Privacy Policy

Terms of Use

All content elements of www.simplyadd.hu, in whole or in part, are protected by copyright with the rights held by SIMPLYADD Consulting Kft. The website's content may only be used with prior written permission from SIMPLYADD Consulting Kft.

SIMPLYADD Consulting Kft. has taken all reasonable care in preparing this website; however, it makes no warranties regarding the accuracy, completeness, or uninterrupted availability of its content. SIMPLYADD Consulting Kft. excludes all liability for any direct or indirect damages arising from the use of the website. For current and most accurate information, please contact us using the contact form or email provided on our site.

The www.simplyadd.hu site may contain links to other websites for comprehensive information. SIMPLYADD Consulting Kft. assumes no responsibility for the content of such websites.

The logos displayed in the "References" section of the website are protected by copyright and are used solely for the purpose of better identifying our business partners, based on actual work and business transactions previously conducted. If you are authorized to act regarding the copyrights of any displayed logos and wish to have them removed from our References section, please notify us in writing at info@simplyadd.hu. We will remove the disputed logos within 2 business days.

Privacy Policy

The website accessible under the domain www.simplyadd.hu ("Website") requires the processing of personal data for proper operation. This policy outlines all relevant information related to personal data processing. Using the Website and providing personal data is voluntary; however, by using the Website, you accept the processing of your personal data as described in this policy.

Data processing is conducted in accordance with the following regulations: Regulation (EU) 2016/679 (GDPR) and based on the Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information ("Infotv.") of Hungary.

We implement appropriate technical and process controls to ensure the security of personal data, especially against unauthorized access, transmission, disclosure, deletion, or accidental loss. Any data breach will be reported regardless of its scope, both to the data owner and the relevant supervisory authority. We regularly review our Privacy Policy to ensure compliance with user expectations and applicable data protection laws.

Data Controller

What Personal Data Do We Process?

For general website visitors:

• IP address
• Geographic location
• OS type
• Browser type
• Cookies
• On-site activity data

For general contact initiated via the website:

You determine how you contact us and what personal data you provide, however we do have compulsory required data in order to be able to handle inbound inquiries:

• Name
• Company Name
• Email
• A short description of the reason for getting in touch with us

These are all processed in compliance with applicable laws.

Purpose of Our Data Processing

• Presenting products and services to existing and potential clients
• Troubleshooting and support services
• Improving user experience

Legal Basis of Our Data Processing

• User consent (GDPR Art. 6(1)(a))
• Legal obligation (GDPR Art. 6(1)(c))
• Legitimate interest (GDPR Art. 6(1)(f))
• Contract performance (GDPR Art. 6(1)(b))

Who Are We Sharing Personal Data With?

• Website hosting: DiMa.hu Kft (Hungary, EU)
• AI providers: Anthropic, PBC (EU contracting entity: Anthropic Ireland Limited) and Google. Details in the AI section below.
• Claude Partner Network: Anthropic (Anthropic Ireland Limited), only with the customer's prior consent. Details in the Claude Partner Network section below.
• Other third-party services: GitHub, Microsoft, Facebook, LinkedIn, FormSpree

Use of Artificial Intelligence (AI)

SimplyAdd Consulting uses AI systems as part of its internal operations and client service delivery, in accordance with the EU AI Act (Regulation EU 2024/1689) and GDPR.

How we use AI

• Content creation assistance (drafting, editing, research)
• Software development assistance (code generation, review, refactoring)
• Business analysis and consulting deliverables
• Internal workflow automation and productivity tools
• Client-facing AI solutions (chatbots, analytics, workflow automation) deployed as part of our consulting services

AI providers

We use AI services from Anthropic, PBC (Claude API and the Claude Code development environment) and Google (Gemini). For Anthropic, EU customer-facing contracting is via Anthropic Ireland Limited.

How we protect data sent to AI tools

• Non-training configuration. We use AI tools only in configurations where, under the published terms of the provider, customer-submitted content is not used to train the provider's models and is not retained for training purposes. We do not submit confidential or personal data to consumer interfaces operating under training-permissive terms.
• Data minimisation. We send only the minimum content necessary for the specific task and apply pseudonymisation where feasible.
• No special category data. We do not submit GDPR Article 9 special category data (health, biometric, political, religious, sexual orientation, criminal data) to AI tools without an explicit, separately-agreed addendum and lawful basis.
• Data Processing Agreement. We have a DPA in place with Anthropic (effective 24 February 2025), incorporating the EU Standard Contractual Clauses (Module 2 controller-to-processor and Module 3 processor-to-processor), the UK International Data Transfer Addendum, and the Swiss Addendum, covering international transfers of personal data. The current version of the Anthropic DPA is published via the Anthropic Trust Center and is incorporated into the Anthropic Commercial Terms of Service.
• Provider certifications. Anthropic is certified to ISO 42001 (AI management systems), ISO 27001 (information security), SOC 2 Type 2, CSA STAR Level 2, and attests to NIST 800-171r3. Current scope and certificates are published at the Anthropic Trust Center; the current Anthropic subprocessor list is at anthropic.com/subprocessors; the Anthropic privacy policy is at anthropic.com/legal/privacy.

Human oversight

All AI-generated outputs used in client deliverables, published content, and business decisions are reviewed and approved by qualified personnel before use. AI systems assist our team — they do not make autonomous decisions affecting individuals.

AI risk classification and SimplyAdd's role under the EU AI Act

We classify all AI systems we use and deploy according to the EU AI Act's risk framework. We do not use or deploy AI systems classified as presenting unacceptable risk. Under the AI Act, SimplyAdd typically acts as a downstream provider or deployer of general-purpose AI systems; for client deployments we provide documentation of the applicable risk classification, the upstream model documentation we received from the provider, and the compliance measures applied.

Claude Partner Network - data sharing as a partner

SimplyAdd Consulting is an official partner in the Claude Partner Network Program; the partner agreement (CPNA) took effect on 5 June 2026 with Anthropic Ireland Limited. This partnership is distinct from our use of Claude as an AI tool (see the AI section above) - the partnership covers the marketing and relationship side, and does not by itself grant any product or service access.

Within this partnership, in certain cases we may share customer contact details (name, company name, email) with Anthropic or an Anthropic-authorised partner, solely so that they can initiate a direct or indirect business, sales, or service-provider relationship with the customer concerned.

• Prior consent. Such sharing only takes place on the basis of the customer's prior, explicit, purpose-bound consent (GDPR Art. 6(1)(a)). Without consent, we do not share contact details for this purpose.
• Independent controllers. In this sharing, SimplyAdd and Anthropic each act as independent controllers, not in a controller-processor relationship. Each party is responsible for the data it processes under its own privacy policy. This differs from our use of AI tools, where Anthropic acts as a processor under the DPA.
• International transfer. This sharing may involve transfers outside the EU; the appropriate safeguards (e.g. EU Standard Contractual Clauses) are set out in the Anthropic privacy policy.
• Withdrawal. You may withdraw your consent at any time at info@simplyadd.hu; withdrawal does not affect the lawfulness of processing already carried out.

Data Retention Policy

Your data is retained until consent is withdrawn, deletion is requested, or for a maximum of 10 years.

Your Rights Based on GDPR

• Access your data
• Request correction or deletion
• Restrict processing
• Withdraw consent
• Object to processing
• Receive your data and transmit it elsewhere

Requests may be submitted to info@simplyadd.hu or via post to our company address. We will respond within 2 business days.

Your Rights Regarding AI Processing

• You have the right to know when AI is used in processing your data
• You may request human review of any AI-assisted decision that affects you
• You may object to AI processing of your personal data
• If you are a customer, you may request in writing that specified portions of the services be performed without the use of AI tools, subject to good-faith discussion of any impact on timeline, scope, or fees
• You may request a copy of the AI providers' Data Processing Agreements and current certifications insofar as we are permitted to share them under the providers' confidentiality terms

For questions about our use of AI, contact us at info@simplyadd.hu.

Complaints

If dissatisfied, you may file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):