Privacy notice

Last updated:

Information under Articles 13–14 of the General Data Protection Regulation (EU) 2016/679 on how personal data is handled in connection with this website and the services behind it.

1. Controller

Controller
Pálinkás András E.V.
Seat
Petőfi utca 6, 7668 Keszü, Hungary
Register number
54304143

No data protection officer has been appointed: the activity does not involve large-scale systematic monitoring or large-scale processing of special categories of data, so Article 37 GDPR does not require one. Data protection questions go to the address above.

2. What this website processes

The site has no contact form, no user accounts, no analytics and no advertising or tracking cookies. See the cookie notice for details. What remains is what any web server necessarily records.

PurposeDataLegal basisRetention
Delivering the site; security, abuse and fault diagnosisIP address, timestamp, requested URL, HTTP status, user agent, approximate regionArt. 6(1)(f) — legitimate interest in operating a secure and functioning serviceKept by the hosting provider for a short period, typically up to 30 days

3. Getting in touch by e-mail

PurposeDataLegal basisRetention
Answering enquiries, preparing a quotationName, e-mail address, and anything else volunteered in the messageArt. 6(1)(b) — steps prior to entering into a contract; otherwise Art. 6(1)(f) — legitimate interest in answering enquiriesDeleted within 1 year if no engagement follows; otherwise kept for the duration of the engagement

Sending an e-mail is voluntary. Please do not include passwords, access keys or other credentials in a first message — if an engagement starts, a safer channel is agreed for those.

4. Clients, contracts and invoicing

PurposeDataLegal basisRetention
Performing the contract, project communicationContact person's name, e-mail, phone, role; correspondenceArt. 6(1)(b) — performance of a contract; for a corporate client's staff, Art. 6(1)(f)5 years from the end of the engagement (limitation period, Ptk. 6:22 §)
Issuing invoices, bookkeeping, tax obligationsBilling name and address, tax number, bank details, invoice contentArt. 6(1)(c) — legal obligation8 years (Act C of 2000 on accounting, Section 169)

Where work is carried out on a client's own systems and personal data of the client's users is touched in the process, that processing is done on the client's instructions as a processor, under a separate agreement compliant with Article 28 GDPR.

5. Processors

Personal data is not sold, and is not shared for anyone else's marketing. The following processors act on our instructions:

ProcessorPurposeLocationTransfer safeguard
Vercel Inc.Hosting and delivery of the website; server logs.United StatesEU–U.S. Data Privacy Framework and/or EU Standard Contractual Clauses.
Zoho Corporation B.V.E-mail service for the buildsnap.dev domain.Netherlands (EU)Within the EEA.
Bookkeeping and invoicing providerBookkeeping and invoicing (accountant and invoicing software).Hungary (EU)Within the EEA.

Beyond these, data may be disclosed to public authorities where a legal obligation requires it, and to legal counsel or debt-collection agents if a claim has to be enforced.

6. Transfers outside the EEA

The website is hosted by Vercel Inc. (United States). This means server logs and page delivery may involve processing outside the European Economic Area. Such transfers rely on the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (Articles 45–46 GDPR). Hosting is served from European edge locations where available.

7. Security

  • The site is served over HTTPS only; plain HTTP is redirected.
  • Access to mail and hosting accounts is protected by strong, unique passwords and two-factor authentication.
  • Client credentials are never stored in plain text and never travel by e-mail.
  • A personal data breach likely to result in a risk to data subjects is reported to the supervisory authority within 72 hours under Article 33 GDPR.

8. Your rights

Under Articles 15–22 GDPR you may request:

  • access to your personal data and a copy of it;
  • rectification of inaccurate data and completion of incomplete data;
  • erasure, where there is no longer a legal ground or obligation to keep the data;
  • restriction of processing while a dispute over accuracy or lawfulness is resolved;
  • portability of data you provided, in a structured, machine-readable format;
  • objection to processing based on legitimate interest, at any time.

Requests go to support@buildsnap.dev and are answered within one month, free of charge. Where identity cannot be established from the request itself, further confirmation may be asked for — no more than is necessary.

9. Remedies

If you believe your data is handled unlawfully, please raise it with us first — most issues are settled fastest that way. You may also lodge a complaint with the supervisory authority or go to court:

Authority
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address
1055 Budapest, Falk Miksa utca 9–11.
Postal address
1363 Budapest, Pf. 9.
Phone
+36 1 391 1400

A civil claim may be brought before the tribunal (törvényszék) of your place of residence or stay, or of the controller's seat, under Section 23 of Act CXII of 2011.

10. Automated decision-making

No automated decision-making or profiling within the meaning of Article 22 GDPR takes place. Nothing on this site scores, ranks or segments visitors.

11. Changes

This notice may be updated as the service changes. The current version is always published here; the date above shows when it took effect. The version in force when your data was collected is available on request.