Privacy Policy

Terms of Use

All content elements of www.simplyadd.hu, in whole or in part, are protected by copyright with the rights held by SIMPLYADD Consulting Kft. The website's content may only be used with prior written permission from SIMPLYADD Consulting Kft.

SIMPLYADD Consulting Kft. has taken all reasonable care in preparing this website; however, it makes no warranties regarding the accuracy, completeness, or uninterrupted availability of its content. SIMPLYADD Consulting Kft. excludes all liability for any direct or indirect damages arising from the use of the website. For current and most accurate information, please contact us using the contact form or email provided on our site.

The www.simplyadd.hu site may contain links to other websites for comprehensive information. SIMPLYADD Consulting Kft. assumes no responsibility for the content of such websites.

The logos displayed in the "References" section of the website are protected by copyright and are used solely for the purpose of better identifying our business partners, based on actual work and business transactions previously conducted. If you are authorized to act regarding the copyrights of any displayed logos and wish to have them removed from our References section, please notify us in writing at info@simplyadd.hu. We will remove the disputed logos within 2 business days.

Privacy Policy

The website accessible under the domain www.simplyadd.hu ("Website") requires the processing of personal data for proper operation. This policy outlines all relevant information related to personal data processing. Using the Website and providing personal data is voluntary; however, by using the Website, you accept the processing of your personal data as described in this policy.

Data processing is conducted in accordance with the following regulations: Regulation (EU) 2016/679 (GDPR) and based on the Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information ("Infotv.") of Hungary.

We implement appropriate technical and process controls to ensure the security of personal data, especially against unauthorized access, transmission, disclosure, deletion, or accidental loss. Any data breach will be reported regardless of its scope, both to the data owner and the relevant supervisory authority. We regularly review our Privacy Policy to ensure compliance with user expectations and applicable data protection laws.

Data Controller

What Personal Data Do We Process?

For general website visitors:

• IP address
• Geographic location
• OS type
• Browser type
• Cookies
• On-site activity data

For general contact initiated via the website:

You determine how you contact us and what personal data you provide, however we do have compulsory required data in order to be able to handle inbound inquiries:

• Name
• Company Name
• Email
• A short description of the reason for getting in touch with us

These are all processed in compliance with applicable laws.

Purpose of Our Data Processing

• Presenting products and services to existing and potential clients
• Troubleshooting and support services
• Improving user experience

Legal Basis of Our Data Processing

• User consent (GDPR Art. 6(1)(a))
• Legal obligation (GDPR Art. 6(1)(c))
• Legitimate interest (GDPR Art. 6(1)(f))
• Contract performance (GDPR Art. 6(1)(b))

Who Are We Sharing Personal Data With?

• Website hosting: DiMa.hu Kft (Hungary, EU)
• AI providers: Anthropic, PBC (EU contracting entity: Anthropic Ireland Limited) and Google. Details in the AI section below.
• Claude Partner Network: Anthropic (Anthropic Ireland Limited), only with the customer's prior consent. Details in the Claude Partner Network section below.
• Other third-party services: GitHub, Microsoft, Facebook, LinkedIn, FormSpree

Use of Artificial Intelligence (AI)

SimplyAdd Consulting uses AI systems as part of its internal operations and client service delivery, in accordance with the EU AI Act (Regulation EU 2024/1689) and GDPR.

How we use AI

• Content creation assistance (drafting, editing, research)
• Software development assistance (code generation, review, refactoring)
• Business analysis and consulting deliverables
• Internal workflow automation and productivity tools
• Client-facing AI solutions (chatbots, analytics, workflow automation) deployed as part of our consulting services

AI providers

We use AI services from Anthropic, PBC (Claude API and the Claude Code development environment) and Google (Gemini). For Anthropic, EU customer-facing contracting is via Anthropic Ireland Limited.

How we protect data sent to AI tools

• Non-training configuration. We use AI tools only in configurations where, under the published terms of the provider, customer-submitted content is not used to train the provider's models and is not retained for training purposes. We do not submit confidential or personal data to consumer interfaces operating under training-permissive terms.
• Data minimisation. We send only the minimum content necessary for the specific task and apply pseudonymisation where feasible.
• No special category data. We do not submit GDPR Article 9 special category data (health, biometric, political, religious, sexual orientation, criminal data) to AI tools without an explicit, separately-agreed addendum and lawful basis.
• Data Processing Agreement. We have a DPA in place with Anthropic (effective 24 February 2025), incorporating the EU Standard Contractual Clauses (Module 2 controller-to-processor and Module 3 processor-to-processor), the UK International Data Transfer Addendum, and the Swiss Addendum, covering international transfers of personal data. The current version of the Anthropic DPA is published via the Anthropic Trust Center and is incorporated into the Anthropic Commercial Terms of Service.
• Provider certifications. Anthropic is certified to ISO 42001 (AI management systems), ISO 27001 (information security), SOC 2 Type 2, CSA STAR Level 2, and attests to NIST 800-171r3. Current scope and certificates are published at the Anthropic Trust Center; the current Anthropic subprocessor list is at anthropic.com/subprocessors; the Anthropic privacy policy is at anthropic.com/legal/privacy.

Human oversight

All AI-generated outputs used in client deliverables, published content, and business decisions are reviewed and approved by qualified personnel before use. AI systems assist our team - they do not make autonomous decisions affecting individuals.

Transparency - when we tell you AI is involved

Article 50 of the EU AI Act has applied since 2 August 2026. Our commitments under it:

• Chatbots and conversational AI. Where we operate a chatbot or conversational AI system on this Website or on a client's behalf, the person is informed that they are interacting with an AI system, at the latest at the point of first interaction, in a clear and distinguishable form. We do not leave this to be inferred from branding or naming.
• AI-assisted published content. Articles and other text published on this Website may be produced with AI assistance. All such content is subject to editorial review and approval by a member of our team before publication, and we retain editorial responsibility for it (AI Act Art. 50(4)).
• Illustrations and images. Article illustrations on this Website may be AI-generated. They are synthetic images that do not depict real persons, real events, or existing locations, and are not presented as photographic records.
• Synthetic audio and video. We do not publish AI-generated audio or video depicting a real, identifiable person saying or doing something they did not say or do. Where a client engagement requires synthetic media resembling a real person, we produce it only with that person's documented consent and with visible labelling.
• Accessible form. Disclosures are given in the language of the interface (English or Hungarian) and meet applicable accessibility requirements.

AI literacy (AI Act Art. 4)

Since 2 February 2025, Article 4 of the AI Act requires providers and deployers to ensure a sufficient level of AI literacy among their staff and others operating AI systems on their behalf. To meet this we maintain: role-appropriate training on the capabilities and limitations of the AI tools we use; documented internal usage rules (permitted tools, which classes of data may and may not be submitted, mandatory human review); and a record of who has been trained and when. Client teams taking over an AI system we deliver receive equivalent briefing and written operating instructions as part of the handover.

AI risk classification and SimplyAdd's role under the EU AI Act

We classify all AI systems we use and deploy according to the EU AI Act's risk framework. We do not use or deploy AI systems classified as presenting unacceptable risk. Under the AI Act, SimplyAdd typically acts as a downstream provider or deployer of general-purpose AI systems; for client deployments we provide documentation of the applicable risk classification, the upstream model documentation we received from the provider, and the compliance measures applied.

Application dates we track. The AI Act entered into force on 1 August 2024. The rules on prohibited practices and the AI literacy obligation have applied since 2 February 2025; the governance rules and the obligations for general-purpose AI models since 2 August 2025; the Article 50 transparency obligations since 2 August 2026. Under the 2026 amending regulation (the "Digital Omnibus"), obligations for high-risk systems listed in Annex III apply from 2 December 2027, and for high-risk systems embedded in regulated products from 2 August 2028. We review our classifications and the measures described on this page against these dates.

Claude Partner Network - data sharing as a partner

SimplyAdd Consulting is an official partner in the Claude Partner Network Program; the partner agreement (CPNA) took effect on 5 June 2026 with Anthropic Ireland Limited. This partnership is distinct from our use of Claude as an AI tool (see the AI section above) - the partnership covers the marketing and relationship side, and does not by itself grant any product or service access.

Within this partnership, in certain cases we may share customer contact details (name, company name, email) with Anthropic or an Anthropic-authorised partner, solely so that they can initiate a direct or indirect business, sales, or service-provider relationship with the customer concerned.

• Prior consent. Such sharing only takes place on the basis of the customer's prior, explicit, purpose-bound consent (GDPR Art. 6(1)(a)). Without consent, we do not share contact details for this purpose.
• Independent controllers. In this sharing, SimplyAdd and Anthropic each act as independent controllers, not in a controller-processor relationship. Each party is responsible for the data it processes under its own privacy policy. This differs from our use of AI tools, where Anthropic acts as a processor under the DPA.
• International transfer. This sharing may involve transfers outside the EU; the appropriate safeguards (e.g. EU Standard Contractual Clauses) are set out in the Anthropic privacy policy.
• Withdrawal. You may withdraw your consent at any time at info@simplyadd.hu; withdrawal does not affect the lawfulness of processing already carried out.

Data Retention Policy

Your data is retained until consent is withdrawn, deletion is requested, or for a maximum of 10 years.

Your Rights Based on GDPR

• Access your data
• Request correction or deletion
• Restrict processing
• Withdraw consent
• Object to processing
• Receive your data and transmit it elsewhere

Requests may be submitted to info@simplyadd.hu or via post to our company address. We will respond within 2 business days.

Your Rights Regarding AI Processing

• You have the right to know when AI is used in processing your data
• You will be told that you are interacting with an AI system before you interact with any chatbot or conversational AI we operate
• You may request human review of any AI-assisted decision that affects you
• You may object to AI processing of your personal data
• If you are a customer, you may request in writing that specified portions of the services be performed without the use of AI tools, subject to good-faith discussion of any impact on timeline, scope, or fees
• You may request a copy of the AI providers' Data Processing Agreements and current certifications insofar as we are permitted to share them under the providers' confidentiality terms

For questions about our use of AI, contact us at info@simplyadd.hu.

Complaints

If dissatisfied, you may file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):