Updated 21 October 2026
1. Who is responsible for processing
Project: OKNO Budapest
Website: okno-budapest.com
Contact about personal data: [email protected].
For GDPR purposes, the controller is the person or entity that determines the purposes and means of processing the Website’s data. Cloudflare provides technical services and does not become the controller of all data merely because the Website uses its services. Depending on the product and activity, Cloudflare may process data under its own terms and privacy documentation.
2. What data may be processed
| Situation | Data that may be involved | Purpose |
|---|---|---|
| Visiting the Website | Technical request information: IP address, date and time, requested page, browser/device details, referral source, loading status and security signals, where available to the Website’s infrastructure. | Delivering pages, maintaining stability, diagnosing errors, preventing abuse and protecting the Website. |
| Cloudflare Web Analytics | Aggregated visit and page-performance metrics collected through a browser-based beacon. | To understand traffic and page performance and improve the Website. |
| Email to the contact address | The sender’s email address, name and any other details they choose to provide, the message and any attachments. | To review and respond to a Website or collaboration enquiry. |
3. Cloudflare: analytics and infrastructure
Cloudflare Web Analytics
Cloudflare Web Analytics is planned. Cloudflare describes this tool as a service that does not collect or use visitors’ personal data; its documentation also states that cookies or localStorage are not used for metrics. The analytics tool will not receive data from the Website before it is enabled.
The data processed will depend on which Cloudflare product is enabled and how it is configured. If another analytics or advertising tool is introduced instead of Web Analytics, this Policy and any visitor choice mechanisms will be updated before it is enabled.
Cloudflare delivery, hosting and security
If the Website is hosted by Cloudflare or its traffic passes through Cloudflare’s network, technical request data, including IP address and connection details, may be processed to deliver requests, protect the Website and diagnose issues. This processing is separate from Web Analytics. Logging periods, applicable terms, Cloudflare’s roles and any international transfers depend on the products and settings selected and the Cloudflare agreement.
We do not use this technical information to build advertising profiles of visitors. Current Cloudflare documents: Web Analytics overview, Cloudflare Privacy Policy and the applicable service agreements.
4. Emails and enquiries
If you email [email protected], the information you provide is used to review and respond to your enquiry. The legal basis may be taking steps at your request before entering into a possible agreement or our legitimate interest in handling incoming correspondence. Please do not send information that is not needed for your enquiry.
Emails are handled through Gmail/Google. Access to correspondence is limited to those who need it to respond. Messages are deleted once the purpose of the correspondence has been fulfilled, unless further retention is needed to protect legal rights or comply with legal obligations.
5. Cookies and similar technologies
The current version of the Website does not use advertising cookies, retargeting tools or profiling. According to Cloudflare’s documentation, Cloudflare Web Analytics does not use cookies or localStorage to collect metrics. Your browser may store technical data needed for network communication. If optional cookies or similar technologies are introduced in the future, information about them and any required choice mechanism will be provided before they are used.
6. Purposes and legal bases
- Website delivery and security, and troubleshooting — legitimate interests in keeping the Website secure and operational; certain required activities may be based on legal obligations.
- Aggregated Cloudflare Web Analytics statistics — improving the Website’s performance and content. Cloudflare states that this product itself does not collect or use visitors’ personal data.
- Responding to an email — steps taken at the sender’s request and/or our legitimate interest in handling and replying to correspondence.
7. Who may receive data
We do not sell data. Technical data may be processed by Cloudflare as a hosting, content-delivery and security provider; correspondence is handled through Gmail/Google. Data may be disclosed to competent authorities where required by law or to the extent necessary to protect rights and security.
Service providers may process data in different countries under applicable service terms and safeguards required by law. The specific products, contractual roles and processing locations should be checked against the Website’s actual configuration before this Policy is finalised and published.
8. Data retention
Correspondence is kept for as long as needed to respond and handle the related matter, then deleted unless it must be retained for legal claims or a statutory retention period. Technical logs and analytics reports are retained according to the settings and retention periods of the relevant Cloudflare services. Exact periods will be stated after the actual plan and settings are selected and checked; the Website does not set a longer period on its own.
9. Your rights
Where and to the extent provided by the GDPR, you may request access to your personal data, its correction or deletion, restriction of processing, object to processing based on legitimate interests and exercise the right to data portability where applicable. If processing is based on consent, you may withdraw it; this does not affect the lawfulness of processing before withdrawal.
Send your request to [email protected]. We will respond without undue delay and generally within one month. In complex cases provided for by the GDPR, the period may be extended by up to two further months, with an explanation of the reasons.
You may lodge a complaint with a data protection supervisory authority. In Hungary, this is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH). You may also contact the supervisory authority in the country where you usually live, work or where the alleged infringement took place.
10. Security and minors
Reasonable technical and organisational measures are used to protect the Website and enquiries. No transmission of data over the internet can be guaranteed to be completely secure.
The Website is intended for a general audience and is not directed at children. We do not knowingly ask minors to provide personal data. If you believe that a child has sent us personal information, please write to the contact address.
11. Changes and future features
This Policy will be reviewed if the Website’s features or data processing change. Before launching the Tax Navigator, payments, accounts, advertising or affiliate tools, the data required, purposes, legal bases, recipients, retention periods and users’ rights will be specified separately. This edition does not describe those features as active.
12. Contact
OKNO Budapest
okno-budapest.com
[email protected]