This page describes what y2y.hu collects about you, why, where it is stored, for how long, and what your rights are. Our other sites (skills.y2y.hu, yourassessor.com, hirlevel.y2y.hu and the assessment tools) have their own privacy pages. Questions: daniel@y2y.hu.
Version 10/2026 · effective 9 October 2026 · replaces the earlier privacy policy of Nagy-Józsa Dorottya E.V.
01 Controller
| Company | Y2Y Hungary Kft. (Y2Y Ltd.) |
| Registered seat | 1221 Budapest, Vincellér út 28/B, Hungary |
| Registration no. | Cg.01-09-350737 |
| Tax no. | 27123757-2-43 |
| EU VAT | HU27123757 |
| Data protection contact | daniel@y2y.hu |
| General contact | info@y2y.hu · +36 30 529 6669 |
02 Data we collect
Contact and quote forms (the contact page and the "Let us talk about it" boxes on service pages)
- Name, e-mail address, phone number, company, your message
- Which page and service you wrote from, the language you used
- The state and time of the consent checkbox
Newsletter
- Name and e-mail address when you subscribe to Köztünk szólva, our monthly newsletter (the form on the home page and under blog posts both feed the same list, with a confirmation e-mail)
Analytics and advertising (Google Consent Mode)
- Google Analytics 4 usage data: pages viewed, device and browser type, IP address (GA4 truncates it before storage)
- Google Ads conversion data, only if you accept marketing cookies on the banner
Google tags run in Consent Mode: until you accept on the cookie banner they set no analytics or advertising cookies and store nothing about you. You choose statistics and marketing separately, and you can change your choice any time via the cookie settings link in the footer.
Technical logs
- Hosting access logs (IP address, timestamp, user agent) for security, kept for up to 30 days
03 Purpose
- Contact and quote requests: to answer you, call you back and prepare a quote. Requests land in our internal client list so the right colleague can pick them up.
- Newsletter: to send you the newsletter you subscribed to. Every issue has an unsubscribe link.
- Analytics: to understand how the site is used and improve it.
- Advertising: to measure whether our Google Ads campaigns bring enquiries. No remarketing lists, no cross-site profiles.
- Security logs: to keep the site available and detect abuse.
Never: selling your data, profiling you for advertising, or sharing your request with anyone outside Y2Y.
04 Legal basis
- Consent (GDPR Art. 6(1)(a)): the forms (consent checkbox), the newsletter, and the statistics and marketing cookies (banner).
- Pre-contractual steps (GDPR Art. 6(1)(b)): answering a quote request you sent us.
- Legitimate interest (GDPR Art. 6(1)(f)): security and access logs.
You can withdraw consent at any time by writing to daniel@y2y.hu, via the unsubscribe link in any newsletter, or via the cookie settings in the footer. Withdrawal does not affect the lawfulness of processing before it.
05 Where and how long
| Hosting | Amazon Web Services, EU (Frankfurt), encrypted in transit (HTTPS) and at rest |
| Client list (CRM) | Supabase, EU region (Ireland) |
| Contact and quote requests | up to 12 months, then deleted in our regular review; earlier on request |
| Newsletter | until you unsubscribe; unconfirmed sign-ups are deleted in our regular review |
| Analytics | max. 14 months (GA4 setting) |
| Security logs | up to 30 days |
Google may also process analytics and advertising data in the USA under the EU-US Data Privacy Framework and standard contractual clauses. Everything else stays in the EU.
06 Recipients and processors
- Amazon Web Services: hosting of y2y.hu, EU (Frankfurt).
- Supabase: our internal client list and the newsletter subscriber list, EU region.
- Resend: e-mail delivery; your request reaches info@y2y.hu through Resend, and the newsletter and its confirmation e-mail are sent through it.
- Google (Analytics 4, Ads): in Consent Mode, only after you accept on the banner, truncated IP, no advertising features in Analytics.
No other recipients. Your request is read only by Y2Y staff bound by confidentiality. The only exception is a lawful request from an authority.
07 Automated decision-making
None. We make no automated decisions about you and build no profiles. Our internal assistant may pre-sort incoming requests and draft a reply, but a colleague reads and decides on every request.
08 Your rights
- Access: a copy of your data
- Rectification: correcting inaccuracies
- Erasure: at any time, without giving a reason
- Restriction: pausing the processing
- Portability: a machine-readable export
- Objection: to processing based on legitimate interest
- Withdrawing consent: at any time
Write to daniel@y2y.hu. We answer within 30 days.
09 Complaints
| Authority | NAIH (Hungarian National Authority for Data Protection and Freedom of Information) |
| Address | 1055 Budapest, Falk Miksa utca 9-11. |
| Postal address | 1363 Budapest, Pf. 9. |
| Phone | +36 1 391 1400 |
| E-mail | ugyfelszolgalat@naih.hu |
| Web | naih.hu |
You may also go to court: at your choice, the regional court of your place of residence.