Privacy Policy

Effective date: June 25, 2026

1. Data Controller

2. Purpose of this Privacy Policy

The purpose of this Privacy Policy is to explain how personal data is processed when using the barnabasppc.com website. In particular, this Privacy Policy describes:

• the categories of personal data processed;
• the purpose and legal basis of the data processing;
• the retention period of personal data;
• the data processors engaged by the Data Controller;
• the rights of data subjects and the available legal remedies.

The Data Controller processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), as well as the applicable laws of Hungary.

3. Principles of Data Processing

When processing personal data, the Data Controller applies the following principles:

• lawfulness, fairness and transparency;
• purpose limitation;
• data minimisation;
• accuracy;
• storage limitation;
• appropriate security and confidentiality.

The Data Controller processes only those personal data that are necessary for achieving the specific purpose of the data processing.

4. Contact Form

The website provides a contact form through which visitors may contact the Data Controller. The following personal data may be provided via the contact form:

• name;
• e-mail address;
• telephone number (optional);
• company name (optional);
• any additional information included in the message.

The purpose of the data processing is to respond to enquiries, maintain communication, and prepare for potential business cooperation.

The legal basis for the processing is Article 6(1)(b) of the GDPR where the enquiry relates to taking steps prior to entering into a contract. In all other cases, the legal basis is the legitimate interest of the Data Controller pursuant to Article 6(1)(f) of the GDPR.

Personal data submitted through the contact form will be retained for a maximum of 12 months, unless a longer retention period is required by law or as a result of a contractual relationship.

5. Contact by E-mail

The Data Controller also processes personal data contained in enquiries sent directly to hello@barnabasppc.com.

The purpose of the data processing is to respond to enquiries, maintain business communication, and prepare for potential contractual relationships.

Personal data provided in e-mails are used solely to the extent necessary for handling the enquiry.

Personal data processed through e-mail communication are retained for a maximum of 12 months, unless a longer retention period is required by law or by a contractual relationship.

6. Technologies Used on the Website

The Data Controller uses various technological services on the barnabasppc.com website to ensure the secure operation of the website, measure its performance, and analyse the effectiveness of marketing activities.

Where required, these services are activated only after the user's consent has been obtained.

Detailed information about the technologies used on the website is provided in this Privacy Policy and in the Cookie Policy.

7. Services Used

Google Tag Manager

The website uses Google Tag Manager to manage various tracking codes and other technical tags. Google Tag Manager does not collect personal data by itself; it only enables the efficient management of the services used on the website.

Google Analytics 4

The website uses Google Analytics 4 to analyse website traffic. The analysis is used, among other things, to:

• measure the performance of the website;
• analyse visitor behaviour;
• improve the user experience;
• further develop the services provided.

Google Analytics is used only with the visitor's consent.

Google Ads Conversion Tracking

The website uses Google Ads Conversion Tracking to measure the effectiveness of advertising campaigns. This service allows the Data Controller to determine how Google Ads campaigns contribute to contact requests and other conversion events.

Google Ads Conversion Tracking is used only with the visitor's consent.

Meta Pixel

The website uses Meta Pixel to measure the performance of advertisements displayed on Meta platforms (Facebook and Instagram) and for remarketing purposes. Meta Pixel is used only with the visitor's consent.

Microsoft Clarity

The website uses Microsoft Clarity to analyse user behaviour. The service provides statistical information, including:

• clicks;
• scrolling behaviour;
• website usability.

The sole purpose of this analysis is to improve the website and enhance the user experience. Microsoft Clarity is used only with the visitor's consent.

8. Data Processors

The Data Controller engages data processors to operate the website and provide certain services. The data processors may process personal data solely on behalf of the Data Controller, in accordance with the Data Controller's instructions and the applicable legal requirements.

The main data processors used in connection with the operation of the website are:

Further information about the data processing practices of these service providers is available in their respective privacy policies.

9. Data Retention

The Data Controller retains personal data only for as long as necessary to fulfil the purpose of the data processing.

Personal data submitted through the contact form or by e-mail are retained for the duration of the communication and until the purpose of the data processing has been fulfilled.

Each January, the Data Controller reviews the personal data collected through contact requests. Personal data relating to enquiries that did not result in a business relationship and are generally older than 12 months will be deleted where their continued retention is no longer justified.

The retention periods applicable to data processed through Google Analytics, Google Ads Conversion Tracking, Meta Pixel and Microsoft Clarity are determined by the settings and data retention practices of the respective service providers.

The retention period for marketing cookies is set out in the Cookie Policy.

Where a contractual relationship is established following the initial contact, personal data will be retained for the period required to perform the contract and to comply with applicable accounting, tax and other legal obligations.

10. Rights of Data Subjects

In relation to the processing of their personal data, data subjects have the right to:

• request information about the personal data being processed;
• request access to their personal data;
• request the correction of inaccurate personal data;
• request the deletion of their personal data where the legal conditions for deletion are met;
• request the restriction of processing;
• object to the processing of their personal data where the legal basis for processing permits such objection;
• exercise their right to data portability in accordance with the GDPR.

The Data Controller will assess and respond to requests from data subjects without undue delay and within the time limits prescribed by applicable law.

11. Legal Remedies

If a data subject believes that the processing of their personal data infringes their rights, they are encouraged to contact the Data Controller using the contact details provided in this Privacy Policy.

If the matter cannot be resolved directly with the Data Controller, the data subject may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

• Registered office: 1055 Budapest, Falk Miksa utca 9–11., Hungary
• Postal address: 1363 Budapest, Pf. 9., Hungary
• Telephone: +36 (1) 391-1400
• E-mail: ugyfelszolgalat@naih.hu
• Website: https://www.naih.hu

The data subject also has the right to seek judicial remedy in accordance with the applicable legal provisions.

12. Amendments to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy. Any amended version of this Privacy Policy shall become effective on the date of its publication.