Privacy Policy

Data Controller

Name: [Cégnév]

Registered office: [Székhely cím]

Tax ID: [Adószám]

Registration: [Cégjegyzékszám]

Email: info@drage.devoppy.com

NAIH ID: [NAIH azonosító]

What data we process

For bookings: first name, last name, email, phone, billing address (country, postal code, city, county, street), optionally company name and tax ID.

User account: email, password hash (argon2id), display name, communication language.

Technical data: IP address (for country prefill and abuse prevention), User-Agent, login timestamps.

Marketing: if you subscribe to the newsletter, your email and language.

Why we process it

To fulfil your booking, invoice you, and stay in touch (contract — GDPR Art. 6(1)(b)).

To meet legal obligations — invoices retained at least 8 years (Art. 6(1)(c)).

For abuse prevention, legitimate interest (Art. 6(1)(f)).

Newsletter: only with your separate consent (Art. 6(1)(a)), revocable at any time via the unsubscribe link.

Retention

Booking data: 8 years after the booking year (accounting requirement).

User account: until you ask for deletion, or 3 years of inactivity.

Newsletter: until you unsubscribe.

Magic-link tokens: 15 minutes, then automatically invalid.

Processors

AWS (Amazon Web Services EMEA SARL) — email delivery (SES, eu-west-1).

Anthropic, PBC (USA) — AI concierge (Claude). Only when you explicitly use chat; messages are processed in the US.

OTP Mobil (SimplePay) — card payment processor.

Billingo Zrt. — e-invoicing.

Open-Meteo (Germany) — weather data, only location coordinates, no personal data.

[Hosting provider]

Cookies

We use only strictly necessary cookies (session, CSRF). Details in our Cookie notice.

Your rights

Access: request a copy of your data — export available from your account.

Rectification: edit billing data on the booking form; for anything else email us.

Erasure: trigger account deletion from your account. Invoice records remain for the statutory retention period.

Portability: machine-readable export on request.

Object, restrict, withdraw consent: email us.

Complaint: you may also contact NAIH (Hungarian Data Protection Authority).