Privacy

Privacy policy

Effective: 25 September 2026

This policy explains what personal data we process when you visit kutassy.co.hu or get in touch with us, why we do it, how long we keep it and what your rights are. We process data in line with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 on informational self-determination. If the English and Hungarian versions differ, the Hungarian version prevails.

In short

  • The site has no sign-up, no forms and no newsletter. We only receive personal data from you if you email or call us.
  • We collect usage statistics (Google Analytics) only with your consent. You can change your choice at any time with the “Cookie settings” button in the footer.
  • We do not use advertising or profiling cookies, and we do not sell your data.

1. Data controller

  • Name Bálint Kutassy, sole proprietor (KUTASSY)
  • Registered address Sarló utca 19. 9/37, 8000 Székesfehérvár, Hungary
  • Office Jókai utca 15, 8000 Székesfehérvár, Hungary
  • Email hello@kutassy.co.hu
  • Phone +36 30 491 1923

We are not required to appoint a data protection officer. For any privacy matter, contact us at the email address above.

2. What data we process, why, and for how long

2.1. Contacting us by email or phone

  • Data your name, email address, phone number, and whatever you share with us in your message or call (for example your company name or a project description)
  • Purpose replying to your enquiry, preparing a proposal, coordinating our work together
  • Legal basis steps prior to entering into a contract and performance of a contract (GDPR Art. 6(1)(b)); where no contract follows, our legitimate interest in answering your enquiry (GDPR Art. 6(1)(f))
  • Retention 1 year from the end of the correspondence if we do not start working together. If we sign a contract, related correspondence is kept until the limitation period expires (5 years from the end of the contract), and accounting records for 8 years as required by Section 169 of Hungarian Act C of 2000 on Accounting.

2.2. Server logs

  • Data IP address, time of visit, URL of the page opened, referring page, browser and operating system type
  • Purpose running the site securely and reliably, detecting errors and attacks
  • Legal basis our legitimate interest in operating the site securely (GDPR Art. 6(1)(f))
  • Retention according to the hosting provider’s log retention policy, after which logs are deleted automatically

We do not combine logs with other data and do not use them to identify visitors.

2.3. Remembering your cookie choice

  • Data whether you consented to analytics and when you decided (stored in your browser’s local storage as kt-consent)
  • Purpose so we do not ask again on every page, and so we can demonstrate your consent
  • Legal basis storage strictly necessary for the site to function (Section 155(4) of Hungarian Act C of 2003 on Electronic Communications) and the obligation to demonstrate consent (GDPR Art. 7(1))
  • Retention until you clear it in your browser. This data is stored only on your device and never reaches us.

2.4. Usage statistics: Google Analytics and Google Tag Manager

We use Google Analytics 4 to measure how many people visit, where they come from and which pages they view. We use the results in aggregate to improve the site. The measurement code is loaded by Google Tag Manager.

  • Data a random, pseudonymous identifier (in a cookie), pages viewed and time of visit, referring page, device, browser and screen type, and country and city estimated from your IP address. Google Analytics 4 does not store IP addresses.
  • Purpose usage statistics, improving the site
  • Legal basis your consent (GDPR Art. 6(1)(a)), given in the cookie banner and revocable at any time. Withdrawal does not affect the lawfulness of processing before it.
  • Retention the _ga and _ga_* cookies stay in your browser for up to 2 years; Google Analytics keeps statistical data for up to 14 months

If you do not consent, Google Analytics sets no cookies and assigns you no identifier. Google’s Consent Mode may still send cookieless signals without an identifier that a page has loaded; Google uses these only for aggregated, modelled statistics that cannot be linked to you.

Google Tag Manager itself sets no cookies, but when it loads, your browser connects to Google’s servers, which technically makes your IP address visible to Google.

3. Who has access to the data

We are the controller. The following providers act as processors, on our behalf and under our instructions:

  • Hosting and email Rackforest Zrt. (Hungary, rackforest.hu): hosting of the website, server logs and email account
  • Analytics Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): Google Analytics and Google Tag Manager

We do not sell your data or pass it on to third parties, unless required by law (for example at the request of an authority).

4. Transfers outside the European Union

As part of Google’s processing, data may be transferred to servers of Google LLC in the United States. Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023. Google also applies the European Commission’s Standard Contractual Clauses.

5. Your rights

  • Access: you can ask what data we hold about you and request a copy.
  • Rectification: you can ask us to correct inaccurate data.
  • Erasure: you can ask us to delete your data if it is no longer needed or was processed unlawfully.
  • Restriction: you can ask us to only store your data for a period, without using it.
  • Portability: you can request data processed under a contract in a machine-readable format.
  • Objection: you can object to processing based on our legitimate interest.
  • Withdrawing consent: you can switch off analytics at any time with the “Cookie settings” button in the footer.

Send your request to hello@kutassy.co.hu. We reply within one month at the latest; where justified, we may extend this by two further months and will let you know. This is free of charge. We do not carry out automated decision-making or profiling.

6. Complaints and remedies

If you believe we have infringed your rights, please contact us first so we can put it right. You can also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

  • Address Falk Miksa utca 9–11, 1055 Budapest, Hungary
  • Postal address 1363 Budapest, Pf. 9., Hungary
  • Phone +36 1 391 1400
  • Email ugyfelszolgalat@naih.hu
  • Web naih.hu

You may also go to court, or lodge a complaint with the supervisory authority of the EU country where you live.

7. Security

The site is only available over an encrypted (HTTPS) connection. Only those who need the data for their work can access it, and access to the hosting and email account is password-protected.

8. Changes to this policy

If our data processing changes, we will update this policy and show the effective date at the top.