Privacy Policy
Data Controller
Name: Regcytech Kft. Registered address: 2654 Romhány, Batthyány utca 48 Email: hello@regcytech.com
Purpose of Processing
This website serves informational and marketing purposes. Personal data is processed only when you submit the contact form or send a direct enquiry to the email address listed on this site.
Data Collected
Data collected via the contact form: name, email address, phone number (optional), message content. This website does not currently use analytics or marketing cookies.
Legal Basis
Processing is based on your voluntary consent (GDPR Art. 6(1)(a)) and the legitimate interest of the controller in handling business enquiries (GDPR Art. 6(1)(f)).
Retention Period
Contact messages are retained for 2 (two) years from the date the enquiry is closed, after which personal data is deleted.
Processors
We engage the following categories of data processors: web hosting provider, email delivery service. Processors operate within the European Economic Area or in third countries recognised as providing an adequate level of data protection.
Your Rights
You have the right to: (a) access your personal data (GDPR Art. 15); (b) rectification (GDPR Art. 16); (c) erasure (GDPR Art. 17); (d) restriction of processing (GDPR Art. 18); (e) data portability (GDPR Art. 20); (f) object to processing (GDPR Art. 21). To exercise your rights, write to hello@regcytech.com.
Supervisory Authority
You may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa u. 9–11., ugyfelszolgalat@naih.hu, naih.hu.
Changes to this Policy
We reserve the right to update this Privacy Policy at any time. Changes will be communicated via this website.
Data processors
The following providers take part in processing personal data. Only providers actually in use are listed.
- Vercel Inc.Infrastructure
- Purpose
- Serving the website and application, CDN.
- Data categories
- Technical log data (IP address, request metadata).
- Transfer
- Compute runs in an EU region (fra1); the provider is US-based.
- SupabaseData storage
- Purpose
- Database hosting — storage of enquiries, account data and business records.
- Data categories
- Contact details, company data, enquiry content, account identifiers.
- Transfer
- Database hosted in an EU region.
- ClerkIdentity
- Purpose
- Sign-in and account management. Authorisation is decided by our own database.
- Data categories
- Email address, identifier, sign-in metadata.
- Transfer
- US-based provider; contractual safeguards are set out in the provider terms.
- ResendCommunication
- Purpose
- Sending transactional email (confirmations, notifications).
- Data categories
- Recipient email address and message content.
- Transfer
- US-based provider; contractual safeguards are set out in the provider terms.
- LoopsCommunication
- Purpose
- Managing newsletter subscriptions and sending the newsletter.
- Data categories
- Email address, subscription status and preferences.
- Transfer
- US-based provider; contractual safeguards are set out in the provider terms.
- UpstashAbuse protection
- Purpose
- Abuse protection: rate limiting on public forms. Stores a derived identifier only, never message content.
- Data categories
- A key derived from IP address and email address, held briefly.
- Transfer
- EU-region instance where configured.
- Plausible AnalyticsInfrastructure
- Purpose
- Optional aggregate traffic statistics — loaded only after analytics consent. No advertising identifiers.
- Data categories
- Anonymised visit events (page, device type, referrer).
- Transfer
- EU-based provider (Plausible Data); processing starts only after consent.
| Processor | Purpose | Data categories | Transfer |
|---|---|---|---|
| Vercel Inc.Infrastructure | Serving the website and application, CDN. | Technical log data (IP address, request metadata). | Compute runs in an EU region (fra1); the provider is US-based. |
| SupabaseData storage | Database hosting — storage of enquiries, account data and business records. | Contact details, company data, enquiry content, account identifiers. | Database hosted in an EU region. |
| ClerkIdentity | Sign-in and account management. Authorisation is decided by our own database. | Email address, identifier, sign-in metadata. | US-based provider; contractual safeguards are set out in the provider terms. |
| ResendCommunication | Sending transactional email (confirmations, notifications). | Recipient email address and message content. | US-based provider; contractual safeguards are set out in the provider terms. |
| LoopsCommunication | Managing newsletter subscriptions and sending the newsletter. | Email address, subscription status and preferences. | US-based provider; contractual safeguards are set out in the provider terms. |
| UpstashAbuse protection | Abuse protection: rate limiting on public forms. Stores a derived identifier only, never message content. | A key derived from IP address and email address, held briefly. | EU-region instance where configured. |
| Plausible AnalyticsInfrastructure | Optional aggregate traffic statistics — loaded only after analytics consent. No advertising identifiers. | Anonymised visit events (page, device type, referrer). | EU-based provider (Plausible Data); processing starts only after consent. |
Controller contact for privacy questions: hello@regcytech.com. No data protection officer has been appointed — the statutory conditions requiring one do not apply to our current operations.