Privacy notice

The use of the www.webvalto.hu website, and any enquiry you send to the email address or phone number published on it.

It does not cover course registrations, client contracts, employees or job applicants — for those we provide a separate notice when the relationship starts.

The Hungarian version is authoritative. The English and German texts are translations for convenience; in case of any difference, the Hungarian text prevails.

There are three processing activities, and the third only starts with your consent. No more, because the site has no form, no registration and no database behind it.

1. Server log files

When you open the site, the hosting provider’s server logs the request: IP address, timestamp, the address of the page requested, browser type. Purpose: running the site and defending it against attacks. Legal basis: legitimate interest — GDPR Article 6(1)(f) — in providing a working and secure website. Retention: per the provider’s logging schedule, at most a few weeks. We build no profile from these records and link them to nothing else.

2. Enquiries by email or phone

If you write or call, we process what you tell us about yourself: name, email address, phone number, the content of the enquiry, and whatever arises in the exchange. Purpose: answering you and quoting. Legal basis: steps taken at your request prior to entering into a contract — GDPR Article 6(1)(b) — or, for business contact, legitimate interest — Article 6(1)(f). Retention: one year after the matter is closed; if a quote was issued, until the end of the general five-year limitation period. A course registration may be kept longer where the law requires it, and we say so separately at registration.

3. Visitor analytics (Google Analytics)

Only if you accept it on the cookie banner. In that case Google Analytics 4 measures how the site is used: the pages viewed, the time and length of the visit, the referring page, the device and browser type, how fast the pages load and respond, and an approximate location at country or city level. For this Google places a random identifier in your browser and receives your IP address while measuring; Google Analytics 4 does not store IP addresses. Purpose: understanding which content is read and where the site needs improving. Legal basis: your consent — GDPR Article 6(1)(a) and Section 155(4) of the Hungarian Electronic Communications Act. Retention: at most 14 months. You can withdraw consent at any time via the “Cookie settings” link in the footer; this does not affect the lawfulness of measurement before the withdrawal. If you do not consent, the site works exactly the same, we simply do not measure.

• There is no automated decision-making and no profiling.
• You are not obliged to give us any data; without an enquiry, though, we cannot answer one.
• We send no newsletter and keep no marketing list.

We do not sell data and pass it to no one for marketing. Two service providers have technical access, as processors acting on our instructions:

• the website’s hosting provider — to the server logs,
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) — our company email runs on Google Workspace, so the emails you send us are stored there; and, if you accepted analytics, to the visitor data through Google Analytics.

Write to info@webvalto.hu. We answer within one month; if the request is complex we may extend that by up to two months, and we will tell you about the delay. Handling the request is free of charge.

• You may ask whether we process data about you and, if so, request a copy of it (GDPR Article 15).
• You may have inaccurate data corrected and incomplete data completed (Article 16).
• You may request erasure (Article 17) or restriction of processing (Article 18).
• You may object to processing based on legitimate interest (Article 21).
• If you consented to analytics, you may withdraw that consent at any time via the “Cookie settings” link in the footer (Article 7(3)).
• Where processing is based on a contract, you may request data portability (Article 20).

The website is served over an encrypted connection (HTTPS) and is static: there is no database or login behind it to attack. Enquiries stay in the company mail system, reachable only by the colleague who needs them to answer. In case of a personal data breach we act under Articles 33–34 GDPR.