Privacy Notice

1. Who is the data controller?

The data controller for information submitted through the contact form is the operator of the 2035.cf website.

Data controller: OurOffset Nonprofit LLC.

Registered address: 9600 Sárvár, Alkotmány utca 69., I. emelet 8., Hungary.

Company registration number: 18-09-114028.

Tax number: 26796123-1-18; EU VAT number: HU26796123.

Authorised representative: Rampasek László.

Privacy / general contact: [email protected]; contact for enquiries submitted through the form: [email protected].

This notice describes the specific processing associated with the 2035.cf contact form and should be read consistently with the privacy information and data protection principles published on OurOffset’s official website. OurOffset’s official website: ouroffset.com.

2. Purpose of processing

We use the information to answer questions submitted through the contact form, handle the enquiry, and continue any related discussion. The selected topic helps us route the enquiry appropriately. This notice should be read alongside the privacy information available on OurOffset’s official website; this page sets out the specific processing details for the 2035.cf form.

We do not use information submitted through the form to send marketing messages unrelated to responding to the enquiry.

3. What information do we process?

• Name: to communicate with you and address our response.
• Email address: to send a reply.
• Organisation or company: if voluntarily provided, to understand the context of the enquiry.
• Enquiry topic: to classify the enquiry.
• Message: to understand and answer the question.
• Technical data: depending on configuration, IP address, timestamp, and security or diagnostic log data.

Please do not submit special-category personal data, passwords, payment details, or confidential information that is not necessary for your enquiry.

4. Legal basis for processing

Depending on the nature of the enquiry, the legal basis may be Article 6(1)(b) GDPR where the enquiry relates to steps taken before entering into a contract, or Article 6(1)(f) GDPR (legitimate interests) when responding to general information or business enquiries.

Preventing abuse and maintaining service security may also be based on legitimate interests, subject to balancing the rights and interests of individuals.

The form checkbox records acknowledgement of the privacy notice and the declaration required to handle the enquiry. The checkbox does not automatically make all processing consent-based; the applicable legal basis must be determined according to the purpose and circumstances of each processing activity.

5. Retention period

We retain correspondence relating to an enquiry for as long as necessary to answer the question and conclude any related discussion. If the enquiry gives rise to contractual or legal obligations, we may retain the information for as long as necessary to fulfil those obligations.

Correspondence that is no longer necessary is deleted or, where feasible and appropriate, anonymised. The retention period for technical logs depends on the hosting provider’s configuration and security needs.

6. Recipients and processors

Under the current email configuration, the recipient is [email protected], a copy is sent to [email protected], and a blind copy is sent to [email protected] .

The hosting provider and any service involved in email transmission may technically access certain information while operating the service. The operator should verify the actual providers, their roles as processors, and the applicable contractual terms.

The visitor’s email address is used as the reply-to address. The technical sender address is: [email protected].

7. International data transfers

Depending on the service providers’ infrastructure, data may be transferred to or accessed from outside the European Economic Area. This cannot be determined with certainty without knowing the actual providers and data storage locations.

If data are transferred to a third country, the controller must ensure an appropriate legal basis and safeguards under Chapter V of the GDPR.

8. Data security

The form may use server-side validation, a session-bound CSRF token, a hidden honeypot field, length and email-address validation, and submission limits. These measures reduce certain abuse risks but do not guarantee complete security.

The operator should restrict access to hosting, mailboxes, and security logs, and keep software up to date.

9. Your rights

Subject to the conditions set out in the GDPR, you may have the right to:

• request information and access to your personal data;
• request rectification of inaccurate data;
• request erasure of your data where the conditions are met;
• request restriction of processing;
• object to processing based on legitimate interests;
• exercise the right to data portability where applicable;
• lodge a complaint with a supervisory authority or seek a judicial remedy.

You may submit a request to [email protected] We will respond within the time limits set by the GDPR. If necessary, we may request additional information to verify your identity.

Hungarian supervisory authority

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
www.naih.hu

10. Cookies and other technologies

This notice primarily covers processing associated with the contact form. The website’s actual cookies, analytics tools, external fonts, and embedded content should be inventoried separately, with additional information or a consent mechanism provided where required.

The PHP session may use a session identifier cookie for CSRF protection. The actual hosting configuration should be checked and this notice updated accordingly.

11. Changes to this notice

We may update this notice if the form, processing purposes, recipients, service providers, or legal requirements change. The current version will be available on this page, and its update date appears at the beginning of the document.