Last updated: October 6, 2026
Márton Donát e.v. (registered office: Hungary, 2040 Budaörs, Ibolya utca 51-53. building: A; tax number: 91557281-1-33; registration number: 61402755; EU tax number: HU91557281), operating under the trade name HYDROX (hereinafter: "we", "us", or "Service Provider") is committed to protecting your data. This Privacy Policy describes how we collect, use, and protect your personal and business data when you use our website or services. The register is maintained by the Hungarian National Tax and Customs Administration (NAV).
Information We Collect
Submitting an enquiry is voluntary. Your email address and message are needed to respond; without them we cannot handle your enquiry. Your name is optional. Chat uses the messages you send and the current page route; it does not read unsent form entries, the full page content or the full URL. You provide booking details when you open the booking calendar and select a time.
Operation and abuse prevention may require limited request metadata. Optional usage analytics start only after your analytics consent.
How We Use Your Information
We use data for the stated purposes:
- Respond to your request and prepare a proposal you ask for.
- Manage contractual matters and agreed services.
- Handle your chosen booking and chat questions.
- Usage analytics based on consent.
- Prevent abuse and respect objections to further contact.
Information Sharing and Disclosure
Functions may require processors in these categories: AI processing, email delivery, hosting and image storage, booking, and consent-based usage analytics. The data involved depend on the function you choose.
- Relevant processors may receive the data needed to provide the function.
- Disclosure to authorized authorities may be required by law.
- Proposal images are a separate case: they are uploaded publicly, not to confidential storage.
Data Security
We implement reasonable security measures to protect your personal information from unauthorized access, use, or disclosure. However, no method of transmission over the Internet or electronic storage is 100% secure.
Cookies and Similar Technologies
Necessary storage supports basic operation, preferences and security. Optional analytics start after your consent. You can change or withdraw analytics consent at any time in the footer’s cookie settings. Local chat history can be deleted separately in chat. Optional marketing cookies (Meta Pixel, TikTok Pixel, Google Ads) load only after your marketing consent and measure how our ads perform, for example a booking or a sent enquiry. You can withdraw marketing consent at any time in the footer’s cookie settings; the related cookies are then deleted.
Your Rights and Choices
Subject to the applicable conditions, you can request access, correction, deletion, restriction and portability of your data. You may object to processing based on legitimate interests and to direct marketing at any time. You can withdraw consent without affecting earlier lawful processing. Contact [email protected]. We normally respond within one month and explain any necessary extension.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. The updated version will be indicated by the updated 'Last Updated' date, and the updated version will be effective as soon as it is accessible.
Contact Us
If you have questions about this Privacy Policy, please contact us at:
[email protected]Lawful bases
Preparing a requested proposal or contract relies on GDPR Article 6(1)(b) when you are the contracting party. Business communication and abuse prevention may rely on assessed legitimate interests under Article 6(1)(f). Optional analytics rely on consent under Article 6(1)(a). Retention of legally required records may rely on Article 6(1)(c). A communication purpose and lawful basis do not automatically authorize every outreach message.
AI chat and local history
Chat history is stored on this device only if you enable “Remember chats on this device”. Otherwise it stays in temporary memory for this visit. Saved history is limited to 20 conversations with 24 messages each. Messages older than 30 days are removed when the app next becomes active; they may remain while the browser is inactive. You can delete history in chat or clear browser data. Website chat messages are forwarded through OpenRouter to an AI service to produce responses. Request settings select endpoints declaring no retention of prompt and response content and no use of it for model training. These restrictions do not exclude temporary in-memory caching or separate processing of service, security, billing or legal metadata. Avoid sending unnecessary sensitive or third-party data.
Chat processing privacy policyRetention and security data
The technical window for chat request limits is 24 hours; admin login attempts use a 15-minute window. Saved chat messages use the 30-day expiry described above, with removal when the app next becomes active. Retention of client correspondence and contractual records must be set according to the enquiry, project and applicable legal obligations; sent public proposal images have no automatic expiry.
Booking
The external booking calendar loads only when you explicitly request it. The booking service also processes the details you provide; review its privacy terms when opening the calendar.
Public proposal images
Proposal images uploaded through admin receive public URLs. Unsent draft images may be removed after 7 days of inactivity. Sent images remain public with no automatic expiry. Anyone with the link can open or share them. This is not confidential delivery: do not upload personal, confidential or unauthorized material. Copies made from public access may remain after the source is removed.
Complaints and remedies
You may complain to a competent supervisory authority, particularly in the Member State where you live or work. In Hungary: National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11; postal address: 1363 Budapest, PO Box 9; website: https://www.naih.hu. Its website provides official filing options. You may also seek a judicial remedy.
Official NAIH informationAdmin drafts and delivery records
The proposal draft stays in this browser tab’s session storage until a new draft or the end of the tab session. Sign-out clears text details; limited draft, image and submission references and a recovery cookie may remain for status checks after signing in again. Recovery cookies and draft-recovery permissions expire no later than 365 days after creation. Submission and status records expire 365 days after their last update. Minimal image-ownership references may be kept while images remain public or sending status is uncertain, so the images can be located and removed. A minimal suppression record may be retained for as long as needed to respect an objection to further contact. Public storage of sent proposal images is separate and has no automatic expiry.
Externally sourced business contacts
If personal business contact details come from a public or third-party source, we record the contact details, recipient role and country, source and its reference to assess whether contact is permitted. A response to a specific request is distinguished from marketing. Applicable rules depend on the recipient and country; a public address alone is not consent. The relevant message identifies the source and links to this notice. The email’s unsubscribe link stops further proposals to that address. You can also object or withdraw consent by replying or writing to [email protected].