | We do not use automated decision-making or AI-based screening in our recruitment. Every application is reviewed by a person. |
2.4QualityGate cloud service (cloud.quality-gate.com)
The "FREE TRIAL" and "DASHBOARD" buttons and the "Documentation" menu item lead to the QualityGate cloud service. Registering for and using the service – including your account data and the analysis results your analyzers upload – is a separate processing activity governed by the terms of use of the QualityGate cloud service. This website policy does not apply to data processed inside the service.
2.5Embedded videos and presentations (YouTube, SlideShare)
Some pages contain videos hosted on YouTube and presentations hosted on SlideShare. Until you click a video or a presentation, only a placeholder served from our own servers is shown – nothing is loaded from YouTube or SlideShare and no data is sent to them. When you click, the video is loaded from YouTube in its privacy-enhanced mode (youtube-nocookie.com; provider: Google Ireland Limited), or the presentation from SlideShare (provider: Scribd, Inc., USA). The provider then receives your IP address and technical data about your browser and may set cookies or similar technologies on your device (see Section 4); its own privacy policy applies to this processing (Google, SlideShare). Legal basis: your consent, given by the click – Art. 6(1)(a) GDPR and Section 155(4) of Act C of 2003.
2.6What we do not do
We do not use analytics or tracking tools on this website. Resources (such as whitepapers, case studies and brochures) are direct downloads; we do not ask for your data before you download them. We do not run a newsletter. The Facebook, LinkedIn and Twitter icons on the About us page are plain links – no social media plug-in is loaded and no data is sent to these platforms until you click through, after which the platform's own privacy policy applies. We do not use advertising or remarketing cookies. If any of this changes, we will update this policy and, where required, ask for your consent.
3.Recipients and data processors
Our website and content management system run on our own servers, located at our premises at 6721 Szeged, Szilágyi utca 5-2., Hungary. We use the following external service providers, who process personal data on our behalf under a data processing agreement pursuant to Article 28 GDPR:
| Processor | Service | Location |
|---|---|---|
| Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) | Google Workspace – email hosting for info@frontendart.com, where form notifications, your email enquiries and applications sent by email are received and stored | EU / USA (see Section 5) |
YouTube and SlideShare are not our processors: when you choose to load an embedded video or presentation, they receive data directly from your browser under their own privacy policies (see Section 2.5).
Within FrontEndART, only employees whose job requires it have access to your data: the QualityGate sales and product team and management for enquiries and demo requests; HR, the hiring manager and the interviewers for job applications; website administrators for technical operation.
We do not sell personal data and do not share it with third parties for their own marketing purposes. We disclose personal data to authorities only where we are legally obliged to do so.
4.Cookies
Cookies are small text files placed on your device by the website. This website itself does not use cookies or similar technologies (such as local storage).
Embedded videos and presentations. Only when you click an embedded YouTube video or SlideShare presentation (see Section 2.5) is the content loaded from the provider's servers; YouTube (Google Ireland Limited) or SlideShare (Scribd, Inc.) may then store cookies or similar technologies on your device. These are set by the provider, under its own cookie and privacy policy, and never before your click. By clicking you consent to this – Art. 6(1)(a) GDPR and Section 155(4) of Act C of 2003. If you do not click, no such cookies are set; you can delete them at any time in your browser settings.
Blocking all cookies in your browser does not affect the functionality of this website.
5.International data transfers
Our website, content management system and the data submitted through our contact form are stored in Hungary. Google Workspace (email) data is processed by Google Ireland Limited; Google may transfer this data to Google LLC and its sub-processors in the United States. Where possible, we have configured Google Workspace to store data in the EU (data region policy). Any transfer to the United States is based on the European Commission's adequacy decision of 10 July 2023 for the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and additionally on the European Commission's Standard Contractual Clauses included in Google's data processing terms.
If you click an embedded YouTube video, Google may likewise transfer the data it receives to Google LLC in the United States. If you click an embedded SlideShare presentation, your browser connects directly to SlideShare, whose provider, Scribd, Inc., is based in the United States. Scribd, Inc. is not certified under the EU-U.S. Data Privacy Framework; according to its privacy policy, it bases transfers of personal data from the EU on the European Commission's Standard Contractual Clauses. These transfers take place only when you choose to load the content (see Section 2.5).
6.Automated decision-making
We do not use your personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.
7.Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including TLS encryption of the website, access control based on the principle of least privilege, regular software updates, and contractual obligations imposed on our processors.
8.Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure ("right to be forgotten") where the data is no longer needed, you withdraw consent, or you object and there is no overriding ground (Art. 17);
- restriction of processing in the cases set out in Art. 18;
- data portability – receiving data you provided to us in a structured, machine-readable format, where processing is based on consent or contract and carried out by automated means (Art. 20);
- object to processing based on our legitimate interests (Art. 21); we will then stop processing unless we demonstrate compelling legitimate grounds;
- withdraw consent at any time where processing is based on consent (Art. 7(3)), without affecting the lawfulness of prior processing.
To exercise these rights, write to info@frontendart.com or to our postal address in Section 1. We will respond without undue delay and in any event within one month of receipt of your request; this period may be extended by two further months where necessary, in which case we will inform you of the reasons. Exercising your rights is free of charge, except in the case of manifestly unfounded or excessive requests. We may ask you to verify your identity before acting on a request.
9.Remedies
Complaint to the supervisory authority. If you believe that we have processed your personal data unlawfully, you may lodge a complaint with:
- Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
- Address: 1055 Budapest, Falk Miksa utca 9-11.
- Postal address: 1363 Budapest, Pf. 9.
- Phone: +36 1 391 1400
- Email: ugyfelszolgalat@naih.hu
- Web: naih.hu
You may also lodge a complaint with the supervisory authority of the EU Member State of your habitual residence or place of work.
Court proceedings. You may bring an action before a court under Section 23 of the Hungarian Privacy Act and Article 79 GDPR. The regional court (törvényszék) has jurisdiction; you may choose to bring the action before the court of your place of residence or stay.
We ask that you contact us first so that we can resolve any concern directly.
10.Changes to this policy
We may update this policy when our website, our service providers or the applicable law change. The current version is always available at quality-gate.com/privacy-policy, and the "Last updated" date at the top indicates the latest revision. In the case of material changes we will display a notice on the website.