Privacy Policy

1) Who we are (Data Controller)

Controller: Csapó Ádám László E.V.

Registered address: 1184 Budapest, Lakatos út 5/b 4. em. 17., Hungary

Email: info@devoppy.com

Website: devoppy.com

For the purposes of the EU General Data Protection Regulation (GDPR), we determine the purposes and means of processing your personal data.

2) Scope

This Policy explains how we collect, use, store, share, secure, and otherwise process personal data of visitors and users of our website and online services.

3) What data we collect

We collect and process only the minimum data necessary, in these categories:

• Device & usage data (online identifiers): IP address (truncated or full depending on your consent settings), user-agent, pages viewed, timestamps, referrer, and basic event data (clicks, scrolls, conversions) generated via Google Tag Manager (GTM) and tags you consent to.
• Contact data (if you send it): name, email address, phone number, company, message content, and any attachments you provide through contact or quote forms.
• Transactional/contract data (if applicable): billing name, address, VAT number, and records needed to perform a contract and meet accounting/legal obligations.
• Server logs: automatically generated logs on our Rackhost VPS for security and diagnostics.

We do not collect special categories of data intentionally (GDPR Art. 9) and we do not conduct automated decision-making or profiling that produces legal or similarly significant effects.

4) How we collect data

• Directly from you: when you fill a form, request a quote, or contact us.
• Automatically: via cookies, similar technologies, and server logs when you use the site.
• From service providers: operating under our instructions (processors): e.g., hosting.

5) Purposes and legal bases

Where processing relies on consent, you can withdraw it at any time via our cookie preferences tool (see Section 9).

6) Cookies and similar technologies

We use cookies and similar technologies to operate the site and, subject to your choices, for analytics and marketing measurement.

Categories:

• Strictly necessary: required for basic site functionality and security (non-optional).
• Analytics: helps us understand traffic and performance (optional; consent-based).
• Marketing/measurement: measures campaign effectiveness (optional; consent-based).

You can change or withdraw consent at any time via the Cookie Settings link in the footer.

7) Google Tag Manager (GTM)

We use Google Tag Manager as a tag orchestration tool. GTM itself does not collect or use personal data beyond what is necessary to load tags. It loads other tags (e.g., analytics/measurement) only in accordance with your consent choices (Consent Mode). Any third-party tags that process data do so under their own privacy terms; they fire only if you have opted in.

8) Hosting and storage (Rackhost VPS)

Our website and databases are hosted on a virtual private server (VPS) at Rackhost in Hungary. Personal data you provide via the site is stored on this VPS. Access to the server and databases is restricted to authorized personnel only following the principle of least privilege.

9) Your choices

• Cookie preferences: use the Cookie Settings link to grant/withdraw consent for analytics and marketing tags at any time. Your choices take effect immediately for future events.
• Browser controls: you can set your browser to refuse or delete cookies. Some site features may rely on strictly necessary cookies to function.

10) Data sharing and recipients

We do not sell your personal data. We share data only as necessary with:

• Hosting provider (processor): Rackhost (Hungary) for secure hosting and storage.
• Tool providers loaded via GTM (processors or independent controllers): only when you consent to their tags. Examples include analytics or measurement providers.
• Professional advisors / authorities: where required by law or to protect legal rights.

All processors act on our instructions and are bound by data processing agreements. Independent controllers (e.g., some analytics providers) process data under their own privacy policies; we load their tags only with your consent.

11) International transfers

Our primary hosting is in the EEA (Hungary). If, based on your consent, a third-party tag transfers data outside the EEA (e.g., to the United States), such transfers rely on appropriate safeguards (e.g., EU Standard Contractual Clauses) implemented by that provider. You can limit such transfers by declining the relevant cookie categories.

12) Data retention

• Contact/contract data: retained for the duration of our relationship, then for the limitation period required by Hungarian law (e.g., accounting records typically 8 years under the Accounting Act, where applicable).
• Server logs: typically retained 90 days unless needed longer for security/incidents.
• Analytics/marketing event data: retained according to the third-party provider's settings; we aim to use the shortest practical retention and only where you have consented.

We delete or anonymize data when it is no longer needed for the stated purposes.

13) Security

We implement technical and organizational measures appropriate to the risk, including:

• hardened VPS with restricted SSH access and firewalling,
• role-based access control and least-privilege principles,
• encryption in transit (HTTPS/TLS) and at rest where applicable,
• regular updates, backups, and security monitoring,
• logging and incident response procedures.

14) Your rights (GDPR)

Subject to conditions and applicable law, you have the right to:

• Access your personal data,
• Rectify inaccurate or incomplete data,
• Erase data ("right to be forgotten"),
• Restrict processing,
• Object to processing based on legitimate interests,
• Data portability (for data you provided and processing based on consent/contract),
• Withdraw consent at any time (for consent-based processing).

To exercise your rights, contact us at info@devoppy.com. You also have the right to lodge a complaint with your local supervisory authority. In Hungary, this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH).

15) Children

Our services are not directed to children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us to delete it.

16) Changes to this Policy

We may update this Policy to reflect legal, technical, or business changes. Changes apply from the "Effective date" above. Material changes will be communicated on this page and, where appropriate, by additional notice.

17) Contact

Questions or requests regarding this Policy or your personal data:

Email: info@devoppy.com

Postal address: 1184 Budapest, Lakatos út 5/b 4. em. 17., Hungary