Last updated: 25 November 2025
Operator: GardeVault (Nagy Dávid)
Website: https://gardevault.eu
Contact: david@gardevault.eu

1. Data Controller

The data controller responsible for this website is:

GardeVault / Nagy Dávid
Budapest, Hungary
Email: david@gardevault.eu

2. What Personal Data We Collect

We intentionally collect as little personal data as possible.

2.1. Automatically Processed Data (Server Logs)

When you visit the website, the hosting provider (tarhely.eu) automatically processes standard server logs, which may include:

• IP address
• Browser type and version
• Time and date of access
• Requested pages
• Referrer URL

Purpose: security, error diagnostics, and service continuity.
Legal basis: GDPR Art. 6(1)(f) – legitimate interest in operating a secure and stable website.
Retention: typically 7–30 days (managed by the hosting provider), unless a longer period is required for security or legal reasons.

2.2. Contact Form

If you contact us via a contact form or by email, we may process:

• Name
• Email address
• Any other information you voluntarily provide in your message

Purpose: responding to inquiries and communicating with you.
Legal basis: GDPR Art. 6(1)(b) – performance of a contract or steps taken at your request prior to entering into a contract, and/or Art. 6(1)(f) – legitimate interest in responding to inquiries.
Retention: for as long as necessary to handle your request and any follow-up, unless a longer retention period is required by law.

3. Cookies and Tracking

This website does not use marketing or advertising cookies and does not use third-party tracking pixels for profiling.

Only technically necessary cookies may be used if required for basic website functionality (for example, security or session management). These cookies do not track your behavior across other websites.

4. Analytics

By default, we aim to avoid processing personally identifiable analytics data. If web analytics solutions (for example, Google Analytics) are enabled in the future, they will be configured with privacy in mind (such as IP anonymization), and processing will be based on an appropriate legal basis under the GDPR.

5. Data Sharing

We do not sell, rent, or exchange your personal data.

Personal data may be shared only with:

• Our hosting provider (tarhely.eu)
• Email and communication service providers
• Technical service providers strictly necessary for operating this website

All processors operate under agreements that require GDPR-compliant data protection.

6. International Data Transfers

If we use services provided by companies outside the European Union (for example, certain Google services), personal data may be transferred to countries outside the EU/EEA.

In such cases, transfers are carried out only where appropriate safeguards are in place (such as Standard Contractual Clauses, adequacy decisions, or equivalent measures) in accordance with the GDPR.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of access – to obtain confirmation as to whether we process your personal data and to receive a copy of that data.
• Right to rectification – to have inaccurate or incomplete personal data corrected.
• Right to erasure (“right to be forgotten”) – to request deletion of your personal data, subject to legal retention obligations.
• Right to restriction of processing – to request that processing of your data be limited under certain conditions.
• Right to data portability – to receive personal data you have provided in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to object – to object to processing based on legitimate interests, on grounds relating to your particular situation.

To exercise any of these rights, please contact us at: david@gardevault.eu.

You also have the right to lodge a complaint with a supervisory authority. In Hungary, this is:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Website: https://www.naih.hu

8. Data Security

We use technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction. These measures include, in particular:

• HTTPS/TLS encryption of website traffic
• Server-level security controls
• Custom firewall and automated rate limiting
• Regular updates and security maintenance

Personal data is stored only for as long as necessary for the purposes described in this Privacy Notice or as required by law.

9. External Links and Third-Party Content

Our website may contain links to external websites or embed third-party content (for example, YouTube or Vimeo videos). We have no control over the privacy practices of these third parties and are not responsible for their policies or practices.

We recommend that you review the privacy notices of any third-party websites you visit.

10. Changes to This Privacy Notice

We may update this Privacy Notice from time to time in order to reflect changes in our data processing activities, legal requirements, or technical developments.

The current version of this Privacy Notice is always available on this page. Significant changes will be highlighted where appropriate.