Privacy Policy

planmetrio.com – ClaimPro Bt. Effective from: July 28, 2026

1. Introduction

ClaimPro Bt. (Hungary, 1201 Budapest, Tótfalusi Kis Miklós sétány 4., Tax ID: 21986996-2-43, EU VAT ID: HU 21986996, Company Registration Number: 01-06-797796; E-commerce license: 575/2020) (hereinafter: Service Provider, Data Controller) subjects itself to the following policy: In accordance with REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR), we provide the following information.

This privacy policy governs the data processing of the following SaaS (Software as a Service) platform and website: https://planmetrio.com. The privacy policy is available at: https://planmetrio.com/privacy-policy/. Amendments to the policy shall enter into force upon publication at the aforementioned address.

2. Data controller and contact details

Name: ClaimPro Szolgáltató és Kereskedelmi Bt.
Headquarters: Hungary, 1201 Budapest, Tótfalusi Kis Miklós sétány 4.
Email: hello@planmetrio.com
Phone: +36 30 160 0960

3. Definitions

“Personal data”: any information relating to an identified or identifiable natural person (‘data subject’).

“Processing”: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means.

“Controller”: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor”: a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

“Recipient”: a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.

“Consent”: any freely given, specific, informed and unambiguous indication of the data subject’s wishes.

“Personal data breach”: a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

Data controller and processor roles (Planmetrio SaaS Platform)

We inform data subjects that ClaimPro Bt. may act in a dual capacity regarding the Planmetrio platform it operates:

A) As a data controller: The Service Provider acts as a Data Controller during the provision of its own services on planmetrio.com (registration, credit purchases), related direct customer relations, and the provision of the Cloud Dashboard to individual users.

B) As a data processor: In cases where the system is used by B2B Partners (e.g., real estate agencies, contractors) to manage their team members and the property data or personal identifiers of their own clients, the Service Provider provides the technical platform. Regarding these processes, the Service Provider acts as a Data Processor. In such cases, the Data Controller is the B2B Partner itself; the exact purpose of data processing is defined by the Partner’s own privacy policy, and the Service Provider processes the data solely based on the Partner’s instructions.

4. Principles relating to processing of personal data

Personal data shall be:

processed lawfully, fairly and in a transparent manner (‘lawfulness, fairness and transparency’);
collected for specified, explicit and legitimate purposes (‘purpose limitation’);
adequate, relevant and limited to what is necessary (‘data minimisation’);
accurate and, where necessary, kept up to date (‘accuracy’);
kept in a form which permits identification of data subjects for no longer than is necessary (‘storage limitation’);
processed in a manner that ensures appropriate security of the personal data (‘integrity and confidentiality’). The controller shall be responsible for, and be able to demonstrate compliance with, the above (‘accountability’).

5. Description of data subjects’ rights

The data subject may request from the controller access to, rectification or erasure of personal data or restriction of processing concerning the data subject and object to such processing, as well as the right to data portability and to withdraw consent at any time. These can be initiated via:

Mail: Hungary, 1201 Budapest, Tótfalusi Kis Miklós sétány 4.
Email: hello@planmetrio.com
Phone: +36 30 160 0960
Through the user account Dashboard.

Legal basis for processing:

GDPR Article 6(1)(b) (performance of a contract) and (c) (legal obligation).
Section 13/A (3) of Act CVIII of 2001 on Electronic Commerce (Elker tv.), which allows the service provider to process personal data that are technically indispensable for providing the service.
The Accounting Act (8 years) and the Civil Code Section 6:21-22 (statute of limitations: 5 years).

Please be informed that:

Processing is necessary to perform the online floor plan creation and calculation processes you initiate, and to deliver the services (PDF reports, credits).
You are required to provide personal data to create an account and make purchases.
Failure to provide data will result in the Service Provider being unable to create the account, provide free projects, or generate authentic measurement reports.

6. Data processing related to the use of online services (SaaS)

Fact of data collection, scope and purpose of processed data:

Personal data	Purpose of processing	Legal basis
User name	Identification, enabling registration, login.	GDPR Art. 6(1)(b) and Elker tv. Sec. 13/A(3).
Password (encrypted)	Secure access to the user account.	GDPR Art. 6(1)(b).
First and last name	Service fulfillment, contact.	GDPR Art. 6(1)(b) and (c).
Email address	Contact, sending PDF reports, account authentication.	GDPR Art. 6(1)(b).
Billing name and address	Credit purchase, issuing invoices, enforcing claims.	GDPR Art. 6(1)(c) and Accounting Act Sec. 169(2).
IP address & time of technical operations	Execution of technical operations, secure system operation, DORA logging.	GDPR Art. 6(1)(f) (Legitimate interest in network and IT security).
Project and Location data (Project ID, address, wall dimensions, floor plan data)	Technical execution of measurements, PDF generation, digital platform service fulfillment.	GDPR Art. 6(1)(b) or B2B Data Processing instruction.
Media data (Uploaded company logos)	Providing watermarks and custom branding on PDF and PNG exports.	GDPR Art. 6(1)(b).

TECHNICAL AND LEGAL DISCLAIMER: We inform the User that the floor plans created on the online platform and the area, perimeter, and heating (HVAC) data automatically calculated by the software serve strictly for informational and technical estimating purposes. The PDF reports generated by Planmetrio do not constitute a certified architectural, engineering, or official land registry property survey.

Security checks and fraud prevention & alerts

The Service Provider’s legitimate interest (GDPR Art. 6(1)(f)) is the IT protection of the platform. The Service Provider continuously develops its fraud prevention systems and automated security alert mechanisms. These systems actively monitor registrations and transactions to prevent mass and malicious abuse of free credits (3 free projects), payment (credit card) fraud, and automated data mining (scraping).

During technical checks, based on Section 13/A(3) of the Elker tv., the Service Provider uses algorithms and alerts to identify suspicious patterns, IP address stacking, and proxy usage. If the fraud prevention system detects unauthorized activity, it may automatically suspend the affected accounts with immediate effect.

Duration of processing and automated deletion procedures (Retention)

If any condition in GDPR Art. 17(1) exists, processing lasts until the data subject’s deletion request. For accounting documents, 8 years based on the Accounting Act.

Floor Plan Data Deletion: The Service Provider retains cloud-stored project data, floor plans, and logos as long as the User’s account is active, or until the User manually deletes them from the Dashboard. Upon account deletion, data is irreversibly destroyed.

Security Audit Logs (DORA): To prove system resilience, security logs are retained for 1 year (365 days).

7. Cookie management

The use of cookies essential for basic operations (session, security) does not require prior consent (Elker tv. Sec. 13/A(3)). Details: https://planmetrio.com/cookie-policy/. Cookies can be deleted or blocked in browser settings, but disabling them will render certain features of the SaaS platform unavailable.

8. Use of Google Ads and Google Analytics

Our website uses Google Analytics and Google Ads conversion tracking (Google Inc.). IP anonymization is active. Users can prevent their storage via browser settings.

9. Newsletter, direct marketing

The User may give prior consent (GDPR Art. 6(1)(a)) for the Service Provider to send promotional offers. Unsubscribing is free and without justification at any time. Processed data (Name, Email) is stored until unsubscription.

10. Social Media

Interactions on the Service Provider’s social media pages (e.g., Facebook, Instagram) are based on voluntary consent. The duration of data processing is subject to the respective social media platform’s own regulations.

11. Customer relations and other data processing

Data from technical support and other customer service inquiries (email, phone) will be deleted by the Service Provider a maximum of 2 years after disclosure. In case of official authority requests, only strictly necessary data is disclosed.

12. Complaint management

In the event of a complaint, name, email, phone, and problem description are processed based on GDPR Art. 6(1)(c) and the Consumer Protection Act. Protocols are kept for 5 years. Failure to provide data means the complaint cannot be processed.

13. Recipients and data processors

The data controller only uses reliable data processors:

Hosting: MédiaCenter Hungary Kft. (6000 Kecskemét, Sosztakovics u. 3. II/6.)
Online invoicing: Billingo Technologies Zrt. (1133 Budapest, Árbóc utca 6.)
E-business / Marketing: WooCommerce, Mailpoet
Online payment (Credit purchase): Stripe Technology Europe, PayPal (Europe) S.à.r.l.

14. Detailed rights of data subjects

Right of access: Requesting information on processed data.
Right to rectification: Correcting inaccurate data in the Dashboard.
Right to erasure (‘right to be forgotten’): Requesting deletion of personal data and account.
Right to restriction of processing: Suspending data processing in disputed cases.
Right to data portability: Exporting structured data (CSV) from the account.
Right to object: Objecting to direct marketing and profiling.
Automated decision-making: Right to request human intervention.

15. Security of processing

Planmetrio implements appropriate technical measures to ensure security appropriate to the risk (e.g., pseudonymization, encryption).

The central server can only be accessed with appropriate authorization and two-factor authentication.
Data managed in the floor plan creator system (SaaS) is transmitted and stored over HTTPS/SSL encrypted channels.
Personal data breach: In case of high risk, we will inform the data subject without undue delay and notify the authority within 72 hours.

16. Right to lodge a complaint

National Authority for Data Protection and Freedom of Information (NAIH) 1055 Budapest, Falk Miksa utca 9-11. (Mail: 1363 Budapest, Pf.: 9.) Phone: +36 1 391 1400 | Email: ugyfelszolgalat@naih.hu

17. Closing remarks During the preparation of this policy, we observed the following: GDPR Regulation, Act CXII of 2011 (Infotv.), Act CVIII of 2001 (Elker tv.), Act V of 2013 (Civil Code), Act C of 2000 (Accounting Act), Regulation (EU) 2022/2554 (DORA), NAIH recommendations.