Privacy
What we process — and what we don't.
1 · Controller and scope
The controller is Klein Consulting & Invest Kft., 1105 Budapest, Nyitra utca 3. Fsz. 1. ajtó. This notice covers the website consulting-invest.com and the advisory services we provide. It is based on Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011.
2 · Definitions
Personal data means any information relating to an identified or identifiable person. Processing means any operation performed on such data. The controller determines purposes and means; a processor acts on the controller's instructions. The data subject is the person the data relates to.
3 · Principles
We process personal data lawfully, fairly and transparently; for specified purposes only; limited to what is necessary; accurately; no longer than needed; and in a manner that ensures security and confidentiality.
4 · Purposes, legal bases and retention
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Operating and securing the website | IP address, timestamp, page requested, browser type | Art. 6(1)(f) — legitimate interest | up to 30 days |
| Answering enquiries | Name, e-mail, content of the message | Art. 6(1)(b) — pre-contractual steps | up to 12 months |
| Delivering the advisory service | Contract and billing data, authorised account data | Art. 6(1)(b) — contract | term of contract + statutory periods |
| Statutory record keeping | Invoices and accounting records | Art. 6(1)(c) — legal obligation | 8 years (Hungarian law) |
5 · Cookies
This website sets no cookies, uses no analytics, tracking or advertising tools, and loads nothing from third-party servers. That is why there is no consent banner — there is nothing to consent to.
6 · Processors
For website operation: Websupport Magyarország Kft., 1119 Budapest, Fehérvári út 97–99. (hosting). For e-mail: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (Google Workspace). Data processing agreements are in place with both. There are no other recipients; we do not sell data.
7 · Retention
Server logs: up to 30 days. Enquiries that do not lead to an engagement: up to 12 months. Records from advisory engagements: after the contract ends, in line with tax and accounting retention periods (8 years in Hungary). Credentials for client accounts: deleted immediately once the authorisation ends.
8 · Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection; you may withdraw consent at any time. An informal message is enough. We respond within one month; in exceptional cases this may be extended by up to two months, and we will tell you if it is.
9 · Security
The website is served exclusively over an encrypted connection (HTTPS). Credentials for third-party accounts are stored encrypted, and access is limited to the people who need it to deliver the service. Data belonging to different clients is kept separate.
10 · Personal data breaches
If a personal data breach occurs, we notify the supervisory authority without undue delay and at the latest within 72 hours. Where the breach is likely to result in a high risk to individuals, we also inform them without undue delay.
11 · Complaints and remedies
You may complain to us or to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11., ugyfelszolgalat@naih.hu. You also have the right to a judicial remedy.
The Hungarian version of this page prevails — the supervisory authority is the Hungarian NAIH.