Privacy Policy
Last updated: October 2026
This policy explains what personal data GBEX collects through gbex-automation.com, why we collect it, and what rights you have. We keep data collection to the minimum needed to respond to you and run our business.
1. Who we are
The data controller is Barnabás Gál (GBEX), Budapest, Hungary. For any privacy question or request, email barnabas@gbex-automation.com.
2. What data we collect
- Contact form: your full name, email address, company website (if provided), the message you write, and your confirmation that you accepted this policy.
- Email correspondence: anything you share with us when we exchange emails or meet for a consultation.
- Business contact data: if we reach out to you as a business, we may process your name, work email, job title and company, collected from public business sources.
- Technical data: our hosting provider automatically logs basic request data such as your IP address, browser type and the time of your visit, for security and reliability.
We do not use advertising or analytics cookies on this website.
3. Why we use it and on what legal basis
- To reply to your inquiry and prepare an offer — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
- To deliver our services if you become a client — performance of a contract (Art. 6(1)(b)).
- To contact businesses about relevant services — our legitimate interest in B2B communication (Art. 6(1)(f)). You can opt out at any time by replying to any of our emails.
- To keep the website secure and running — our legitimate interest (Art. 6(1)(f)).
- To meet legal obligations, such as accounting and tax rules (Art. 6(1)(c)).
4. Who we share it with
We never sell your data. We only share it with service providers that help us run the business, under data processing agreements:
- Netlify, Inc. — website hosting and contact form processing.
- Google LLC — email (Google Workspace / Gmail) and web fonts. Loading the page connects to Google's servers, which receive your IP address.
- Email outreach tools — used to send and manage B2B emails.
Some of these providers are based in the United States. Where data leaves the European Economic Area, transfers are protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
5. How long we keep it
- Inquiries that don't lead to a project: up to 2 years after our last contact.
- Client data: for the duration of the contract, plus as long as accounting and tax laws require.
- Opt-out requests: we keep your email on a suppression list so we don't contact you again.
You can ask us to delete your data earlier at any time.
6. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we process it, including direct marketing;
- receive your data in a portable format;
- withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, email barnabas@gbex-automation.com. We will respond within 30 days.
You also have the right to lodge a complaint with a data protection authority. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11, naih.hu. You may also contact the authority in your own country.
7. Security
The website is served over an encrypted connection, and access to submitted data is limited to the people who need it to respond to you.
8. Changes to this policy
We may update this policy from time to time. The latest version is always available on this page, with the date of the last update at the top.