Privacy Policy

Who we are

For the purposes of data-protection law, the controller responsible for your personal data is:

Petraformed° - Petra Juhász
Kishegyesi út 24 4/12
4031 Debrecen, Hungary
VAT / tax number: HU91215464
Email: contact@petraformed.com

We are a small, founder-led studio and are not required to appoint a Data Protection Officer. For any question about your data, use the contact details above.

What this policy covers

This policy covers personal data we handle as a controller - that is, data collected through this website and in the course of running our own business (enquiries, correspondence, marketing).

When we are engaged by a client to manage their social-media accounts or audiences, we act as a processor on that client's instructions. That processing is governed by a separate agreement with the client, who is the controller for it, and is not covered by this website policy.

Data we collect & why

When you contact us

You can reach us by email or through the contact form on this site. Our contact form is provided through Google Forms; when you submit it, your responses - your name, email address, and anything you write - are sent to us and received in our Gmail / Google Workspace mailbox. We use this information solely to respond and, where relevant, to take steps toward a possible working relationship.

Server logs

Like almost all websites, our hosting provider (Cloudflare) automatically records technical data when the site is accessed - including IP address, browser and device type, the pages requested, and the date and time. This is used to operate the site securely and reliably, and to diagnose problems.

Analytics & tracking

We use no analytics, advertising, or tracking technologies on this site. We do not build profiles of visitors or follow you across other websites.

Legal bases

Under the GDPR, we rely on the following bases:

• Steps toward a contract (Art. 6(1)(b)) and our legitimate interest (Art. 6(1)(f)) in responding - for handling enquiries and correspondence.
• Legitimate interest (Art. 6(1)(f)) - for keeping the site secure and operational (server logs) and for presenting it correctly (web fonts), where our interest does not override your rights.

Cookies & similar technologies

This site sets no non-essential cookies and runs no analytics or advertising trackers. Because nothing on the site stores or reads information on your device beyond what is strictly necessary to display the page, no cookie-consent banner is required.

If we ever introduce analytics or embedded content that sets cookies, we will first ask for your consent through a banner where refusing is as easy as accepting, and this section - or a separate Cookie Policy - will list each cookie, its purpose and its lifespan.

Third-party services

We rely on a small number of trusted providers to run this site. Each processes data only as needed to provide its service:

• Hosting (Cloudflare) - this site is hosted and delivered by Cloudflare, Inc. (USA), which operates a global edge network. Cloudflare processes technical and security logs on our behalf as a processor under a data-processing agreement.
• Google Forms & Gmail - our contact form runs on Google Forms and enquiries are received in a Gmail / Google Workspace mailbox, both provided by Google LLC (USA). Google processes this enquiry data on our behalf.
• Google Fonts - this site loads its typefaces from Google Fonts. When a page loads, the fonts are requested from Google's servers, which means your IP address is transmitted to Google LLC (USA) to deliver them. Google does not use this to set cookies for the fonts, and we do not use it to identify you. See the transfer safeguard in section 07.
• Social platforms - our site links out to our profiles on Instagram and LinkedIn. Following those links takes you to services with their own privacy policies. We do not embed feeds, pixels, or tracking content from them on this site.

International transfers

Some of our providers process data outside the European Economic Area. Where they do, the transfer is protected by an appropriate safeguard - an adequacy decision, Standard Contractual Clauses, or the EU-US Data Privacy Framework (DPF).

• Cloudflare, Inc. (USA) - hosts and delivers the site and processes edge and security logs, under Cloudflare's data-processing addendum with Standard Contractual Clauses.
• Google LLC (USA) - receives your IP address to deliver Google Fonts, and processes contact-form submissions and enquiry emails (Google Forms, Gmail). Google is certified under the EU-US Data Privacy Framework.

How long we keep data

We keep personal data only as long as needed for the purpose it was collected. Enquiry correspondence is kept while the conversation is active and for up to 24 months afterwards, then deleted from our mailbox, unless it becomes part of a client engagement with its own retention terms. Server and security logs are retained by Cloudflare for a short period (typically up to 30 days) and then discarded.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we process it;
• receive your data in a portable format;
• withdraw consent at any time, where processing is based on consent.

To exercise any of these, email contact@petraformed.com. We respond within one month.

Complaints

If you believe we have handled your data improperly, we would like the chance to put it right - please contact us first. You also have the right to lodge a complaint with a data-protection supervisory authority. In Hungary, this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH - National Authority for Data Protection and Freedom of Information), 1055 Budapest, Falk Miksa utca 9-11 - naih.hu.

Children

This site and our services are directed at businesses and are not intended for children. We do not knowingly collect personal data from children.

Data security

We apply reasonable technical and organisational measures to protect personal data - including encrypted (HTTPS) transport, access control, and working only with reputable providers. No method of transmission over the internet is ever completely secure, but we take care to keep your data safe.

Changes to this policy

As the studio grows, this policy may change. When it does, we update the effective date at the top. Material changes will be made clear on this page.

Contact

Questions about this policy or your data are always welcome at contact@petraformed.com.