Privacy policy

1. Data controller

Controller

Tamás Horváth, sole proprietor (“SzoftMűhely”)

Registered office

Kablár köz 5., 7100 Szekszárd, Hungary

Registration number

62523802

Tax number

92187922-1-37

E-mail

szoftmuhely@gmail.com

Phone

+36 30 161 2128

We are not required to appoint a data protection officer under Article 37 GDPR; please use the contact details above for any privacy request.

2. Contact and proposal requests (form, e-mail, phone)

Data processed

name, company (optional), e-mail address, phone number (optional), selected topic, the text of your message and any further data you volunteer in it

Purpose

answering your enquiry, consultation, preparing a proposal and the contract

Legal basis

Article 6(1)(b) GDPR – steps prior to entering into a contract at your request; for non-contractual enquiries Article 6(1)(f) – our legitimate interest in answering you

Retention

if no contract is concluded: 1 year after the enquiry is closed; if a contract is concluded: for the period set out in section 3

Provision of data

voluntary, but we cannot reply without a name and an e-mail address

The website form sends the submitted data directly to the Web3Forms form-processing service, which forwards it to our Gmail mailbox operated by Google LLC (see section 6).

3. Clients and their contact persons

Data processed

name, position, e-mail address and phone number of the client's contact person; for sole-proprietor or private clients, the data required for invoicing

Purpose

performance of the contract, communication, invoicing, establishing and defending legal claims

Legal basis

Article 6(1)(b) (performance of a contract), 6(1)(c) (accounting obligations), 6(1)(f) GDPR (legitimate interest in processing contact-person data and in enforcing claims)

Retention

5 years after the end of the contract (general limitation period, Hungarian Civil Code §6:22); accounting records 8 years (Accounting Act §169)

4. Processing within development projects

Where we gain access to personal data controlled by a client during a development or AI-integration project, we act as a processor under Article 28 GDPR, solely on the client's documented instructions and under a separate data processing agreement. We do not use such data for our own purposes. By default, development is carried out on anonymised or test data.

5. Website operation, cookies and logs

The website is static: it does not use cookies or marketing trackers and does not profile visitors. We therefore do not ask for cookie consent.

We measure visits with Cloudflare Web Analytics (Cloudflare Inc., see section 6). It does not use cookies or any identifier stored in your browser, does not track you across other websites and does not identify you individually: it records aggregate data only (page viewed, referring page, country, browser and device type, load time). The purpose is to improve the website's content and performance; the legal basis is our legitimate interest under Article 6(1)(f) GDPR.

Our hosting provider's server may keep standard technical logs (IP address, timestamp, requested page, browser identifier) for the secure operation of the service and for troubleshooting, on the basis of legitimate interest (Article 6(1)(f) GDPR). Log retention is determined by the hosting provider (typically no more than 30 days).

Fonts are loaded from Google Fonts, which means your IP address is transmitted to Google LLC (USA) when the page loads. The transfer relies on the adequacy decision for the EU–US Data Privacy Framework. [NOTE: self-hosting the fonts is recommended; delete this paragraph once done.]

6. Processors and recipients

We do not share personal data with third parties for marketing purposes and we do not send newsletters.

• Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) – Gmail and Google Workspace tools; certified under the EU–US Data Privacy Framework.
• Web3Forms / Web3Creative (India; processing infrastructure: USA) – processing and e-mail forwarding of contact-form data. [BEFORE LAUNCH: verify the data-processing terms and safeguards for international transfers.]
• Hosting provider and web analytics (Cloudflare Web Analytics) – [TO BE COMPLETED: hosting provider name, registered office, e-mail].
• KBOSS.hu Kft. (Záhony utca 7, 1031 Budapest, Hungary) – Számlázz.hu online invoicing, used to issue accounting documents.
• Accountant: [TO BE COMPLETED: name and registered office] – accounting and tax compliance.
• Authorities and courts – where required by law or to enforce legal claims.

7. Data security

Data is stored in accounts protected by passwords and two-factor authentication, accessed over encrypted connections, and available only to the controller. We keep no paper records. Data is retained only for the stated purposes and periods.

8. Your rights

Send requests to szoftmuhely@gmail.com. We respond without undue delay and at the latest within one month.

• Access: you may ask what data we hold about you (Article 15 GDPR).
• Rectification: you may ask us to correct inaccurate data (Article 16).
• Erasure (“right to be forgotten”): you may ask us to delete your data where there is no longer a legal basis for processing (Article 17).
• Restriction of processing (Article 18).
• Data portability: for processing based on a contract, you may receive your data in a machine-readable format (Article 20).
• Objection: you may object to processing based on legitimate interest (Article 21).
• Withdrawal of consent: where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

9. Complaints and remedies

If you believe your data is processed in breach of the GDPR, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11, 1055 Budapest, Hungary; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu; website: naih.hu. You may also lodge a complaint with the supervisory authority of your own EU member state.

You may also bring the matter before a court; in Hungary, proceedings may be brought before the regional court of your place of residence.

10. Changes to this policy

We may update this policy from time to time, in particular when the law changes or when we introduce new processing activities. The current version, with its effective date, is always available on this page.