Privacy policy

The controller of the personal data described here is Whiteshield LLC (Whiteshield Kft.), registered office: Dorozsmai utca 102/B, H-1142 Budapest, Hungary; company register no. 01-09-968995; tax no. 13905826-2-42 (“we”, “us”).

This policy explains what personal data we process when you visit www.whiteshield.net, write to us or book a consultation, why we do it and what rights you have. The terms used here have the meaning given in Article 4 of the General Data Protection Regulation (EU) 2016/679 (GDPR).

For any privacy question, write to privacy@whiteshield.net.

Visiting the website (hosting)

When you open a page, our hosting provider, Cloudflare, Inc., necessarily processes technical data so the page can be delivered and protected against attacks: your IP address, the date and time of the request, the page requested, your browser and operating system.

• Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).
• Retention: short-term technical logs, deleted automatically by the hosting provider.

Settings stored in your browser

The site stores two settings in your browser’s local storage: your language choice and your cookie choice. They never leave your device and are not used to identify you.

• Legal basis: these are strictly necessary for the site to work as you asked (Article 6(1)(f) GDPR); no consent is required.
• Retention: until you clear your browser data.

Google Analytics (only with your consent)

If you accept analytics cookies, we use Google Analytics 4 to see how many people visit the site, which pages they read and where they come from, so that we can improve the content. Google Analytics sets the _ga and _ga_<ID> cookies and processes data about your visit (pages viewed, time on page, referring site, approximate location, device and browser type). Google Analytics 4 does not log or store IP addresses. We do not use advertising features, and Google Analytics is not loaded at all until you give consent.

• Legal basis: your consent (Article 6(1)(a) GDPR). You can withdraw it at any time under Cookie settings in the footer; the analytics cookies are then deleted.
• Processor: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
• Retention: the cookies expire after at most 2 years; visit data is kept in Google Analytics for 14 months.

Contacting us by email

If you write to us, we process your name, email address and anything you include in your message, in order to answer you.

• Legal basis: our legitimate interest in replying to your enquiry, or steps taken at your request before entering into a contract (Article 6(1)(f) and (b) GDPR).
• Retention: as long as needed to handle your enquiry; if it leads to a contract, for the periods required by Hungarian accounting and tax law.

Booking a consultation

Consultations are booked through YouCanBook.me. The booking page asks for your name, email address, the chosen time and, optionally, a short message. We use these details to prepare for and hold the consultation.

• Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• Processor: YouCanBook.me Ltd, which processes the booking on our behalf; its own privacy policy also applies on its booking page.
• Retention: as long as needed for the consultation and any follow-up; if it leads to a contract, for the periods required by law.

We do not sell, rent or share your personal data with anyone for marketing. Your data is only accessed by the processors named above, to the extent needed for their service, and by authorities where the law requires it.

Cloudflare, Inc. and Google LLC (the parent company of Google Ireland Limited) are based in the United States. Transfers to them are covered by the EU–US Data Privacy Framework, under which both companies are certified, and by the European Commission’s standard contractual clauses. YouCanBook.me Ltd is based in the United Kingdom, for which the European Commission has adopted an adequacy decision.

Links to other websites (for example LinkedIn) are ordinary links: no data is sent to those sites until you click them, and their own privacy policies apply from then on.

The site is served only over an encrypted (HTTPS) connection and contains no forms that collect personal data. We protect the data we receive by email or through bookings with appropriate technical and organisational measures, and only the colleagues who need it to answer you can access it.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data rectified;
• have your data erased or its processing restricted;
• object to processing based on our legitimate interest;
• receive your data in a portable format (data portability);
• withdraw your consent at any time, without affecting processing carried out before the withdrawal.

To exercise any of these rights – for example to ask what data we hold about you, or to have it corrected or erased – write to privacy@whiteshield.net or by post to our registered office. We investigate your request or complaint and reply in writing within 15 days of receiving it. We may ask for information to confirm your identity.

If you think we have not handled your data properly, please contact us first so that we can put it right. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU country where you live or work. In Hungary this is:

Nemzeti Adatvédelmi és Információszabadság Hatóság (Hungarian National Authority for Data Protection and Freedom of Information, NAIH)
Falk Miksa utca 9–11, H-1055 Budapest · Postal address: H-1363 Budapest, Pf. 9.
ugyfelszolgalat@naih.hu · www.naih.hu

You may also take the matter to court; in Hungary the case can be brought before the regional court (törvényszék) of your place of residence.

If the way we process personal data changes, we update this page and the date at the top. The current version is always available here.