GDPR Privacy Notice

1. Purpose of this Notice

This GDPR Privacy Notice explains how Bánki Dóra EV., operating under the brand Pawfectly Design & WEB, collects, processes, stores, and protects personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”).

This Notice applies to all visitors, prospective clients, and clients who use pawfectly.hu or communicate with us regarding our services.

2. Data Controller

3. Categories of Personal Data

Depending on your interaction with us, we may process:

Identification data

• Name
• Kennel name, where provided

Contact data

• Email address

Communication data

• Messages submitted through the contact form
• Email correspondence
• Files voluntarily provided during projects

Technical data

• IP address
• Browser information, device type, and operating system
• Website usage and referrer information
• Cookie identifiers and analytics information

4. Purposes of Processing

Your personal data may be processed for:

• Responding to enquiries and preparing quotations
• Managing customer communication
• Delivering graphic design and web development services
• Maintaining business records and website administration
• Improving user experience and website analytics
• Compliance with legal obligations
• Protection of legal claims

5. Legal Basis for Processing

We process personal data only where a lawful basis exists under Article 6 GDPR. These legal bases include:

Consent

For example, analytics cookies and optional marketing communications, if introduced. You may withdraw your consent at any time.

Contract

Processing necessary for providing requested services, preparing quotations, managing projects, and delivering completed work.

Legal obligation

Certain information may be processed to comply with Hungarian accounting regulations, tax legislation, and legal reporting obligations.

Legitimate interests

We may process personal data where necessary for legitimate business interests, including website security, fraud prevention, IT administration, responding to enquiries, and business management. Such processing is balanced against your rights and freedoms.

6. Data Recipients

Personal data may be shared only where necessary with:

• DotRoll Kft. (website hosting)
• Google (Gmail and Google Analytics)
• Government authorities where legally required
• Professional advisers, such as legal or accounting services, where applicable

We never sell personal data.

7. International Transfers

Some service providers, particularly Google, may process personal data outside the European Economic Area. Where international transfers occur, appropriate safeguards are implemented, including:

• Standard Contractual Clauses (SCCs)
• Adequacy Decisions where applicable
• Other lawful transfer mechanisms recognised under the GDPR

8. Data Retention

Personal data is retained only for as long as necessary.

Contact requests

Up to 12 months after the last communication, unless further business discussions continue.

Project communication

For the duration of the project and for a reasonable period thereafter to support customer service and resolve potential disputes.

Accounting records

As required under applicable Hungarian tax and accounting legislation.

Website analytics

According to the retention settings configured within Google Analytics.

When retention periods expire, data is securely deleted or anonymised.

9. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

10. Your Rights Under the GDPR

Right of access

Request confirmation whether your personal data is being processed and obtain a copy.

Right to rectification

Request correction of inaccurate or incomplete information.

Right to erasure

Request deletion of your personal data where applicable. This right is subject to legal obligations requiring continued retention.

Right to restrict processing

Request temporary limitation of processing in specific circumstances.

Right to data portability

Receive your personal data in a structured, commonly used, machine-readable format where applicable.

Right to object

Object to processing based on legitimate interests.

Right to withdraw consent

Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing before consent was withdrawn.

Right to lodge a complaint

You have the right to lodge a complaint with your local supervisory authority. For individuals located in Hungary:

11. Security Measures

We implement appropriate technical and organisational safeguards, including:

• Secure hosting infrastructure
• Password-protected business systems
• Secure email communication
• Access controls
• Regular software updates where applicable
• Reasonable measures to prevent unauthorised access

While we strive to protect personal data, no method of electronic transmission or storage can guarantee absolute security.

12. Data Breach Procedures

In the event of a personal data breach, we will:

• Investigate the incident promptly
• Take appropriate corrective measures
• Notify the competent supervisory authority where required by law
• Notify affected individuals where legally required

13. Cookies

Our Website uses cookies as described in our separate Cookie Policy. Analytics cookies are only used after obtaining your consent where required by applicable law.

14. Third-Party Services

Our Website currently relies on third-party providers including Google Analytics, Gmail, and DotRoll Kft. Each provider processes data according to its own privacy documentation and applicable legal obligations.

15. Children’s Data

Our services are intended for business owners and individuals seeking creative services. We do not knowingly collect personal data from children under the age of 16. If we become aware that personal data has been collected from a child without appropriate consent, we will delete it without undue delay.

16. Updates to this Notice

We may amend this GDPR Privacy Notice from time to time. The current version will always be published on this page together with the effective date. Continued use of our Website after changes become effective constitutes acknowledgement of the updated Notice.

17. Contact

If you have questions regarding this GDPR Privacy Notice or wish to exercise your GDPR rights, please contact: