Privacy Policy

Effective date: 16 October 2025
Where we operate: Hungary (EU)

1) Who we are (Data Controller)

Controller: Benjámin Szőnyi (private individual)
Contact email: management@carphusbandry.com
Postal address: HU 8636 Balatonszemes, Ady Endre street 4., Hungary

We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Hungarian law.

2) What this policy covers

This policy explains what data we collect, why we collect it, how long we keep it, who we share it with, and what rights you have when using carphusbandry.com (the “Site”).

3) The data we process, purposes, legal bases & retention

a) Website operation & security (server logs)

• Data: IP address, date/time, URL visited, referrer, user-agent, error/diagnostic logs.
• Purpose: run the Site, ensure security, prevent abuse, diagnose issues.
• Legal basis: our legitimate interests in operating a secure, reliable website.
• Retention: 12 months (longer only if needed to investigate incidents).

b) Cookies & analytics (Google Analytics 4)

• Data: first-party identifiers (G-ZFW1YEL07P, GT-PL9DCDHX), device/browser info, pages viewed, session metrics.
• Purpose: measure and improve Site performance and content.
• Legal basis: consent (analytics cookies load only if you opt in via our banner).
• Retention: GA4 user- and event-level data retained for 14 months.

Note on cookie lifetimes: actual cookie lifetimes can vary by browser, settings, and updates. See the Cookie Settings panel for the current list.

c) Newsletter (Mailchimp) — double opt-in enabled

• Data: email address (and optionally name), subscription time, consent record, unsubscribe status; basic engagement metrics (e.g., opens/clicks) to measure deliverability.
• Purpose: send the newsletter you requested; manage subscriptions.
• Legal basis: consent (unsubscribe anytime via the link in each email).
• Retention: until you unsubscribe, then we keep a suppression record for up to 24 months to avoid re-mailing you by mistake.

d) Contacting us

• Data: your name, email, location of your lake, and message content (plus anything you choose to send).
• Purpose: handle and respond to enquiries.
• Legal basis: legitimate interests (responding to your request).
• Retention: 12 months after we close your enquiry.

e) Consent records (CookieYes)

• Data: consent ID, consent status, timestamp, country, proof of consent captured by our banner.
• Purpose: demonstrate GDPR-compliant consent for non-essential cookies.
• Retention: kept as long as necessary to demonstrate compliance (typically 14–24 months).

We do not intentionally collect special-category data. Please avoid sending sensitive information in free-text forms.

4) Cookies — what we use and how to control them

We use a consent banner (CookieYes, English language). Analytics are OFF by default until you opt in. You can change your mind anytime via Cookie Settings on the Site.

Typical analytics cookies (if you consent):

• _ga — distinguishes users.
• _ga_<container-id> — maintains session state.
  (Other GA4 cookies may appear from time to time. Check Cookie Settings for the latest list, purposes, and lifetimes.)

You can also block/delete cookies in your browser settings. Disabling certain cookies may affect Site functionality.

5) Who processes your data (recipients/processors)

We share personal data only with trusted service providers acting as processors under GDPR-compliant contracts:

• Hosting & infrastructure: Rackhost Zrt. — data center in Hungary (EU).
• Email/newsletter: Mailchimp (Intuit).
• Consent management: CookieYes (records cookie consents).

We do not sell personal data.

6) International data transfers

If a provider processes data outside the EEA (e.g., Mailchimp in the United States), we rely on Standard Contractual Clauses and/or other lawful transfer mechanisms, plus additional safeguards where required.

7) Security

We protect data in transit using HTTPS and limit personal-data access to personnel who need it for the purposes described above. Our Site is hosted by Rackhost Zrt. in Hungary.

8) Your rights

Subject to conditions and exemptions under GDPR, you can:

• access your data; rectify inaccuracies; erase data;
• restrict or object to processing;
• port data;
• withdraw consent at any time (for consent-based processing).

To exercise your rights, email management@carphusbandry.com.

You also have the right to lodge a complaint with the Hungarian Supervisory Authority (NAIH — National Authority for Data Protection and Freedom of Information): see https://www.naih.hu/ and ugyfelszolgalat@naih.hu for contact options and up-to-date guidance on accepted languages.

9) Changes to this policy

We may update this policy. Significant changes will be posted here with a new effective date.

Cookie Summary (quick view)