Privacy Policy

• Controller: Elatrousse Mohamed Annas E.V.
• Address: 1171 Budapest, Bögöte utca 5, Hungary
• Email: [email protected] • Phone: +36202288829

If you have concerns, you can also contact or lodge a complaint with the Hungarian Data Protection Authority (NAIH): Nemzeti Adatvédelmi és Információszabadság Hatóság, Szilágyi Erzsébet fasor 22/C, 1125 Budapest, Hungary.

• Inquiry data: name, email, phone (optional), company, project brief, budget, and any files you attach.
• Client/project data: billing details, contracts, assets, feedback, approvals, and deliverables.
• Technical data (website): IP address, device/browser info, pages viewed, and similar, primarily via necessary cookies and server logs.
• Analytics (optional): page interactions and events if you consent to non‑essential analytics cookies/tools.

• Responding to enquiries: performance of pre‑contract steps (Art. 6(1)(b) GDPR) and our legitimate interest in running our business (Art. 6(1)(f)).
• Providing services & managing projects: contract performance (Art. 6(1)(b)).
• Billing & compliance: legal obligations (e.g., tax/accounting) (Art. 6(1)(c)).
• Portfolio display of completed work: legitimate interests (Art. 6(1)(f)), balanced with confidentiality or contractual limits.
• Marketing communications: consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)) where permitted; opt‑out anytime.
• Website security and fraud prevention: legitimate interests (Art. 6(1)(f)).
• Analytics & cookies: consent (Art. 6(1)(a)) for non‑essential cookies/tools.

We use only the cookies the site needs to work: your cookie choice and Cloudflare’s security cookies. With your consent, we also use Google Analytics 4 (Google Ireland Ltd.) to count visits. It is loaded only after you allow it, and you can withdraw that anytime under “Cookie settings” at the bottom of every page.

• Strictly necessary (no consent required): byannas_cc remembers your cookie choice (6 months); Cloudflare’s __cf_bm and cf_clearance protect the site from bots.
• Analytics (consent required): _ga and _ga_ZF9TBXZ19J (2 years), set by Google only if you allow analytics. Withdrawing consent deletes them.

The cookie settings list each cookie, who sets it, how long it is kept and why.

We only share personal data when necessary:

• Service providers (processors): hosting, email, project management, cloud storage, invoicing/accounting, analytics, payment providers.
• Professional advisers: accountants, legal advisers (where needed).
• Legal/compliance: where required by law or to protect our rights.

Where providers are outside the EEA, we use appropriate safeguards (e.g., Standard Contractual Clauses) where required.

• Enquiries (no contract): up to 12 months after last interaction, then deleted unless you ask us to keep them.
• Client/project files & invoices: retained for the project life and for statutory periods (e.g., accounting records typically 8 years in Hungary) or as otherwise required by law.
• Analytics data: Google Analytics keeps visit data for no more than 14 months, the longest period it allows, and then deletes it automatically.

You can request access, rectification, erasure, restriction, data portability, and objection to processing (including objection to processing based on legitimate interests, and to direct marketing). Where processing is based on consent, you can withdraw consent at any time without affecting prior processing.

To exercise your rights, contact us at [email protected]. You also have the right to complain to NAIH: www.naih.hu.

We use reasonable technical and organisational measures (e.g., HTTPS, access controls, least‑privilege accounts, regular updates, backups) to protect personal data. No method is 100% secure; we work to prevent and promptly address any issues.

Our services are intended for adults and businesses. We do not knowingly collect personal data from children.

We may update this notice occasionally. New versions will be posted here with an updated “Last updated” date.

Questions about privacy? Email [email protected].