Privacy

Privacynotice

What happens to your data when you write to me through the quote request form — and what this website does not do.

Who handles your data?

Controller: Széplaki Dominik
Email: szeplakidominik888@gmail.com

You can send any questions or requests about your data to this email address.

What data do I ask for?

On the quote request form you can provide the following:

Name – required.
Email address – required.
Phone number – optional.
Planned budget – optional; one of the listed ranges.
What can I help with – required; one of the listed options.
Project details – required; whatever you write about the project.

The form cannot be sent without the required fields, because I cannot reply without them. You can leave the optional ones empty.

The form also sends two hidden, technical fields: a spam trap and how long it took to fill in. I use these only to filter out spam; they are not included in the email, and I do not store them.

What do I use it for?

To reply to your enquiry, to discuss your project with you and, if you ask, to prepare a quote.

Legal basis: If you ask me for a quote for a commission you would place yourself, or we discuss one, I process your data to take steps at your request before entering into a contract (GDPR Article 6(1)(b)). If you write with a general question, or on behalf of a company, the legal basis is my legitimate interest (GDPR Article 6(1)(f)): being able to reply to the enquiries I receive and to discuss them with companies’ contact persons. Keeping your message for six months after it arrives is a separate purpose, also based on my legitimate interest (GDPR Article 6(1)(f)): if you come back to your enquiry later, I can understand the background from our earlier correspondence and we can continue the conversation. You can object to this at any time and ask me to delete your message sooner. I check the two hidden spam-filter fields on the basis of my legitimate interest in protecting my inbox from unsolicited messages.

I make no automated decisions based on your data, and I do not create a profile of you.

Where does your message go?

The website does not save the contents of the form to a database — it has no such database. When you send the form, it forwards the contents to me as a single email, through the providers below.

Resend – email delivery

The email is delivered by the Resend email service, operated by Plus Five Five, Inc. (United States), which handles the email’s data on my behalf, as a processor. I use Resend’s EU region for sending, but this does not change where the data is stored: according to Resend, it stores the content of emails and the delivery logs in the United States. On the free plan it keeps these for 30 days, while the account is active.

According to Resend’s data processing agreement, transfers to the United States are based on the standard contractual clauses adopted by the European Commission; Resend also relies on the EU–US Data Privacy Framework.

Gmail – my mailbox

The email arrives in my Gmail mailbox, where I read it and reply to it. According to Google’s privacy policy, its services are generally provided to users in the European Economic Area by Google Ireland Limited. Google operates servers in many places around the world, so data may also be processed outside the EEA. According to Google’s general information, for transfers outside the EEA it relies on adequacy decisions, the EU–US Data Privacy Framework and, where necessary, standard contractual clauses.

Hosting

Provider: Netlify, Inc. (101 2nd Street, San Francisco, CA 94105, United States)
Transfers: Netlify is a US company and may process data outside the EEA, including in the United States. According to its privacy statement, it uses — among other measures — the standard contractual clauses adopted by the European Commission for transfers outside the EEA.

The submitted form is processed by Netlify’s server-side functions (Functions). The website’s code writes to their logs only that a message was not sent, and why — not the data entered in the form. According to Netlify’s documentation, on the free plan the function logs and other observability data can be viewed in my account for the past 24 hours. That is how far back I can see them — not when Netlify deletes them.

Logging: When serving the website, Netlify receives technical data about every request — for example your IP address, the time of the request, the address of the page opened and details of your browser. This data is needed to operate and protect the website and to find faults; the legal basis is my legitimate interest in doing so (GDPR Article 6(1)(f)). What Netlify keeps of it in its own systems, and for how long, is determined by Netlify; I cannot give an exact retention period for it.

How long do I keep your data?

If your enquiry does not lead to a commission, I delete your email from my Gmail mailbox by hand six months after it arrives. If a conversation between us is still ongoing at that point and reasonably justifies it, I may keep it longer — but only for as long as the conversation requires.
A deleted email goes to Gmail’s Bin (Trash) folder, and is permanently deleted from there after 30 days, unless I permanently delete it before then.
On Resend’s free plan, the retention period for its copy of the email and for the delivery logs is 30 days, under Resend’s rules; the exact time at which each email is deleted is determined by Resend. This is independent of the six months that apply to my mailbox.

If your enquiry leads to a commission, from then on I handle your data as client data, under different rules.

I process the data needed to carry out the commission on the basis of the contract concluded with you (GDPR Article 6(1)(b)); if you are liaising on behalf of a company, I process your contact details on the basis of my legitimate interest in carrying out the commission (Article 6(1)(f)). I keep accounting and tax records — such as invoices — for the period required by law, because this is a legal obligation (GDPR Article 6(1)(c)). I keep other correspondence about the project only for as long as needed to carry out and close the commission.

What this website does not do

The website currently uses no visitor analytics and no advertising trackers, and stores no cookies or other data in your browser. It also loads its fonts from its own server, so opening it does not connect you to any other provider.

What are your rights?

Access: you can ask what data I hold about you, and request a copy of it.
Rectification: you can ask for inaccurate data to be corrected.
Erasure: you can ask for your data to be deleted.
Restriction: you can ask that, in certain cases, I only store your data and do not use it for anything else.
Objection: where the processing is based on a legitimate interest, you can object to it.
Data portability: where the conditions set out in the GDPR are met — including that the processing is based on a contract or on steps taken before entering into one (Article 6(1)(b)), and is carried out by automated means — you can ask me to provide the data you gave me in a structured, commonly used, machine-readable format.

You can send your request to the email address given in the first section. I will reply without undue delay, and within one month at the latest.

Where can you complain?

If you believe that the handling of your data infringes your rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), and you can also go to court.

Address: 1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Website: naih.hu (opens in a new tab)

According to NAIH, proceedings cannot be initiated by email.

Effective: 20 October 2026