WEBAPIX · PRIVACY
Privacy Policy
Learn what personal data we may process when you visit our website or contact us, how cookies are used, and what rights you have.
How we handle personal data on our website
This Privacy Policy explains the processing of personal data associated with enquiries submitted through the WEBAPIX website (webapix.hu), as well as its technical operation, website analytics and security.
Data controller: WEBAPIX Szoftverfejlesztő Korlátolt Felelősségű Társaság (WEBAPIX Kft.)
Registered office: 2730 Albertirsa, Kinizsi utca 77., Hungary
Hungarian tax number: 23896860-2-13
Company registration number: 13-09-225425
Privacy enquiries: support@webapix.hu
Scope: This policy covers WEBAPIX's public website. It does not, by itself, cover the processing of personal data in separate systems developed by WEBAPIX for its clients.
Last updated: 15 October 2026
When and why do we process personal data?
Different types of data and legal bases may apply when you contact us, use the website or interact with its analytics features.
Data: Your name, company name (if provided), email address, telephone number (if provided), the content of your message and any subsequent correspondence about your enquiry.
Purpose: To respond to your enquiry, discuss your requirements and, where you ask us to do so, take steps towards entering into a contract.
Legal basis: Article 6(1)(f) of the GDPR (our legitimate interest in handling incoming business enquiries) or, depending on the circumstances, Article 6(1)(b) of the GDPR (steps taken before entering into a contract).
Retention: For as long as necessary to handle your enquiry and, where applicable, to establish, exercise or defend legal claims. Specific retention periods still need to be established before this information is finalised.
Data that may be processed: IP address, time of access, pages requested, technical browser information, errors and security events.
Purpose: To keep the website running securely, investigate errors and help prevent unauthorised access and misuse.
Legal basis: Article 6(1)(f) of the GDPR (our legitimate interest in operating a secure website).
Retention: This depends on the types of logs actually collected and how the relevant systems are configured. The precise periods still need to be checked.
Technology: The website uses a Google Tag Manager container configured with Google Analytics 4 tracking.
Data that may be processed: Page views, events, visit and device characteristics, and analytics identifiers, depending on the configuration and your consent preferences.
Purpose: To understand how visitors use the website and improve it.
Legal basis: Where analytics require consent, Article 6(1)(a) of the GDPR (consent). The exact tracking behaviour and data retention periods still need to be checked against the live Google Tag Manager and Google Analytics 4 configuration.
Technology: Cloudflare Turnstile is configured to help protect our contact form.
Data that may be processed: Technical information about the request and browser, together with signals used to detect automated or abusive activity.
Purpose: To reduce automated spam, misuse and traffic that may compromise website security.
Legal basis: Article 6(1)(f) of the GDPR (our legitimate interest in keeping the service secure).
For more information, see Cloudflare's Turnstile privacy information.
Cookies and consent
The website may use storage technologies necessary for its operation and, depending on your preferences, website analytics tools. Consent is required for optional analytics processing that relies on consent.
Essential technical storage
This may include remembering your cookie preferences and storing information needed for website security and basic functionality. These technologies are not intended to create advertising profiles.
Analytics cookies
Depending on the Google Analytics 4 configuration and your choices, analytics identifiers may be stored in cookies such as _ga or ga*. The actual cookies and their expiry periods still need to be confirmed through browser testing. These examples do not mean the cookies are set for every visitor.
Google Tag Manager and Consent Mode
Google Tag Manager is used to manage measurement tags. Your consent choices must determine when consent-dependent analytics tags can run and which consent signals they receive. The precise configuration still needs to be verified in Google Tag Manager.
Changing your consent: You can change your choices or withdraw your consent later through the website's cookie settings. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Further information: How Google uses information from sites or apps that use its services.
Who may have access to your data?
Access to personal data may be limited to staff who need it for their work and to relevant technology providers. Depending on how the website is operated, these may include:
- Website and form platform provider: Providers involved in operating the Demona-based website and handling form submissions.
- Google services: Google Tag Manager and the Google Analytics 4 measurement used on the website.
- Cloudflare: The Turnstile bot-protection service.
- Email and infrastructure providers: Where they are involved in transmitting or storing enquiries or operating the website.
The providers' precise legal entities, data-protection roles, any sub-processors and the relevant data flows still need to be verified before this information is finalised. If personal data is transferred outside the European Economic Area, appropriate safeguards under Chapter V of the GDPR must be in place, and the arrangements must be described specifically.
Data retention and security
Personal data should only be processed for as long as necessary for the stated purpose, unless a legal obligation or reasons relating to legal claims require a longer retention period.
The applicable retention period may differ for contact messages, operational logs, analytics data and contract-related correspondence. Specific periods still need to be established after reviewing the relevant systems and agreements.
Our aim is to protect personal data against unauthorised access, alteration or loss through appropriate access controls, permissions and technical security measures. These measures should be proportionate to the risks involved.
Your data protection rights
You can send privacy-related requests to support@webapix.hu. The rights available to you depend on the legal basis and circumstances of the processing.
You can ask us for information about how we process your personal data and request access to that data, subject to the conditions set out in the GDPR.
You can request that inaccurate personal data be corrected or that your personal data be erased where the relevant legal conditions are met.
In certain circumstances, you can request that processing be restricted or object to processing based on legitimate interests.
Where the relevant conditions apply, you can request data portability. You may withdraw consent to processing based on your consent at any time.
If you believe your personal data has been handled unlawfully, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or seek a remedy through the courts.
Have a question about privacy?
Contact us at support@webapix.hu. Please avoid including sensitive personal information that is not necessary for your enquiry.
We may update this policy if the website's operation, integrations or data retention settings change.