Privacy notice.

Overview

This portfolio is operated by Kolos Káposzta in Budapest, Hungary. This notice explains how information is handled when you browse the site or contact me.

For enquiries or privacy requests, email kap.kolos@gmail.com.

Contact enquiries

When you send an enquiry, I receive the name, email address, and message you provide. The contact form requires these fields to send your message. Please do not include sensitive personal information that is unnecessary for your enquiry.

I use this information to read, respond to, and follow up on your enquiry. The legal basis is legitimate interests under Article 6(1)(f) GDPR—communicating with people who contact me—or Article 6(1)(b) when your message asks me to take steps before entering into a contract. The privacy checkbox acknowledges this notice; it is not consent to marketing.

Form messages are sent through Resend to my Gmail inbox. The website does not maintain a separate database of messages. Resend processes the message and delivery information, and Google stores the email and subsequent correspondence.

Enquiry data will normally be deleted within 12 months after the conversation ends. It may be kept longer when reasonably necessary to establish, exercise, or defend legal claims, or to comply with a legal obligation.

Spam protection and hosting

The contact form uses Vercel BotID to help distinguish people from automated requests before a message is accepted. BotID processes technical request information, such as request headers, cookies set for bot protection, browser signals, IP address, requested URL, and the protected endpoint.

Vercel hosts the website and processes technical request information, including IP addresses, requested URLs, and browser information, to deliver and secure it. Hosting and security processing is based on legitimate interests under Article 6(1)(f) GDPR: operating the website and preventing abuse.

Privacy-friendly analytics

This site uses Umami to understand aggregate use, such as visited pages, referrer, browser, operating system, device type, and approximate country. Umami does not use cookies. An IP address may be used to derive anonymous metrics but is not stored.

The legal basis is legitimate interests under Article 6(1)(f) GDPR: understanding whether the portfolio works well and improving it. Analytics data is kept only while it remains useful for comparing site trends and is reviewed at least annually.

Service providers and transfers

The selected providers are Vercel for hosting and BotID spam protection, Resend for form email delivery, Google Gmail for correspondence, and Umami Cloud for analytics.

Personal information is not sold. Providers may process information outside the European Economic Area, including in the United States. Applicable safeguards may include adequacy decisions or Standard Contractual Clauses, depending on the provider and service. You can request information about the safeguards applicable to your enquiry by emailing me.

Your rights

Depending on the circumstances, you may request access to, correction of, deletion of, or restriction of your personal information, and you may object to processing based on legitimate interests. You may also have a right to data portability. Send requests to kap.kolos@gmail.com.

No automated decisions with legal or similarly significant effects are made about you. Automated spam checks may reject a form submission; you can contact me directly by email instead. You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or another competent supervisory authority.

Changes to this notice

This notice will be updated when the contact form is connected, providers change, or the site begins processing information in a materially different way. The date at the top shows the latest revision.