Privacy Policy

Last updated: April 17, 2026.

Data Controller

Company: BITNEX GROUP Korlátolt Felelősségű Társaság (BITNEX GROUP Kft.) Registered seat: 4400 Nyíregyháza, Dózsa György utca 9. 3rd floor, Hungary Company registration number: 15-09-069325 (Regional Court of Nyíregyháza as Court of Registration) Tax number: 13311908-2-15 Represented by: Tamás Nánási, Managing Director Email: info@nanasitamas.com Website: nanasitamas.com Data protection enquiries: info@nanasitamas.com. Data Protection Officer: appointing a DPO is not mandatory under GDPR Article 37, as our processing does not involve regular and systematic large-scale monitoring of data subjects, nor the large-scale processing of special categories of data. Data protection matters can be addressed directly at info@nanasitamas.com.

Data Collected

Through the contact form we collect the following personal data: — Name — Email address — Project type (optional) — Message text When submitting the form or browsing the site we also process technical data for abuse prevention and statistics: — IP address (truncated, used for rate limiting) — Browser and device type (user-agent) — Bot-protection signals (client-side telemetry processed by Vercel BotID, not used to uniquely identify you) — Aggregated, anonymous visit data (page, referrer, country, device type)

Purpose and Legal Basis

a) Responding to your contact inquiry Legal basis: consent of the data subject (GDPR Article 6(1)(a)). Providing your data is voluntary — consent is given by submitting the form and checking the consent checkbox. b) Abuse prevention, rate limiting, bot protection Legal basis: legitimate interest of the controller (GDPR Article 6(1)(f)). Our legitimate interest is to keep the service secure and stable and to filter out spam and automated attacks. c) Aggregated site analytics (Vercel Analytics) Legal basis: legitimate interest (GDPR Article 6(1)(f)). Vercel Analytics measures traffic in a cookieless, aggregated form without creating an individual identifier.

Data Processors

We use the following data processors to operate the service. Transfers to third countries rely on the EU–US Data Privacy Framework (DPF) and/or EU Standard Contractual Clauses (SCC). — Vercel, Inc. (USA) — hosting, Vercel Analytics (cookieless traffic measurement) and Vercel BotID (bot protection). DPF-certified. — Resend, Inc. (USA) — outbound email delivery (transactional email). DPF-certified. — Upstash, Inc. (USA) — Redis-based rate limiting; IP addresses are stored briefly (sliding window, up to 60 seconds). DPF-certified / SCC. — Cloudflare, Inc. (USA) — Cloudflare Email Routing (forwarding of messages sent to info@nanasitamas.com to the destination mailbox). DPF-certified. Each provider maintains its own privacy policy: vercel.com/legal/privacy-policy, resend.com/legal/privacy-policy, upstash.com/trust/privacy.pdf, cloudflare.com/privacypolicy.

Data Retention

— Contact messages: kept until the inquiry is answered and the related matter is concluded, plus up to 12 months in the email mailbox for potential follow-up. — IP address for rate limiting: up to 60 seconds (automatically removed by the Upstash Redis sliding window). — Bot-protection signals: transient, bound to a single request, not persisted. — Vercel Analytics aggregated metrics: retained per Vercel's storage rules (30 days at event level, aggregated thereafter; no individual identifier). Message content is not stored in a database — it is only forwarded via email.

Your Rights

Under the GDPR, you have the following rights: — Right of access: you can request information about the personal data we process about you. — Right to rectification: you can request correction of inaccurate data. — Right to erasure: you can request deletion of your data. — Right to restriction: you can request restriction of processing. — Right to data portability: you can request your data in a structured format. — Right to object: you can object to processing based on legitimate interest. — Right to withdraw consent: you can withdraw your consent at any time by emailing info@nanasitamas.com. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. To exercise your rights, contact info@nanasitamas.com. We will respond within 30 days.

Complaints

If you believe your rights have been violated, you can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or seek judicial remedy. Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary Website: naih.hu Email: ugyfelszolgalat@naih.hu

Cookies

The website only uses strictly necessary cookies: — NEXT_LOCALE — stores your selected language (expires after 1 year). Legal basis: legitimate interest / functionality, exempt from the ePrivacy Directive Article 5(3) consent requirement as technically necessary. No third-party marketing or profiling cookies are used. Vercel Analytics operates without cookies.

Automated Decision-Making

We do not perform automated decision-making (including profiling). The bot protection (Vercel BotID) is purely technical — it evaluates whether a request is human-originated, without making any substantive decision concerning the data subject.