Privacy policy

Data controller: Mediaorigo International Ltd. (Hong Kong Special Administrative Region) — Email: info@mediaorigo.com. Mediaorigo is a Hong Kong-headquartered technology company that develops and licenses AI-powered business platforms.

EU representative (GDPR Art. 27): Mediaorigo International Ltd. Hungarian Representative Office — 1125 Budapest, Városkúti út 17., Hungary — Tax no.: 27413254-1-43. Data subjects located in the EU may also address data-protection matters to the EU representative. The Hungarian operations and contracting partner is Nortinia Kft. (1125 Budapest, Városkúti út 17/B., company reg. no.: 01-09-390508).

Data processed: contact and quote-request fields submitted through the site (name, email, phone, company, message), and technical data (IP address, browser, visit data) for operation and security.

Legal basis: for contact and newsletter, consent (GDPR Art. 6(1)(a)); for quote requests and pre-contractual steps, performance of a contract (Art. 6(1)(b)); for site security and improvement, legitimate interest (Art. 6(1)(f)); for statutory obligations, Art. 6(1)(c).

Processors: for operation we use hosting, error-tracking (Sentry) and bot-protection (Cloudflare Turnstile) providers, and for the AI features, speech and language-model providers — each under a data-processing agreement pursuant to GDPR Art. 28.

Transfers to third countries: as the controller is located in Hong Kong and some providers operate outside the European Economic Area (EEA), personal data is transferred outside the EEA only with appropriate safeguards under Chapter V of the GDPR (an adequacy decision of the European Commission or the Standard Contractual Clauses, SCC), and supplementary measures where necessary. A copy of the safeguards is available at info@mediaorigo.com.

Retention: contact data is kept until the purpose is fulfilled but no longer than 24 months, or until consent is withdrawn (whichever comes first); data required by law is kept for the mandatory period.

Data security: we apply technical and organisational measures appropriate to the risk (GDPR Art. 32), in particular encryption in transit, access control and logging. In the event of a personal-data breach — where the statutory conditions are met — we notify the competent supervisory authority within 72 hours, and data subjects too where the risk is high (GDPR Arts. 33–34).

Automated and AI-based features: the outputs of the AI assistant available on the site are generated probabilistically, are informational, and do not produce a solely automated decision with legal effects concerning the data subject (GDPR Art. 22). Human involvement is available for any material matter.

Children: the service is not directed at children under 16; we do not knowingly collect data relating to children under 16.

Data-subject rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time. Requests are accepted at info@mediaorigo.com (or via the EU representative) and answered within 30 days.

Remedies: the data subject may lodge a complaint with the supervisory authority of their habitual residence; in Hungary, the National Authority for Data Protection (NAIH) — 1055 Budapest, Falk Miksa u. 9-11., ugyfelszolgalat@naih.hu — and may also go to court.