Legal
Kopaxgroup Kft. (“we”) respects your privacy. This policy explains what we collect, why, and the rights you have under the GDPR.
Last updated: 2026-06-16
The data controller is Kopaxgroup Kft., 1072 Budapest, Dob utca 20. 3. em. 26., Hungary. For any privacy question or to exercise your rights, email us at hello@kopaxgroup.com. We have not appointed a Data Protection Officer, as one is not required for an organisation of our size.
When you use our contact form we collect your name, email address, optionally your company and budget range, and the content of your message. We also use Google Analytics for aggregated audience statistics — but only if you accept analytics cookies. We store a small functional preference for your light/dark theme choice in your browser.
Contact form: to respond to your enquiry and take steps at your request before any engagement — Art. 6(1)(b) (pre-contract) and 6(1)(f) (legitimate interest in replying). Analytics: to understand and improve the site — Art. 6(1)(a) (your consent). Anti-spam (Turnstile): to protect our forms from abuse — Art. 6(1)(f) (legitimate interest in security). Legal records: to meet our legal obligations — Art. 6(1)(c).
Theme preference (“kx-theme”): a functional choice stored locally — strictly necessary, set only when you toggle the theme, no consent needed and no tracking. Google Analytics (“_ga”, “_ga_*”): analytics cookies set by Google only after you accept. We run Google Consent Mode with analytics storage denied by default, so nothing is set until you opt in via the cookie banner. Cloudflare Turnstile: a security check that issues a short-lived token and sets no persistent tracking cookie. You can change or withdraw your analytics choice at any time using “Cookie settings” in the footer.
We use Cloudflare Turnstile to protect our forms from abuse, on the basis of our legitimate interest in security (Art. 6(1)(f)). It runs invisibly, processes limited technical data (including your IP address for the verification call only, which we do not store), and does not track you across sites. Its use is governed by Cloudflare’s Turnstile Privacy Addendum (cloudflare.com/application-services/terms/turnstile-privacy-addendum/).
We rely on a small number of processors, each under a data-processing agreement: Resend (transactional email delivery), Cloudflare (website hosting and Turnstile anti-spam), and Google (Google Analytics, only with your consent). We never sell your data and there is no automated decision-making that produces legal effects about you.
Resend, Cloudflare and Google are established in the United States, so some data is transferred outside the EU/EEA. These transfers are safeguarded by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses included in each provider’s data-processing agreement.
We keep contact enquiries for up to 24 months, then delete them, unless the exchange leads to a contract or we must keep records to meet a legal obligation. Analytics data is aggregated and retained according to Google Analytics’ configured retention period.
You can request access, rectification, erasure, restriction or portability of your data, object to processing, and withdraw any consent at any time (without affecting prior processing). To exercise these rights, email hello@kopaxgroup.com. You also have the right to lodge a complaint with the Hungarian supervisory authority, NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság, 1055 Budapest, Falk Miksa utca 9–11, naih.hu).