This notice explains what personal data Corevanix Kft. processes when operating the corevanix.com website and handling enquiries, for what purposes and on which legal basis, for how long, and what rights you have. It is based on Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
1. Controller and contact details
- Controller: Corevanix Korlátolt Felelősségű Társaság (Corevanix Kft.)
- Registered office: 1043 Budapest, Dugonics utca 11., Hungary
- Company registration number: 01 09 450281 (Company Registry Court of the Budapest-Capital Regional Court)
- Tax number: 32935035-2-41
- Representative: Vilmos Csobánci, managing director
- Privacy contact: adatvedelem@corevanix.com
Corevanix Kft. is not required to appoint a data protection officer under Article 37 GDPR; privacy requests are handled by the representative at the address above.
2. What personal data we collect
2.1 Consultation booking (booking form)
When you request a consultation through the calendar on this website, you provide and we process:
- name
- e-mail address
- phone number
- company name
- your message (a short description of the project or question)
- the selected date and time slot
Submitting the form sends an e-mail to the Corevanix Kft. mailbox. Providing the data is voluntary but necessary for us to handle your request.
2.2 Cookies and local storage
- Functional: your light/dark theme preference is stored in your browser's local storage (localStorage, key "theme"). It never leaves your device and cannot identify you.
- Strictly necessary cookie (NEXT_LOCALE): the website is multilingual; the code of the language you choose (hu, en or de) is kept in a first-party session cookie that is deleted when you close your browser. It cannot identify you, is not used for tracking and requires no consent.
- Analytics: Vercel Analytics produces page-view statistics. It sets no cookies, stores no persistent identifier and does not store your IP address; a non-reversible hash that expires within a day is derived from it. Individual visitors cannot be identified from this data.
2.3 Automatically collected technical data
While serving the website, the hosting provider (Vercel Inc.) keeps technical logs that may include the IP address, request time, requested page, browser type and referring page. We use these solely to operate the service securely, troubleshoot problems and prevent abuse (for example attacks).
3. Purpose and legal basis of processing
| Processing | Purpose | Legal basis |
|---|---|---|
| Booking form | Contact, scheduling a consultation, preparing a proposal | Steps prior to entering into a contract at your request — Art. 6(1)(b) GDPR |
| Vercel Analytics | Aggregated measurement of website usage, improving content and performance | Legitimate interest of the controller — Art. 6(1)(f) GDPR. As no cookie or identifying data is stored, prior consent is not required. |
| Functional local storage (theme) | Remembering your preference | Strictly necessary for a service you explicitly requested — Art. 5(3) ePrivacy Directive, Art. 6(1)(f) GDPR |
| Server logs | Operational security, troubleshooting, abuse prevention | Legitimate interest of the controller — Art. 6(1)(f) GDPR |
We have carried out a legitimate-interest assessment for the processing based on Art. 6(1)(f); a summary is available on request.
4. Retention periods
- Booking form data: up to 2 years from the enquiry, or as long as the business interest continues. If a contract is concluded, the data is further processed for the duration of the contract and the statutory accounting retention period (8 years under the Hungarian Accounting Act).
- Analytics data: in aggregated, non-identifying form for up to 24 months.
- Server logs: according to the hosting provider's settings, typically up to 30 days.
- Theme preference: on your device until you clear your browser data.
5. Recipients and processors
We do not share personal data with third parties, except for the processors below that we use to operate the service. They act solely on our instructions under a contract in accordance with Article 28 GDPR:
- Vercel Inc. (340 S Lemon Ave #4133, Walnut, CA 91789, USA) — hosting, delivery, Vercel Analytics and Speed Insights. Transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and on Standard Contractual Clauses.
- Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA) — delivery of the notification e-mail sent from the booking form. Transfers rely on Standard Contractual Clauses.
- Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA) — DNS and network security services where involved in serving the domain. Cloudflare is a certified participant of the EU–US Data Privacy Framework.
We disclose data to public authorities only where required by law.
6. Your rights (Articles 15–22 GDPR)
- Access: you may ask whether we process your personal data and request a copy.
- Rectification: you may ask us to correct inaccurate data or complete incomplete data.
- Erasure ("right to be forgotten"): you may ask us to delete your data where it is no longer needed or where you have objected.
- Restriction: you may ask us to restrict processing, for example while the accuracy of the data is contested.
- Data portability: you may receive data processed by automated means on a contractual basis in a structured, machine-readable format.
- Objection: you may object at any time, on grounds relating to your particular situation, to processing based on legitimate interest.
Send your request to adatvedelem@corevanix.com. We respond without undue delay and within one month at the latest; where necessary this may be extended by two further months, of which we will inform you. We do not carry out automated decision-making or profiling.
If you believe the processing of your data infringes the GDPR, you may lodge a complaint with the supervisory authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11.; postal address: 1363 Budapest, Pf. 9.; e-mail: ugyfelszolgalat@naih.hu; https://www.naih.hu. You may also bring the matter before a court, including the regional court of your place of residence.
7. Security measures
- The website is available only over encrypted connections (HTTPS, TLS); HSTS prevents unencrypted access.
- We apply a strict Content Security Policy and further security headers (X-Frame-Options, Referrer-Policy, Permissions-Policy).
- Form data is validated on the server as well, and e-mail is sent server-side only, with an authenticated API key.
- Software dependencies are updated regularly; security fixes are prioritised.
- Access to mailboxes and provider dashboards is protected by multi-factor authentication and limited to the necessary minimum.
8. Cookies
The website uses no tracking, marketing or advertising cookies and no third-party tracking scripts. The data stored locally are the theme preference (localStorage) and the strictly necessary NEXT_LOCALE session cookie holding the chosen language; traffic is measured with the cookie-free, IP-anonymised Vercel Analytics service. Details are in the Cookie policy.
9. Changes to this notice
We may update this notice when the legal environment or our processing practices change. The current version is always available on this page, and the date of the last update is shown at the top. In the event of a material change we will also notify affected persons at the e-mail address they provided.
10. Contact
Questions and requests regarding data processing can be sent to adatvedelem@corevanix.com or by post to Corevanix Kft., 1043 Budapest, Dugonics utca 11., Hungary.