Privacy policy

1. Who is responsible for your data

hellen-design ("the Studio", "I") is the data controller for the personal data described here. Address: Csokonai Vitéz Mihály utca 1B, 4450 Tiszalök, Hungary. Email for privacy requests: support@hellen-design.com. Phone: +36 70 746 8527.

2. What data I collect, why, and on what legal basis

• Enquiries. If you use the contact form, your email app opens with a message ready to send. I receive what you choose to send, usually your name, email address, phone number, company and message. I use it to reply. Legal basis: steps taken at your request before a contract (Article 6(1)(b) GDPR) and, for general questions, my legitimate interest in answering you (Article 6(1)(f)).
• Orders. If you check out, the order summary (your name, email, phone, company, billing address, tax number if you give one, project brief and the items) is stored in your browser and sent to me when you email the order. I use it to confirm and perform the contract, to invoice you and to keep accounting records. Legal basis: contract (Article 6(1)(b)) and legal obligation (Article 6(1)(c)).
• Demo payment. Card details entered in the demo payment form are not stored, logged or sent anywhere. Only the last four digits appear on the confirmation page.
• Analytics. Only if you accept analytics, Google Analytics 4 collects how you use the site (pages viewed, approximate location, device and browser) through cookies. Legal basis: your consent (Article 6(1)(a)). You can withdraw it at any time in Cookie settings.
• Essential storage. Your cart, your cookie choice and the latest order summary are kept in your browser so the site works. They don't identify you to me.
• Server logs. The hosting provider may keep technical logs (IP address, time, page) for security and operation. Legal basis: legitimate interest (Article 6(1)(f)).

3. How long I keep it

Enquiries: until the matter is closed, and no longer than 12 months after the last message, unless they lead to a contract. Order and invoice data: 8 years, as Hungarian accounting law requires. Analytics data: according to the retention setting in my Google Analytics account, no longer than 14 months. Cookie and cart data: in your browser until you delete it or until it expires.

4. Who receives your data

My email provider, my hosting provider and, if you accept analytics, Google Ireland Limited (Google Analytics). My accountant receives invoice data where necessary. I do not sell personal data. Google may transfer data outside the European Economic Area under the EU-US Data Privacy Framework or standard contractual clauses.

5. Your rights

You may ask for access to your data, correction, deletion, restriction, a portable copy, or object to processing based on legitimate interest. Where processing relies on consent, you can withdraw it at any time without affecting earlier processing. Write to support@hellen-design.com and I will reply within one month.

6. Complaints

You may complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), https://naih.hu. You may also bring a claim before the courts.

7. Children

The site is for businesses and adults. It is not directed at children under 16.

8. Changes

If this policy changes in a meaningful way, I update the date above.