Privacy
Privacy notice
This notice explains which personal data QvAI Szolgáltató Kft. processes when you use qvai.hu or contact us, the purposes and legal bases for doing so, and how long the data is retained, in accordance with Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.
Effective 20 July 2026.
1. Data controller
QvAI Szolgáltató Korlátolt Felelősségű Társaság
- Registered office: 1048 Budapest, Székpatak utca 19, 2nd floor, door 5, Hungary
- Company registration number: 01-09-386418 (Company Court of the Budapest-Capital Regional Court)
- Tax number: 29307818-1-41
- Email: hello@qvai.hu
We are not required to appoint a data protection officer under Article 37 of the GDPR.
2. Which data do we process and why?
2.1. Contact form
- Data processed: name, company name (optional), email address, telephone number (optional) and the content of your message.
- Purpose: responding to the enquiry, preparing an offer and maintaining contact.
- Legal basis: Article 6(1)(b) GDPR for steps taken at your request before entering into a contract, or Article 6(1)(f) GDPR for general enquiries (legitimate interest: handling business enquiries).
- Retention: 12 months after the enquiry is closed; if a contract is entered into, the retention rules applicable to that contract apply.
When you submit the form, the data you provide is transmitted to us through Cloudflare's email-delivery service.
2.2. Appointment booking (Proton Calendar)
Following the calendar link opens a service operated by Proton AG in Switzerland. We process the booking data you provide—your name, email address and selected appointment time—to arrange the call. The legal basis is Article 6(1)(b) GDPR. Proton's own privacy notice provides further information about its processing.
2.3. Web analytics (Cloudflare Web Analytics)
We measure website traffic using the cookie-free Cloudflare Web Analytics service. It does not track visitors across websites or store device identifiers and provides aggregated, anonymous statistics. The legal basis is Article 6(1)(f) GDPR (legitimate interest: measuring website performance).
2.4. Bot protection (Cloudflare Turnstile)
The contact form is protected against automated abuse by Cloudflare Turnstile. Turnstile analyses certain technical characteristics of the browsing environment to determine whether the form is being completed by a real person. The legal basis is Article 6(1)(f) GDPR (legitimate interest: service security and preventing abuse).
2.5. Language selection
On the homepage, we use the browser's language preference and the country code inferred by Cloudflare from the request's IP address to suggest the Hungarian or English version. The country code is used transiently for this selection and is not stored by QvAI as a separate profile. We store the selected language in the functional qvai_locale cookie for up to one year so that your choice is remembered. The legal basis is Article 6(1)(f) GDPR (legitimate interest: providing the website in an appropriate language).
3. Processors and recipients
We use the following service providers when processing data:
- Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA) — website hosting through Cloudflare Workers, contact-form processing and email delivery, web analytics, bot protection and determining the request's country code. Transfers take place under the EU–US Data Privacy Framework.
- Proton AG (Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland) — appointment booking. Switzerland is covered by a European Commission adequacy decision.
We do not sell personal data or disclose it to third parties for sales or marketing purposes.
4. Your rights
Under the GDPR, you have the right to:
- request information about and access to your personal data (Article 15),
- request rectification (Article 16),
- request erasure (Article 17),
- request restriction of processing (Article 18),
- data portability (Article 20), and
- object to processing based on legitimate interests (Article 21).
Submit your request to hello@qvai.hu; we will respond no later than one month after receiving it.
5. Remedies
If you believe our processing is unlawful, please contact us first so that we can investigate and remedy the issue. You may also lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11, Hungary
Postal address: 1363 Budapest, PO Box 9, Hungary
Email: ugyfelszolgalat@naih.hu — Web: https://naih.hu
You may also seek judicial remedy before the court with jurisdiction over your place of residence or habitual residence.
6. Data security and changes to this notice
We protect data against unauthorised access, alteration and deletion through appropriate technical and organisational measures, including encrypted connections, access restrictions and logging.
We may update this notice from time to time. The version currently in force is always available on this page.