Privacy Policy & Legal Notice

Who we are and company details

What we collect and how

• Enquiries. When you send the contact form: your name, work email, organisation if you give it, the enquiry type and your message.
• Hosting. Cloudflare serves this site. To deliver a page it processes your IP address and traffic routing data.
• Fonts. The pages load their fonts from Bunny Fonts, which receives your IP address to deliver the files. Bunny Fonts states that it keeps no logs and does no tracking.
• Spam protection. The enquiry form is protected by Cloudflare Turnstile, which checks that the submission comes from a person and not a program. It receives your IP address and signals about your browser, and it sets cookies that record the check has been passed. Cloudflare states that it does not use Turnstile data to track visitors or to build profiles.

The site runs no analytics, sets no cookies of its own, and uses no cookies for advertising. The only cookies are the ones Cloudflare's verification check described above sets.

Why we use it, and the legal basis

• Enquiries: to answer you. We do not add you to a mailing list.
• Hosting, fonts and spam protection: to deliver the website and keep it secure.

The legal basis is our legitimate interests, GDPR Article 6(1)(f).

Our legitimate interests

• Answering business enquiries about our product.
• Delivering the website and keeping it secure.

Who receives it

• Formspree, Inc. delivers the form submission to us.
• Cloudflare, Inc. hosts the site and runs the enquiry form’s verification check.
• BunnyWay d.o.o. serves the fonts.

We do not sell personal data, and we do not use it for marketing.

Transfers outside the EU

Cloudflare and Formspree are companies in the United States and process data there.

• Cloudflare is certified under the EU–U.S. Data Privacy Framework and uses standard contractual clauses where the framework does not apply.
• Formspree relies on standard contractual clauses.

BunnyWay d.o.o., which serves the fonts, is a company in the EU.

How long we keep it

We keep enquiries for two years, then delete them.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have it corrected
• have it erased
• restrict how we use it
• object to our use of it
• receive it in a portable format

To use a right, submit a request through the enquiry form, send an email to the address disclosed above, or write to our registered office address. We answer within one month.

Consent

We do not rely on your consent for any processing described here, so there is no consent to withdraw.

Complaints

You can lodge a complaint with the Hungarian Data Protection Authority (Nemzeti Adatvédelmi és Információszabadság Hatóság — NAIH; 1055 Budapest, Falk Miksa utca 9–11., postal address: 1363 Budapest, Pf. 9., naih.hu), or with the data protection authority of the EU member state where you live or work.

Do you have to provide personal data

No law or contract requires it. Without a name and a working email address we cannot answer an enquiry.

Automated decisions

We make no automated decisions about you and do no profiling.

Changes to this policy

We publish every change on this page and update the date at the top.