Skip to content
bence@portfolio:~$Bence Krisztián-Világos
← Back to the home page

Privacy notice

Privacy notice for business outreach

This notice explains how I handle business email addresses taken from public sources when I contact companies with a business offer (GDPR Article 14).

Effective from the date of publication.

1. Controller

Bence Krisztián-Világos (Krisztián-Világos Bence), as a private individual.

  • Email: bence.krisztian.dev@gmail.com
  • Phone: +36202644877
  • Website: bencearc.com

2. What data I process, and where it comes from

Business email addresses published on companies' public websites: general company addresses (such as info@, office@) or named business addresses; in the latter case the name in the address is also personal data.

Source of the data: the contacted company's public website. I do not send offers to private individuals' personal (e.g. Gmail) addresses.

3. Purpose

One-off business outreach: introducing my admin automation service for small businesses by email.

4. Legal basis

Legitimate interest under Article 6(1)(f) GDPR: delivering a business offer to the company.

Documentation of the balancing test: [JOGI ELLENŐRZÉS]

5. How long I keep the data

If there is no reply to the outreach, I delete the address 12 months after the email was sent.

If you unsubscribe, I delete your address from the outreach list. I keep one piece of data only: the email address itself, on a do-not-contact list, with no time limit, solely so that I never write to it again (Article 21 GDPR). I use it for no other purpose.

[JOGI ELLENŐRZÉS: the starting point of the 12 months (the sending date), and the legal basis for keeping the do-not-contact list without a time limit]

6. Objecting and unsubscribing

If you don't want any more emails, just reply to my email with „leiratkozom” (Hungarian for “unsubscribe”). I then delete your address from the outreach list; it stays only on the do-not-contact list (see section 5) so that I don't contact you again. You can also object at the email address or phone number above (Article 21 GDPR).

7. Your rights

Under the GDPR you can request:

  • information about and access to your data (Article 15),
  • rectification (Article 16),
  • erasure (Article 17),
  • restriction of processing (Article 18),
  • and you can object to the processing (Article 21).
  • Send your request to the email address above; I reply within one month at the latest (Article 12(3)).

8. Service providers

  • Email provider: Google (Gmail). I send outreach emails from a Gmail account. [JOGI ELLENŐRZÉS: processor role, transfers to third countries]
  • Website hosting: Cloudflare. [JOGI ELLENŐRZÉS: whether they process data about website visitors (e.g. technical logs), and on what terms]

9. The form on the /kkv page

The form on the “Small businesses” page sends no data to the website, and the website stores nothing from it. When you submit it, your browser opens your own email program with a pre-filled email, which you send (or don't). That email then reaches me like any other email.

10. The terminal’s “ask” feature

In the site's terminal view you can ask a question about me with the “ask” command. The question you type (up to 300 characters) and the language setting are sent to the website's server, which forwards the question, together with the site's public texts, to an external AI provider: depending on the configuration, Google (Gemini) or Anthropic (Claude). Your IP address is not sent to the provider.

The website's code does not store or log the question or the answer. Your IP address is held only in the server's memory, with the times of your requests, for rate limiting (at most 5 questions per 10 minutes); it is cleared with the first request of the next day (UTC) or when the server instance stops, and is never written to a database or file.

If you don't want your question to reach an external provider, don't use the “ask” command; the rest of the site works without it.

[JOGI ELLENŐRZÉS: legal basis for processing the question; the AI providers' and the hosting provider's own processing and logging, transfers to third countries]

11. Complaints and remedies

If you believe I have infringed your data protection rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or go to court (Articles 77 and 79 GDPR).

  • Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
  • Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary
  • Postal address: 1363 Budapest, Pf. 9.
  • Phone: +36 1 391 1400
  • Email: ugyfelszolgalat@naih.hu
  • Website: naih.hu