Privacy Policy

This notice explains how personal data is handled in connection with the senosan.hu website. Our starting point is that your personal data is yours — we ask for no more, and keep it no longer, than is strictly necessary to answer your enquiry and to run the site securely.

In effect from 15 September 2026.

1. Who handles your data?

2. What data do we handle, and why?

2.1 Contact form

If you write to us using the form on the Contact page, we handle the following data:

Data	Why we need it
Name	So that we can address you properly in our reply.
Email address	So that we can reply. This field is required.
Phone number	In case a call back is quicker. This field is optional.
Message	So that we understand your question and can give a useful answer.

• Legal basis: your consent (GDPR Article 6(1)(a)), given by ticking the checkbox before you send the form.
• How long we keep it: for 2 years after the enquiry is closed — so that we still have the background if you come back with a later question about the same project. If you ask us to delete it sooner, we delete it without delay.
• Where we keep it: the message reaches us by email and stays in our mail system. The form content is not retained in the website database.

2.2 Server logs

The server hosting this website — like every web server — automatically logs requests: the IP address, the time of the visit, the address of the page opened, and the browser and operating system type. This data is not linked to any other data that could identify you.

• Purpose: operational security of the site, troubleshooting, and detecting and preventing abuse such as attack attempts.
• Legal basis: the Controller's legitimate interest (GDPR Article 6(1)(f)) in running the service securely.
• How long we keep it: at most 30 days, after which the log files are automatically overwritten.

2.3 Cookies

This website does not use analytics, marketing or profiling cookies. There is no Google Analytics and no advertising tracker on it. Simply loading the site places no cookie whatsoever in your browser.

There is one exception — the contact form: when you send it, the system may use a technical cookie to display the confirmation and to filter unsolicited submissions (spam). These are strictly necessary cookies, which under the GDPR and the ePrivacy rules do not require separate consent.

2.4 Embedded YouTube videos

Some pages have YouTube videos embedded. We use these in privacy-enhanced mode (youtube-nocookie.com): until you actually start the video, YouTube places no tracking cookie on your device.

If you do play the video, a connection to Google is established and Google's own data handling applies from that point — you can read about it in the Google Privacy Policy . We have no influence over that processing.

3. Who do we share your data with?

Your data is never sold, rented out or passed on for advertising purposes. The only processor with access to the data stored on the server is our hosting provider, to the extent required to deliver the service:

Beyond this, we disclose data only where the law requires it, or where a court or authority obliges us to do so by a valid decision.

4. Is data transferred outside the EU?

The website runs on a server in Hungary and the data stays within the European Union. The exception is if you start an embedded YouTube video: in that case Google — as an independent controller — may also transfer data outside the European Union, on the basis of a European Commission adequacy decision or standard contractual clauses.

5. What rights do you have?

Under the GDPR you have the following rights. You may exercise any of them, free of charge, using our contact details above:

• Access: you may ask whether we hold any data about you and, if so, what data, for what purpose and for how long.
• Rectification: you may ask us to correct inaccurate data or complete incomplete data.
• Erasure (“right to be forgotten”): you may ask us to delete your data if it is no longer needed for the purpose you gave it for, or if you withdraw your consent.
• Restriction of processing: you may ask us to only store your data and not use it — for example while a disputed accuracy is being investigated.
• Data portability: you may ask to receive the data we handle on the basis of your consent in a machine-readable format, or to have it sent directly to another controller.
• Objection: you may object to processing based on legitimate interest — in which case we stop handling your data until we can demonstrate that our interest overrides yours.
• Withdrawal of consent: you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before the withdrawal.

We fulfil your request within one month at the latest . If the request is complex, this deadline may be extended by two months — we will tell you within one month, together with the reason for the extension.

6. Where can you turn if you disagree with us?

If you feel that our data handling infringes your rights, please contact us first — most questions can be settled with a single exchange of messages. Independently of that, you may lodge a complaint with the supervisory authority and you may also go to court.

You may also bring court proceedings before the regional court with jurisdiction over your place of residence or stay.

7. How do we protect your data?

The website is served over an encrypted connection (HTTPS), so the data you type into the form cannot be read in transit. The hosting runs in a closed, protected server environment and our systems are updated regularly. Only those colleagues who need it in order to answer your enquiry have access to your data.

8. Changes to this notice

If the operation of the website or the legal environment changes, we will update this notice. The version in force at any given time is available on this page, with the effective date shown at the top.