This privacy policy provides information about the processing of personal data in connection with the use of the czellengreka.hu website and with contact made via the details published on the website, under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and the applicable Hungarian legislation.

1. Data controller

Name: Réka Czelleng, sole trader
Registered address: 2100 Gödöllő, Thököly Imre utca 1., Hungary
E-mail: czellengreka.terapia@gmail.com
Phone: +36 30 861 5844

The purpose of the website is to present the data controller's professional activity and services and their contact details, and to enable contact to be made.

2. Scope of this notice

This notice applies to visits to the czellengreka.hu website and to contact made via the e-mail address and phone number published on the website.

The website has:

no registration;
no contact form;
no newsletter sign-up;
no online payment;
no visitor-tracking or marketing-purpose data collection.

Should further data processing take place in the course of a subsequent consultation or therapy process, the data subjects will be informed separately, as needed.

3. Data processing related to visiting the website

The website does not use cookies, analytics systems or marketing tracking codes.

In particular, the website does not:

use Google Analytics;
use the Meta Pixel;
use advertising or remarketing systems;
carry out user profiling;
track visitors' activity on the website for marketing or statistical purposes.

Technical data

The technical hosting of the website and the assurance of its secure availability are provided with the involvement of Cloudflare, Inc.

When the website is opened, technical data necessary for establishing the internet connection, delivering the content, and ensuring the secure operation of the system may be processed within Cloudflare's systems.

Such data may include, in particular:

the IP address;
the time of the request;
the address of the page visited;
certain technical information about the browser and device;
technical data related to the operation and security of the network connection.

The data controller does not compile its own visitor database from this data and does not use it to identify or profile visitors, for marketing purposes, or to produce visitor statistics.

The sole purpose of this technical data processing is to ensure the proper, secure and reliable operation of the website.

The legal basis for this data processing is the legitimate interest under Article 6(1)(f) GDPR in operating the website securely and properly.

4. Contact by e-mail or phone

The website has no contact form.

Visitors may contact the data controller directly at the:

e-mail address; or
phone number

published on the website.

Depending on the method of contact and the data provided by the data subject, the data controller may process:

the name of the person making contact;
their e-mail address;
their phone number;
the content of the message;
and any other information voluntarily provided in the course of making contact.

The purpose of this data processing is to respond to the enquiry, to arrange appointments where relevant, to maintain contact, and to prepare for the use of the service.

Where the contact is aimed at using a service, the legal basis for the data processing is Article 6(1)(b) GDPR, namely the taking of steps at the request of the data subject prior to entering into a contract.

For other general enquiries, the legal basis for the data processing is the data controller's legitimate interest under Article 6(1)(f) GDPR in responding to enquiries received and maintaining contact.

If contact is not followed by further engagement, the data controller retains the personal data related to the enquiry for at most one year from the date of contact, unless further retention is required to comply with a legal obligation or to establish, exercise or defend a legal claim.

Special categories of personal data

Please only share health-related, psychological or other special category personal data during the first e-mail or phone contact to the extent strictly necessary for making that contact.

Should the processing of special category personal data become necessary in the course of a subsequent consultation or therapy process, the data controller will separately inform the data subject about the processing of such data and its legal basis.

5. Data transfers and access to data

The data controller does not:

sell personal data;
use personal data for advertising or marketing purposes;
use personal data for any purpose other than that of the contact;
carry out automated decision-making;
carry out profiling.

The data controller and the technical service providers it uses may access personal data only to the extent necessary to perform their services.

Personal data will otherwise only be disclosed to third parties where required by law, or pursuant to a lawful request from an authority or a court.

6. Service providers used

6.1. Cloudflare

Provider: Cloudflare, Inc.
Registered address: 101 Townsend Street, San Francisco, CA 94107, USA

Cloudflare is involved in providing the website's technical infrastructure, content delivery and secure availability.

In the course of providing the service, Cloudflare may process technical data — in particular the IP address and data related to network traffic.

Due to the operation of Cloudflare's network, personal data may also be processed outside the European Economic Area.

For such international data transfers, Cloudflare applies appropriate safeguards under the applicable data protection rules, in particular the EU–US Data Privacy Framework and, where necessary, the Standard Contractual Clauses (SCC) adopted by the European Commission.

6.2. Google / Gmail

Provider: Google Ireland Limited
Registered address: Gordon House, Barrow Street, Dublin 4, Ireland

The data controller uses the czellengreka.terapia@gmail.com e-mail address for electronic communication.

If the data subject contacts the data controller at this e-mail address, the Gmail service is involved in transmitting and storing the electronic message.

In this context, the data subject's e-mail address, the content of the message, any attachments, and certain technical information related to the electronic correspondence may be processed through Google's systems.

In the course of Google's operations, certain data processing activities may also take place outside the European Economic Area, subject to safeguards required under the applicable data protection rules.

7. Data security

The data controller applies appropriate technical and organisational measures to protect personal data, in particular from:

unauthorised access;
unauthorised alteration;
unauthorised disclosure;
deletion;
loss;
and any other unauthorised processing.

The website is available over an encrypted HTTPS connection.

The data controller restricts access to its electronic accounts with appropriate access-protection measures.

8. Rights of data subjects

Under the GDPR, the data subject is entitled to:

request information about the processing of their personal data;
request access to the personal data processed about them;
request the rectification of inaccurate personal data;
request the erasure of their personal data in the cases specified by law;
request the restriction of processing;
object to the processing of their personal data in certain cases;
and — where the legal conditions for it are met — exercise their right to data portability.

A data subject may submit a request to exercise these rights at the following e-mail address: czellengreka.terapia@gmail.com

The data controller responds to such requests without undue delay, and as a general rule within one month of receipt at the latest.

9. Remedies

If a data subject believes that the processing of their personal data infringes the applicable data protection legislation, they are entitled to lodge a complaint with the National Authority for Data Protection and Freedom of Information.

National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Website: www.naih.hu

The data subject is also entitled to bring proceedings before a court under the applicable legislation.

10. Amendment of this notice

The data controller is entitled to amend this privacy policy, in particular where the operation of the website, the service providers used, or its data processing practices change.

Should a contact form, analytics service, tracking code or cookies be introduced on the website in the future, this privacy policy will be amended accordingly.

The privacy policy in effect at any given time is available on the czellengreka.hu website.

Privacy policy