Privacy Policy

This English version is provided for information purposes. In the event of any inconsistency between the Hungarian and English versions, the Hungarian-language Privacy Policy shall prevail.

1. Data Controller

2. Categories of Personal Data Processed

Contact form

PDF documentation download

⚠️ Data processed through external services

The website uses the following external services, which may process certain browsing or communication-related data of the user:

Google Fonts

The website uses Google Fonts, which are loaded from the servers of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). This means that the user's IP address may be transmitted to Google servers. Google's Privacy Policy: policies.google.com/privacy

Google Search Console

The website may use Google Search Console for monitoring its appearance in Google Search, indexing status and technical errors. It does not place cookies on the visitor's device and does not receive personal data submitted through the contact form. Google's Privacy Policy: policies.google.com/privacy

Gmail / Google LLC (Data Processor)

Data submitted through the contact form and PDF download requests are delivered to the Data Controller via Gmail and Google Apps Script. Google LLC acts as a data processor in this respect, while Szofri Kft. remains the Data Controller.

Other tracking: The website does not use cookie-based tracking, Google Analytics or embedded social media content.

3. Purpose and Legal Basis of Processing

Contact form

PDF documentation download

4. Data Retention Period

Personal data provided through the contact form are retained for 1 year from the completion of the enquiry or from the last contact, after which the data are deleted.

The e-mail address provided for PDF download purposes and the related download log are retained for 1 year following the sending of the notification, after which they are deleted.

If the data subject withdraws consent or submits a deletion request, the relevant data will be deleted within 30 days of receiving the request.

5. Data Transfers and Data Processors

Personal data are not sold, disclosed or transferred to third parties for marketing or other unrelated purposes, subject to the following exceptions:

Gmail / Google LLC (Data Processor)

Data submitted through the contact form and PDF download requests are delivered to the Data Controller via Gmail and Google Apps Script. Google LLC acts as a data processor in this context.

Google Apps Script (Automation)

Google Apps Script is used as an automation platform to transmit notifications to the Data Controller through Google's infrastructure.

Transfers to third countries

Processing involving Google LLC may involve data transfers to the United States. Such transfers are carried out on the basis of appropriate safeguards under the GDPR, including Standard Contractual Clauses (SCC).

No additional transfer outside the European Union is carried out by the Data Controller.

6. Rights of the Data Subject

Under the GDPR, the data subject has the following rights in relation to their personal data:

Requests may be sent to: info@ivancsaharmonia.hu
The Data Controller will respond within 30 days. Where justified, this period may be extended by a further 60 days.

7. Withdrawal of Consent

The consent given by submitting the contact form or requesting a PDF download may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, it is sufficient to send an e-mail to the contact address above with a statement such as "I no longer wish to receive communication" or "Please delete my personal data".

8. Data Security

The Data Controller applies appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, deletion or accidental loss.

• Encrypted connection: the website uses HTTPS/SSL encryption.
• Token-based download: PDF documents are accessible only via a single-use, time-limited secure token.
• E-mail security: submitted data are processed via Gmail, which provides Google-level security.
• No local database: the data are not stored in a local website database; they are delivered to the Data Controller by e-mail only.
• No unencrypted transmission: all data transfers are carried out through encrypted channels.

9. Complaint and Legal Remedies

If you believe that the processing of your personal data infringes the GDPR or the Info Act, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

You may also seek judicial remedy before the competent court. Proceedings may be initiated before the tribunal having jurisdiction over your place of residence or habitual residence.

10. Contact Form, PDF Download and Consent

Before submitting the form or downloading the PDF, you must confirm that:

• you have read and accepted this Privacy Policy;
• you consent to the processing of your personal data as described herein;
• you understand that the data are delivered to the Data Controller through Gmail;
• you acknowledge the 1-year data retention period.

The form cannot be submitted and the PDF cannot be downloaded without this consent.

11. Amendments to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy unilaterally. Data subjects will be informed of any amendment through the website. Amendments enter into force upon publication.

The current version of this Privacy Policy is always available at ivancsaharmonia.hu/policy.html.