Privacy policy
Last updated:
This policy describes what personal data reaches us when you use www.arystrix.hu, what we do with it, and what rights you have. We only list what actually happens.
1. The controller
2. Cookies and tracking
Visitor statistics (PostHog). We use PostHog Inc. to measure how many people use the site and how; the data is stored in PostHog's EU data centre. Until you decide in the cookie banner, or if you choose “Decline”, we measure without cookies and without any identifier stored in your browser: PostHog's server turns your IP address, your browser details (user agent) and a random value that is replaced daily and then deleted into an irreversible code (hash). So we only see how many visitors there were that day, which pages they viewed and what they clicked; we cannot identify you. The legal basis is our legitimate interest in measuring how the site works (Art. 6(1)(f) GDPR).
If you choose “Accept”, PostHog uses its own cookie and your browser's local storage (entries starting with “ph_”) so it can link your later visits, and it may record your visit (session replay): mouse movements, clicks and changes on the page, so we can see where people get stuck. We do not record the text you type (form fields, chat messages), and PostHog does not load at all on the page after payment. The legal basis is your consent (Art. 6(1)(a) GDPR). PostHog Inc. is a US company; it stores the data in its EU data centre.
Meta pixel — only with your consent. If you choose “Accept” in the cookie bar, the site loads the pixel of Meta Platforms Ireland Limited. We use it to measure how many visitors come from our ads and how many of them write to us, book a call or order; Meta can also show you our ads again on Facebook and Instagram. The pixel stores Meta cookies (e.g. “_fbp”) in your browser and sends Meta the address of the page you visit, details of your browser and your IP address. If you decline or do not decide, the pixel is not loaded.
After a successful payment — again only with your consent — our server reports the purchase to Meta (Conversions API): the order amount and currency, the payment ID, your email address as a SHA-256 hash, plus your IP address, your browser details (user agent) and the values of the Meta cookies (“_fbp”, “_fbc”), so that Meta can match the purchase to the ad. We only do this within 24 hours of the payment. The legal basis is your consent (Art. 6(1)(a) GDPR). We are joint controllers with Meta for collecting and transmitting this data; Meta may transfer it outside the EU (USA) under its own rules.
You can withdraw your consent at any time with the button below: after that the pixel is no longer loaded, and we delete the cookies Meta set on this site (“_fbp”, “_fbc”) from your browser.
The same button also switches PostHog back to anonymous measurement without cookies, and we delete its cookies and stored data starting with “ph_” from your browser.
If you choose a language in the language selector, we store a cookie named “arx_locale” for one year so that the site appears in that language next time too. We do not store IP addresses: the country is determined at the edge of the hosting provider's network, without being stored.
3. The chat assistant
The messages you send to the assistant on this site are forwarded for processing to OpenRouter (OpenRouter, Inc., United States), which runs the language model that generates the reply. We do not link the conversation to an account and do not store it on our servers.
Important: we use free models, and with these the provider may also use the submitted text to improve its models. So please do not enter personal or confidential data in the chat. We deliberately ask for the name and email address needed for booking in a separate form rather than in the chat — so they never reach the language model.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR) — responding to enquiries quickly. Data is transferred to a third country on the basis of the provider's contractual safeguards.
4. Booking an appointment
If you book a consultation, we process your name, your email address and the time you chose. We create the event in Google Calendar (Google Ireland Limited) and send a calendar invitation to the address you gave. Any note you add is also included in the event description.
Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). Retention: until the arrangements are concluded, or until you or we delete the event from the calendar — you can request deletion at any time.
5. Contacting us by email
If you write to us, we process your message and the data it contains in order to answer your enquiry, until the correspondence is closed. Legal basis: legitimate interest, or steps prior to entering into a contract.
6. Hosting and technical logs
The site is hosted by Vercel Inc. (440 N Barranca Ave #4133, Covina, CA 91723, USA). The hosting provider may keep technical logs for operating the service and preventing abuse, which may include your IP address. We use the same IP address to rate-limit the chat and booking endpoints against abuse, without storing it permanently.
7. Online orders, payment and invoicing
If you order online on the site, payment is handled by Stripe Payments Europe, Limited (Ireland); your card details are processed directly by Stripe and never reach us. We use the name, email address and billing address you give at checkout — and, if you buy as a company, the company name and tax number — to fulfil the order and issue the invoice; the order details (including the quantity and amount ordered) also remain in our Stripe account. Invoices are issued in the system of KBOSS.hu Kft. (Számlázz.hu, 1031 Budapest, Záhony utca 7/D) and sent by email; Számlázz.hu also forwards the invoice data to the Hungarian tax authority (NAV), as required by law.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and, for invoicing, a legal obligation (Art. 6(1)(c) GDPR). Retention: we keep invoices and the related data for 8 years, as required by accounting law.
8. Brief and uploaded product photos
After payment, you can fill in the brief for your videos on the thank-you page (details of your online store and product, the main message, the target audience, style requests, the platforms and language, and your phone number if you give it) and upload product photos. We store these in the storage of Vercel Inc. (Vercel Blob, Frankfurt data centre); the files are available at addresses that cannot be guessed, and nothing on the site links to them. Please only upload photos that show no identifiable person, or only people whose consent you have.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Retention: for up to 1 year from delivery of the videos (for revisions and any repeat orders), after which we delete them; earlier at your request.
9. Processors at a glance
- Vercel Inc. — hosting and delivery, storage of briefs and uploaded photos (EU data centre)
- OpenRouter, Inc. — generating the chat assistant's replies
- Google Ireland Limited — calendar and appointment booking
- Stripe Payments Europe, Limited — online card payments
- KBOSS.hu Kft. (Számlázz.hu) — invoicing
- Meta Platforms Ireland Limited — ad measurement and remarketing, only with consent
- PostHog Inc. — visitor statistics and session recording (EU data centre); cookies and recording only with consent
10. Your rights
You can request a copy of the data relating to you, and its rectification or erasure, or the restriction of processing; you can object to processing based on legitimate interest, and you can request data portability. Write to [email protected] — we will reply within 30 days at the latest.
You can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9–11.; naih.hu), or take the matter to court.
