Privacy policy

Vercel Web Analytics

This website may use Vercel Web Analytics to measure basic anonymized traffic statistics. According to Vercel, this service does not use cookies and does not allow visitors to be tracked across websites or personally identified.

• Data processed: event timestamp, visited URL, dynamic path, filtered query parameters, referrer, region-level geolocation, browser and version, operating system and version, device type, and analytics script version.
• Visitor identification: instead of cookies, Vercel uses a hash created from the incoming request, which is not suitable for tracking visitors across different days or different websites.
• Purpose: anonymized traffic statistics, understanding top pages and referrers, and improving the website's operation and content.
• Legal basis: legitimate interest under GDPR Article 6(1)(f), because a basic, data-minimized understanding of website operation and traffic is necessary.
• Retention period: according to Vercel, the visitor session is not stored permanently and is automatically discarded after 24 hours; Vercel's own retention rules apply to aggregated statistics.
• Custom events: this website currently does not send Vercel Web Analytics custom events.

Data controller

This policy applies to data processing carried out on rolandgalgoczi.hu. The data controller is the person below:

Scope of this policy

This policy applies to website visitors and people using the contact form. The website does not use marketing data processing, newsletters, or profiling.

Data protection officer

The controller has not appointed a data protection officer because the nature of the website and its processing activities do not make this mandatory.

Contact form

When you use the contact form, I process the submitted data so I can respond to your inquiry and keep a record of the communication.

• Data processed: name, email address, message content, submission language, and submission time.
• Purpose: contact handling, responding to inquiries, and managing professional requests.
• Legal basis: consent under GDPR Article 6(1)(a), and legitimate interest related to responding under GDPR Article 6(1)(f).
• Retention period: up to 1 year after the inquiry is closed, unless a longer period is necessary to establish, exercise, or defend legal claims.
• Providing the data is voluntary, but without a name, email address, and message I cannot respond through the contact form.

Technical and security data

The system may process technical data to operate and protect the website, especially to prevent overload or abusive use of API endpoints.

• Data processed: IP address or a technical identifier derived from it, request time, and basic browser or device technical data.
• Purpose: website operation, troubleshooting, security, rate limiting, and abuse prevention.
• Legal basis: legitimate interest under GDPR Article 6(1)(f), because secure website operation and service protection are necessary.
• Retention period: rate limit data usually lives in application memory for up to 60 seconds; hosting provider logs follow the provider's own retention rules.

Cookies

The website only uses cookies necessary for operation. According to Vercel, Vercel Web Analytics does not use cookies. A separate cookie policy is available for the cookies used by this website.

Local storage and interface settings

The website uses browser local storage to remember technical and convenience settings. These entries are not transferred for marketing or analytics purposes.

• theme: remembers the theme selected by the user.
• rg-essential-cookie-notice-accepted: remembers acknowledgement of the cookie notice so the banner does not appear on every page load.

Processors and service providers

Third-party providers may be required to operate the website and forward emails. These providers may process data only to provide their services.

• Vercel Inc.: hosting, application runtime, technical log handling, and Vercel Web Analytics. Vercel legal and privacy information: https://vercel.com/legal
• Google / Gmail: email forwarding and automatic reply delivery when the contact form is used.

Transfers to third countries

Vercel and Google are international service providers, so data may be transferred outside the European Economic Area. In such cases, the providers apply GDPR safeguards such as standard contractual clauses.

Automated decision-making

The website does not use automated decision-making or profiling that would produce legal effects concerning visitors or similarly significantly affect them.

Data subject rights

Under the GDPR, you may exercise the following rights with the data controller.

• Right of access: you may request information about whether I process your personal data.
• Right to rectification: you may request correction of inaccurate personal data.
• Right to erasure: you may request deletion if there is no longer a lawful purpose for processing.
• Right to restriction: you may request restriction of processing in disputed or legally defined cases.
• Right to object: you may object to processing based on legitimate interest.
• Right to data portability: for consent-based processing, you may request the data in a machine-readable format.
• Withdrawal of consent: consent can be withdrawn at any time without affecting processing carried out before withdrawal.

Remedies and complaints

If you believe the processing infringes your rights, it is recommended to contact the data controller first. You may also lodge a complaint with the Hungarian supervisory authority.

• Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
• Address: 1055 Budapest, Falk Miksa utca 9-11, Hungary.
• Website: https://www.naih.hu
• Email: ugyfelszolgalat@naih.hu

Contact

For privacy questions or data subject requests, you can contact me at: roland.developer96@gmail.com.