Privacy

Privacy notice

Last updated: 5 September 2026

1. Controller and contact

The operator of this website and the controller of the website-enquiry and web-analytics processing described here is VYVERNA / Máté Csicsó. For privacy questions or data-subject requests, contact hello@vyverna.hu.

2. Website enquiries

The HU and EN website-enquiry forms collect your name, business or brand name, email address, an optional current website URL, and the business result you want the website to support. We use these details to assess and answer your request, keep the resulting enquiry record, and take steps at your request before a possible contract under Article 6(1)(b) GDPR. An enquiry is not marketing consent and does not itself create an order or payment obligation.

Form submissions are stored in Moxie and processed for VYVERNA by Struxture Technologies, Inc. (doing business as Moxie). Moxie uses documented cloud subprocessors and its DPA provides the applicable transfer safeguards, including standard contractual clauses where required. Embedded reCAPTCHA is enabled to protect the form against spam and abuse.

We keep an enquiry only while it is needed to assess and answer it, manage any resulting client relationship, or establish, exercise, or defend legal claims. If the enquiry becomes a project, the relevant information follows the project-record retention rules; otherwise it is deleted or anonymised when those purposes no longer apply.

3. What we measure and why

After consent, we use Google Analytics 4 to understand how people find and use the website. The purpose is to improve the content, user journey, technical quality, and campaign effectiveness.

  • visited page and URL, timestamp, and session-related identifiers;
  • referring page, campaign data, and UTM parameters;
  • country, region, city, and approximate latitude and longitude associated with city-level geolocation;
  • device category, brand, model and marketing name, browser and User-Agent including the minor version, operating system or platform and its minor version, and screen resolution;
  • scrolling and outbound-link clicks.

We do not send form-field contents, names, email addresses, or telephone numbers to Analytics. Automatic masking for email addresses and typical personal URL parameters is enabled. Automatic form-interaction measurement is disabled.

4. Legal basis and consent

Web analytics is based on voluntary consent under Article 6(1)(a) GDPR. Google Analytics and Google Tag Manager do not load until you select “Allow analytics”. Rejection is equally accessible, and the website remains usable without analytics.

Your choice, its timestamp, and the notice version are stored in your browser's local storage. The choice is valid for 180 days. On the first later visit after expiry, the stored entry is removed and we ask again. You can withdraw consent at any time.

5. Service providers, recipients, and transfers

Analytics provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google may use its own subprocessors and process data outside the EEA subject to the applicable safeguards, including an adequacy decision or standard contractual clauses. See the Google Privacy Policy for details.

The website is hosted by Framer B.V. Framer's built-in, cookieless aggregate statistics may operate as part of the hosting service; we do not use them to create personal visitor profiles.

6. Retention and privacy limits

GA4 event and user data is retained for 14 months, and that period does not restart on new activity. Google Signals, User-ID, advertising personalisation, and Google Ads linking are disabled. For EEA traffic, Google uses the IP address only to derive approximate geographical data and then discards it before logging; VYVERNA does not receive the IP address in GA4 reports.

7. Your rights

You may request access, rectification, erasure, restriction, or, where applicable, portability, and may withdraw consent at any time. Send requests to hello@vyverna.hu. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

The measured data is not used for automated decision-making that produces legal or similarly significant effects.