Privacy policy
This policy explains what personal data we process when you use flowproject.hu, why, on what legal basis and for how long, who can access it, and what your rights are. The site is operated in line with the EU General Data Protection Regulation (GDPR) and Hungarian data protection law.
Data controller
- NameFlowProject Kft.
- Registered office1131 Budapest, Kucsma utca 41–43. 2/8., Hungary
- Company reg. no.01-09-443556
- Tax no.32805550-2-41
- Represented bySzabolcs Gáll, managing director
- Emailhello@flowproject.hu
- Phone+36 30 710 5407
What we process, why and for how long
| When | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Contact form | name, email address, company (if given), message, selected topics, the page you wrote from | answering your enquiry, preparing an offer · steps taken at your request before a contract (GDPR Art. 6(1)(b)) | 1 year after the enquiry is closed; if it leads to a contract, for the period required by the contract and accounting law |
| Spam protection on the form | IP address, browser characteristics (Cloudflare Turnstile), number of submissions from the IP address | filtering abuse and automated spam · legitimate interest (Art. 6(1)(f)) | the submission counter for 10 minutes; Turnstile data is handled by Cloudflare under its own policy |
| Requests via an AI assistant (e.g. ChatGPT, Claude) | name, email address, website or company, keywords, message, chosen service, the assistant's identifier and IP address | preparing the audit, answering your enquiry · steps at your request before a contract (Art. 6(1)(b)); abuse filtering is a legitimate interest (Art. 6(1)(f)) | as for the contact form; abuse counters for 1 day |
| Analytics | pseudonymous identifier, pages viewed, device and browser type, approximate location | understanding and improving how the site is used · only with your consent (Art. 6(1)(a)) | up to 14 months |
| Server logs | IP address, time, requested URL, browser | secure operation of the site, troubleshooting · legitimate interest (Art. 6(1)(f)) | 14 days |
| Cookie choice | your choice (which categories you allowed) and when you made it | remembering and evidencing your choice · legal obligation (Art. 6(1)(c)) | 12 months |
Cookies
Apart from strictly necessary cookies, we set no cookies until you give consent in the cookie banner. You can change your choice at any time via in the footer.
| Cookie | Category | Purpose | Expiry |
|---|---|---|---|
cookie_consent | necessary | stores your cookie choice | 12 months |
_ga, _ga_* | analytics | Google Analytics 4: distinguishing visitors, measuring sessions | 2 years |
If you request an audit or a quote through the FlowProject app in an AI assistant (for example ChatGPT or Claude), the assistant sends us the details at your request and with your confirmation, via the flowproject.hu/mcp endpoint. The assistant's provider handles the conversation under its own privacy policy; we only receive the fields sent to us, and we send you no automatic email.
Cloudflare Turnstile spam protection runs from challenges.cloudflare.com; Cloudflare’s privacy policy covers the data it uses. We currently use no marketing cookies; if we introduce any, they will only run with your consent.
Who can access the data (processors)
- DigitalOcean, LLC – hosting (server in Frankfurt, Germany).
- Google Ireland Ltd. / Google LLC – email (Google Workspace: form messages arrive here), Google Analytics 4, Google Tag Manager. Fonts are served from our own server, with no request to Google.
- Cloudflare, Inc. – DNS and Turnstile spam protection.
The US parent companies of Google and Cloudflare participate in the EU–US Data Privacy Framework, which makes transfers outside the EU lawful. We do not sell your data or share it with third parties for marketing.
Your rights
- request information about, and a copy of, the data we hold about you;
- request correction of inaccurate data, or erasure of your data;
- request restriction of processing, and object to processing based on legitimate interest;
- receive the data you provided in a machine-readable format (portability);
- withdraw your consent at any time, without affecting the lawfulness of earlier processing.
Send your request to hello@flowproject.hu; we reply within one month at the latest.
Complaints
If you believe we have infringed your data protection rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; ugyfelszolgalat@naih.hu; naih.hu) or go to court. Please write to us first; we may be able to resolve it quickly.
Changes
If our data processing changes, we update this policy; the current version is always available on this page.