targetr↗

← Back to the home page

Privacy Policy

This notice describes how we process personal data on the targetr.eu website and in the TargetR service. For other Zengo Kft. services, the privacy notice at zengo.eu applies.

1. Data controller

We have not appointed a separate data protection officer. For data protection questions, reach us at info@targetr.eu.

2. Contact (interest) form

  • Data: name (optional), work email address, product or website (optional), message (optional), time and page of submission, chosen language, the fact of your consent and — if the link contained them — campaign identifiers (utm parameters).
  • Purpose: answering your inquiry, presenting TargetR, arranging offers and early access.
  • Legal basis: your consent (Article 6(1)(a) GDPR), given when you send the form and revocable at any time; revoking it does not affect the lawfulness of earlier processing.
  • Retention: until you withdraw your consent, and at most 2 years after the inquiry is closed.
  • The data is stored in Zengo's own customer management system (VECTOR CRM); Zengo staff working in sales and customer service have access to it.

3. Registration and user account

  • Data: name, email address, password (only as a non-reversible hash), workspace (organization) name, role, invitations, and security data of sign-ins and sessions (time, IP address, browser).
  • Purpose: creating and managing the account, sign-in and permissions, providing the service.
  • Legal basis: performance of a contract (Article 6(1)(b) GDPR); for security data, our legitimate interest (point (f)) in protecting accounts and data.
  • Retention: until the account is closed; afterwards the data is removed from backups at the end of the backup cycle, unless the law requires longer retention.

4. Business data processed in the service

TargetR users describe their products, markets and goals, may upload their own data sources, and on their instruction TargetR researches companies and information about them in publicly available web sources. This may include the names and positions of executives or contact persons if the company published them itself. TargetR keeps the source of every finding (address and exact quote).

For this data, the controller is the customer using TargetR (the organization of the workspace); Zengo acts as a processor on the customer's instructions (Article 28 GDPR). Informing data subjects and ensuring an appropriate legal basis — in particular for outreach — is the customer's responsibility; TargetR sends messages only with the user's approval. As a data subject you may send your request to the customer or to us; in the latter case we forward it to the customer and help fulfil it.

5. Artificial intelligence in the service

For tasks started by users (for example product understanding, company research, content preparation), TargetR uses large language models. The models receive only the text needed for the task (for example the product description, the task and passages from public sources). TargetR checks the models' answers with rules and marks the sources. We make no decision based solely on automated processing that has legal effects on natural persons (Article 22 GDPR).

6. Website operation, cookies, logs

  • We only use cookies needed for operation: the sign-in session cookie (keeps you signed in, for up to 30 days or until you sign out) and the language preference cookie (targetr_locale, 1 year). We use no analytics, advertising or social media cookies, so we do not ask for consent to them.
  • For security and troubleshooting, the servers keep technical logs (time, requested address, IP address, error messages). Legal basis: our legitimate interest in the security of the service (Article 6(1)(f) GDPR). Logs are kept only as long as the security purpose requires.

7. Contact by email

If you write to info@targetr.eu, we process your name, email address and the content of your message to answer you, based on our legitimate interest (Article 6(1)(f) GDPR), for at most 2 years after the inquiry is closed.

8. Processors and recipients

  • netcup GmbH (Emmy-Noether-Straße 10, 76131 Karlsruhe, Germany) — server and hosting: operating the website, the service and the database in the European Union.
  • Anthropic, PBC (United States) — artificial intelligence models for tasks started by users.
  • Tavily (United States) — web search for research tasks (search terms).
  • MXroute — email hosting for targetr.eu addresses.

We do not disclose personal data to other third parties unless the law requires it (for example at the request of an authority).

9. Transfers outside the European Economic Area

Processors in the United States (Anthropic, Tavily) receive only the data needed for the task. Transfers rely on the safeguards of Chapter V GDPR: the standard contractual clauses adopted by the European Commission or — where the provider participates in the EU–US Data Privacy Framework — the Commission's adequacy decision.

10. Data security

  • Encrypted connections (HTTPS) between your browser and the service and to external providers.
  • Data separated per organization in the database; access for authorized users only.
  • Passwords only as non-reversible hashes; keys of external providers only on the server.
  • Logged system access and regular backups.

11. Your rights

  • Access: you may ask which of your data we process and request a copy.
  • Rectification: you may ask us to correct inaccurate or incomplete data.
  • Erasure: you may ask us to delete your data if it is no longer needed, you withdrew your consent, or the processing is unlawful.
  • Restriction: you may ask us only to store your data, for example while its accuracy is disputed.
  • Portability: you may request the data processed on the basis of consent or contract in a machine-readable format.
  • Objection: you may object to processing based on legitimate interest.
  • Withdrawal of consent: at any time, without consequences.

Send your request to info@targetr.eu or by post (Szent István tér 10., 6721 Szeged, Hungary). We answer without undue delay and within one month at the latest; we may ask for additional information to verify your identity.

12. Remedies

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

You may also go to court if your rights are infringed. The case falls within the competence of the regional court (törvényszék); at your choice, you may bring it before the court of your place of residence or stay.

13. Changes to this notice

We update this notice as the service changes. The current version is always available on this page with the date of the last change.