Last updated: 28 May 2026
This is a starting template, not legal advice. It describes how this website is built to handle data, but you should have a qualified data-protection professional review and adapt it before launch especially the retention periods, the list of processors, and any Hungarian-language version you may need for Hungarian customers.
The controller of your personal data is DeFi Consulting Kft. (“we”, “us”). For any privacy question or to exercise your rights, contact us at (email, enable JavaScript).
When you submit the contact form we collect your name, business email, company name and website (if provided), the description of what you want to solve, the options you select (your needs, budget range, and timing), and any result from the on-page calculator. We use this to reply to you, assess whether the work is a fit, and manage the conversation.
Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to an inquiry you initiated (Art. 6(1)(f)).
To keep the form free of spam and abuse we process your IP address and basic request metadata, and we use Cloudflare Turnstile to tell humans from bots. Our server keeps short-lived rate-limiting counters. When you submit the form we also store, together with your inquiry, the IP address of the submission, the device type, operating system and browser reported by your request, the approximate country (derived from your network by our CDN, Cloudflare), and the timezone reported by your browser. We use this to understand the context of an inquiry and to detect abusive or fraudulent submissions; it is retained for as long as we keep the related inquiry (see retention below). This does not involve cookies and we do not use it to track you across other websites.
Legal basis: our legitimate interest in the security and integrity of the site (Art. 6(1)(f)).
Only if you agree in the cookie banner, we use Google Analytics to understand how the site is used and the Meta (Facebook) Pixel to measure whether our ads reach the right people. These tools are not loaded at all until you opt in, and you can withdraw consent at any time (see “Cookies” below).
Legal basis: your consent (Art. 6(1)(a)).
If you sign up for our newsletter we store your name, email address and the timezone reported by your browser. We use a double opt-in: we only add you after you click the confirmation link, and we record that confirmation as proof of consent. The timezone is used solely to send emails at a sensible local hour, never for profiling. Every email has an unsubscribe link, and we delete your data on unsubscribe or request. If you reach out through the contact form, marketing follow-ups are sent only after you tick the opt-in box and confirm it the same way. Links in our emails may carry a private token so that clicking through pre-fills your name and email in the contact form, or records that you opened a resource we linked; it never logs you in and exposes nothing beyond what you already gave us.
Legal basis: your consent (Art. 6(1)(a)).
Strictly necessary cookies are always active because the site cannot work without them. Analytics and marketing cookies are set only after you opt in through the banner. You can change or withdraw your choice anytime with the button below.
| Cookie / tool | Set by | Purpose | Category | Retention |
|---|---|---|---|---|
| mt_consent | This site | Remembers your cookie choices | Necessary | 1 year |
| locale | This site | Remembers your language preference | Necessary | ~1 year |
| dk.session_token (admin) | This site | Keeps the administrator signed in to the private admin area | Necessary | Session / up to 7 days |
| __cf_bm, cf_clearance | Cloudflare | Bot and spam protection (Turnstile) on the form | Necessary (security) | 30 minutes – 1 year |
| _ga, _ga_<id> | Google Analytics | Tells visitors apart and measures usage | Analytics (consent) | Up to 2 years |
| _fbp, fr | Meta | Measures ad performance and attribution | Marketing (consent) | Up to 3 months |
You can also opt out of Google Analytics with Google’s opt-out browser add-on, and manage ad preferences in your Meta account settings.
We do not sell your data. We share it only with service providers (processors) who help us run the site, each under a data-processing agreement and only for the purposes above:
Inquiry data is stored in the European Union. Some providers (in particular Google and Meta, which run only after your consent) may process data in the United States. Where that happens, the transfer relies on the EU–U.S. Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.
We keep inquiry data for as long as needed to follow up and for a reasonable record-keeping period, then delete it, sooner if you ask. Where an engagement begins, accounting documents are retained for the period required by Hungarian law. Analytics data is retained according to the provider’s settings (typically up to 14 months).
Data is encrypted in transit (HTTPS) and at rest. The admin area requires a password plus mandatory two-factor authentication, and access is restricted by role. We apply a strict content-security policy and other hardening on every page.
Under the GDPR you have the right to:
To exercise any of these, email (email, enable JavaScript). We respond within one month.
If you believe we have mishandled your data you can lodge a complaint with the Hungarian supervisory authority:
This site is aimed at businesses and is not directed at children. We do not knowingly collect data from children.
We may update this policy as the site evolves. The date at the top shows when it last changed.