Privacy Policy

AImpress – Lukács Stubán (sole trader)  ·  Effective: 1 December 2025

1. Data Controller Details

2. Legal Basis, Purpose and Duration of Data Processing

2.1 Consultation Booking (questionnaire / contact form)

Data processed: full name, email address, phone number, subject of enquiry, and any other data provided in the form.

Legal basis: the data subject's voluntary consent (GDPR Article 6(1)(a)), and the data controller's legitimate interest in processing the request (GDPR Article 6(1)(f)).

Purpose: The enquirer books a personal slot for a free consultation. The data is used to (i) send a confirmation email regarding the booking, (ii) make contact at the agreed time, and (iii) make the necessary preparations for the consultation.

Retention period: 1 year from the date the consultation takes place or the enquirer withdraws, or until the data subject requests deletion — whichever is earlier.

2.2 Contracted Clients' Data

Data processed: billing name / company name, registered address, tax number, contact person's name and contact details, bank account number (for payment purposes).

Legal basis: performance of a contract (GDPR Article 6(1)(b)); compliance with a legal obligation (GDPR Article 6(1)(c) — accounting obligations under the Accounting Act and the VAT Act).

Retention period: 8 years from the date of invoice issuance, in accordance with the Accounting Act.

2.3 Automated Marketing Communications (GoHighLevel system)

After submitting the form, the data subject's information is entered into the GoHighLevel (GHL) CRM system. Within this system, the following actions may occur automatically:

• a confirmation email is sent confirming the successful booking;
• a reminder notification may be sent prior to the appointment;
• the data controller may also contact the enquirer manually.

Data is used for marketing purposes (e.g. newsletters, promotional offers) only with the data subject's separate, explicit consent. Consent may be withdrawn at any time.

3. Data Processors

The data controller engages the following data processors to achieve the purposes of data processing:

Data processors do not carry out independent data processing activities; they process data solely on the instructions of the data controller.

4. Rights of Data Subjects

Under Articles 15–22 of the GDPR, data subjects have the following rights:

• Right of access: you may request information about the data we hold about you.
• Right to rectification: you may request the correction of inaccurate data.
• Right to erasure ("right to be forgotten"): you may request the deletion of your data if the legal basis for processing has ceased to exist.
• Right to restriction of processing: under certain conditions, you may request the suspension of data processing.
• Right to data portability: you may receive your data in a structured, machine-readable format.
• Right to object: where processing is based on legitimate interests, you may object to the processing.
• Right to withdraw consent: where processing is based on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

To exercise your rights, please contact us at [email protected]. We will respond to your request within 30 days.

5. Complaints and Remedies

If you believe that the processing of your data does not comply with legal requirements, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

Data subjects may also seek judicial remedy to enforce their rights.

6. Cookies

The website may use cookies to improve user experience and to compile visitor statistics. Detailed information about cookie usage can be found in the website's Cookie Policy. For cookies that require consent, the data subject may grant or withdraw consent in advance via browser settings or the website's cookie management interface.

7. Data Security

The data controller applies appropriate technical and organisational measures to protect data against unauthorised access, alteration, disclosure, deletion, destruction, or accidental loss and damage. These measures include encrypted data transmission (SSL/TLS), strong password protection, access controls, and regular security reviews.

8. Amendments to This Policy

The data controller reserves the right to amend this Privacy Policy at any time. Data subjects will be notified of any amendments via a notice published on the website. Continued use of the website within 15 days of the publication of the amended policy constitutes acceptance of the changes.