Privacy Policy

1. Data Controller Details

Name: Gastro Management Korlátolt Felelősségű Társaság (Limited Liability Company)
Registered office: 1117 Budapest, Baranyai utca 7. 3rd floor, door 3
Tax number: 33017448-2-43
Company registration number: 01 09 454622
Email: info@gastromanagement.hu
Website: https://gastromanagement.hu

2. Purpose and Legal Basis of Data Processing

2.1 AI Website Audit Service

Processed data: website URL, email address

Purpose of processing: to perform the free AI website audit and send the audit report to the email address provided by the User.

Legal basis: performance of a contract between the Data Controller and the User, i.e. providing the requested service (GDPR Article 6(1)(b)).

Retention period: we store the data for 30 days from the fulfillment of the service, after which it is automatically deleted.

2.2 Newsletter and Marketing Communication

Processed data: email address, name (optional), restaurant name (optional)

Purpose of processing: sending newsletters and marketing content to the User about Gastro Management's services, restaurant marketing tips, and industry news.

Legal basis: the User's voluntary, explicit consent (GDPR Article 6(1)(a)).

Retention period: until consent is withdrawn. After unsubscribing, the email address will be deleted from the newsletter database within 5 working days.

2.3 Knowledge Base E-book Download Request

Processed data: name, email address, restaurant name (optional), optional comment, communication consent status, newsletter consent status, hashed IP address, browser identifier (User-Agent).

Purpose of processing: delivering free Knowledge Base materials (e-book, Excel template, AI prompt library, checklists) to the User via a unique, time-limited download link; fulfilling communication requests; preventing abuse (rate-limiting, fraud prevention).

Legal basis: performance of a contract between the Data Controller and the User, i.e. delivering the requested material (GDPR Article 6(1)(b)), and the User's explicit consent (GDPR Article 6(1)(a)) in the case of newsletter subscription.

Retention period: the unique download token is valid for 48 hours from issuance and can be used for a maximum of 3 downloads, after which it becomes inactive. We store the fact and time of the download request for 3 years for abuse prevention and complaint handling. In the case of newsletter subscription, the email address is kept until you unsubscribe.

Non-transferability of the download link: the sent download link is protected by a time limit (48 hours) and a download count limit (max. 3 downloads). We do not recommend sharing the link, as it will become invalid for third parties after its quick expiration.

3. Scope of Processed Data

When using our services, we process the following data:

• Website URL: the address of the website to be audited (only for the audit service)
• Name: the name provided by the User (contact, material request)
• Email address: the address for contact and material delivery
• Restaurant / company name: optional, provided by the User
• Requested material / package: the identifier of the requested e-book or service
• Message / comment: optional free text from the User
• IP address (hashed): for security and abuse prevention purposes, stored in a hashed format
• Browser identifier (User-Agent): abuse prevention and statistics
• Request timestamp: the exact time of submission
• Marketing consent status: the User's decision regarding the newsletter (yes/no)
• Data processing consent status: the User's acceptance of the privacy policy (mandatory)
• Download log (only for e-books): token, number of downloads, time of the last download

4. Data Transfer

The Data Controller transfers personal data only to the extent necessary to provide the service to the following data processors:

• Make.com (Celonis SE): an automation platform that handles the technical execution of the audit process. Data processing takes place within the EU.
• Email provider: for delivering the audit report and newsletter.

The Service Provider does not sell, rent, or otherwise make Users' personal data available to third parties.

5. Data Security

The Data Controller applies appropriate technical and organisational measures to protect personal data, including:

• SSL/TLS encrypted data transfer
• Access restriction (only authorised staff can access personal data)
• Regular security reviews
• Checking the GDPR compliance of data processors

6. Data Subject Rights

Under the GDPR, you have the following rights regarding the processing of your personal data:

• Right of access (Article 15): you can request information about what personal data of yours we process.
• Right to rectification (Article 16): you can request the correction of your inaccurate data.
• Right to erasure (Article 17): you can request the deletion of your personal data ("right to be forgotten").
• Right to restriction of processing (Article 18): you can request the restriction of data processing under specific conditions.
• Right to data portability (Article 20): you can request your data to be provided in a machine-readable format.
• Right to object (Article 21): you can object to the processing of your personal data.
• Withdrawal of consent: in the case of consent-based data processing, you can withdraw your consent at any time, which does not affect the lawfulness of processing based on consent before its withdrawal.

To exercise your rights, please contact us at info@gastromanagement.hu. We will fulfill your request within 30 days.

6.1 Right to Lodge a Complaint

If you believe that the data processing violates the provisions of the GDPR, you can lodge a complaint with the supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) (National Authority for Data Protection and Freedom of Information)
Address: 1055 Budapest, Falk Miksa utca 9-11.
Phone: +36 (1) 391-1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

7. Cookies

The website only uses strictly necessary (technical) cookies for its operation. We only use analytical or marketing cookies with the User's prior consent.

8. Unsubscribing from the Newsletter

You can unsubscribe from the newsletter in the following ways:

• By clicking the "Unsubscribe" link at the bottom of every newsletter
• By sending an email to info@gastromanagement.hu with the subject "Unsubscribe"

The unsubscription will be processed within a maximum of 5 working days.

9. Amendments to the Policy

The Data Controller reserves the right to amend this Privacy Policy. The amended policy takes effect upon publication on the website. In the event of significant changes, we will also notify Users via email.

10. Contact

If you have any data protection questions, please contact us:

Email: info@gastromanagement.hu
Address: 1117 Budapest, Baranyai utca 7. 3rd floor, door 3

Last modified: 13 April 2026