in which we inform you, as a visitor to our website and a user of our services, of our Company's data processing and data protection rules.
1. What principles do we follow when processing data?
In its data processing, our Company follows the principles below:
we process personal data lawfully, fairly and in a manner that is transparent to you.
we collect personal data only for specified, explicit and legitimate purposes and do not process them in a manner incompatible with those purposes.
the personal data we collect and process are adequate and relevant in relation to the purposes of the processing and are limited to what is necessary.
our Company takes every reasonable step to ensure that the data we process are accurate and, where necessary, kept up to date; inaccurate personal data are erased or rectified without delay.
we store personal data in a form that permits your identification for no longer than is necessary for the purposes for which the personal data are processed.
by applying appropriate technical and organisational measures, we ensure appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.
Our Company processes your personal data
on the basis of your informed and voluntary consent, only to the extent necessary and in every case for a specified purpose, that is, we collect, record, organise, store and use them.
in some cases the processing of your data is based on statutory provisions and is mandatory; in such cases we draw your attention to this fact separately.
and in certain cases our Company or a third party has a legitimate interest in processing your personal data, for example the operation, development and security of our website.
2. Who are we?
Business name: Szever Sebastian ev. (sole proprietor)
Registered office: 2400 Dunaújváros, Váci Mihály u. 5., Hungary
Website: https://design-ninja.agency
Postal address: 2400 Dunaújváros, Váci Mihály u. 5., Hungary
E-mail address: info@design-ninja.agency
Tax number: 59942216-1-27
Registration number: 57990237
Under Article 37 of the GDPR, our Company is not required to appoint a data protection officer.
Our Company's web hosting provider:
Hosting provider name: IONOS SE
Hosting provider registered office: 56410 Montabaur, Elgendorfer Str. 57, Germany
Hosting provider website: https://ionos.de
Hosting provider e-mail address: info@ionos.de
In processing data, and in order to serve our clients to a high standard, our Company uses a hosting provider that acts as a data processor: the IONOS SE named above stores the website and the data submitted through it. With your consent, we also use Google Analytics to measure website traffic (see section 3).
If we change the range of our data processors, we will record the changes in this notice.
The data we process:
We ask visitors to our website for their personal data only if they fill in the contact or quote-request form (name, e-mail address, message; optionally phone number, company name, budget and planned start).
We do not link the personal data provided in the form with other data, and identifying our visitors is fundamentally not our aim.
If you have any questions about data processing, you may request further information by e-mail at info@design-ninja.agency or by post, and we will send our reply within 15 days (but no later than within 1 month) to the contact details you have provided.
3. What are cookies and how do we handle them?
Cookies are small data files (hereinafter: cookies) that are placed on your computer through the website when you use it, in such a way that your internet browser saves and stores them. Most of the most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow the downloading and use of cookies by default; it is, however, up to you to refuse or block them by changing your browser settings, and you can also delete cookies already stored on your computer. More information on the use of cookies is available under the “Help” menu item of each browser.
There are cookies that do not require your prior consent. Our website gives brief information about these when you first visit it; examples include authentication, multimedia player and load-balancing cookies, session cookies that help customise the user interface, and user-centric security cookies.
Regarding cookies that require consent – where data processing already begins with the visit to the site – our Company informs you at the start of your first visit and asks for your consent.
Our Company does not use, and does not permit, cookies by means of which third parties could collect data without your consent. We place analytics (Google Analytics) cookies only after you have given your consent.
Accepting cookies is not mandatory; however, our Company accepts no responsibility if, without cookies being enabled, our website may not work as expected.
What cookies do we use?
Name: _ga
Provider: design-ninja.agency
Purpose: Registers a unique identifier that generates statistical data on how the visitor uses the website.
Expiry: 2 years
Type: HTTP
Name: _gat
Provider: design-ninja.agency
Purpose: Stores the throttle request rate used by Google Analytics.
Expiry: Session
Type: HTTP
You can read about the third-party cookie in detail on this page (in Hungarian).
4. What else should you know about our data processing related to our website
You provide personal data to us voluntarily, in your contact with our Company (for example when filling in the form); for this reason, please take particular care when providing your data to ensure that it is genuine, correct and accurate, because you are responsible for it. Incorrect, inaccurate or incomplete data may be an obstacle to the use of our services.
If you provide the personal data of another person rather than your own, we presume that you have the necessary authorisation to do so.
You may withdraw your consent to data processing at any time, free of charge, or request the restriction of the processing of your data, by writing to info@design-ninja.agency.
For technical reasons, we undertake to record the withdrawal of consent within 30 days; however, please note that, in order to comply with a legal obligation or to enforce our legitimate interests, we may continue to process certain data even after consent has been withdrawn.
If misleading personal data is used, or if one of our visitors commits a criminal offence or attacks our Company's systems, we will delete that visitor's data without delay or – where necessary – retain it for the duration of establishing civil liability or conducting criminal proceedings.
5. Other data processing matters
We may transfer your data only within the framework laid down by law, and in the case of our data processors we ensure, by stipulating contractual conditions, that they cannot use your personal data for purposes contrary to your consent. Further information can be found in section 2.
Of its own accord, our Company does not transfer data outside the European Union; our hosting provider operates in the European Union (Germany), and Google Analytics is used only with your consent.
Courts, the public prosecutor's office and other authorities (e.g. the police, the tax authority, the Hungarian National Authority for Data Protection and Freedom of Information – Nemzeti Adatvédelmi és Információszabadság Hatóság) may contact our Company to request information, the disclosure of data or the provision of documents. In these cases we must comply with our obligation to provide data, but only to the extent absolutely necessary to achieve the purpose of the request.
The contributors and employees involved in our Company's data processing and/or data processor activities are entitled to access your personal data to a predetermined extent, subject to a duty of confidentiality.
We protect your personal data with appropriate technical and other measures and ensure the security and availability of the data; we also protect them against unauthorised access, alteration, damage or disclosure and any other unauthorised use.
As organisational measures, we monitor physical access in our buildings, we continuously train our employees and we keep paper-based documents locked away with appropriate protection. As technical measures, we use encryption, password protection and antivirus software. However, we would like to draw your attention to the fact that data transmission over the internet cannot be considered completely secure. Our Company does everything to make our processes as secure as possible, but we cannot accept full responsibility for data transmission through our website; with regard to data that has reached our Company, however, we comply with strict rules in order to ensure the security of your data and to prevent unlawful access.
With regard to security, we ask for your help in carefully safeguarding your access password to our website and not sharing this password with anyone.
6. What are your rights and remedies?
With regard to data processing, you may
request information,
request the rectification, modification or completion of your personal data processed by us,
object to the data processing and request the erasure of your data and restriction of its processing (except in the case of mandatory data processing),
seek a judicial remedy before a court,
lodge a complaint with the supervisory authority or initiate proceedings (https://naih.hu/online-ugyinditas).
Supervisory authority: National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH), Hungary
Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Postal address: 1530 Budapest, P.O. Box 5.
Telephone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail: ugyfelszolgalat@naih.hu
Website: https://naih.hu/
At your request, we will provide information about the
data of yours that we process, or that is processed by us – or by the data processor we have engaged,
their source,
the purpose and legal basis of the data processing,
its duration or, where this is not possible, the criteria for determining that duration,
the name and address of our data processors and their activities related to data processing,
the circumstances and effects of personal data breaches and the measures we have taken to remedy and prevent them, and
in the case of the transfer of your personal data, the legal basis and the recipient of the transfer.
We provide our information within 15 days of the submission of the request (but no later than within 1 month). The information is free of charge, except where you have already submitted a request for information to us in the current year concerning the same scope of data. We will refund any fee you have already paid if we processed the data unlawfully or if the request for information led to a rectification. We may refuse to provide information only in the cases specified by law, indicating the relevant statutory provision and informing you of the possibility of a judicial remedy and of turning to the Authority.
Our Company notifies you, and also everyone to whom the data was previously transmitted for data processing purposes, of the rectification, restriction of processing, marking and erasure of personal data, unless the absence of notification does not harm your legitimate interest.
If we do not comply with your request for rectification, restriction of processing or erasure, within 15 days of receiving the request (but no later than within 1 month) we communicate the reasons for our refusal in writing or – with your consent – by electronic means, and we inform you of the possibility of a judicial remedy and of turning to the Authority.
If you object to the processing of your personal data, we will examine the objection within 15 days of the submission of the request (but no later than within 1 month) and inform you of our decision in writing. If we have decided that your objection is justified, we will terminate the data processing – including further data collection and transmission – and restrict the processing of the data, and we will notify of the objection, and of the measures taken on the basis of it, everyone to whom the personal data affected by the objection was previously transmitted and who are obliged to take action to enforce the right to object.
We will refuse to comply with the request if we prove that the data processing is justified by compelling legitimate grounds which override your interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims. If you disagree with our decision, or if we fail to meet the deadline, you may turn to the court within 30 days of the communication of the decision or of the last day of the deadline.
Data protection lawsuits fall within the jurisdiction of the regional court (törvényszék); at the choice of the data subject, the lawsuit may also be brought before the regional court of the data subject's place of residence or place of stay. A foreign national may also lodge a complaint with the supervisory authority competent for their place of residence.
Before turning to the supervisory authority or the court with your complaint, we ask you to contact our Company – in order to consult and to resolve the problem that has arisen as quickly as possible.
7. What are the main laws governing our activities?
Regulation (EU) 2016/679 of the European Parliament and of the Council on natural persons with regard to the processing of personal data (GDPR)
Act CXII of 2011 on the Right to Informational Self-Determination and on the Freedom of Information – (Info Act, “Infotv.”)
Act V of 2013 on the Civil Code (“Ptk.”)
Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services – (“Eker tv.”)
Act C of 2003 on Electronic Communications – (“Ehtv.”)
Act CLV of 1997 on Consumer Protection (“Fogyv tv.”)
Act CLXV of 2013 on Complaints and Public Interest Disclosures. (“Pktv.”)
8. Amendment of the privacy notice
Our Company reserves the right to amend this Privacy Notice, of which it will inform the data subjects in an appropriate manner. Information on data processing is published on the website design-ninja.agency.
Budapest, 9 October 2026