# Privacy notice

> This notice explains what personal data we handle on ma-co.hu, why, for how long, and what rights you have. It follows the GDPR (Regulation 2016/679) and Hungarian Act CXII of 2011.

URL: https://ma-co.hu/en/privacy
Last updated: 2026-10-31

## Controller

Márton Soma Pekli, 1121 Budapest, Evetke út 2., Hungary, pekli@ma-co.hu. We have not appointed a data protection officer; at this scale it is not required.

## What we process

- **Activity:** **Contact form**: replying to your enquiry · **Data:** name, email, company (if given), your message, page language, time of submission · **Legal basis:** GDPR Art. 6(1)(b) (steps before a contract) or (f) (legitimate interest in replying) · **Retention:** 1 year after the last contact; if it becomes a client engagement, as long as contract and accounting duties require
- **Activity:** **Notification email** about a new enquiry · **Data:** same data · **Legal basis:** same · **Retention:** same
- **Activity:** **Web server logs** · **Data:** IP address, browser type, time, requested page · **Legal basis:** GDPR Art. 6(1)(f) (security and operation) · **Retention:** 30 days
- **Activity:** **Abuse protection** (counting requests) · **Data:** IP address · **Legal basis:** GDPR Art. 6(1)(f) · **Retention:** up to 24 hours
- **Activity:** **Google Analytics 4**: only with your consent · **Data:** pseudonymous IDs, page views, clicks, approximate location, device and browser data · **Legal basis:** GDPR Art. 6(1)(a) (consent) · **Retention:** 14 months

Filling in the contact form is optional, but we cannot reply without it. We never send names, email addresses, company names or message text to Google Analytics. We do not sell your data, and we do not use automated decision-making or profiling.

## Recipients

- **Hetzner Online GmbH** (Germany, EU): hosting. Form data sits in our self-hosted system running there.
- **Apple Distribution International Ltd.** (Ireland, EU; iCloud+ Mail)
- **Google Ireland Limited** (Ireland): Google Analytics 4, only after you consent. Data may reach Google LLC in the US under the EU–US Data Privacy Framework.

We may disclose data to authorities where the law requires it.

## Cookies and similar technologies

On your first visit the site asks about cookies. Rejecting is as easy as accepting, and the site works fully if you reject.

- **Name:** `ma_consent` · **Type:** necessary · **Purpose:** remembers your cookie choice · **Lifetime:** 12 months
- **Name:** language preference (cookie or localStorage) · **Type:** necessary · **Purpose:** remembers HU/EN · **Lifetime:** 12 months
- **Name:** `ma_internal` · **Type:** necessary · **Purpose:** excludes the site operator's own visits from statistics; it is only set when the operator opens a dedicated link, visitors do not receive it · **Lifetime:** 12 months
- **Name:** `_ga`, `_ga_FYGB7E20LG` · **Type:** statistics (consent only) · **Purpose:** Google Analytics 4 visitor and session IDs · **Lifetime:** up to 2 years

Necessary cookies need no consent. Statistics cookies are not set until you accept them.

**Changing your choice:** use the "[Cookie settings](#cookie-settings)" link in the footer at any time to change or withdraw consent. Withdrawing stops measurement and deletes the `_ga` cookies. You can also delete cookies in your browser settings.

## Your rights

You can ask for access to your data, correction, erasure, restriction of processing, data portability, and you can object to processing. You can withdraw consent at any time; this does not affect processing before the withdrawal. We reply within one month.

You can complain to the Hungarian data protection authority (NAIH, 1055 Budapest, Falk Miksa utca 9–11., ugyfelszolgalat@naih.hu, naih.hu) or go to court.

## Changes

If this notice or the list of cookies changes, we update the date and version here and, where needed, ask for your consent again.