Privacy Policy

1. Data controller

Name: Óvári Csaba e.v.
Registered office: Tótkomlós, Balogh Ádám út 13.
Registration number: 58249857
Tax number: 44484811-1-24
Email: ai-oktatas@csabaovari.hu

This policy is based on the GDPR (EU Regulation 2016/679) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Infotv.), and describes how we handle the personal data you provide, or that arises, while using this website (ai-oktatas.hu).

2. Contact form (/kapcsolat)

Data handled: name, email address, message text.

Purpose of processing: responding to your inquiry and preparing an individual quote.

Legal basis: steps taken prior to entering into a contract (GDPR Art. 6(1)(b)), or, if no contract is concluded, legitimate interest (GDPR Art. 6(1)(f)) — our interest in responding to your inquiry.

Retention period: 1 year from responding to your inquiry, or from the closure of any related offer/contract process, after which we delete it. (This retention period is our own decision and may be adjusted if needed.)

Data processor: to protect the form against spam, we use Cloudflare Turnstile (Cloudflare, Inc., USA) — at the moment of submission, it processes technical data (e.g. IP address) to filter out abuse.

3. Minors' data

The inquiry form for our training programs aimed at children and young people is filled in by an adult: a parent, guardian, or school contact person. We do not request or expect any data from the child, and we do not offer our services directly to children. As a result, processing based on a child's own consent under GDPR Article 8 does not apply here.

Data handled: the same as described in Section 2 (the submitting adult's name, email address, and message text). If the message includes information about a minor, it is provided by the parent, guardian, or school. Please only include what's needed for the quote — in practice, that means the child's age group or school year. Please don't include the child's name, school, health information, or other special category data in the message.

Legal basis and retention period: the same as described in Section 2 — steps taken prior to entering into a contract (GDPR Art. 6(1)(b)), or legitimate interest (GDPR Art. 6(1)(f)), with a retention period of 1 year.

Exercising the minor's rights: the data subject rights listed in Section 6 may be exercised on the minor's behalf by their legal representative.

What we don't do: we don't carry out profiling, we don't send newsletters, and we don't show advertising targeted at children.

4. Cookies

This website does not use analytics, profiling, or advertising cookies, and does not embed any third-party tracking code. The only data stored in your browser's localStorage is the fact that you've seen the cookie notice — this storage is necessary for the service to function (legal basis: legitimate interest, GDPR Art. 6(1)(f)). You can bring the notice back up at any time via the "Cookie notice" link in the footer.

• Necessary storage: the fact that the cookie notice has been shown (localStorage, not a third-party cookie).
• Form protection: when Cloudflare Turnstile is active, it may process data that is technically necessary to filter out abusive submissions — see Section 2.

If we introduce traffic analytics in the future, we'll do so based on prior consent (GDPR Art. 6(1)(a)), and we'll update this policy beforehand.

5. Hosting and domain provider

This website is hosted on servers operated by Vercel Inc. (440 N Barranca Avenue #4133, Covina, CA 91723, USA); the domain is registered by Rackhost Zrt. (6722 Szeged, Tisza Lajos körút 41.). The hosting provider may record visitors' IP addresses and request timestamps at a technical level (in server logs) to provide and secure the service — we do not access this data to identify individual visitors.

Since Vercel Inc. is a data processor based in the United States, data transfers take place under the safeguards provided by the EU-US Data Privacy Framework and/or Standard Contractual Clauses.

6. Your rights as a data subject

Under the GDPR, you can request:

• access to your personal data,
• rectification, if it's inaccurate,
• erasure (the "right to be forgotten"),
• restriction of processing,
• objection to the processing,
• data portability, and
• withdrawal of consent at any time (this does not affect the lawfulness of processing carried out before the withdrawal).

For any of these, write to ai-oktatas@csabaovari.hu .

7. Remedies

You can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

1055 Budapest, Falk Miksa utca 9-11. · Mailing address: 1363 Budapest, Pf. 9.
Phone: +36-1-391-1400 · Email: ugyfelszolgalat@naih.hu · naih.hu

You can also enforce your rights in court, before the tribunal with jurisdiction over your place of residence or registered seat.

8. Changes to this policy

We update this policy from time to time as required by changes to the website or the legal environment. The current version in effect is always available on this page.