Privacy Policy

Last updated: 1 November 2026

This policy explains what personal data I collect when you visit this website, write to me or work with me, why I collect it, and what rights you have. I keep it to the minimum I need, and I treat everything you share with me as confidential.

Who is responsible for your data

Gergely Stich (Gergő), sole trader (egyéni vállalkozó), Budapest, Hungary
Registration number: 57015598
Tax number: 58668948-1-42
Email: [email protected]

What data I collect and why

When you write to me. Through the contact form or by email, I receive your name, your email address and whatever you choose to write. I use this only to reply to you and to arrange our first session. Legal basis: steps you ask for before we agree to work together (GDPR Art. 6(1)(b)).

When we work together. To support our work, I may keep short session notes. These can include information about your wellbeing, which is a special category of data. I keep them strictly confidential and use them only for our work. Legal basis: our agreement (Art. 6(1)(b)) and your explicit consent (Art. 9(2)(a)), which you can withdraw at any time.

Invoices. When you pay for sessions, I keep the details needed on invoices (name, address if required, amount, date). Legal basis: legal obligation under Hungarian accounting and tax law (Art. 6(1)(c)).

Newsletter. If you sign up on the Library page, I use your name and email address to tell you about workshops and events. Legal basis: your consent (Art. 6(1)(a)). You can unsubscribe at any time by replying to any email.

Visiting the website. When you visit, the hosting provider processes technical data such as your IP address and browser type to deliver the site and protect it from attacks. Legal basis: legitimate interest in a secure, working website (Art. 6(1)(f)).

Services I use

I only share data with providers that I need to run my practice, and only as much as they need:

• Formspree (contact and newsletter forms): passes your form message on to my email.
• Google (Google Meet video sessions and email): sessions are encrypted and never recorded.
• Cloudflare (website hosting and security).
• Instagram / Meta: only on the Microblog page, and only after you accept optional cookies.

Some of these providers are based in the United States. Where data leaves the EU, they rely on recognised safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long I keep your data

• Messages from people who don't start working with me: up to 1 year, then deleted.
• Session notes and client contact details: for as long as we work together and up to 5 years after our last session, unless you ask me to delete them earlier.
• Invoices: 8 years, as required by Hungarian accounting law.
• Newsletter: until you unsubscribe.

Cookies

This website does not use advertising or analytics cookies. Your cookie choice is saved only in your own browser. Instagram posts on the Microblog page load only if you accept optional cookies, and Instagram may then set its own cookies. You can change your choice at any time with the "Cookie settings" link at the bottom of each page.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its use, to receive it in a portable format, and to withdraw your consent at any time. Just write to [email protected], and I'll respond within one month.

If you feel your data has not been handled properly, you can also contact the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9–11, 1055 Budapest, Hungary, [email protected], www.naih.hu. If you live in another EU country, you can also turn to the authority there.

Changes

If this policy changes, I'll update it here and change the date at the top.