Privacy notice

This notice is for visitors of openvillage.io and people who contact Open Village by email. It covers the website’s current operation: contact enquiries, secure website operation, and — where consent is given — Google Analytics 4 visitor measurement.

1. Controller

Name

Vass Dávid sole trader

Registered seat

1095 Budapest, Gát utca 21. fszt. 1.

Registration number

59372008

Tax number

90218000-2-43

Email

hello@openvillage.io

Website

openvillage.io

2. Principles of processing

The controller processes personal data for specified, explicit and legitimate purposes and only to the extent necessary for those purposes. Processing follows the principles of data minimisation, accuracy, confidentiality, integrity and storage limitation.

3. Contact by email

If a data subject contacts Open Village at hello@openvillage.io, the data provided in the email are processed to respond to the enquiry, for professional or business discussions and — where relevant — for steps prior to concluding a contract.

Data processed

name, email address, message content, and any organisational or contact details voluntarily provided by the data subject

Purpose

responding to the enquiry, professional or business discussion and, where needed, pre-contractual steps

Legal basis

GDPR Article 6(1)(b) where the data subject initiates a contract in their own name or requests pre-contractual measures for their own contract; for enquiries sent on behalf of or as contact for an organisation, and for other professional/business enquiries, GDPR Article 6(1)(f): the controller’s legitimate interest in handling the enquiry, business communication and maintaining the relationship

Legitimate interest

substantive handling of professional and business enquiries received by the controller, responding to contact and enabling necessary discussion

Retention

for general contact, up to 1 year after the matter is closed; if a contractual relationship is formed, necessary data may be retained further under applicable statutory retention duties

Provision of data

voluntary; without an email address or other contact needed to reply, we cannot respond to the enquiry

Recipients

the email transmission and mailbox technology provider; where needed for technical operation, the hosting provider

4. Technical log data

When serving the website, the server may process technical log data. These typically include IP address, request time, requested resource, technical browser and operating-system data, and error information.

Purpose

secure and stable website operation, troubleshooting, and detecting abuse and IT incidents

Legal basis

legitimate interest under GDPR Article 6(1)(f) for secure operation of the service

Legitimate interest

security, availability and fault-free operation of the website and related IT infrastructure

Retention

up to 30 days, unless a longer period is needed to investigate a security event or abuse, or for a legal claim

Recipient

RackForest Zrt. for hosting and server infrastructure

5. Google Analytics 4

The website uses Google Analytics 4 for statistical analysis of visits and website use. Analytics measurement starts only after the data subject’s prior consent. Until consent is given, Open Village keeps Google Analytics measurement in a denied state.

During measurement, Google Analytics may process page-view and event data, device and browser characteristics, approximate location data and session-related technical identifiers. For users from the European Union, Google may use the IP address to determine location data and then discard it before logging; according to Google, Google Analytics does not log or store the IP address.

Purpose

statistical measurement of website visits, use and performance, and improving content and user experience

Legal basis

consent under GDPR Article 6(1)(a)

Provider / processor

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

GA4 retention

user-level and event-level data retention period is 14 months

Sharing with Google products

Open Village keeps the Google Analytics “Google products & services” data-sharing setting switched off

Analytics cookies

After consent is given, Google Analytics may place first-party analytics cookies. According to Google’s documentation, the default expiry of the _ga and _ga_<id> cookies is 2 years. They are used for statistical distinction of visitors and sessions.

Managing consent

On the first visit, the visitor can decide whether to allow analytics measurement. If consent is refused, analytics measurement does not start. To remember the choice, the website may use only the technical storage needed to record the consent setting. Consent may later be withdrawn or changed at any time; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

International transfers

Google operates a global infrastructure, so Google Analytics data may in some cases be processed outside the European Economic Area. For transfers to the United States to Google LLC, the adequacy decision under the EU–US Data Privacy Framework may apply if the recipient is an active participant. Google LLC is currently listed among Data Privacy Framework participants. Where the adequacy decision does not apply to a transfer, Google may also rely on the European Commission’s standard contractual clauses as an appropriate safeguard.

Further information on transfer safeguards is available in Google’s data-transfer notices and in the EU–US Data Privacy Framework register.

6. Recipients, processors and service providers

Under Article 13 GDPR, this notice may also name categories of recipients. The specific email provider for hello@openvillage.io is determined by the production configuration; the category means the provider that delivers and stores email.

7. Automated decision-making and profiling

In the current operation of OpenVillage.io, no automated decision-making that produces legal effects concerning the data subject, or similarly significantly affects them, takes place. The website does not create individual profiles with legal effect from analytics data.

8. Data subject rights

Under the conditions of the GDPR, the data subject may request access to personal data concerning them, rectification, erasure or restriction of processing. Where applicable, they also have the right to data portability. Where processing is based on legitimate interest, the data subject may object on grounds relating to their particular situation.

Consent given for consent-based processing may be withdrawn at any time. Requests to exercise rights may be sent to hello@openvillage.io. The controller handles requests without undue delay and, as a rule, within one month of receipt.

9. Remedies

If the data subject considers that the processing of their personal data infringes data-protection law, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or bring proceedings before a court.

Authority

Nemzeti Adatvédelmi és Információszabadság Hatóság

Address

1055 Budapest, Falk Miksa utca 9-11.

Postal address

1363 Budapest, Pf. 9.

Email

ugyfelszolgalat@naih.hu

Phone

+36 1 391 1400

Website

naih.hu

10. Data security

The controller applies technical and organisational measures appropriate to the nature and risks of processing to protect personal data against unauthorised access, alteration, disclosure, erasure or loss. The website uses encrypted HTTPS connections.

11. Changes to this notice

The controller may amend this notice when website operations, services used or the legal environment change. The version currently in force is available on the openvillage.io website.

Effective: 30 July 2026.

Legal background: Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act CXII of 2011 (Infotv.), and the applicable provisions of Act C of 2003 on electronic communications, in particular rules on storage of and access to information on terminal equipment.