Privacy & Cookies Notice

Effective date: 2026.01.01.
Website: gastrosol.hu

Controller & Service Provider:
GastroSol Digital Kft.
Petőfi Sándor utca 41., 2724, Újlengyel, Hungary
Company registration number: 01-09-353409
Tax number: 27312452-2-41
EU VAT ID: HU27312452
E-mail: info@gastrosol.hu

All processing activities described in this notice are carried out by GastroSol Digital Kft. as the sole data controller.

1) Who We Are

1.1 Controller — GastroSol Digital Kft.

GastroSol Digital Kft. determines why and how personal data is processed on this website. You may exercise all data protection rights directly with us.

1.2 Contact points

Data protection requests: info@gastrosol.hu
Technical or cookie-related questions: info@gastrosol.hu

2) What Data We Collect

We process the data categories listed below, depending on your interaction with the site and your consent preferences.

2.1 Data you provide

  • Contact details (name, email, phone)

  • Business details (company, role)

  • Messages and attachments you submit

Legal bases:

  • Consent (Art. 6(1)(a)) — for marketing communications

  • Contract / pre-contractual steps (Art. 6(1)(b)) — when requesting quotes or services

  • Legitimate interests (Art. 6(1)(f)) — to respond to enquiries and prevent abuse

2.2 Automatically collected data (Consent Mode v2)

Device & usage data: pages viewed, clicks/scrolls, session duration, referrer/UTM, approximate location (country/region), device/OS, browser type, screen size, language, IP (processed to derive geolocation and security signals).

Advertising & campaign data: ad impressions/clicks, campaign parameters, conversions/events.

Pseudonymous identifiers: such as client ID, depending on your consent choices.

Sources/Tools:
Framer Analytics, Google Analytics 4, Google Ads, Meta Pixel, TikTok Pixel, AWS CloudFront logs.

Legal bases:

  • Consent (Art. 6(1)(a)) — for non-essential cookies, analytics, personalization

  • Legitimate interests (Art. 6(1)(f)) — for security, fraud prevention, and strictly necessary services

2.3 Email and phone interactions

If you email or call us, we process the content and metadata of the communication to handle your request, ensure service quality, and maintain records.

3) Cookies, Consent Banner & Google Consent Mode v2

We use the Framer cookie banner as our consent management interface. It stores your choices and communicates them to supported tools, including Google Consent Mode v2.

Possible consent states:
ad_user_data, ad_personalization, ad_storage, analytics_storage, functionality_storage, security_storage

When consent is denied, Google tags adjust automatically (e.g., cookieless pings).

Manage preferences anytime:

“Reject all” for non-essential cookies is available in the banner.

Vendor list and cookie lifetimes: see Annex A.

4) How We Use Data

  • Site operation & security: page delivery, load balancing, DDoS/spam prevention

  • Basic analytics: measuring traffic and site performance (with consent)

  • Advertising & attribution: conversion tracking, PPC/social optimization

  • UX research: session analytics, heatmaps, A/B testing

  • Communications: responding to enquiries, sending requested materials, newsletters

  • Compliance: legal obligations, record-keeping, legal claims

5) Data Sharing & Recipients

We share data with:

  • Service providers (processors): hosting/CDN, CRM/email, analytics

  • Advertising platforms (independent controllers): Google, Meta, TikTok

  • Authorities where legally required

  • Technical suppliers listed in Annex A

All processing is governed by appropriate contracts (DPAs, SCCs where applicable).

6) International Data Transfers

Where data is transferred outside the EEA/UK (e.g., to the United States), we rely on Standard Contractual Clauses and additional safeguards. We periodically review the risks of foreign access.

7) Retention Periods

  • Contact forms & messages: 12 months

  • GA4 analytics data: 26 months

  • Ad platform conversion data: 24 months

  • Server/CDN logs: 12 months

  • Accounting/contract data: as required by law

Data is deleted or anonymized when no longer needed.

8) Your Rights

You may request:

  • Access

  • Rectification

  • Erasure

  • Restriction

  • Portability

  • Objection

  • Withdrawal of consent at any time

You may lodge a complaint with your local authority.

In Hungary:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
https://naih.hu

9) Children

This website is not intended for individuals under 16. We do not knowingly collect such data.

10) Changes

We may update this notice from time to time. The most recent version is always available on this page.

Annex A — Vendors & Cookies

1. Framer (hosting/analytics/cookie banner)
Role: processor
Data: page views, device specs, performance metrics, consent settings

2. Google Analytics 4 (Consent Mode v2)
Role: processor
Signals: analytics_storage, ad_storage, ad_user_data, ad_personalization

3. Google Ads
Purpose: conversion measurement, remarketing
Legal basis: consent

4. Meta Pixel
Purpose: conversions, lookalike audiences, remarketing
Legal basis: consent

5. TikTok Pixel
Purpose: conversions, remarketing
Legal basis: consent

6. Email/CRM platform
Purpose: newsletters and transactional emails

7. CDN / Hosting (AWS CloudFront)
Purpose: content delivery, security, load balancing