Development draft
Privacy notice
Last reviewed: 26 August 2026.
1. Controller and contact
The controller is the natural or legal person that determines the purposes and means of processing. The LARISEN brand name alone does not identify the controller.
- Brand
- LARISEN
- Interim operator and controller
- Kiss Gergő Xavér | Larisen Management
- Controller’s official name, registered office, registration and tax identifiers
- The planned company has not yet been established, so these details are not available. They must be published before launch.
- Privacy contact
- [email protected]
- Data protection officer
- No contact details have been supplied. If a DPO is required or appointed, their contact details must be published here.
2. What processing does this notice cover?
The V1 website has no contact form, user accounts, newsletter, analytics, marketing pixels or embedded social media. The table below only covers processing arising from its current technical operation and email enquiries.
| Processing activity | Data and purpose | Legal basis | Retention |
|---|---|---|---|
| Secure delivery of the website | Public hosting may generate technical access data, such as IP address, request time, requested URL, browser and device information. The purpose is to operate, troubleshoot and secure the website and prevent abuse. | GDPR Article 6(1)(f): the controller’s legitimate interest in secure and reliable website operation. | The actual hosting provider’s log-retention period must be recorded from the live system configuration. |
| Remembering language choice | The browser’s local storage contains only the larisen.locale key and a hu or en value. After a manual language switch, this helps display the chosen language; it does not contain a name, account identifier, behavioural profile or analytics identifier. | Providing the language setting expressly requested by the visitor. The storage can be deleted at any time in the browser. | It remains in the browser’s local storage until the visitor deletes it. |
| Handling email enquiries | If you write to an email address shown on the site, data you voluntarily include – in particular your name, email address, message and professional information needed for a potential collaboration – may be processed. The purpose is to respond and, where relevant, prepare a collaboration. We aim to respond to enquiries within a short time. | GDPR Article 6(1)(b) where the enquirer requests steps before entering into a contract; for other enquiries, GDPR Article 6(1)(f), the legitimate interest in communication and handling business enquiries. | For as long as necessary to answer the enquiry and, where relevant, prepare or maintain a collaboration. Correspondence is reviewed periodically and erased when no longer necessary; data retained to establish, exercise or defend legal claims is kept until the claim can no longer be pursued. |
Please do not send health data or other special-category data to the public email addresses. If LARISEN later needs to process such data, it will prepare a separate notice with an appropriate legal basis and safeguards.
3. Recipients, processors and international transfers
LARISEN does not sell personal data, and the V1 website does not send data to analytics or advertising systems. Providers needed for public operation may nevertheless have technical access.
- Hosting/CDN and DNS provider
- A Cloudflare Pages deployment is planned, but the live account and actual service scope have not been approved. The processor/recipient status, contractual terms and log retention must be recorded before launch.
- Email provider
- No provider details have been confirmed. The actual provider receiving email enquiries, its processor terms and retention must be stated before launch.
- Third country or international organisation
- Any transfer depends on the actual providers. If data is transferred outside the EEA, the final notice must identify the safeguard used and how it can be accessed.
4. Your rights and remedies
You may request access to your personal data, rectification or erasure, restriction of processing and, where the conditions are met, data portability. You may object to processing based on legitimate interests. Submit your request to:
As a rule, the controller must provide information about action taken without undue delay and at the latest within one month. Where necessary, this may be extended by a further two months; you must be informed of the extension within the first month.
If you believe that processing of your data breaches the applicable rules, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): Falk Miksa utca 9–11, 1055 Budapest, Hungary; postal address: 1363 Budapest, Pf. 9.; email: [email protected]; web: www.naih.hu. You may also seek a judicial remedy.
5. Automated decisions, profiling and direct marketing
The V1 website does not carry out automated decision-making or profiling and does not send marketing messages. Before any such processing starts, a separate notice and, where required, an appropriate consent mechanism must be introduced.
6. Security and changes to this notice
The current website uses self-hosted typefaces and brand assets; it loads no external analytics, advertising or social-media scripts. Before launch, the controller must maintain technical and organisational measures and a processor record that reflect the actual systems. This notice must be updated when processing changes; the effective date of the new version will be shown on the page.
7. Legal basis
This draft has been prepared with regard to Articles 5, 6, 12–14, 15–22 and 77 of Regulation (EU) 2016/679 (GDPR), and the principles of Hungary’s Act CXII of 2011 on informational self-determination and freedom of information.