Privacy policy

Who we are

Professional IT Services is an IT and business consulting company located in Hungary. As every website does, we collect the data necessary for this site to function properly.

Our company data

Name: AC-INFO Kft.
Address: Kossuth Lajos utca 125, 9931 Ivánc, Hungary
EU VAT: HU11956101
Company registration number: 18-09-114916

What personal data we collect and why

We collect personal data in the following ways:

cookies
the contact form
visitor statistics
business outreach to companies that are hiring (see Business outreach)
LinkedIn outreach to founders of early-stage startups (see LinkedIn outreach)

Functional cookies let this website provide a comfortable user experience, while analytics cookies (Google Analytics) help us improve the quality of our services and of the site itself. No analytics or marketing tag is loaded before you accept the cookie banner — nothing is requested from Google until then.

When you send us a message through the contact form we store your name, email address, the subject you selected and your message. Your IP address is stored only as a salted one-way hash, used solely to rate-limit abuse of the form; it cannot be turned back into your IP address.

Business outreach

We occasionally email a technical decision-maker (for example a CTO, founder or head of engineering) at a company in the United States or the United Kingdom that has publicly advertised a DevOps or infrastructure role, to offer our fractional DevOps service. If you received such an email, this section explains how we got your details and what we do with them.

Where the data comes from. The job advertisement itself (from job boards such as Adzuna or the Hacker News “Who is hiring?” thread) and your company’s own public web pages. We never use data from code-hosting platforms such as GitHub, and we never buy contact lists. Every email names the advertisement it refers to.

What we store. Your company’s name, website and country; your name, role and work email address; whether the address was published or follows your company’s address pattern; the advertisement we referred to; and the dates of our emails and of any reply, bounce or unsubscribe. When an address follows your company’s pattern we check with your company’s mail server that it exists, without sending any message.

Legal basis. Our legitimate interest (Article 6(1)(f) GDPR and UK GDPR) in offering a business service to a company that has publicly said it needs it. We contact only people whose role makes the offer relevant to them, only at their work address, and only at companies with up to about 200 employees. In the UK we do not email sole traders or ordinary partnerships.

How many emails. At most three, a week apart. After that we do not contact you again.

How to stop it. Reply “no”, or use the unsubscribe link in any of our emails. Either one stops the sequence before our next email, and we never contact you again. You can also object at any time by writing to [email protected].

How long we keep it. If you do not reply, we delete your name, role and email address 12 months after we collected them. We keep only your company’s name and website, so that we do not contact the company again. If you reply, the conversation is handled like any other business correspondence.

Who processes it for us. Anthropic (the AI model we use to read public pages and draft the email; every email is sent by us, under our name), Supabase (our database) and Amazon Simple Email Service (email delivery). Some of these providers are based in the United States; the transfer relies on the safeguards in their data processing terms.

LinkedIn outreach

We occasionally invite the founder or technical lead (for example a CTO) of a small, early-stage software startup in Hungary, the United States or the United Kingdom to connect on LinkedIn, to offer our fractional DevOps service. If you received such an invitation or message, this section explains how we got your details and what we do with them.

Where the data comes from. Your public LinkedIn profile and your company’s LinkedIn page, viewed through our own LinkedIn account, and your company’s own public website. We never buy contact lists and never use data from code-hosting platforms such as GitHub.

What we store. Your name, role and LinkedIn profile address; your company’s name, LinkedIn page, website, country, approximate team size and founding year; a one-or-two-sentence note on why our offer may be relevant to you (for example that your company is hiring developers); the text of our invitation and message; and the dates of our invitation, your acceptance and any reply.

Legal basis. Our legitimate interest (Article 6(1)(f) GDPR and UK GDPR) in offering a business service to people whose role makes it relevant to them. We contact only founders and technical leads of companies with up to about ten people, and only through LinkedIn.

How we contact you. At most a connection request with a short note, and — only if you accept it — one message. Both are written for you and sent by us personally, by hand; nothing is sent to you automatically. We do not email you based on this data: a company we contact on LinkedIn is not contacted by our email outreach, and a company in our email outreach is not contacted on LinkedIn.

How to stop it. Ignore or decline the invitation, or reply “no” on LinkedIn — we will not contact you again. You can also object at any time by writing to [email protected].

How long we keep it. If you do not reply, we delete your name, role, LinkedIn profile address, the relevance note and our message texts 12 months after we collected them. We keep only company-level details — your company’s name, LinkedIn page, website, country, team size, founding year and the dates of our contact — so that we do not contact the company again. If you reply, the conversation is handled like any other business correspondence.

Who processes it for us. Anthropic (the AI model we use to read public profiles and pages and to draft the texts), Supabase (our database) and Amazon Simple Email Service (which delivers the suggested texts to us — never to you). LinkedIn processes the invitation and messages as the platform they are sent on, under its own privacy policy. Some of these providers are based in the United States; the transfer relies on the safeguards in their data processing terms.

We do not sell your data and do not share it with third parties other than the data processors named on this page.

Anonymous analytics data is shared with our data processor (Google) for analytical and statistical purposes. Contact form submissions are stored on Cloudflare infrastructure and delivered to us by email through Amazon Simple Email Service.

How long we retain your data

We retain the name and email address you send us through the contact form until you request deletion of your personal data. Business outreach and LinkedIn outreach data is kept for 12 months (see Business outreach and LinkedIn outreach). Data processors such as Google store analytics data for up to 5 years.

What rights you have over your data

You have the right to be informed about the personal data we store about you.
You have the right to request an export or download of your data.
You have the right to request deletion of your personal data.
You have the right to have inaccurate data corrected.
You have the right to object to processing based on our legitimate interest, and to direct marketing at any time. An objection to direct marketing is always honoured.
You have the right to lodge a complaint with a data protection authority: in Hungary the Nemzeti Adatvédelmi és Információszabadság Hatóság (naih.hu), in the United Kingdom the Information Commissioner’s Office (ico.org.uk), or the authority where you live or work.

Additional information

You can file a request by sending a message through our contact form or by writing to [email protected].

We do our best to secure our servers and to prevent data loss or breach. If you have any question or request, please get in touch.