Simulo
Privacy Notice and GDPR Policy
Effective date: 9 July 2026 · Version: 2026-07-09
1. Controller and processor
Service provider and data controller: Horváth Csaba sole proprietor
Tax number: 57980788-1-28
Registration number: 56646928
Registered seat: 9113 Koroncó, Széchenyi utca 103, Hungary.
Hosting provider: Dotroll Kft.
Address: 1148 Budapest, Fogarasi út 3-5, Hungary
Phone: +36 1 432 3232
E-mail: support@dotroll.com
Tax number: 13962982-2-42
EU VAT number: HU13962982
2. Purpose of this notice
This notice explains what personal data is processed when using Simulo, for what purposes, on what legal basis, for how long, and what GDPR rights data subjects have.
3. Categories of data processed
- company and contact data: company name, e-mail, billing and contact details;
- account data: password hash, registration time, legal acceptances, IP address, user-agent;
- candidate, team and leader data: name, e-mail, completion status, answers and result profiles;
- technical and analytics data: logs, session data and Google Analytics website usage data.
4. Purposes and legal bases
Account creation and service delivery are based on contract performance. Billing and legal compliance are based on legal obligation or legitimate interest. Security logging is based on legitimate interest. Marketing messages are based on consent. Web analytics may be based on consent or legitimate interest depending on the technical setup.
5. Google Analytics
Google Analytics measurement is built into the Simulo program and web interface. It helps understand website usage, visitor journeys, device types and service performance. Google Analytics may use cookies and similar technologies.
Data processed by Google Analytics may include technical identifiers, browser and device information, page views, traffic source and approximate geographic information. Google’s own privacy terms may also apply.
6. Automated decision-making
Simulo reports are decision-support outputs. The provider does not make automated decisions with legal effects about candidates or employees. The user must ensure that reports do not become the sole basis for decisions with significant effects on individuals.
7. Retention
Account data is retained while the account exists, billing data for statutory periods, test and report data until deletion or account termination, marketing consent until withdrawal, and technical logs for a justified security period. Google Analytics retention is also governed by Google settings and policies.
8. Transfers and processors
Data may be accessed by the provider and service providers necessary for operation, especially the hosting provider and Google as the provider of Google Analytics. If data is transferred outside the EEA, provider safeguards such as standard contractual clauses may apply.
9. Data subject rights
Data subjects may request access, rectification, erasure, restriction, object to legitimate-interest processing and withdraw consent at any time. Complaints may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11., www.naih.hu.
10. Security
The provider applies technical and organisational measures including hashed password storage, HTTPS, session protection, access limitation and database access protection.