Privacy Policy
Utoljára frissítve: 2026. 10. 19.
**Effective Date: January 1, 2025**
## 1. Introduction
Kertalkotás (hereinafter: "Service Provider", "we", "us" or "our") is committed to protecting your personal data. This Privacy Policy explains in detail how we collect, use, store, and protect your personal data through the kertalkotas.hu website (hereinafter: "Website").
Data processing is carried out in accordance with the European Union's General Data Protection Regulation (GDPR - Regulation 2016/679) and applicable Hungarian legislation.
## 2. Data Controller Information
**Data Controller Name:** Kertalkotás
**Website:** https://kertalkotas.hu
**Email Address:** admin@kertalkotas.hu
## 3. Scope of Data Processed and Purpose of Data Processing
### 3.1 Contact Form
**Data Processed:**
- Name (required)
- Email address (required)
- Phone number (optional)
- Company name (optional)
- Message subject and content
- Attached files (optional - project plans, images)
**Purpose of Data Processing:** Contact handling, quote requests, customer service
**Legal Basis:** Consent of the data subject (GDPR Article 6(1)(a))
**Data Retention Period:** 2 years or 1 year after request fulfillment
### 3.2 Newsletter Subscription
**Data Processed:**
- Email address
- Subscription date
- Language preference
**Purpose of Data Processing:** Sending newsletters, promotional materials, professional updates
**Legal Basis:** Consent of the data subject (GDPR Article 6(1)(a))
**Data Retention Period:** Until unsubscription or after 3 years of inactivity
### 3.3 AI Chat Assistant
**Data Processed:**
- Chat message content
- Session ID
- Timestamps
**Purpose of Data Processing:** Customer service, answering frequently asked questions, providing information
**Legal Basis:** Consent of the data subject and legitimate interest (GDPR Article 6(1)(a) and (f))
**Data Retention Period:** 30 days after session closure
**Note:** Chat messages do not contain personally identifiable information. The system uses OpenAI GPT-4 technology, and chat history is stored in vectorized form.
### 3.4 Website Visitor Statistics
**Data Processed:**
- IP address (in SHA256 hash format - anonymous)
- Viewed pages
- Device type (desktop/mobile/tablet)
- Browser type
- Visit timestamp
- Session ID (sessionStorage-based)
**Purpose of Data Processing:** Website usage analysis, user experience improvement
**Legal Basis:** Legitimate interest (GDPR Article 6(1)(f))
**Data Retention Period:** 12 months
**Note:** IP addresses are hashed and cannot be used for personal identification. The system is GDPR-compliant and does not use cookies to track users.
### 3.5 Courses and Programs
**Data Processed:**
- Name
- Email address
- Phone number
- Registration data
**Purpose of Data Processing:** Program organization, participant communication
**Legal Basis:** Performance of contract (GDPR Article 6(1)(b))
**Data Retention Period:** 1 year after program completion
## 4. Data Transfer, Data Processors
We do not transfer your data to third parties, except in the following cases:
### 4.1 Technical Service Providers (Data Processors)
- **OpenAI (chat assistant):** Processing chat messages using artificial intelligence
- **Hosting Provider:** Website and database storage
- **Email Service Provider:** Sending contact messages and newsletters
Our data processors maintain GDPR-compliant data processing, and we have signed data processing agreements with them.
### 4.2 Legal Obligation
We may transfer data to authorities based on legal obligations (e.g., court order, official request).
## 5. Data Security
To protect your data, we apply the following security measures:
- **HTTPS Encryption:** The website is fully protected with SSL/TLS encryption
- **Database Protection:** Access control, encrypted connection
- **IP Anonymization:** Visitor IP addresses are hashed with SHA256
- **Regular Backups:** Protection against data loss
- **Spam Protection:** Built-in spam filtering and rate limiting in chat system
- **Access Control:** Only authorized persons have access to data
## 6. Rights of Data Subjects
Under GDPR, you have the following rights:
### 6.1 Right of Access
You may request information about the personal data we process about you.
### 6.2 Right to Rectification
You may request the correction of inaccurate personal data or the completion of incomplete data.
### 6.3 Right to Erasure ("Right to be Forgotten")
You may request the deletion of your personal data if:
- The data is no longer necessary for the original purpose
- You withdraw your consent
- You object to processing based on legitimate interest
- The data processing is unlawful
### 6.4 Right to Restriction of Processing
You may request restriction of processing if you contest the accuracy or lawfulness of the data.
### 6.5 Right to Data Portability
You may request to receive the data we process about you in a structured, machine-readable format.
### 6.6 Right to Object
You may object to data processing based on legitimate interest.
### 6.7 Withdrawal of Consent
You may withdraw your consent at any time (e.g., newsletter unsubscription).
## 7. Enforcement of Rights
To exercise your rights or in case of complaints, contact us:
- **Email:** admin@kertalkotas.hu
If you believe our data processing violates your rights, you may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
- **Address:** 1055 Budapest, Falk Miksa utca 9-11., Hungary
- **Phone:** +36 (1) 391-1400
- **Email:** ugyfelszolgalat@naih.hu
- **Website:** https://naih.hu
## 8. Cookies
The website only uses session-based storage, which is stored in the browser (sessionStorage) and automatically deleted upon closure. We do not use third-party tracking cookies.
## 9. Third-Party Services
The website uses the following third-party services:
- **OpenAI GPT-4:** AI chat assistant
- **ChromaDB:** Vector database (runs on local server)
## 10. Children's Data
The website's services are not available to persons under 16 years of age. We do not knowingly collect data from persons under 16. If we become aware that we have collected such data, we will delete it immediately.
## 11. Privacy Policy Updates
We reserve the right to modify this Privacy Policy at any time. Updates will be published on this page. In case of significant changes, we will notify registered users by email.
**Last Updated:** January 1, 2025
## 12. Contact
For data protection questions, please contact us:
**Email:** admin@kertalkotas.hu
**Website:** https://kertalkotas.hu
---
*This document describes Kertalkotás' data processing practices. We strive to fully comply with GDPR and Hungarian data protection regulations.*
## 1. Introduction
Kertalkotás (hereinafter: "Service Provider", "we", "us" or "our") is committed to protecting your personal data. This Privacy Policy explains in detail how we collect, use, store, and protect your personal data through the kertalkotas.hu website (hereinafter: "Website").
Data processing is carried out in accordance with the European Union's General Data Protection Regulation (GDPR - Regulation 2016/679) and applicable Hungarian legislation.
## 2. Data Controller Information
**Data Controller Name:** Kertalkotás
**Website:** https://kertalkotas.hu
**Email Address:** admin@kertalkotas.hu
## 3. Scope of Data Processed and Purpose of Data Processing
### 3.1 Contact Form
**Data Processed:**
- Name (required)
- Email address (required)
- Phone number (optional)
- Company name (optional)
- Message subject and content
- Attached files (optional - project plans, images)
**Purpose of Data Processing:** Contact handling, quote requests, customer service
**Legal Basis:** Consent of the data subject (GDPR Article 6(1)(a))
**Data Retention Period:** 2 years or 1 year after request fulfillment
### 3.2 Newsletter Subscription
**Data Processed:**
- Email address
- Subscription date
- Language preference
**Purpose of Data Processing:** Sending newsletters, promotional materials, professional updates
**Legal Basis:** Consent of the data subject (GDPR Article 6(1)(a))
**Data Retention Period:** Until unsubscription or after 3 years of inactivity
### 3.3 AI Chat Assistant
**Data Processed:**
- Chat message content
- Session ID
- Timestamps
**Purpose of Data Processing:** Customer service, answering frequently asked questions, providing information
**Legal Basis:** Consent of the data subject and legitimate interest (GDPR Article 6(1)(a) and (f))
**Data Retention Period:** 30 days after session closure
**Note:** Chat messages do not contain personally identifiable information. The system uses OpenAI GPT-4 technology, and chat history is stored in vectorized form.
### 3.4 Website Visitor Statistics
**Data Processed:**
- IP address (in SHA256 hash format - anonymous)
- Viewed pages
- Device type (desktop/mobile/tablet)
- Browser type
- Visit timestamp
- Session ID (sessionStorage-based)
**Purpose of Data Processing:** Website usage analysis, user experience improvement
**Legal Basis:** Legitimate interest (GDPR Article 6(1)(f))
**Data Retention Period:** 12 months
**Note:** IP addresses are hashed and cannot be used for personal identification. The system is GDPR-compliant and does not use cookies to track users.
### 3.5 Courses and Programs
**Data Processed:**
- Name
- Email address
- Phone number
- Registration data
**Purpose of Data Processing:** Program organization, participant communication
**Legal Basis:** Performance of contract (GDPR Article 6(1)(b))
**Data Retention Period:** 1 year after program completion
## 4. Data Transfer, Data Processors
We do not transfer your data to third parties, except in the following cases:
### 4.1 Technical Service Providers (Data Processors)
- **OpenAI (chat assistant):** Processing chat messages using artificial intelligence
- **Hosting Provider:** Website and database storage
- **Email Service Provider:** Sending contact messages and newsletters
Our data processors maintain GDPR-compliant data processing, and we have signed data processing agreements with them.
### 4.2 Legal Obligation
We may transfer data to authorities based on legal obligations (e.g., court order, official request).
## 5. Data Security
To protect your data, we apply the following security measures:
- **HTTPS Encryption:** The website is fully protected with SSL/TLS encryption
- **Database Protection:** Access control, encrypted connection
- **IP Anonymization:** Visitor IP addresses are hashed with SHA256
- **Regular Backups:** Protection against data loss
- **Spam Protection:** Built-in spam filtering and rate limiting in chat system
- **Access Control:** Only authorized persons have access to data
## 6. Rights of Data Subjects
Under GDPR, you have the following rights:
### 6.1 Right of Access
You may request information about the personal data we process about you.
### 6.2 Right to Rectification
You may request the correction of inaccurate personal data or the completion of incomplete data.
### 6.3 Right to Erasure ("Right to be Forgotten")
You may request the deletion of your personal data if:
- The data is no longer necessary for the original purpose
- You withdraw your consent
- You object to processing based on legitimate interest
- The data processing is unlawful
### 6.4 Right to Restriction of Processing
You may request restriction of processing if you contest the accuracy or lawfulness of the data.
### 6.5 Right to Data Portability
You may request to receive the data we process about you in a structured, machine-readable format.
### 6.6 Right to Object
You may object to data processing based on legitimate interest.
### 6.7 Withdrawal of Consent
You may withdraw your consent at any time (e.g., newsletter unsubscription).
## 7. Enforcement of Rights
To exercise your rights or in case of complaints, contact us:
- **Email:** admin@kertalkotas.hu
If you believe our data processing violates your rights, you may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
- **Address:** 1055 Budapest, Falk Miksa utca 9-11., Hungary
- **Phone:** +36 (1) 391-1400
- **Email:** ugyfelszolgalat@naih.hu
- **Website:** https://naih.hu
## 8. Cookies
The website only uses session-based storage, which is stored in the browser (sessionStorage) and automatically deleted upon closure. We do not use third-party tracking cookies.
## 9. Third-Party Services
The website uses the following third-party services:
- **OpenAI GPT-4:** AI chat assistant
- **ChromaDB:** Vector database (runs on local server)
## 10. Children's Data
The website's services are not available to persons under 16 years of age. We do not knowingly collect data from persons under 16. If we become aware that we have collected such data, we will delete it immediately.
## 11. Privacy Policy Updates
We reserve the right to modify this Privacy Policy at any time. Updates will be published on this page. In case of significant changes, we will notify registered users by email.
**Last Updated:** January 1, 2025
## 12. Contact
For data protection questions, please contact us:
**Email:** admin@kertalkotas.hu
**Website:** https://kertalkotas.hu
---
*This document describes Kertalkotás' data processing practices. We strive to fully comply with GDPR and Hungarian data protection regulations.*