Privacy Policy

regarding data processing carried out through the onespire.net website

Last updated June 07, 2026

1. Introduction, details of the data controller

Onespire Private Limited Company (registered office: 1123 Budapest, Alkotás u. 53.; company registration number: 01-10-049612, telephone: +36 1 791 8331, email address: info@onespire.hu) as the Data Controller (hereinafter: “Data Controller”) provides IT consulting and development services to its clients.
The purpose of this notice is to provide visitors of the onespire.net website operated by the Data Controller (hereinafter: “Website”) (hereinafter: “User”; or: “Data Subjects”) regarding all relevant facts related to the processing of their personal data, including, in particular, the purpose and legal basis of data processing, the persons authorized to process data, the duration of data processing, and who may access the data in accordance with Regulation (EU) 2016/ 679/EU of the European Parliament and of the Council (hereinafter: “GDPR”), as well as Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (hereinafter: “Infotv”), in accordance with their provisions.
The Data Controller – in compliance with the requirements of data protection legislation – informs data subjects of the following regarding the processing of their personal data.

2. Technical data processing related to the operation of the website

When visiting the Website, the server hosting the Website may automatically log certain technical data to ensure the operation and security of the service.

2.1. Scope of data processed

IP address, browser type and version, operating system, time of visit, pages viewed, other technical data.

2.2. Purpose of data processing

To ensure the operation of the Website, maintain the security of the service, and prevent and detect misuse.

2.3. Legal basis for data processing

The Data Controller’s legitimate interest [GDPR Article 6(1)(f)].

2.4. Duration of data processing

Log files are retained for a maximum of a few days, after which they are automatically deleted or overwritten.

2.5. Data Processor

SiteGround – a hosting provider that provides the server infrastructure necessary for the Website’s operation. Hosting provider contact information: siteground.com

3. Cookies and similar technologies

The Website may use cookies and other similar technologies – including, in particular, tracking codes (scripts) and web beacons (pixels) – to ensure proper functioning, improve the user experience, and for statistical and marketing purposes.

3.1. Types of cookies and similar technologies

3.1.1 Cookie

A cookie is a small text file that the Website places on the User’s device. A cookie contains a unique identifier that allows the User’s device to be recognized during subsequent visits. The use of cookies supports the proper functioning and analysis of the Website, as well as – with consent – its marketing and business activities.

3.1.2 Script

A script is a piece of executable code that supports the Website’s operation, as well as analytical and marketing measurements (for example measuring traffic, tracking events).

3.1.3 Pixel (tracking pixel)

A pixel is a tiny, usually invisible image element that transmits information about user activity (for example page views, conversions) to the Website or an external service provider.

3.2. Purposes of cookies and similar technologies

The Website may use cookies, tracking codes, and image pixels for the following purposes:

i. To ensure the basic functionality of the Website and to maintain the proper operation of its services.
ii. To improve the user experience, including making the Website more convenient to use and recognizing returning visitors.
iii. To conduct statistical analyses to understand and improve the use of the Website.
iv. Analyzing technical and behavioral data related to the User’s device and, with consent, profiling for the purpose of preparing business inquiries.
v. Displaying marketing content and offers.

The Website may use these technologies on its own or with the involvement of third-party service providers.

3.3. Legal Basis and Categories of Cookies

The cookies and similar technologies used on the Website can be classified into the following categories:

3.3.1 Necessary (functional) cookies

These are essential for the basic functioning of the Website; therefore, their use is based on the Data Controller’s legitimate interest (GDPR Article 6(1)(f)).

These include, in particular:

• storing consent regarding cookie settings,
• ensuring session and security functions necessary for the technical operation of the Website,
• supporting the proper functioning of forms and protection against spam / abuse (for example bot protection).

3.3.2 Statistical cookies

These are used to analyze the use of the Website (for example traffic data). They are used exclusively based on the User’s consent (GDPR Article 6(1)(a)). These cookies are used to analyze the use of the Website:

• page views,
• aggregated measurement of user behavior,
• performance analysis.

Service Provider/Data Processor: Google Ireland Limited (Google).

3.4. Analytics providers

The Website may use analytics services, in particular Google Analytics, to analyze website traffic and usage data.

Purpose: to generate traffic statistics and analyze website usage.

Data processed: IP address (including in truncated form), device and browsing data, page interaction events.

Data processing role: typically an independent data controller and/or joint data controller in accordance with Google’s current terms and conditions.

3.4.1 Marketing cookies

These are used to display advertisements and content relevant to Users, also exclusively on the basis of consent (GDPR Article 6(1)(a)).

These cookies and similar technologies may be used to analyze user behavior, measure the effectiveness of advertisements and campaigns, and display embedded content (for example videos and maps) provided by third-party service providers.

This may include, in particular:

• remarketing,
• conversion tracking,
• ad targeting,
• use of embedded third-party content (for example video and map services).

Service providers/Data processors:

• Meta (Facebook / Instagram),
• LinkedIn,
• Google Ads,
• YouTube,
• Google Maps.

3.4.2 Technologies used for identification, analysis, and profiling

In certain cases, the Website may use cookies, tracking codes, and similar technologies to identify Users and for behavior-based profiling.

The purpose of this data processing is to identify User interests and to provide personalized content and business inquiries.

Such data processing is carried out exclusively on the basis of the User’s prior, explicit consent (GDPR Article 6(1)(a)).

Service Provider/Data Processor: Bizzy.ai (Dok-Noord 5A 9000 Gent, Belgium – business lead generation and interest-based analysis).

3.5. Cookie management

Upon their first visit to the Website, Users may choose to accept or reject non-essential cookies via the cookie consent interface.

Cookies can be deleted or disabled at any time in the browser settings; however, this may result in limited functionality of certain features of the Website.

3.6. Cookie management and consent

The User:

• can make a decision via the cookie banner upon their first visit,
• can modify or withdraw their consent at any time,
• can also delete or block cookies in their browser.

Non-essential cookies only function with active consent.

A detailed list of the cookies used by the Website can be found in Appendix 1.

3.7. Third-party providers and embedded content

In the course of the Website’s operation, technologies from third-party providers may be used, which may employ cookies, tracking codes, or similar technologies.

Cookies and similar technologies used by these third parties on the Website – provided you consent to their use – may transmit certain data, including personal data, for use by such third parties. The cookies or similar technologies of the providers listed below enable our Company to create advertising target groups or measure the effectiveness of our campaigns, but these external providers also use this data, for example, to create profiles.

3.7.1 The Website may use the following third-party service providers

• Google Analytics: to compile traffic and usage statistics.
• Google Maps: to display map content and location data.
• YouTube: to display embedded video content.
• Meta (Facebook): social media and remarketing services.
• LinkedIn: professional networking features and marketing activities.
• Bizzy.ai: behavioral analysis and profiling for the purpose of preparing business inquiries.

These providers operate in accordance with their own privacy policies, and the data processing they perform is governed by the respective provider’s privacy notice. Data transfer to third countries. Certain service providers (for example Google, Meta, LinkedIn) may transfer data outside the EU (for example to the U.S.).

Data transfers:

• are carried out with appropriate safeguards (for example SCCs – Standard Contractual Clauses),
• all within the scope of responsibility of the service providers.

The data processing role of external service providers may vary. Some service providers may act as independent data controllers (for example Bizzy .ai), others as joint data controllers, and in certain cases as data processors. The exact data processing role and liability are specified in the relevant service provider’s privacy policy.

Data processing carried out by external service providers is governed by the respective service providers’ own privacy policies. The Data Controller strives to use only GDPR-compliant service providers; however, it does not assume full responsibility for the independent data processing activities of external service providers.

3.8. External links and third-party websites

The Website may contain links to external websites operated by third parties.

External links placed on the Website are provided solely for the User’s information and convenience. The Data Controller has no influence over the content, operation, or data processing practices of external websites.

The Data Controller assumes no responsibility for data processing that occurs during the use of external websites.

hen accessing such sites, the processing of personal data is governed by the specific website’s own privacy policy.

The User is always required to review the data processing terms of the relevant external website before providing personal data or using a service there.

3.9. Embedded content

The Website may also display embedded content from third-party providers, such as:

• YouTube videos,
• Google Maps.

When this content is displayed, the providers may collect data from the User’s device and about their browsing activity.

Data processing role: independent data controller in accordance with the providers’ own terms and conditions.

Note: The Website has limited influence over their operation and data processing.

4. Contact and communication

When contact is made through the Website, the Data Controller processes the personal data provided in order to respond to incoming inquiries and maintain communication.

4.1. Method of contact

The User may contact the Data Controller by filling out the contact form available on the Website or by sending a message to the email address provided there.

4.2. Scope of processed data

During the contact process, the Data Controller may process the following data:

• name,
• email address,
• phone number (if provided),
• content of the message.

4.3. Purpose of data processing

The purpose of data processing is to facilitate contact, respond to incoming messages, and maintain communication with the User.

4.4. Legal basis for data processing

The legal basis for data processing is the Data Subject’s voluntary consent (GDPR Article 6(1)(a)).

4.5. Duration of data processing

The Data Controller processes personal data for a maximum of 12 months following the response to the inquiry, but no longer than until the consent is withdrawn – unless the inquiry forms the basis for a further legal relationship (for example the conclusion of a contract).

5. Data processors, data transfer

5.1. Hosting provider

The server infrastructure necessary for the operation of the Website is provided by SiteGround (headquarters: 7th Floor, 50 Broadway, London, SW1H 0DB), which acts as a data processor.

Responsibilities: ensuring the technical operation of the Website, server operation.

Data processed: technical log data (for example IP address, access data).

5.2. Data transfer

Users’ personal data is transferred to Bizzy.ai based on the users’ consent; such data processing is governed by Bizzy.ai’s own privacy policy: https://bizzy.ai/en/terms-and-policies/privacy-statement

6. Data security measures in place

To protect personal data, the Data Controller implements appropriate technical and organizational measures to ensure that the confidentiality, integrity, and availability of the data are maintained at all times.

The Data Controller’s measures cover the following areas in particular:

• preventing unauthorized access to IT systems,
• preventing unauthorized alteration, deletion, or destruction of data,
• minimizing accidental loss or damage to data,
• ensuring the continuous availability of systems and services.

The infrastructure used to operate the Website (including the hosting provider) employs appropriate security measures designed to protect personal data against unauthorized access and to maintain the secure operation of the service.
The Data Controller regularly reviews data security measures and updates them as necessary in accordance with changes in the technological and legal environment.

7. Rights of data subjects

Under the GDPR, the User has the following rights regarding the processing of their personal data.

7.1. Right of access

The User has the right to receive confirmation as to whether their personal data is being processed, and if so, has the right to access the personal data being processed, as well as information regarding the processing.

7.2. Right to rectification

The User has the right to request the rectification of inaccurate personal data and the completion of incomplete data.

7.3. Right to erasure (“right to be forgotten”)

The User has the right to request the erasure of their personal data if its processing is no longer necessary for the original purpose or if the data processing is unlawful.

7.4. Right to restriction of processing

The User has the right to request the restriction of the processing of their personal data, for example, if they contest the accuracy of the data, or if the processing is unlawful but they request restriction instead of erasure.

7.5. Right to object

The User has the right to object to the processing of their personal data if such processing is based on a legitimate interest. In this case, the Data Controller may no longer process the data, unless there are compelling legitimate grounds for doing so.

7.6. Right to withdraw consent

If the data processing is based on consent, the User has the right to withdraw their consent at any time. The withdrawal does not affect the lawfulness of the data processing carried out prior to the withdrawal.

7.7. Exercising rights

The User may exercise their rights by contacting the Data Controller. The Data Controller shall comply with requests without undue delay, but no later than within the time limit specified by law.

8. Remedies

If the User believes that the processing of their personal data violates applicable laws, they are entitled to seek legal remedies.

8.1. Contacting a supervisory authority

The User may lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place where the alleged infringement occurred. In Hungary, this is the National Authority for Data Protection and Freedom of Information (NAIH):

National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa Street 9-11.
Website: https://naih.hu
Email: ugyfelszolgalat@naih.hu

8.2. Legal Enforcement

In the event of a violation of the User’s rights, the User may also bring a lawsuit. The lawsuit may be filed before the court of the User’s place of residence or place of stay, at the User’s discretion.

9. Other provisions

9.1. Amendments to the Privacy Policy

The Data Controller reserves the right to unilaterally amend this Privacy Policy, particularly in the event of changes in legislation, official guidelines, or changes to the operation of the Website. Amendments take effect upon publication on the Website.

9.2. Effective date

This Privacy Policy takes effect on the date of its publication on the Website and remains in effect until revoked or amended.

Cookie details

Essential cookies

Statistical cookies

Marketing cookies