Privacy notice

The purpose of this privacy notice is to set out transparently how I handle the personal data of those who contact me and of my clients, in line with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

This is an English translation provided for convenience. In case of any discrepancy, the Hungarian version prevails.

1. Details of the data controller

Name: Dénes Zombori
Registered address: Karacs Ferenc utca 20/a, 4031 Debrecen, Hungary
Email: info@zomboridenes.hu

(hereinafter: the Controller)

2. Principles of data processing

The Controller processes personal data lawfully, fairly and transparently, solely for specified purposes, to the extent necessary to achieve those purposes, and with appropriate security in place.

3. Categories of personal data processed

The following categories of data may be processed:

• identifying data (name),
• contact data (email address, phone number),
• information provided during contact and collaboration,
• notes and agreements created during the coaching process,
• technical data: IP address (used only for the technical operation of the form, without separate analysis).

The Controller does not request and does not process special categories of personal data.

4. Purpose and legal basis of processing

Purpose of processing	Legal basis
Handling enquiries and initial contact	GDPR Article 6(1)(a) – consent of the data subject
Providing coaching services	GDPR Article 6(1)(b) – performance of a contract
Invoicing and administration	GDPR Article 6(1)(c) – legal obligation
Handling legal disputes	GDPR Article 6(1)(f) – legitimate interest

The Controller's legitimate interest is the enforcement of its rights and the prevention of misuse.

5. Method and location of processing

Data is collected:

• through the form on the website (the data arrives by email),
• during email communication,
• during in-person meetings and coaching sessions.

Data is stored:

• solely in Google Drive storage accessible to the Controller,
• in an email account,
• on paper (where relevant).

The Controller does not use any external CRM, marketing or automated data processing system.

6. Processors and data transfers

The Controller does not transfer data to third parties.

Google Drive is used as a storage service. Google LLC qualifies as a processor and applies appropriate data protection safeguards (EU–US Data Privacy Framework / standard contractual clauses).

7. Data retention periods

• data relating to initial contact: for 1 year from the last contact,
• data relating to a contractual collaboration: for 5 years from the end of the collaboration,
• accounting documents: for the period required by law.

8. Rights of data subjects

The data subject has the right to:

• request information about the processing of their personal data,
• request access to the data processed,
• request its rectification,
• request its erasure or the restriction of its processing,
• object to the processing,
• request data portability,
• withdraw their consent at any time.

The Controller responds to such requests within 30 days at the latest.

9. Remedies

If the data subject considers that the processing does not comply with the law, they are entitled to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

Address: Falk Miksa utca 9–11, 1055 Budapest, Hungary
Web: www.naih.hu

10. Automated decision-making

The Controller does not use automated decision-making or profiling.

11. Amendments to this notice

The Controller is entitled to amend this notice unilaterally. Amendments take effect upon publication.