Privacy Policy

Controller

• Name: Expert Planning Korlátolt Felelősségű Társaság (Expert Planning Kft.; “the company”)
• Registered seat: 1086 Budapest, Teleki László tér 24. fszt. 1A.
• Company registration number: 01-09-374832
• E-mail: contact@expertplanning.hu
• Telephone: +36 30 219 4974

Further company details are available on the Imprint page.

Categories of data processed

• Online booking (Microsoft Bookings): the data provided for the booking, typically name and e-mail address, and the chosen time slot.
• E-mail: the data contained in a message sent to contact@expertplanning.hu, typically the sender’s name, e-mail address and the message content.
• Telephone: the caller’s telephone number and the information provided during the call.
• Loading the embedded booking calendar: the booking calendar in the contact section does not load automatically; it loads only after the visitor clicks the “Load booking calendar” button below the notice. The visitor’s browser then connects directly to Microsoft’s servers, which receive the technical data needed for the connection (for example the IP address and browser data). Microsoft’s booking page then places an identifier cookie (ClientId) valid for one year in the browser, uses the browser’s local storage, and may send technical data to Microsoft’s own servers. The same happens if the visitor opens the booking calendar in a separate tab.
• Visit measurement: visit measurement is handled by Cloudflare Web Analytics, which does not use cookies or any other persistent identifier to collect usage metrics, and does not fingerprint individual visitors based on their IP address, browser identifier, or any other data.

Purpose and legal basis

Data provided when booking, by e-mail or by telephone is processed in order to arrange and hold the requested consultation and to respond to the inquiry. The legal basis is that the processing is necessary in order to take steps at the request of the data subject prior to entering into a contract (GDPR Article 6(1)(b)).

The processing involved in loading the booking calendar — the cookie placed in the browser and the technical data then transmitted to Microsoft — is based on the data subject’s consent, given by clicking the “Load booking calendar” button after reading the notice (Section 155(4) of Hungarian Act C of 2003 on Electronic Communications, and GDPR Article 6(1)(a)). The website does not remember this choice: on every visit, the visitor decides again whether to load the calendar. Consent can be withdrawn at any time by deleting the cookies and site data of Microsoft’s booking page in the browser settings; withdrawal does not affect the lawfulness of processing carried out before it. Loading the calendar is not a condition of making contact: a consultation can also be arranged by telephone or e-mail.

Data processors

• Microsoft (Microsoft 365): online booking runs on Microsoft Bookings as part of the company’s Microsoft 365 subscription, in which Microsoft acts as data processor. The company’s contact@expertplanning.hu mailbox is also operated in Microsoft 365.
• Visit-measurement (analytics) service: Cloudflare Web Analytics — Cloudflare, Inc.’s cookie-free and fingerprint-free visit-measurement service.

Cookies and local storage

The website itself sets no cookies and does not store the booking-calendar choice either; Cloudflare Web Analytics uses no cookies or other persistent identifiers. Microsoft’s cookie is placed in the browser only after the visitor has clicked the “Load booking calendar” button or opened the booking calendar in a separate tab. The booking page is Microsoft’s own service; Microsoft’s privacy statement (https://privacy.microsoft.com/) also applies to it, including the cookies and local storage it uses.

Retention period

Retention periods for data provided when making contact:

• If the inquiry does not lead to a contract: one year from the last contact, after which the company deletes the data.
• If a contract is concluded: five years from the end of the contract, because under the Hungarian Civil Code claims become time-barred after five years unless the law provides otherwise (Section 6:22(1) of the Civil Code, Ptk.).

These retention periods apply to:

• Booking: booking data stored in the company’s Microsoft 365 calendar.
• E-mail: messages stored in the company’s Microsoft 365 mailbox.
• Telephone: the caller’s telephone number and the information provided during the call.

Other data:

• Booking calendar cookie: the lifetime of the ClientId cookie placed by Microsoft is set by Microsoft; at the check on 21 September 2026 it was one year. The cookie can be deleted from the browser at any time.
• Visit-measurement (technical) data: Cloudflare Web Analytics states that it does not use cookies and does not create individually identifying fingerprints, so no personal data is generated within this service that would require an individual retention period.

Data subject rights

The data subject has the right to:

• request access to their personal data (GDPR Article 15);
• request rectification of inaccurate data (GDPR Article 16);
• request erasure of their data (GDPR Article 17);
• request restriction of processing (GDPR Article 18);
• where processing is based on consent or on a contract and is carried out by automated means, receive the data they provided in a machine-readable format and request its transmission to another controller (data portability, GDPR Article 20);
• withdraw their consent to loading the booking calendar at any time, by deleting the cookies and site data of Microsoft’s booking page in the browser.

Requests can be sent to contact@expertplanning.hu. The company responds without undue delay and in any event within one month of receiving the request (GDPR Article 12(3)).

Supervisory authority

Complaints may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH — Nemzeti Adatvédelmi és Információszabadság Hatóság).

• Address: 1055 Budapest, Falk Miksa utca 9-11, Hungary
• Postal address: 1363 Budapest, Pf. 9., Hungary
• Email: ugyfelszolgalat@naih.hu
• Website: www.naih.hu

Judicial remedy

If the data subject considers that the company has infringed their rights relating to the processing of their personal data, they may bring the matter before a court. At the data subject’s choice, the action may also be brought before the court for their place of domicile or residence.

Last updated: 21 September 2026