Privacy notice

In effect from 5 September 2026

1. Who processes your data

dr. Adam Koczor, plant doctor, regenerative and organic advisor
Budapest, Hungary
E-mail: info@​koczora​dam.hu
Website: https://koczoradam.hu

I am not required to appoint a data protection officer, so you can contact me directly at the e-mail address above with any data protection question.

2. What data I process, why and for how long

2.1 Contact form

Data processed: name, e-mail address, phone number (if you provide one), subject, message.
Purpose: so that I can answer your enquiry or call you back.
Legal basis: your consent (GDPR Article 6(1)(a)). If you request a quote, steps taken prior to entering into a contract (Article 6(1)(b)).
Retention: up to 2 years from the closure of the matter, so that there is a record for any later enquiry. On request I delete it sooner.

2.2 Enquiries by e-mail or telephone

Data processed: whatever you tell me about yourself — typically your name, contact details and information about your farm.
Purpose and legal basis: the same as for the contact form.
Retention: the same as for the contact form.

2.3 Assignments and contractual relationships

Data processed: the data needed for the contract and for invoicing, together with the professional documentation produced during the advisory work.
Legal basis: performance of the contract (Article 6(1)(b)); for invoicing data, a legal obligation (Article 6(1)(c)).
Retention: accounting documents must be kept for 8 years under Hungarian Act C of 2000 on Accounting.

2.4 Operation and security of the website

Data processed: IP address, technical data of the browser and device, and the time of the request — in server logs and in the security plugin protecting the site (Wordfence).
Purpose: running the website and filtering out attacks and abuse.
Legal basis: legitimate interest (Article 6(1)(f)) — keeping the website available and secure.
Retention: a few weeks, after which the logs are overwritten automatically.

2.5 Visitor statistics

Data processed: the pages viewed, the time of the visit and the referring page, in aggregate.
Purpose: so that I can see which content is useful.

Two kinds of measurement run on the website:

• Cookieless visit counting (Burst Statistics): on my own server, without cookies or unique identifiers, in aggregate form. The legal basis is my legitimate interest (Article 6(1)(f)) in seeing how much the website is visited. This data is not shared with third parties.
• Google Analytics 4: only starts if you consent to statistics cookies in the cookie banner (Article 6(1)(a)). In that case the data is processed by Google Ireland Limited and may also be transferred to the United States; Google is certified under the EU–US Data Privacy Framework. You can withdraw your consent at any time.

Retention: the aggregated Burst data stays in my own database; in Google Analytics 4 it is 14 months.

2.6 Embedded content and external providers

The website also displays YouTube videos and uses Google's font service (Google Fonts). When these load, your browser contacts Google's servers and Google learns your IP address. That is why I block this content until you consent to it loading in the cookie banner.

Provider in the European Economic Area: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Data may also be transferred to the United States; Google is certified under the EU–US Data Privacy Framework. You can read about Google's data processing on the https://policies.google.com/privacy page.

3. Cookies

Exactly which cookies the website uses and what they are for is set out in the cookie policy . You can change or withdraw your consent there at any time.

4. Who has access to your data

I do not sell your data and I do not use it for advertising. Apart from me, access is limited to the providers without whom the site could not run, and who may act only on my instructions:

• the website's hosting provider (data stored on the server),
• my e-mail provider (messages sent to me),
• in the case of a contractual assignment, my accountant (invoicing data).

I may disclose data at the request of an authority or a court where the law requires it.

5. Automated decision-making and profiling

There is none. I do not make any decisions about you by automated means.

6. Your rights

• Information and access: you can ask whether I process any data about you and, if so, what.
• Rectification: you can ask for inaccurate data to be corrected.
• Erasure: you can ask for your data to be deleted, except what I am required by law to keep (an invoice, for example).
• Restriction of processing: you can ask me to suspend the use of your data for a time.
• Objection: you can object to processing based on legitimate interest.
• Data portability: you can ask me to provide the data received from you in a machine-readable format, or to transfer it to someone else.
• Withdrawal of consent: you can withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.

You can exercise any of these by writing to info@​koczora​dam.hu . I reply within 30 days at the latest.

7. Complaints and remedies

If you believe my data processing is unlawful, write to me first — most things can be settled with a single exchange of letters. You can also lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Registered office: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Web: www.naih.hu

If your rights are infringed you may also go to court; proceedings may be brought before the regional court where you live.

8. Changes to this notice

If the operation of the website or my services change, I will update this notice. The version in force is always available on this page; the date of the latest change is shown at the top.