Privacy policy

2.1. Website visits and statistics

The website uses Google Analytics 4 to understand how visitors use the site. Statistics cookies are only activated if you explicitly consent via the cookie banner (Google Consent Mode v2). Without consent, no statistics cookies are set. IP addresses are processed in anonymised form.

Data processed

anonymised IP address, browser and device data, pages viewed, time and duration of the visit, approximate location (city level)

Purpose

producing visitor statistics and improving the website

Legal basis

consent — Article 6(1)(a) GDPR

Retention

until you withdraw your consent; Google Analytics retains measurement data for a maximum of 14 months

2.2. Contact requests

You can reach out via the contact form on the website or by email. Your message is delivered to me by email through the Brevo transactional email service.

Data processed

name, email address, company name (optional), message content

Purpose

responding to your enquiry, preparing quotes, keeping in touch

Legal basis

steps taken at your request prior to entering into a contract — Article 6(1)(b) GDPR

Retention

until the enquiry is closed, but no longer than 1 year; if a contract is concluded, the rules for contractual processing apply

2.3. Quote requests via the configurator

When you complete the price configurator, I prepare a personalised quote based on the contact details and project specification you provide. Quote requests are also stored as leads in my client records.

Data processed

name, email address, phone number (optional), company name (optional), notes, selected project items and requirements

Purpose

preparing a quote and contacting you about it

Legal basis

steps taken at your request prior to entering into a contract — Article 6(1)(b) GDPR

Retention

until the quote expires, but no longer than 1 year; if a contract is concluded, the rules for contractual processing apply

2.4. Client portal account

When we work together, you receive a client portal account where you can track the project, send messages, share files and approve documents. The account is accessed with an email address and a password or a sign-in link (magic link) sent by email; passwords are stored exclusively in encrypted (hashed) form.

Content created while using the portal is also stored: tasks, support tickets, messages, uploaded files and documents, document approvals and electronic signatures, time-tracking entries, and a log of actions performed in the account (activity log). An optional list of allowed IP addresses can also be configured for the account.

Data processed

email address, password (encrypted), display name, company name, phone number, avatar, notification preferences, project content and activity log, optionally allowed IP addresses

Purpose

performing the service contract, running the project, communication and client support

Legal basis

performance of a contract — Article 6(1)(b) GDPR

Retention

for the duration of the contractual relationship, then until the end of the civil-law limitation period (5 years)

2.5. Invoicing

Invoices for my services are issued with the Billingo online invoicing system.

Data processed

billing name, billing address, tax number (for companies)

Purpose

issuing invoices and fulfilling accounting obligations

Legal basis

compliance with a legal obligation — Article 6(1)(c) GDPR; Hungarian VAT Act s. 169, Accounting Act s. 169

Retention

8 years, as required by Hungarian Act C of 2000 on Accounting

2.6. System messages and notifications

Transactional emails related to the client portal (e.g. sign-in links, project notifications, weekly summaries) are sent via Brevo. Notifications can be customised or turned off in the portal settings. I do not send newsletters.

Data processed

name, email address, details of the event the notification concerns

Purpose

delivering notifications necessary for the service to operate

Legal basis

performance of a contract — Article 6(1)(b) GDPR

Retention

for the duration of the client portal account processing