Privacy notice – DigitalConto Docs
Last updated: 22 September 2026
Controller: DigitalConto Kft., 2330 Dunaharaszti, Kengyel utca 5. 3a., Hungary · info@digitalconto.hu · +36 30 209 6228.
This notice covers the DigitalConto Docs client portal, where our clients access the documents we prepare for them. It follows the EU GDPR (2016/679) and Act CXII of 2011 (Infotv.). Our general privacy policy is available at digitalconto.hu/privacy.
1. What we process and why
Email address: to identify you and send you sign-in emails. Only addresses registered with us for a client can sign in.
Sign-in records: a one-time sign-in link and 6-digit code (stored only as irreversible hashes), their validity (15 minutes), the number of attempts and a salted hash of your IP address, to keep sign-in secure and prevent abuse.
Session: a random session identifier (stored only as a hash) in a cookie, so you stay signed in for up to 12 hours.
Documents and access log: the documents we make available to you, and a record of which document was opened or downloaded, when, with which email address, and a salted hash of the IP address.
We do not use analytics or advertising tools, and we do not sell or share your data for marketing.
2. Legal basis
Providing the portal and the documents is part of performing our accounting services contract with you (Art. 6(1)(b) GDPR).
Security records (sign-in attempts, access log, hashed IP addresses) are kept on the basis of our legitimate interest in protecting your documents (Art. 6(1)(f) GDPR).
3. Retention
Sign-in records: deleted automatically 30 days after creation. Sessions: expire after 1 hour of inactivity or 12 hours at the latest, and are deleted 30 days later.
Access log: deleted automatically after 24 months.
Documents: kept while we provide them to you under our engagement, and removed when they are withdrawn or when the engagement ends, unless the law requires us to keep them longer.
4. Processors and data location
Vercel Inc. (hosting and file storage) and Neon Inc. (database) – data is stored in the EU (Frankfurt, Germany).
Google (Google Workspace / Gmail) – for sending sign-in emails from our mailbox.
Where a processor is established outside the EU, transfers are covered by the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework.
5. Your rights
You may request access, rectification, erasure, restriction, portability, or object to processing by writing to info@digitalconto.hu.
You may also lodge a complaint with the Hungarian Data Protection Authority (NAIH), 1055 Budapest, Falk Miksa utca 9–11., ugyfelszolgalat@naih.hu, naih.hu.