1. The data controller
Name: István Tóth · Website: itoth.hu · Contact for data protection matters: istvan@itoth.hu. This website is the personal professional presence of a private individual; there is no profiling or automated decision-making.
2. Purpose and scope
The website has no registration, no contact form, and no newsletter; contact takes place through an external channel (LinkedIn). The website uses no database; the content is file-based.
3. Data processed
Server logs (hosting): IP address, time of the request, the page visited, browser and operating system type. Purpose: secure operation and troubleshooting. Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)). Retention: typically a few months.
Web analytics (Google Analytics 4): activated only with explicit consent given in the cookie bar, alongside Google Consent Mode v2. Data: pseudonymous identifier, device and browser data, pages viewed, approximate location. Purpose: traffic measurement and improvement. Legal basis: consent (GDPR Art. 6(1)(a)). Retention: typically up to 14 months, until consent is withdrawn.
4. Cookies
Strictly necessary cookie: remembering the cookie choice (legitimate interest). Analytics cookie (Google Analytics, e.g. _ga): traffic measurement (based on consent). Strictly necessary cookies do not require consent; all other cookies are activated only with consent.
5. Giving and withdrawing consent
In the cookie bar shown on the first visit, analytics cookies can be accepted or declined. The choice can be changed at any time by re-opening the cookie settings or via the browser settings. Withdrawal does not affect the lawfulness of prior processing.
6. Processors and recipients
Hosting provider: Rackhost Zrt. (serving the website, server logs). Web analytics: Google Ireland Limited / Google LLC (Google Analytics). In the course of Google's processing, data may be transferred outside the EEA (USA); safeguards are provided by the EU–US Data Privacy Framework and the Standard Contractual Clauses (SCC).
7. Data security
The controller and the processors protect the data with reasonable organizational and technical measures (including an encrypted HTTPS connection) against unauthorized access and use.
8. Your rights
Visitors have the right of access, rectification, erasure, restriction of processing, objection, data portability, and withdrawal of consent. The controller responds to requests within one month at the latest.
9. Remedies
In case of a complaint, you may contact the controller, the supervisory authority, or a court. Supervisory authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 (1) 391-1400; email: ugyfelszolgalat@naih.hu; web: naih.hu.
10. External links and amendments
The website may contain links to external sites (for example LinkedIn); the respective provider is responsible for their data processing. The controller reserves the right to amend this notice; the current version is available on the website.