Privacy Policy

Effective: from October 24, 2026 until revoked (previous version: October 4, 2026)

This privacy policy explains how we collect, use and protect personal data on webiparos.hu (the “Website”), including its English pages and the QuoteEngine demo. If anything in this English version differs from the Hungarian version, the Hungarian version prevails.

1. Who we are (data controller)

Name: Csondor Bálint e.v. (sole proprietor, trading as Webiparos)
Registered address: 1043 Budapest, Hungary
Email: info@webiparos.hu
Tax number: 91453675-1-41
Registration authority: Hungarian National Tax and Customs Administration (NAV)
Registration number: 61174003

We are based in the European Union, so the EU General Data Protection Regulation (GDPR) applies to the data we process – including data from visitors in the United States and other countries outside the EU.

2. What data we collect and why

2.1. Contact form (Formspree)

If you fill in a contact form on the Website, we process:

Data: name, email address, phone number (optional), the text of your message.
Purpose: replying to your inquiry and sending you a quote.
Legal basis: your voluntary consent (GDPR Article 6(1)(a)).

2.2. Website diagnostic test

If you run the website performance test on the Website, we process:

Data: name, email address, the URL of the website tested, technical performance metrics.
Purpose: producing the test results, sending you the detailed analysis, and professional follow-up.
Legal basis: your voluntary consent, given by starting the test (GDPR Article 6(1)(a)).
How it works: the website address you enter is sent to the Google PageSpeed Insights service to be measured (no personal data other than the address goes there). Your name and email address are stored in a Google Sheet. If you request a quote based on the analysis, your message is delivered to us by Formspree.

2.3. QuoteEngine – live demo (webiparos.hu/en/quote-engine)

In the QuoteEngine demo you can request an itemized, non-binding estimate from a fictional painting company (“Copperline Painting Co.”). When you submit the form, we process:

Data: name, email address, phone number, ZIP code, your answers to the estimate questions (e.g. home size, wall condition, color), your preferred start time and notes (if provided), the time of your request and the calculated total.
Purpose: automatically preparing the itemized estimate, emailing it to the address you provide, and contacting you about your request.
Legal basis: your voluntary consent, given by ticking the checkbox on the form (GDPR Article 6(1)(a)). You can withdraw your consent at any time by emailing info@webiparos.hu.
How it works: your details are stored in a Google Sheet, and the estimate is sent from a Webiparos Gmail account. The estimate is calculated automatically from your answers and a price list. It is for information only, is not an offer, and has no legal effect on you.
Sharing: “Copperline Painting Co.” is a fictional company, so your details are not passed on to any painting business.
Bot protection: the form is protected against abuse by Cloudflare Turnstile. To tell people and bots apart, Cloudflare processes technical data (such as IP address and browser characteristics). Legal basis: our legitimate interest in protecting the service from abuse (GDPR Article 6(1)(f)).

If a business uses QuoteEngine on its own website, that business is the controller of the data submitted there, and its own privacy policy applies. In that case Webiparos acts only as the business’s processor for the technical delivery (the request passes through the webiparos.hu server to the business’s Google Sheet) and does not store the data.

2.4. Forms on the demo pages

The forms on the Website’s industry demo pages (e.g. the climate, accounting, electrician and plumbing demos) send a real message to us through Formspree. We handle the data entered there the same way as for the contact form in section 2.1, and we do not pass it on to any third party (including the fictional companies shown).

2.5. Advertising measurement (Meta Pixel and Conversions API)

Only if you accept marketing cookies in the cookie banner:

Data: the page visited and the time of the event (e.g. page view, form submission), IP address, browser identifier (user agent). When you submit a form (contact, or a quote request after the diagnostic test), also your email address, phone number and name in SHA-256 hashed form. The original data cannot be recovered from the hash; Meta only matches it against its own user data.
How it works: the Facebook Pixel sends the event from your browser, and the Meta Conversions API sends it from our server.
Purpose: measuring the effectiveness of our advertising.
Legal basis: your consent (GDPR Article 6(1)(a)). If you decline cookies, or have not decided yet, we send no data to Meta.

2.6. Cookies and technical data

The Website uses cookies and similar technologies to work properly, to improve your experience and for statistics.

Type	Purpose	Provider	Legal basis
Strictly necessary	Basic operation of the Website.	Our own system	Legitimate interest
Security check	Filtering out bots on the QuoteEngine demo form.	Cloudflare Turnstile	Legitimate interest
Session storage (sessionStorage)	Showing a short summary of the estimate you requested in the QuoteEngine demo table. Stored only in your browser and deleted when you close the tab.	Our own system	Legitimate interest
Preferences (localStorage)	Remembering your cookie choice and, on some demo pages, your chosen language. Stored only in your browser.	Our own system	Legitimate interest
Statistics cookies	Measuring visits (anonymous).	Google Analytics	Consent
Marketing cookies	Measuring advertising (see section 2.5).	Facebook Pixel	Consent

You can change your cookie choice at any time with the “Cookie Settings” button in the Website footer.

3. Processors (who sees the data?)

We use external service providers to run the Website and its services.

Hosting and server-side functions: Vercel Inc. (Serving the Website, technical log files, IP addresses; relaying the diagnostic measurement and advertising measurement requests.)
Form delivery: Formspree Inc. (Delivering messages from the contact form, the demo page forms and the quote request after the diagnostic test.)
Statistics: Google Ireland Limited (Google Analytics 4.)
Advertising measurement: Meta Platforms Ireland Limited (Facebook Pixel and Conversions API.)
Storage and processing: Google Ireland Limited (Diagnostic test and QuoteEngine demo data in Google Sheets, processed with Google Apps Script; QuoteEngine estimates and our replies sent via Gmail; measuring the tested website address with Google PageSpeed Insights; on some demo pages fonts are loaded from Google Fonts, which passes your IP address to Google.)
Bot protection: Cloudflare, Inc. (Cloudflare Turnstile on the QuoteEngine demo form.)
Email hosting: Tárhely.Eu Szolgáltató Kft. (Running the info@webiparos.hu mailbox and mail server.)

Some of these providers (Vercel, Formspree, Cloudflare) are based in the United States. Transfers of personal data to the US take place under the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses.

4. Security

The Website is only available over an encrypted connection (HTTPS). In addition, we protect data against unauthorized access with security headers, checks and rate limits on incoming requests, bot protection, and two-factor authentication on access to our systems.

5. How long we keep data

Contact, diagnostic test and QuoteEngine demo data: for 1 year from your inquiry, test or estimate request, or until you ask us to delete it. If a business relationship is established, for the retention period required by accounting law.
Cookies: Google Analytics data is kept for 2–14 months by default.

6. Your rights

By emailing info@webiparos.hu you can at any time request:

Access: information about what data we hold about you and how we process it (GDPR Article 15).
Rectification: correction of inaccurate data (Article 16).
Erasure: deletion of your data (Article 17).
Restriction: restriction of processing (Article 18).
Portability: a machine-readable copy of the data you provided (Article 20).
Objection: to processing based on legitimate interest (Article 21).
Withdrawal of consent: at any time, without giving a reason. This does not affect the lawfulness of processing before the withdrawal.

We reply to your request within one month at the latest.

7. Complaints

You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) (Falk Miksa utca 9–11, 1055 Budapest, Hungary; www.naih.hu). If you live in another EU country, you can also contact the data protection authority there. You may also take legal action in court if your rights are infringed.

8. Contact

For any privacy question: Email: info@webiparos.hu