Privacy Policy
This policy explains what personal data is processed when you use the website vasilisa.chat and when you contact us by e-mail, for what purpose and on what legal basis, and what rights you have. Processing follows the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679).
1. Who the controller is and how to get in touch
The controller of personal data is the owner of the website vasilisa.chat.
- Controller: the owner of the website vasilisa.chat
- Address for legally relevant enquiries: available on request — write to ai@vasilisa.chat
- E-mail: ai@vasilisa.chat
- Country: Hungary (European Union)
All questions about personal data processing go to that e-mail address. It is also the address for exercising your rights (see section 9).
2. What data is processed
We process only the data you provide yourself or that arises from our communication:
- Data from an e-mail request: your name or how you wish to be addressed, a contact for replies, a description of the task.
- Your e-mail address and the content of correspondence about your enquiry.
- Data needed to perform a contract if an enquiry turns into work: task details, documents and details — strictly to the minimum extent necessary.
We do not collect data automatically (no profiling or digital traces), do not buy data from third parties and do not ask for information that is not needed. Special categories of data (health, political views, religion, etc.) are not requested; please do not send them on your own initiative.
3. Purposes and legal bases
- Answering your enquiry and correspondence. Basis: steps taken at your request before entering into a contract and performance of a contract — Art. 6(1)(b) GDPR; otherwise your consent — Art. 6(1)(a) GDPR.
- Preparation and performance of a service contract. Basis: Art. 6(1)(b) GDPR.
- Protection against spam and abuse, security of the website and infrastructure. Basis: legitimate interests — Art. 6(1)(f) GDPR.
- Compliance with legal obligations, should any apply. Basis: Art. 6(1)(c) GDPR.
Data is not used for automated advertising, sold, or shared with third parties for their own purposes.
4. Cookies and local storage
This website uses no analytics, advertising or other third-party cookies. There are no web analytics, pixels, counters, social plugins or third-party trackers. We do not set cookies at all.
Only two values are stored in your browser (localStorage):
vasilisa.lang— the interface language you selected;vasilisa.cookie-ack— a note that you have seen the cookie notice.
This local storage is strictly necessary for the site to work: it stays in your browser, is not transmitted anywhere and is deleted together with the site data in your browser settings. Full details are on the Cookies page.
5. Retention periods
- Correspondence and enquiry data — until the purpose is achieved, approximately no longer than 24 months after the last contact; afterwards deleted or anonymised.
- Data relating to a performed contract — for the periods required by law (including accounting and tax purposes).
- Consent can be withdrawn at any time — processing on that basis then stops and data is deleted unless there is another lawful ground to keep it.
- Local browser settings — until you clear the site data in your browser.
6. Who receives the data
We do not sell personal data and do not share it with third parties for marketing. Data may be processed by a limited number of processors acting on our instructions and only for the purposes above:
- the hosting provider whose infrastructure serves this website — located in the European Union;
- the e-mail service provider used for correspondence;
- public authorities — only where required by law.
7. International transfers
Data is processed within the European Union / European Economic Area. No separate transfer of personal data outside the EEA is planned. Should such a transfer become necessary for a particular service, it will be carried out only on a lawful basis (adequacy decision or EU standard contractual clauses) and with information provided to the persons concerned.
8. Your rights
You have the right to:
- access — obtain confirmation whether your data is processed and a copy of it;
- rectification — have inaccurate or incomplete data corrected;
- erasure — have data deleted where there is no lawful ground to keep it;
- restriction of processing — have processing suspended in the cases provided by law;
- object — object to processing based on legitimate interests;
- portability — receive your data in a structured, machine-readable form or have it transmitted to another controller;
- withdraw consent — at any time; withdrawal does not affect the lawfulness of processing carried out before it;
- lodge a complaint with a supervisory authority.
The supervisory authority in the controller's country is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Nemzeti Adatvédelmi és Információszabadság Hatóság), 1055 Budapest, Falk Miksa utca 9–11, Hungary, website: naih.hu. You may also lodge a complaint with the authority in the country where you live or work.
9. How to exercise your rights
Write to ai@vasilisa.chat and state which right you wish to exercise. We respond without undue delay and, as a rule, within one month of receiving the request. If a request is complex or there are several, the period may be extended — we will tell you and explain why. Responses are free of charge; for manifestly unfounded or repetitive requests we may refuse or charge a reasonable fee.
10. Automated decisions and profiling
No decisions based solely on automated processing, including those producing legal effects, are made. No profiling is used.
11. Security
Organisational and technical measures are applied: encryption in transit (HTTPS), restricted access to data, minimisation of the data processed, and deletion once the retention period expires. Absolute security of data transmitted over open networks cannot be guaranteed, but we do what is reasonably necessary to protect the data.
12. Changes to this policy
This policy may be updated. The date of the latest version is shown at the top of the page. Material changes will be reflected on this page.
This is a working template of a legal page prepared for a business-card website. It describes how
the site actually works but does not replace legal advice: before commercial use we recommend
reviewing the text with a qualified lawyer and filling in the controller's full details
(see assets/legal.js).