This notice explains what personal data the levente.net website (the Website) processes, for what purpose and on what legal basis, for how long, who can access it, and what rights visitors have. It follows the European Union's General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
The controller
For questions about data protection and to exercise your rights, write to the email address above.
What data we process, why and for how long
Contact form
- Data: name, email address, the message and the time it was sent.
- Purpose: answering the enquiry and keeping in touch.
- Legal basis: the controller's legitimate interest in answering enquiries (GDPR Art. 6(1)(f)); for a request for a quote or an assignment, steps prior to entering into a contract (GDPR Art. 6(1)(b)).
- Retention: up to 90 days, or until the correspondence ends if it is still ongoing or leads to an assignment.
Messages are not stored in a database: the server emails them to the controller's address [email protected], from where Cloudflare's email forwarding service delivers them to the controller's mailbox.
Protecting the form against abuse
- Data: a one-way, irreversible hash of the visitor's IP address for up to 5 minutes, and the technical data Google reCAPTCHA examines (IP address, browser and device data, interactions with the page).
- Purpose: filtering out spam and automated abuse.
- Legal basis: the controller's legitimate interest in protecting the Website and the form (GDPR Art. 6(1)(f)).
reCAPTCHA is provided by Google under the Google Privacy Policy and Terms of Service. The controller uses the score it returns only to accept or reject a submission.
Visitor statistics (Google Analytics)
- When: only if the visitor consents to statistics cookies in the cookie banner.
- Data: a pseudonymous identifier (cookie), the pages viewed, the time and length of the visit, the referring page, browser and device data, approximate location (country, city).
- Purpose: understanding how visitors use the Website, and improving it.
- Legal basis: the visitor's consent (GDPR Art. 6(1)(a)), which can be withdrawn at any time with the Cookies link in the footer.
- Retention: the cookies last up to 2 years; Google Analytics keeps the statistics for up to 14 months.
The statistics are made by Google Analytics, loaded through Google Tag Manager.
Serving the Website and server logs
Traffic to the Website passes through Cloudflare's network, which speeds up delivery and protects the Website from attacks; for this, Cloudflare processes the visitor's IP address and technical data about the requests. The server hosting the Website logs requests (time, page requested, referring page, browser type); the visitor's IP address is not recorded in these logs. The server deletes the logs automatically after 15 days.
- Legal basis: the controller's legitimate interest in running the Website securely and reliably (GDPR Art. 6(1)(f)).
Embedded content
The Contact page shows a Google Map, and the project dialogs show YouTube videos (in YouTube's privacy-enhanced mode). When they load, the browser connects directly to Google's servers, which may then process the IP address and technical data. Legal basis: the controller's legitimate interest in presenting this content (GDPR Art. 6(1)(f)).
Settings
The chosen language, theme and cookie settings are stored by the browser in cookies. They are needed for the Website to work, and the controller does not link them to a person.
Services the Website uses
The controller does not sell or pass on personal data to anyone. To run the Website, however, it uses the services below, which may access some data in doing so – only to provide their service, and under their own privacy terms:
- Contabo GmbH (Welfenstrasse 22, 81541 Munich, Germany; contabo.com) – hosting, operator of the server behind the Website.
- Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA; cloudflare.com) – network and security services, email forwarding.
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and Google LLC (USA) – Google Analytics, Tag Manager, reCAPTCHA, Maps and YouTube.
Transfers outside the European Union
Cloudflare and Google are US companies, so data may also be transferred to the United States. Both have joined the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023; this ensures an adequate level of protection for the data.
Your rights
- Access: you can ask whether the controller processes your personal data and, if so, request a copy.
- Rectification: you can ask for inaccurate data to be corrected.
- Erasure: you can ask for your data to be deleted when it is no longer needed or the processing is unlawful.
- Restriction: you can ask the controller to keep your data but temporarily stop using it.
- Portability: you can ask to receive the data you provided in a machine-readable format.
- Objection: you can object at any time to processing based on legitimate interest.
- Withdrawing consent: you can withdraw your consent to statistics cookies at any time with the Cookies link in the footer. This does not affect the lawfulness of processing before the withdrawal.
Requests can be sent to [email protected]; the controller replies within one month at the latest.
Complaints
If you believe the processing of your data infringes your rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
You can also lodge a complaint with the data protection authority of your own EU country, or go to court.
Cookies
Cookies are small text files the Website stores on the visitor's device. You can decide on them by category in the cookie banner and with the Cookies link in the footer.
- cc_cookie – 1 year – necessary: stores your cookie settings.
- lang, theme – 1 year – necessary: stores the chosen language and theme.
- _GRECAPTCHA – 6 months – necessary: set by Google reCAPTCHA on the Contact page to protect against abuse.
- _ga, _ga_<ID> – 2 years – statistics, only with consent: Google Analytics' pseudonymous identifier and visit data.
The Website currently uses no advertising (marketing) cookies. The category appears in the cookie banner so that, should such cookies ever be added, they could only be used with the visitor's consent.
You can also delete and block cookies in your browser settings: Google Chrome, Edge, Firefox, Safari.
Changes to this notice
The controller may change this notice, for example when the Website or the law changes. The current version is always available on this page, with the date it was updated.
