Privacy notice

This site is operated by Blazsej Krisztián EV, a Hungarian sole trader (egyéni vállalkozó), who is responsible for everything described here.

Name

Blazsej Krisztián EV

Registered seat

1043 Budapest, Nyár utca 15.

Tax number

58981809-1-41

Email

info@brecon.dev

We have not appointed a data protection officer. Write to the address above with any privacy question, and send the requests listed further down to the same place.

This is the only place on the site where we ask you for anything. There is no sign-up, no user account and no newsletter subscription.

What you fill in

• Name
• Email address
• Company name — optional
• Project type, chosen from the dropdown
• Your message

Where it goes

A submission creates one row in our database, in the "Leads" list of our internal system. It holds what you typed and the time you sent it. We do not attach your IP address, a browser identifier, device data or a referring page.

Who receives it

The same submission sends two emails: a notification to our own inbox with the full content, and an automatic acknowledgement to you. Resend delivers both, so their contents pass through it.

What we do about abuse

We allow three submissions per hour from one IP address. The server keeps a counter in memory for that; it disappears on the next deployment, never reaches the database, and is used for nothing else. The form also carries a hidden field no person sees: if it is filled in, we treat the submission as a bot and do not store it.

This is the site’s second form, and it asks for more than the contact one: for your company and your sites. What you type here is stored in a separate record, and we produce an assessment from the public content of the addresses you gave us.

What you fill in

• Company name
• Contact email address
• One to three site addresses for us to look at
• Headcount band — optional
• What you do by hand today — optional
• The language you submitted the form in
• The time you gave your consent
• The submitting IP address, for the abuse counter — held only in server memory, exactly as with the contact form

What we do next

We fetch the publicly available pages of the addresses you gave us and keep excerpts from them as evidence, so every claim in the assessment can name where it came from. We honour robots.txt: if a site asks automated readers to stay out, we stay out. We request at most eight pages, one after another, at least two seconds apart, under an identifying user agent. The first draft of the assessment is written by AI, and a person reads and corrects it before it is sent.

If the site is not yours

The form asks for your own company’s sites, and the consent is about those. If an address belonging to someone else was submitted anyway, write to the address above: we will delete the stored excerpts and the assessment made from them. The assessment is only ever sent to the address given on the form — we do not collect or use email addresses found on the pages we fetch.

How long we keep it

The same as every other enquiry: there is no scheduled deletion in the system, so the request, the stored page excerpts and the assessment stay until someone deletes them by hand. Ask us and we will delete them — the request, the excerpts and the assessment together — and confirm that we have.

What it rests on

Your consent (GDPR Article 6(1)(a)), given with the tick box on the form, whose timestamp we store. Consent can be withdrawn at any time at the address above; withdrawal does not affect the lawfulness of processing before it.

We do four different things here, and they do not rest on the same basis.

• Replying to your enquiry: a step taken at your request before entering into a contract (GDPR Article 6(1)(b)).
• Keeping the enquiry in our records: legitimate interest (Article 6(1)(f)) — we need to know who we spoke to and about what. You can object to this at any time.
• Advertising and measurement cookies: your consent (Article 6(1)(a)), which is also the prior permission the ePrivacy rules require. Until you accept, none of that code loads.
• Remembering your language choice: necessary to deliver the feature you asked for, so we do not ask for separate consent.

Alongside the GDPR, Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.) applies to us.

There is no automation for this in the system, and we would rather write that down than dress it up.

No scheduled process deletes submitted enquiries. They stay in the database until someone deletes them by hand from the internal system. So we are not quoting you a retention period, because the code does not keep one.

The same applies to free AI audit requests, the page excerpts stored with them and the assessments produced: no scheduled deletion for those either, and on request we delete the whole record.

If you want your enquiry gone, write to the address above. We will delete it and confirm that we have.

What sits in your browser does expire on its own. The cookie notice lists the exact periods. Cookie notice

We use only the providers the site needs to run. For each one, this says exactly what reaches them.

Vercel Analytics and Speed Insights load from our own domain and measure our own traffic. They carry no advertising identifier and connect to no Google or Meta account, which is why they sit outside the consent banner.

Hosting, the database and email delivery are services of US-based companies. The database itself runs in London, so outside the European Union, in the United Kingdom.

For these providers, the safeguard for transfers outside the Union sits in their data processing agreement, typically in the form of the European Commission’s standard contractual clauses. Their own notices are linked above and name the safeguard each of them relies on.

You can exercise all of them at one address: info@brecon.dev.

• Access: we tell you what we hold about you and give you a copy.
• Rectification: anything wrong gets corrected.
• Erasure: we delete your enquiry from our records.
• Restriction: while something is disputed, you can ask us to store the data and stop using it.
• Objection: you can object to the record we keep on legitimate-interest grounds at any time.
• Portability: you can ask for what you gave us in a machine-readable form.
• Withdrawing consent: the yes you gave to cookies can be taken back at any time with the "Cookie settings" control in the footer, and nothing on the site gets worse for it.

We reply within one month. If you write from the address the enquiry came from, we accept that as identification — we ask for no account and no identity document.

If you think we are handling your data badly, write to us first: most of these are settled in one email. If that leads nowhere, you can go to the Hungarian data protection authority.

Address

Hungarian National Authority for Data Protection and Freedom of Information (NAIH) — 1055 Budapest, Falk Miksa utca 9-11.

Postal address

1363 Budapest, Pf. 9.

Phone

+36 (1) 391-1400

Email

ugyfelszolgalat@naih.hu

Website

https://naih.hu

You can also go to court. Proceedings may be brought before the tribunal for your place of residence or stay.

• We send no newsletter. There is no subscription, no list, and the contact form signs you up for nothing — the one automatic email is the acknowledgement of your submission.
• We do not sell data, and we hand none to a third party for advertising purposes.
• We build no profile of you and make no automated decision producing legal effects for you.
• The advertising click identifier — the Google gclid parameter, for instance — is never sent to our own server and never stored in our database. It stays in your browser, and travels from there to the ad account if you accepted.

Advertising and measurement code is switched off at the moment. No measurement id is configured, so no Google or Meta code loads and the consent banner does not appear.

Alongside the site we run an internal system that holds our projects, our invoices and the work we do with clients. It is not a visitor-facing surface — it cannot be reached without signing in, and it is blocked from search engines.

If you are a client of ours, your contact details, your project data and the files you sent us live there. The basis is performing the contract between us, and for billing data the statutory accounting obligation. You have exactly the same rights as anyone else, at the same email address.

The date at the top always shows when we last changed it. If a change touches what you consented to — we add a new measurement provider, say — your earlier consent stops counting and the banner asks again.