Privacy policy

How Do We Handle the Data You Provide on the Website?

1 - Introduction

We take data protection seriously. This Privacy Policy explains how we handle personal data collected via the website (www.environmentworkshop.com) and in connection with the services provided by Rónai Virtual Design Kft:

2 - What Personal Data We Process and Why

“Personal data” means information that can identify you directly or indirectly. We may process the following categories:

2.1 – Communication data

Messages you send us (via forms, email, social media messages, or other channels). We process this to respond to you, fulfill orders, and keep records for potential legal claims. Legal basis: legitimate interest and/or performance of a contract.

2.2 – Customer/purchase data

Name, billing and shipping address, email, phone number, purchased product/service details. Purpose: order fulfillment and accounting/legal record-keeping. Legal basis: performance of a contract and legal obligation.

2.3 – User data

Data created when you use the website that supports technical operation, security, backups, and delivering relevant content. Legal basis: legitimate interest.

2.4 – Technical Data

IP address, login data, browser/device data, visit timestamps, page views, navigation paths, time zone, device identifiers. Purpose: analytics, security, and improving marketing effectiveness. Legal basis: legitimate interest.

2.5 – Marketing preference data

Your preferences regarding which marketing content you want to receive. Purpose: enabling participation in promotions and sending offers relevant to your interests. Legal basis: legitimate interest and/or consent (where required).

We do not intentionally collect special categories of data (e.g., ethnicity, religion, political views, health data, biometric data).

3 - How we collect data

We collect data when you provide it directly (e.g., placing an order, contacting us).

Some data is collected automatically when you use the website (e.g., via cookies and similar technologies). These only operate after you provide consent where required.

We may also receive data from third-party partners such as analytics providers (e.g., Google), advertising platforms (e.g., Facebook/Meta), and payment providers (e.g., Stripe).

4 - Security measures

We take practical steps to protect your data and comply with applicable rules:

We use SSL/TLS across the website (e.g., Let’s Encrypt).
We use security tooling to protect against brute-force and malware attacks.
Certain customer and user data may be stored in an encrypted or pseudonymized form where appropriate.
You can request information, correction, or deletion of your data via our contact channels.

5 - Marketing communications

We may send marketing messages if you purchased from us or if you explicitly subscribed/consented. You can unsubscribe at any time using the link in our emails or by contacting us at:

andras@andrasronai.com

Even if you unsubscribe from marketing, we may still contact you regarding service delivery and transactional matters.

6 - Sharing data with service providers

We may share personal data with service providers strictly as needed to operate the business, such as: IT providers, accountants, legal counsel, banks/insurers, government authorities (where required), and payment providers who securely handle card payments.

International data transfers: some providers may be outside the EEA. Where transfers occur, we use appropriate safeguards (e.g., adequacy decisions, standard contractual clauses, and/or consent where required).

External links and embedded services: our pages may contain links or embedded code operated by third parties. We are not responsible for their privacy practices.

7 - Data retention

We keep personal data only as long as needed for the purposes described above, and as required by legal/accounting obligations. We consider the amount, nature, sensitivity, and potential risks when setting retention periods.

8 - Your rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) (and/or applicable local laws) may give you the following rights regarding your personal data.

8.1 Right of access

You have the right to request confirmation as to whether we process personal data about you and, if so, to request access to that data and information about:

The purposes of processing
The categories of personal data concerned
The recipients (or categories of recipients) of the data
the planned retention period (or criteria used to determine it)
The source of the data (if not collected from you directly)
Whether automated decision-making/profiling is used (if applicable)
The safeguards applied to international transfers (if applicable)

8.2 Right to rectification

You have the right to request correction of inaccurate personal data and to have incomplete data completed.

8.3 Right to erasure (“right to be forgotten”)

You may request deletion of your personal data where, for example:

The data is no longer necessary for the purpose it was collected for
You withdraw consent (where processing was based on consent)
You object to processing and there are no overriding legitimate grounds
The data has been unlawfully processed
Deletion is required by law

Important: We may not be able to delete certain data immediately if we are legally required to retain it (e.g., accounting records, invoicing), or if it is needed to establish, exercise, or defend legal claims.

8.4 Right to restriction of processing

You may request that we restrict processing of your data where:

You contest the accuracy of the data (restriction applies while we verify it)
Processing is unlawful but you prefer restriction instead of deletion
We no longer need the data, but you need it for legal claims
You have objected to processing (restriction applies while we assess the objection)

When processing is restricted, we will store the data but process it only in limited cases (e.g., with your consent or for legal claims).

8.5 Right to data portability

Where processing is based on consent or contract and carried out by automated means, you have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that we transmit it to another controller where technically feasible.

8.6 Right to object

You have the right to object to processing based on our legitimate interests. In that case, we will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or the processing is needed for legal claims.

You also have the right to object at any time to processing for direct marketing purposes. If you object, we will stop processing your data for direct marketing.

8.7 Right to withdraw consent

Where we process your data based on consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

8.8 How to exercise your rights

To exercise any of these rights, please contact us at: andras@andrasronai.com.

To protect your privacy and prevent unauthorized access, we may ask you to verify your identity before fulfilling your request.

We aim to respond within the time limits required by law (generally within one month, with possible extension in complex cases).

8.9 Complaints and supervisory authority

If you believe that we have not handled your personal data properly, you have the right to lodge a complaint with your local supervisory authority.

If you are in Hungary, you may contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

You also have the right to seek judicial remedy.

8.10 Note on service delivery

Please note that certain requests (e.g., deletion or restriction of essential account or payment-related data) may limit our ability to provide access to the course and related services.

9 - Cookies

For details about cookies and how to manage them, please see our Cookie Policy.

If you have any questions, just drop me a message and I’ll help: andras@andrasronai.com

Privacy Policy | Cookie Policy