Privacy Policy

This policy explains what happens to personal data collected through www.ethicatech.com, including its Hungarian version at /hu/. It does not cover any other service, nor any relationship you may have with us as a client or supplier.

Who is responsible

The controller of the data described here is:

We have not appointed a Data Protection Officer. The processing described here is neither large-scale monitoring nor large-scale processing of special categories of data, so Article 37 GDPR does not require one.

Ethica Global Solutions Inc. (Florida, United States) appears on this site as one of our offices. It receives no personal data from this website.

What we collect, and why

When you visit any page

Our content delivery network writes one line to an access log for every request it serves. It records your IP address, along with the ordinary technical details of the request — what was asked for, when, and what your browser reported about itself.

We use these logs to keep the site running correctly and to tell real visitors from the bots that make up much of the traffic. They are not joined to any other data and never used for advertising.

Legal basis. Article 6(1)(f) GDPR — our legitimate interest in operating and securing our own website.

How long we keep it. Deleted automatically after 90 days.

When you use the contact form

You give us your name, email address and the message you write. Alongside them, two things are collected automatically:

• your IP address, and
• a verification token produced by the anti-spam widget on the form.

Here is what then happens to it, in full:

1. The token and your IP address are sent to Cloudflare, which confirms the form was submitted by a person rather than a bot. This check must pass before anything else happens.
2. Your name, email address, message and IP address are sent as an email to our contact@ethicatech.com mailbox, with your address set as the reply-to, so that replying in the mailbox answers you directly.
3. A single line recording your email address and IP address is written to our server log, which is how we can tell that a message was accepted.

Legal basis. Article 6(1)(f) GDPR — our legitimate interest in reading and answering enquiries addressed to us. Where your enquiry concerns a possible engagement, Article 6(1)(b) also applies: the processing is a step taken at your request before entering a contract.

How long we keep it. The email is deleted within 30 days, unless the enquiry turns into an ongoing business relationship or a contract, in which case it is kept as part of that relationship and under the retention rules that apply to it. Server logs are deleted automatically after 14 days.

One exception worth stating plainly: if the email cannot be delivered to our mailbox, the full content of your enquiry — name, address and message — is written into the server log instead, so that the enquiry is not silently lost. That log entry is deleted on the same 14-day cycle as any other.

When you allow analytics

If, and only if, you accept analytics in the cookie banner, we load Google Analytics 4. Before you accept, no Google script is fetched and no request is made to any Google server.

What Google Analytics collects: the pages you view and when, a rough location derived from a truncated form of your IP address, your device and browser type, the site that referred you, and your interactions with the page. We use it to understand which parts of the site are read, and nothing else.

Legal basis. Article 6(1)(a) GDPR — your consent, which you can withdraw at any time through Cookie settings in the footer. Storing the cookies themselves additionally rests on that consent under § 155(4) of Act C of 2003 on Electronic Communications. Withdrawing your consent does not affect the lawfulness of anything done before you withdrew it.

How long we keep it. Event-level data is retained in Google Analytics for 14 months; aggregated reports are held by Google beyond that.

To keep the form usable

The form is protected by Cloudflare Turnstile, which distinguishes people from bots. It processes your IP address and a short-lived token, as described above. Legal basis: Article 6(1)(f) GDPR — our legitimate interest in not having our mailbox filled with automated submissions. Without it the form could not be offered at all.

What we do not do

• We do not combine the access log described above with the contact form, with analytics, or with anything else that could identify you by name.
• We do no profiling and no automated decision-making of any kind.
• We run no advertising, remarketing or conversion tracking.
• We do not sell, rent or trade personal data, and we operate no mailing list from this site.

Who else sees the data

We use the following service providers, each processing data on our instructions under a written data processing agreement:

Beyond these, we disclose personal data only where the law obliges us to.

Transfers outside the EEA

Google and Cloudflare are both ultimately US companies, so some data reaches the United States. Those transfers rely on the EU–US Data Privacy Framework, under which both are certified, and on the European Commission’s Standard Contractual Clauses as a further safeguard. You can ask us for a copy of the relevant safeguards at privacy@ethicatech.com.

Your rights

Under the GDPR you may ask us to:

• confirm whether we hold data about you, and give you a copy of it (Art. 15);
• correct anything inaccurate or incomplete (Art. 16);
• erase it (Art. 17);
• restrict what we do with it while a dispute is resolved (Art. 18);
• hand it to you, or to someone else, in a portable format (Art. 20);
• stop processing it where we rely on legitimate interest — including the handling of your enquiry (Art. 21).

Where we rely on your consent, you may withdraw it at any time, with no consequence to you. For analytics, the fastest way is the Cookie settings link in the footer of every page.

Write to privacy@ethicatech.com to exercise any of these. We will answer within one month of receiving your request, and will tell you if we need longer because the request is complex (Art. 12(3) GDPR). We do not charge for this.

If you want to complain

Please raise it with us first — privacy@ethicatech.com — so we can put it right. You also have the right to go straight to the Hungarian supervisory authority, or to the courts:

You may also bring a claim before the court with jurisdiction over your place of residence.

Changes

If we change what we collect or why, we update this page and move the date at the top. Where a change affects something you consented to, we ask you again rather than assuming your earlier answer still stands.