Privacy Policy
Last updated: November 2025
1. Data Controller
Company name:
Address:
Email:
Phone:
2. Purpose of This Policy
This Privacy Policy explains how we collect, use, store and protect your personal data when you visit our website.
We act in full compliance with the General Data Protection Regulation (GDPR – Regulation (EU) 2016/679) and all applicable Hungarian and EU data-protection laws.
3. Data We Collect
We collect only the data necessary for the secure and optimal operation of this website:
- Technical data – IP address (anonymized), browser type, device type, operating system, date and time of access.
- Analytics data – anonymized behavioral metrics (page views, duration, source).
- Contact or booking forms – name, email address, phone number and any information you voluntarily provide.
- Cookies – small text files stored on your device for essential or analytical purposes (see section 6).
No sensitive data (racial or ethnic origin, health, sexual orientation, etc.) are ever collected.
4. Purpose and Legal Basis of Processing
| Purpose | Legal Basis (GDPR) | Retention |
|---|---|---|
| Website operation & security | Legitimate interest (Art. 6(1)(f)) | Until logs are rotated (max. 30 days) |
| Contact form communication | Consent (Art. 6(1)(a)) | Until withdrawal or 12 months |
| Analytics & performance measurement | Consent (Art. 6(1)(a)) | Until cookie expires or withdrawn |
| Internal statistics | Legitimate interest (Art. 6(1)(f)) | Aggregated, anonymized permanently |
5. Google Analytics 4 (GA4)
We use Google Analytics 4 (GA4) to understand how visitors interact with our website.
This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
How GA4 Works
GA4 uses cookies and similar technologies to collect anonymous information about:
- visited pages,
- session duration,
- browser type,
- referring source.
IP addresses are anonymized before storage, and no personally identifiable information (PII) is transmitted to Google.
How Google Uses the Data
Google may process aggregated data to improve its analytics services.
You can read Google’s data-processing terms here:
👉 https://policies.google.com/privacy
How You Can Control Analytics
- You can withdraw consent at any time via the “Cookie Settings” link in the footer.
- You can also install the official browser add-on:
https://tools.google.com/dlpage/gaoptout
If you choose “Essential only” cookies, GA4 will not load or store any tracking data.
6. Cookies and Consent
We use a two-level cookie system:
- Essential cookies – required for website functionality (e.g. session handling).
- Analytics cookies – optional, only activated with explicit consent.
When you first visit the site, a cookie banner appears.
Your choice (“essential only” or “accept all”) is stored for 6 months.
You may change it any time using the “Cookie Settings” link in the footer.
Cookie storage is handled in accordance with Article 5 of the GDPR and ePrivacy Directive 2002/58/EC.
7. Data Storage and Security
Our website and database are hosted on DreamHost servers located within the European Economic Area (EEA).
DreamHost provides SSL encryption, firewalls, and access controls that meet EU data-protection standards.
We take all reasonable technical and organizational measures to ensure your data are:
- protected against unauthorized access,
- not altered, lost, or destroyed,
- encrypted in transit (HTTPS).
8. Data Sharin
We do not sell, rent, or otherwise share personal data with third parties, except:
- Google Ireland Ltd. – for analytics (if consented),
- IT service providers – who maintain the hosting environment (DreamHost).
All partners operate under GDPR-compliant data-processing agreements.
9. Your Rights (GDPR Articles 12–23)
You have the following rights:
- Access – to know what data we store about you.
- Rectification – to correct inaccurate or incomplete data.
- Erasure – “right to be forgotten.”
- Restriction of processing – under certain conditions.
- Data portability – receive your data in a structured, machine-readable format.
- Withdrawal of consent – at any time, without affecting prior lawful processing.
- Complaint – to the Hungarian Data Protection Authority (NAIH, www.naih.hu).
To exercise these rights, please contact us at: [Insert email address]
10. Retention and Deletion
- Form submissions: 12 months after receipt.
- Analytics data: retained by Google for 14 months, then automatically deleted.
- Server logs: 30 days, unless required for security investigation.
- Backups: encrypted and rotated regularly; old copies automatically deleted.
11. Children’s Privacy
This website and its services are intended for adults (18+).
We do not knowingly collect or store personal data from minors.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
Any changes will be published on this page with a revised “last updated” date.
If major modifications occur, visitors will be notified via the website banner.
13. Contact
For questions, requests or complaints regarding data processing:
Data Controller: [Company name]
Email: [contact email]
Address: [company address]
Phone: [phone number]
© 2025 All rights reserved.