Legal information
Privacy Notice
Effective from 23 July 2026 · Data Controller: Iris Energy Korlátolt Felelősségű Társaság (Iris Energy Ltd.)
1. The Data Controller
The Data Controller operates the industrialcleanpower.hu website as part of its ICP Industrial CleanPower business division.
The Data Controller is not required to appoint a Data Protection Officer, as its activities do not fall within the mandatory designation cases set out in Article 37(1) GDPR.
| Name | Iris Energy Korlátolt Felelősségű Társaság (Iris Energy Ltd.) |
|---|---|
| Registered office | Rubik Ernő utca 6., 2040 Budaörs, Hungary |
| Company reg. no. | 13-09-210401 (Court of Registration, Budapest Surroundings) |
| Tax number | 25194487-2-13 |
| Representative | Sándor Kisgéczi, Managing Director |
| Data protection contact | icp@irisenergy.hu |
| Website | https://industrialcleanpower.hu |
2. Purpose and scope
This privacy notice (hereinafter: Notice) fulfils the Data Controller’s information obligations under Article 13 of Regulation (EU) 2016/679 (hereinafter: GDPR) and Section 13/A(9) of Act CVIII of 2001 on certain aspects of electronic commerce services (hereinafter: E-Commerce Act). It sets out, in plain language, what personal data the Data Controller processes when you visit and use the https://industrialcleanpower.hu website — including all of its language versions — (hereinafter: Website), for what purposes, on what legal basis and for how long, to whom the data are disclosed, and what rights you have.
3. Applicable legislation
| Legislation | Abbreviation |
|---|---|
| Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data | GDPR |
| Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Hungary) | Info Act |
| Act C of 2003 on Electronic Communications (Hungary) — in particular Section 155(4) | Eht. |
| Act CVIII of 2001 on Electronic Commerce Services (Hungary) — in particular Section 13/A | E-Commerce Act |
4. Processing activities
In connection with visits to the Website, the Data Controller carries out only the processing activities listed below.
4.1 Visiting the Website — server log files
| Purpose | Ensuring the secure and uninterrupted operation of the Website, detecting errors, and identifying unauthorised access attempts. |
|---|---|
| Data categories | IP address, URL of the page visited, date and time of the visit, browser type and version, operating system, referring URL. |
| Legal basis | Legitimate interest of the Data Controller (Article 6(1)(f) GDPR): secure operation of the Website and prevention of abuse. The processing is proportionate: it concerns technical data only, the data are not combined with other sources, and they are erased shortly afterwards. |
| Retention period | a maximum of 30 days from creation of the log file. |
| Nature of provision | Log files are generated automatically as a technical consequence of browser–server communication. Provision is not based on a statutory obligation or a contractual requirement; without it, use of the Website is technically impossible. (Article 13(2)(e) GDPR) |
4.2 Web analytics
The Website currently uses no web analytics service. We do not measure traffic, we do not analyse user behaviour, and we transfer no related data to any third party.
4.3 Quote request form
| Purpose | Receiving and answering enquiries submitted through the quote request form on the Website, preparing complimentary assessments and proposals. |
|---|---|
| Data categories | Name, company name, email address, phone number, subject of interest (optional), energy assessment request (optional), message text (optional). |
| Legal basis | Legitimate interest of the Data Controller (Article 6(1)(f) GDPR): receiving business enquiries and running the proposal process. Your interests do not override it, since you initiate the contact and we process only the data needed to answer the enquiry. |
| Retention period | 2 years after the proposal process closes. If the enquiry leads to a contract, contract-related data are retained until the 8-year retention obligation under Section 169(2) of Act C of 2000 on Accounting expires. |
| How the data reach us | The Website currently operates no form back-end: submitting the form opens your own email client with a pre-filled message, which you then send to us. The data therefore reaches the Data Controller by email only, directly — no third party has access to it. |
| Nature of provision | Voluntary. Name, company name, email address and phone number are needed to answer the enquiry — without them the Data Controller cannot prepare a proposal. The remaining fields are optional. (Article 13(2)(e) GDPR) |
4.4 Newsletter (“ICP Energiapiaci Percek”)
| Purpose | Sending a monthly newsletter on energy market developments to subscribers. |
|---|---|
| Data categories | Email address, time of subscription and of confirmation. |
| Legal basis | Your consent (Article 6(1)(a) GDPR; Section 6(1) of Act XLVIII of 2008 on Advertising). Subscription becomes effective only after confirmation by email (double opt-in). |
| Retention period | Until consent is withdrawn (unsubscription). Every newsletter carries a one-click unsubscribe link. |
| How the data reach us | The Website currently operates no form back-end: submitting the form opens your own email client with a pre-filled message, which you then send to us. The data therefore reaches the Data Controller by email only, directly — no third party has access to it. |
| Nature of provision | Entirely voluntary. Not subscribing, or unsubscribing, carries no disadvantage — the full content of the Website remains available. |
4.5 Data download (email gate)
| Purpose | Handling requests for the data sets downloadable from the Website’s energy market modules (HUPX, KÁT/premium, system usage charges), and contacting the professionals who download them. |
|---|---|
| Data categories | Email address, company name (optional), the name and format of the data set downloaded. |
| Legal basis | Legitimate interest of the Data Controller (Article 6(1)(f) GDPR): understanding which professionals are interested in the energy market data related to its services. Your interests do not override it, since you initiate the download and we process a single contact detail. |
| Retention period | 2 years from the download. |
| How the data reach us | The Website currently operates no form back-end: submitting the form opens your own email client with a pre-filled message, which you then send to us. The data therefore reaches the Data Controller by email only, directly — no third party has access to it. |
| Nature of provision | Voluntary. All interactive functions of every data module remain usable without providing an email address; we ask for it only to request the download as a file. |
5. Cookies and data stored on your terminal equipment
5.1 The Website currently places no cookies
The Website consists of static pages: there is no login, no session handling, and no web analytics. Accordingly, the Website currently places no cookies in your browser and uses no tracking storage on your terminal equipment.
Language selection (Hungarian/English) is not cookie-based either: the two language versions are served from separate URLs, so nothing needs to be stored.
Should we introduce web analytics in the future, it will happen only with your prior consent, and this Notice will be updated at the same time.
6. Processors and recipients
Beyond the above, the Data Controller discloses personal data only to comply with a statutory obligation, upon request by an authority or a court.
| Processor | Activity | Registered office |
|---|---|---|
| Cloudflare, Inc. | Hosting and CDN services (serving the Website, server-side logging) | United States |
7. International data transfers
While operating the CDN that serves the Website, technical data (IP address, request metadata) may be transferred outside the European Union. The legal basis is the European Commission adequacy decision of 10 July 2023 on the EU-US Data Privacy Framework (Article 45 GDPR).
No other transfer of personal data to third countries takes place.
8. Your rights
Under the GDPR you have the following rights. You may exercise them by writing to icp@irisenergy.hu. The Data Controller will comply within one month of receipt at the latest; where necessary — taking into account the complexity of the request — this may be extended by a further two months, of which the Data Controller will inform you within one month (Article 12(3) GDPR). Exercising your rights is free of charge, save for the cases set out in Article 12(5) GDPR.
8.1 Right of access (Article 15 GDPR)
You have the right to obtain confirmation as to whether your personal data are being processed and, if so, to access those data and the details of the processing.
8.2 Right to rectification (Article 16 GDPR)
You have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you.
8.3 Right to erasure (Article 17 GDPR)
You have the right to obtain the erasure of personal data concerning you where one of the conditions in Article 17(1) GDPR applies — in particular where the purpose has ceased, where you withdraw consent and no other legal basis exists, or where you object under Article 21.
8.4 Right to restriction of processing (Article 18 GDPR)
You have the right to obtain restriction of processing where one of the conditions in Article 18(1) GDPR is met.
8.5 Right to data portability (Article 20 GDPR)
You have the right to receive the personal data you provided in a structured, commonly used, machine-readable format, where processing is based on consent or a contract and is carried out by automated means.
8.6 Right to object (Article 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to processing based on legitimate interest. The Data Controller shall then no longer process the data unless it demonstrates compelling legitimate grounds which override your interests, rights and freedoms.
8.7 Right to withdraw consent (Article 7(3) GDPR)
Where processing is based on your consent (newsletter, and statistical cookies where used), you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out beforehand. You can unsubscribe from the newsletter with one click at the bottom of every issue.
9. Remedies
9.1 Contacting us directly
As a first step, please contact the Data Controller at icp@irisenergy.hu.
9.2 Complaint to the supervisory authority (Article 77 GDPR)
You have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
| Postal address | 1530 Budapest, Pf.: 5., Hungary |
|---|---|
| Address | 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Hungary |
| Phone | +36 (1) 391-1400 |
| ugyfelszolgalat@naih.hu | |
| Website | https://naih.hu |
9.3 Judicial remedy (Article 79 GDPR)
You may exercise your right to an effective judicial remedy against the Data Controller before the regional court competent for your place of residence or stay, or before the court competent for the Data Controller’s registered office (Budapest Környéki Törvényszék).
10. Changes to this Notice
The Data Controller reserves the right to amend this Notice unilaterally. An amendment is warranted in particular by a change in legislation, the introduction of a new processing activity, a change in the technical infrastructure, or a change in processing practice. The amended Notice enters into force upon publication on the Website.
Service provider information (Section 4, E-Commerce Act)
| Service provider | Iris Energy Korlátolt Felelősségű Társaság (Iris Energy Ltd.) |
|---|---|
| Registered office | Rubik Ernő utca 6., 2040 Budaörs, Hungary |
| Company reg. no. | 13-09-210401 |
| Tax number | 25194487-2-13 |
| Representative | Sándor Kisgéczi, Managing Director |
| Contact | icp@irisenergy.hu · +36 (30) 959-7150 |
| Hosting provider | Cloudflare, Inc. (United States) |