← Back to site
Legal

Privacy Notice

For visitors of the ForGeo Advisory website. This notice explains our practices relating to the processing of your personal data, in line with EU Regulation 2016/679 (GDPR) and relevant Hungarian legislation.

01 Who is the data controller?

This notice covers the data processing carried out in connection with the use of the ForGeo Advisory website and its services.

Company / NameKarácsony Eszter e.v.
Emailcontact@forgeoadvisory.com

02 Principles

  • We are committed to protecting your personal data and processing it lawfully, to the extent and for the time necessary to achieve the purpose.
  • Where the nature of the processing allows, we provide a simple and effective choice regarding your data.
  • We carefully select the partners involved in processing personal data, and we transfer personal data to our partners only in accordance with the content of this privacy notice, subject to legal and technical guarantees.
  • We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, use, modification or deletion.
  • We take data protection aspects into account in every case when designing our processes (data protection by design).
  • We work to ensure that our measures protect data to the greatest possible extent even when data protection has to be balanced against other obligations.

03 Definitions

Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Controller: the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Processor: the natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

04 Categories of personal data we process

The website does not use cookies, and does not carry out traffic analysis, profiling or advertising tracking. No personal data is stored in your browser. The fonts used on the website are served from our own site, so your browser does not contact Google Fonts or any other font provider when you visit.

When you use the contact form to get in touch, we process the following data:

  • Name
  • Email address
  • Company (optional)
  • The content of your message

Providing this data is voluntary. However, we need at least your name, email address and message in order to reply to you; without them we cannot respond to your enquiry. The company field is optional.

If a working relationship or contract follows from this contact, we additionally process the contact and billing details necessary to arrange and deliver a workshop or training (e.g. invoicing address, phone number). Providing these details is necessary to conclude and perform the contract and to issue a valid invoice; without them we cannot arrange or invoice a workshop or training.

05 Legal basis of our processing

We always process your data on a legal basis defined by law. This differs for the various processing activities; such legal bases are:

  • Steps prior to entering into a contract and legitimate interest: when you send us a message through the contact form, we process your data in order to reply to you and, where you are interested in our services, to take steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR), and otherwise on our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR). You may object to this processing at any time by writing to us.
  • Preparation and performance of a contract: the identification and contact data necessary for arranging, delivering, and invoicing a workshop or training session.
  • Legitimate interest: where necessary for the technical operation and security of the website (for example, the standard server logs kept by our hosting provider), and for establishing, exercising or defending legal claims.
  • Legal obligation: where the law requires us to keep or disclose data, for example invoices and accounting documents under the Hungarian Accounting Act and tax legislation.

06 Purpose of the processing

We process the personal data falling into the categories listed above for the purpose of the proper operation of the website, responding to your enquiry, and arranging, delivering and invoicing geopolitical workshops or training sessions.

07 Data transfers

In order to carry out certain activities and achieve data processing purposes, or possibly to fulfil a legal obligation, it is necessary to transfer your personal data to third parties. In certain cases we share your data with the following service providers:

  • Hosting provider and domain registrar: the website is served as a static site by OVH SAS (France), which also manages our domain name. During technical operation, the provider's server logs may temporarily process certain technical data (for example, IP address).
  • Contact form: the technical transmission of the data sent via the website's contact form (name, email address, company, message) is carried out by Formspark, an EU-based form service provider, as a data processor under a data processing agreement. Formspark stores form submissions within the European Economic Area; where any of its sub-processors is located outside the EEA, appropriate safeguards such as standard contractual clauses apply. After the form is submitted, the data is forwarded to our address contact@forgeoadvisory.com.
  • Email provider: we use an email service based on the Zimbra platform, provided by OVH SAS (France), for keeping in contact.

Occasionally we also share data with other contractors providing services to us in connection with the purposes defined in this notice (for example, an accounting service provider in the case of contracting and invoicing).

If we transfer your personal data to a country outside the European Economic Area (for example, where data is stored on servers and in a data centre outside the EEA), we ensure that such transfer takes place on an appropriate legal basis and that your personal data enjoys protection compliant with the applicable legislation, for example through the use of standard contractual clauses (SCC) approved by the competent authorities and by requiring other appropriate technical and organisational measures to protect your personal information.

08 Duration of the processing

We keep personal data only for as long as necessary for the purposes described in this notice, and no longer than the periods below. When a period ends, we delete the data or irreversibly anonymise it.

EnquiriesMessages sent through the contact form that do not lead to a working relationship: deleted 12 months after our last message.
Contracts & correspondenceData relating to a workshop or training that was agreed or delivered: 5 years after the end of the contract (general limitation period, Section 6:22 of the Hungarian Civil Code), so that we can establish, exercise or defend legal claims.
Invoices & accountingInvoices and other accounting documents, including the name, address and tax number of the invoiced party: at least 8 years (Section 169 of Act C of 2000 on Accounting). Records relevant to tax are kept at least until the limitation of the right to assess tax, which is 5 years from the last day of the calendar year in which the tax return was due (Section 78(3) of Act CL of 2017 on the Rules of Taxation). The longer applicable period prevails.
Server logsKept by our hosting provider for the short period set in its own retention settings.

Where the law requires us to keep data (for example invoices), we keep it for the legally required period even if you ask for erasure or object to the processing, and we use it only for that purpose.

09 Security of your data

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, use, loss, disclosure or destruction. Only those may access your data who need it for the achievement of the data processing purpose.

When designing our processes, we keep in mind the incorporation of appropriate data protection measures and security guarantees.

10 Your rights regarding your data

You have a number of rights regarding your personal data, which you may exercise by a request sent to contact@forgeoadvisory.com. These rights are:

  • Right of access: you may request information about the data we process about you, and upon request we provide a copy of it.
  • Right to rectification or updating of your data: you have the right to have the data we hold corrected if it is not recorded correctly.
  • Right to object: you have the right to object to the processing of your personal data in cases where the processing is based on our legitimate interest. In this case, if no other legal basis can be established for the processing, we terminate it.
  • Right to erasure: in certain cases you have the right to request that we delete the personal data we store about you.
  • Right to restriction of processing: you may request the restriction of the processing of your data if you feel that the data is not correct, or you do not want us to process it, until the enforceability of another right is decided.
  • Right to data portability: in certain cases you have the right to take the personal data you provided to us, in which case we hand it over in electronic form.

In the case of a request to exercise your rights, we examine it without delay and comply with it within one month at the latest, or inform you of the reason for any refusal.

11 Remedies

If you have any concern regarding the processing of your personal data, we ask that you first contact us so that we can clarify the question or concern. If we are unable to provide a satisfactory answer, you may lodge a complaint with the data protection authority or bring an action before the court.

AuthorityHungarian National Authority for Data Protection and Freedom of Information (NAIH)
Seat1125 Budapest, Szilágyi Erzsébet fasor 22/C., Hungary
Mailing address1530 Budapest, Pf.: 5.
Phone+36 (1) 391 1400
Emailugyfelszolgalat@naih.hu
Websitewww.naih.hu

12 Scope of the privacy notice

Last updated: 10 October 2026

This notice is effective from the date shown above. We update it from time to time, so we recommend that you check it occasionally; the date above always shows the current version.