Privacy policy

Effective from 14 October 2026. This is an English translation of the Hungarian original; in case of any discrepancy, the Hungarian version prevails.

1. The data controller

Name

Veronika Bossányi, sole proprietor (BeValid)

Registered address

Nánási út 2. B ép. földszint 12/a, 1031 Budapest, Hungary

Tax number

57673475-1-41

Registration number

56321577

Email

info@bevalid.hu

Phone

+36 20 240 6563

Data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.).

2. What data I process and why

2.1. Quote and free audit requests via the website forms

Data processed

name, email address; if provided: phone number, website address, message; your answers to the form’s questions (for example your business’s current situation and goals, your website’s platform), the selected package, and the language of the page on which you completed the form.

Purpose

responding to your enquiry, preparing a tailored proposal and keeping in touch about it.

Legal basis

taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).

Retention period

if no engagement follows, 1 year from the last contact, after which it is deleted. If an engagement follows, data is kept for as long as needed to perform the contract, and accounting records for 8 years under Section 169 of Hungarian Act C of 2000 on accounting.

Your name and email address are required so that I can reply. Without them the quote request cannot be sent; all other data is optional. A free audit request also requires your website address.

If you give me access to your website, hosting or analytics accounts for the audit, I use it solely to prepare the audit, do not share the login details and delete them when the audit is completed. You create the access yourself and can revoke it at any time.

2.2. Direct contact by email or phone

Data processed

name, email address or phone number, and the information shared in your message.

Purpose

responding to your enquiry and keeping in touch.

Legal basis

steps prior to entering into a contract (Article 6(1)(b) GDPR) and the legitimate interest in responding to your enquiry (Article 6(1)(f) GDPR).

Retention period

1 year from the last contact; in case of an engagement, as set out in section 2.1.

2.3. Protecting the form against abuse

Data processed

an irreversible fingerprint (hash) derived from your IP address, changing daily, and the time of submission. The IP address itself is not stored.

Purpose

filtering out mass, automated (spam) submissions: one visitor can send at most 5 quote requests per hour.

Legal basis

legitimate interest in protecting the website and email (Article 6(1)(f) GDPR).

Retention period

at most 1 hour, after which it is deleted automatically.

2.4. Server logs

When the website is opened, the hosting provider’s server automatically records the visitor’s IP address, the time of the visit, the address of the page opened and the browser type, to ensure operation and detect security incidents. The legal basis is legitimate interest (Article 6(1)(f) GDPR). These logs are kept by the hosting provider for the period set out in its own policy, and I don’t use them to identify or profile visitors.

2.5. What I don’t do

I don’t send newsletters or advertising to the address given in a quote request, I don’t use automated decision-making or individual profiling, and I don’t sell your personal data or pass it on to third parties for marketing.

3. Processors and recipients

Apart from me, only the following processors may access your personal data, and only to the extent needed for their service:

Hosting and email

RackForest Informatikai Kereskedelmi Szolgáltató és Tanácsadó Zrt. (Victor Hugo utca 11. 5. emelet, 1132 Budapest, Hungary; info@rackforest.hu). It hosts the website and the email account; data sent via the form and incoming emails are stored on its servers.

Analytics

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), only if you consent to cookies, as described in section 4.2.

If an engagement follows, the data needed for invoicing may be passed to my accountant and the tax authority on the basis of a legal obligation.

4. Cookies and analytics

The website’s basic functions don’t require cookies. I use Google Analytics 4 to measure visits, but only if you consent in the cookie banner. Without consent, Google’s code isn’t even loaded and no data reaches Google.

4.1. Remembering your choice

Data stored

your choice in the cookie banner (accept or reject) and its time, in your browser’s local storage (localStorage, key: bevalid-consent). It isn’t sent to me or to any third party.

Purpose

so I don’t have to ask again on every page.

Legal basis

storage strictly necessary to provide the requested service (Section 155(4) of Hungarian Act C of 2003 on electronic communications) and legitimate interest (Article 6(1)(f) GDPR).

Duration

12 months, after which I ask again. You can delete it at any time by clearing your browser data.

4.2. Google Analytics 4 (only with consent)

Provider

Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as processor.

Data processed

a random, pseudonymous identifier; the pages viewed and their order; the traffic source; device and browser type, screen size; approximate location (country, city); the fact of a successful quote request with the selected package, the indicated problem type and the page language. I do not send Google your name, email address or any other data entered in the form. Google Analytics 4 does not log or store IP addresses.

Purpose

anonymous statistics on how visitors use the website, where they come from and which page leads to a quote request, in order to improve the website.

Legal basis

your consent (Article 6(1)(a) GDPR).

Cookies

_ga and _ga_Q8YDYGG3W6: to distinguish visitors, expiry: 2 years.

Retention period

user-level data in Google Analytics is deleted automatically after 14 months.

Advertising

I don’t use the measurement for advertising: Google Signals, ad personalisation and advertising data collection are switched off.

Transfers

Google may also process data outside the European Union, in the United States. Google LLC participates in the EU–US Data Privacy Framework, which ensures an adequate level of protection based on the European Commission’s adequacy decision. Details: Google’s privacy policy.

Withdrawing consent: you can do this at any time with the Cookie settings button at the bottom of the page. After withdrawal, measurement stops and the Google Analytics cookies are deleted from your browser. Withdrawal doesn’t affect the lawfulness of processing based on consent before its withdrawal.

5. Data security

The website is served over an encrypted (HTTPS) connection, so data entered in the form reaches the server encrypted. Only I have access to the email account and the hosting, protected by unique passwords.

6. Your rights

You can exercise the following rights regarding your data at any time; an email to info@bevalid.hu is enough:

• Access: you can ask what data of yours I process (Article 15 GDPR).
• Rectification: you can ask for inaccurate data to be corrected (Article 16).
• Erasure: you can ask for your data to be deleted unless the law requires me to keep it (Article 17).
• Restriction: you can ask for processing to be restricted (Article 18).
• Portability: you can ask for the data you provided in a machine-readable format (Article 20).
• Objection: you can object to processing based on legitimate interest (Article 21).

I respond without undue delay and within one month at the latest. The response is free of charge.

7. Remedies

If you think the processing of your data violates your rights, please write to me first so we can resolve it. You can also lodge a complaint with the supervisory authority:

Authority

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address

Falk Miksa utca 9–11., 1055 Budapest, Hungary

Postal address

1363 Budapest, Pf. 9., Hungary

Phone

+36 1 391 1400

Email

ugyfelszolgalat@naih.hu

Website

naih.hu

If you don’t live in Hungary, you can also lodge a complaint with the data protection authority of the EU member state where you live or work (Article 77 GDPR).

You can also go to court if your rights are violated; you may bring the case before the court of your place of residence or stay.

Details of the website operator can be found in the imprint.