This notice explains how I handle the personal data you provide on the hempa.hu website and when contacting me.
Budai András, sole proprietor (trading as Hempa)
Registered address: 6900 Makó, Fűtő utca 30., Hungary
Tax number: 67958553-1-26
Email: [email protected]
Phone: +36 30 333 3930
Contact form. Name, email address, the subject and text of your inquiry. Purpose: answering your inquiry and providing a quote. Legal basis: your consent and steps prior to entering into a contract (GDPR Article 6(1)(a) and (b)). The data you enter in the form reaches me by email and may also be stored in the website's database.
Inquiries by phone and email. The data needed for the inquiry (name, contact details, content of the inquiry). Legal basis: same as above.
System messages (email log). The website logs the recipient, subject and delivery status of emails it sends (for example form notifications) for 14 days for troubleshooting. Legal basis: legitimate interest (Article 6(1)(f)).
Security log. The website is protected by a security plugin (Wordfence), which may log visitors' IP addresses and login attempts. Legal basis: legitimate interest, protecting the website (Article 6(1)(f)).
Traffic filtering and acceleration (Cloudflare). The website is served through Cloudflare, which processes visitors' IP addresses and technical request data to ward off attacks and serve pages quickly. Legal basis: legitimate interest (Article 6(1)(f)).
Form and login protection (Cloudflare Turnstile). I use Cloudflare Turnstile to protect the form and login against spam and bots; in the process, your browser's technical data (for example the IP address) is sent to Cloudflare. Legal basis: legitimate interest (Article 6(1)(f)).
Contracts and invoicing. If you place an order with me, I process the data needed for the contract and invoicing (name, address, tax number). Legal basis: performance of a contract and legal obligation (Article 6(1)(b) and (c)).
I do not sell your data and do not pass it on for marketing purposes. I use the following service providers:
The website loads its fonts from its own server and does not load Google Fonts. Transfers to the United States take place on the basis of appropriate safeguards applied by the providers (for example standard contractual clauses, data privacy framework).
The website does not use marketing or analytics cookies and does not place its own cookies in visitors' browsers. Cloudflare's security service may place a technical cookie needed to maintain security (for example cf_clearance) when it asks the browser for a check. The Turnstile check shown on the form loads Cloudflare's script. When you click external links on the website (for example my LinkedIn profile), the linked service's own privacy rules apply.
You may request access to your personal data, rectification or erasure, request restriction of processing, object to processing, and request data portability. You can withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal. You can submit your request at [email protected] and I will reply within one month at the latest.
If you believe the processing of your data violates the law, you can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9-11, 1055 Budapest, Hungary, www.naih.hu), or turn to a court.
Last updated: October 18, 2026
