A clear account of what BBWP collects, why it is needed and how long it is kept.
The controller is Varga István Bertalan, a sole proprietor registered in Hungary. Registered address: 1078 Budapest, District VII, Murányi utca 38., ground floor, door 9, Hungary. Tax number: 67025086-1-42. Registration number: 42530889. For privacy requests, email privacy@bbwp.pro.
When you contact BBWP or unlock a migration report, we may process your email address, name, company, website, requested service, message, project goal, budget range, preferred language, the report's categorical qualification answers and the time you accepted this notice. We use these details to answer you, produce the requested decision report, understand the request, qualify the project and prepare a proposal. Submitting a form does not subscribe you to marketing.
The Migration Check analyses public information from the submitted domain, including the homepage, HTTP headers, robots.txt, published sitemaps, a limited sample of public pages and optional Google PageSpeed Insights data. BBWP stores the domain, the resulting technical findings, the categorical report answers and a short-lived keyed hash derived from the requesting IP address for abuse prevention. The check does not enter private areas or make decisions with legal or similarly significant effects.
If we work together, BBWP processes proposal, contract, delivery, communication, payment-status and invoice data needed to perform the agreement, document acceptance, collect payment and comply with accounting and tax obligations. Stripe processes card payments on its own hosted checkout; BBWP does not receive or store full card details.
Enquiries and proposals are handled to take steps at your request before entering a contract (GDPR Article 6(1)(b)); when you contact BBWP on behalf of an organisation, handling the business contact also relies on the parties' legitimate interest in communicating about the project (Article 6(1)(f)). Project delivery and payment administration are necessary to perform a contract; invoicing and accounting are required by law (Article 6(1)(c)). Service security, fraud prevention, operational records and the establishment or defence of legal claims rely on BBWP's legitimate interests. Optional analytics relies on consent (Article 6(1)(a)), which can be withdrawn at any time.
The relevant form marks the fields required to answer an enquiry or provide the requested report. You are not legally required to provide this data, but BBWP cannot send the full report, respond to the request or enter a project agreement without the information needed for that step. Please do not submit sensitive personal data or information unrelated to the project.
Essential storage supports security, language routing and your saved consent choice. Google Tag Manager and Google Analytics load only after analytics consent. BBWP does not enable advertising personalisation. You can reject analytics as easily as accepting it and can change the choice later through Cookie settings. More detail is available in the Cookie information page.
Data is shared only where needed for the function you use. Providers may include Hostinger for hosting, database and transactional email; Cloudflare for approved media storage and delivery; Google for consented analytics; Stripe for hosted card payments; and Számlázz.hu for invoicing. Professional advisers and authorities may receive data where required by law or necessary to establish, exercise or defend legal claims. BBWP does not sell personal data.
Some technology providers may process data outside the European Economic Area. Where this occurs, the transfer is based on an applicable adequacy decision, standard contractual clauses or another safeguard recognised by data protection law. The provider's current terms determine the safeguard used for that service.
Migration Check records are assigned a 30-day expiry. Enquiries that do not become projects are kept for up to 24 months after the last meaningful contact. Security and abuse-prevention logs are kept for up to 90 days unless an incident requires longer preservation. GA4 event retention is configured for 14 months. Proposal and project records may be kept for the applicable limitation period, while invoices and accounting records are retained for the period required by Hungarian law. Data may be kept longer when necessary for an active legal claim or binding legal request.
Depending on the circumstances, you may request access, correction, deletion, restriction or portability of your data, and may object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. Send requests to privacy@bbwp.pro; identity may be verified before a request is fulfilled.
Please contact privacy@bbwp.pro first so the issue can be investigated. You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11; postal address: 1363 Budapest, PO Box 9; naih.hu, or to seek a judicial remedy.
This notice may be updated when the service, providers or legal requirements change. Material changes take effect from the date shown at the top of this page; earlier versions may be requested at privacy@bbwp.pro.
