Privacy Notice

Effective: 27 May 2026

1. Data Controller

Controller: Drola Tamás (sole proprietor)
Activity: Web development and design (Obsidana web studio)
Websites: obsidana.hu / obsidana.com
Email: info@obsidana.com

2. Categories of Personal Data Processed

2.1. Contact form

When you fill in the contact form on this site, the following data is processed:

• Name — to address you personally
• Email address — for contact purposes
• Project category (service type) — to prepare a quote
• Project description — to understand the project goal

2.2. Email correspondence

If you contact me by email, the content and metadata of the messages (sender, date, subject) are processed for business communication and potential dispute resolution.

2.3. In case of project engagement

If we enter into an agreement, data required for contract and invoicing is also processed (natural person: name, address, tax ID; sole proprietor: business name, registered office, tax number).

3. Purpose and Legal Basis

• Responding to inquiries — legal basis: consent of the data subject (GDPR Art. 6(1)(a))
• Preparing a quote, project engagement — legal basis: performance of contract or pre-contract steps at your request (GDPR Art. 6(1)(b))
• Invoicing, accounting — legal basis: legal obligation (GDPR Art. 6(1)(c))

4. Retention Periods

• Unanswered / declined inquiries: deleted within 6 months of decision
• Inquiries that do not become projects: deleted within 1 year
• Contracted projects: invoicing data retained for 8 years per Hungarian accounting law
• Email correspondence: 2 years after end of active engagement

5. Data Processors

The following service providers are used as data processors:

• Mailchimp (Intuit Inc.) — storage of email and inquiry data. Privacy policy: mailchimp.com/legal/privacy
• Cloudflare, Inc. — hosting and CDN. Privacy policy: cloudflare.com/privacypolicy
• Google LLC — Google Fonts (visitor IP may be logged). Privacy policy: policies.google.com/privacy

Data processors may process data only on my instruction and may not use it for their own purposes.

6. International Transfers

Mailchimp and Cloudflare data may also be stored in the United States. Transfers occur under EU-approved safeguards (EU–US Data Privacy Framework or standard contractual clauses).

7. Your Rights Under GDPR

Under GDPR you have the following rights:

• Right of access — request information about your stored data
• Right to rectification — request correction of inaccurate data
• Right to erasure ("right to be forgotten") — request deletion of your data where no legal obligation requires retention
• Right to restriction of processing — request that your data not be used for certain purposes
• Withdraw consent — at any time; this does not affect the lawfulness of prior processing
• Right to lodge a complaint — with the supervisory authority

To exercise your rights, email info@obsidana.com. I respond within 30 days.

8. Supervisory Authority

If you believe processing breaches GDPR, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

9. Cookies

obsidana.com does not use proprietary tracking cookies. When Google Fonts load, Google servers may log the visitor's IP — this is governed by Google's privacy policy.

No analytics data is collected unless explicitly agreed within a project engagement.

10. Updates to this Notice

This notice may be updated at any time. The effective date is always shown. Material changes will be communicated by email to active engagement contacts.