Adatvédelmi tájékoztató

Privacy Policy

This policy explains what personal data flucite.com collects, why, on what legal basis, how long we keep it, and what you can do about it. It follows Articles 13–14 of the GDPR (Regulation (EU) 2016/679).

1. Who is the data controller

Controller
Kulás Dominik e.v.
Trading name
Flucite
Address
2700 Cegléd, Tőke utca 6., Hungary
Tax number
91988287-1-33

We have not appointed a data protection officer, as our processing activities do not meet the criteria in Article 37 of the GDPR. Data protection questions go to the e-mail address above.

2. What this policy covers

This policy applies to the website flucite.com and to enquiries you send us through it. Personal data we process while carrying out a signed development contract is governed by that contract and, where we handle data on a client's behalf, by a separate data processing agreement.

3. The contact form

When you submit the contact form, we receive the data you typed into it so that we can answer you and prepare an offer.

Data collected
Name, e-mail address, phone number (optional), project name, message
Purpose
Responding to your enquiry, providing a consultation and preparing a quote
Legal basis
GDPR Art. 6(1)(b) — steps taken at your request prior to entering into a contract
Retention
Two years from our last correspondence if no contract follows. If a contract follows, for the duration of the contract, and afterwards as long as claims can be enforced or accounting law requires (see section 7).
Consequence of not providing it
Name, e-mail, project name and message are required — without them we cannot reply. The phone number is optional.

The form is delivered to our mailbox by Formspree, Inc. The form also contains a hidden anti-spam field; it collects no information about you and only filters automated submissions.

4. Server logs

Like every web server, the server hosting this site records technical data about requests: IP address, date and time, the page requested, HTTP status, referrer and browser user agent. We use these logs to keep the site available and to detect abuse.

Purpose
Operating the site securely, diagnosing errors, preventing abuse
Legal basis
GDPR Art. 6(1)(f) — our legitimate interest in a secure and functioning website
Retention
Maximum 30 days, then automatically overwritten

5. Cookies

This site does not use analytics, advertising or tracking cookies, and it does not load third-party tracking scripts. Only strictly necessary technical storage used to deliver the site itself may be set, which does not require consent. You can delete or block cookies at any time in your browser settings.

6. Who else sees your data

We do not sell personal data and we do not share it with third parties for their own purposes. We do use the following service providers, who process data on our instructions:

Processor
Formspree, Inc.
What they do
Delivers the contact form submissions to our mailbox.
Location
United States

Our hosting provider also processes data on our behalf when it stores the site files and server logs; its details are given in the imprint.

We may also disclose data where a law, a court or a public authority requires it.

7. Transfers outside the EEA

Some of the providers listed above are established in the United States, or store data there. Such transfers take place on the basis of the European Commission's adequacy decision for the EU–US Data Privacy Framework where the provider is certified under it, or otherwise on the basis of the Commission's Standard Contractual Clauses together with supplementary safeguards. You can request a copy of the safeguards in place by writing to us.

8. How long we keep data

  • Enquiries that do not lead to a contract: two years from the last message.
  • Contract-related data: for the duration of the contract and five years afterwards, matching the general limitation period under the Hungarian Civil Code.
  • Invoices and accounting documents: eight years, as required by Section 169 of the Hungarian Accounting Act (2000. évi C. törvény).
  • Server logs: maximum 30 days.
  • Data processed on the basis of consent: until you withdraw consent.

9. Your rights

Under the GDPR you have the right to:

  • Access — ask whether we process data about you and receive a copy of it (Art. 15).
  • Rectification — have inaccurate or incomplete data corrected (Art. 16).
  • Erasure — have your data deleted where one of the grounds in Art. 17 applies.
  • Restriction — have processing limited while a dispute about accuracy or lawfulness is resolved (Art. 18).
  • Data portability — receive the data you provided in a structured, machine-readable format (Art. 20).
  • Objection — object to processing based on our legitimate interest (Art. 21).
  • Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3)).

Write to info@flucite.com to exercise any of these. We answer within one month; if a request is complex we may extend that by two further months and will tell you why. Exercising your rights is free of charge unless a request is manifestly unfounded or excessive.

10. Complaints

If you believe we handled your data unlawfully, we would like to hear from you first — most issues are resolved quickly. You also have the right to lodge a complaint with the supervisory authority or to go to court.

Authority
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address
1055 Budapest, Falk Miksa utca 9–11., Hungary

You may also bring proceedings before the court competent for your place of residence or ours.

11. Security and automated decisions

We keep personal data on access-controlled systems, transmit it over encrypted connections (HTTPS), and limit access to what is needed to answer you and deliver our work. No system is perfectly secure, but we take appropriate technical and organisational measures under Article 32 of the GDPR.

We do not make decisions about you by automated means, and we do not carry out profiling that produces legal effects concerning you.

12. Children

Our services are aimed at businesses and adults. We do not knowingly collect data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.

13. Changes to this policy

We update this policy when our processing changes. The current version always lives at this address, with the date of the last revision below.

Last updated: 2026-10-01