Privacy Policy
Last updated: 1 November 2026
1. Controller
The controller responsible for processing personal data on this website is:
Jan Müller, Bécsi út 415, 1037 Budapest, Hungary, email: contact@purrnancial.com
A data protection officer has not been appointed, as this is currently not required under the statutory conditions.
2. Overview
We deliberately keep data processing to a minimum. This website uses no analytics or marketing tools, no advertising pixels, no remarketing and no social media tracking. We process personal data only where necessary to operate the website, to answer enquiries, or on the basis of your consent.
3. Hosting and server log files
This website is hosted by Netlify, Inc., 512 2nd Street, Suite 200, San Francisco, CA 94107, USA. When you visit the site, the server automatically processes technical data transmitted by your browser (so-called log files):
- IP address (possibly shortened)
- date and time of the request
- page or file requested
- amount of data transferred and status code
- browser type, operating system, referrer URL
Purpose: Delivering the website, security and stability of operations, error analysis.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and error-free operation).
Storage period: Netlify stores these log files only as long as necessary for the purposes stated above and then deletes or anonymises them. The request logs available to us in the Netlify dashboard are kept for one day.
Data processing agreement: A data processing agreement under Art. 28 GDPR exists with Netlify, Inc. (Netlify Data Processing Agreement, last updated 9 June 2026, which forms part of Netlify’s Self-Serve Subscription Agreement). Netlify, Inc. is based in the USA. The transfer takes place on the basis of the EU-US Data Privacy Framework; if it becomes invalid or Netlify’s certification lapses, the EU Standard Contractual Clauses apply.
4. Contact by email
If you contact us by email, we process your email address, your name (if provided) and the content of your message in order to answer your enquiry.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in answering enquiries), or Art. 6(1)(b) GDPR where the enquiry aims at a contract.
Storage period: We delete the enquiry once it has been dealt with conclusively and no statutory retention duties apply, as a rule after 6 months.
Recipients: Namecheap, Inc. (provider of the email service for contact@purrnancial.com) as processor. A data processing agreement exists (Namecheap Data Processing Addendum, last revised 27 September 2021, part of Namecheap’s Universal Terms of Service). Namecheap, Inc. is based in the USA; the transfer takes place on the basis of the EU Standard Contractual Clauses (Module Two).
5. Cookies and similar technologies
This website uses no cookies. We do not use cookies for analytics or marketing. If we do so in the future, it will happen only after your explicit consent via a consent banner, and you can withdraw this consent at any time.
6. External fonts, embeds and links
Fonts and media are loaded locally from our own server. No data is transmitted to third parties.
Links to external sites (e.g. to our social media profiles) become active only when you click them. The respective providers are responsible for the data processing there.
7. Our profiles on Instagram, TikTok, YouTube and LinkedIn
We run profiles on Instagram (Meta Platforms Ireland Ltd.), TikTok (TikTok Technology Limited, Ireland), YouTube (Google Ireland Ltd.) and LinkedIn (LinkedIn Ireland Unlimited Company). When you visit our profiles or interact with them (likes, comments, messages, subscriptions), the platforms process your data under their own privacy policies, in part also for advertising purposes and with transfers to third countries. We have only limited influence on this processing.
We generally receive aggregated statistics from the platforms (e.g. reach, views, demographic groups). Where the platforms provide us with these statistics, joint controllership between us and the respective platform may exist (Art. 26 GDPR).
If you write to us or comment via the platforms, we process this content to reply and to moderate the community (Art. 6(1)(f) GDPR).
Privacy information of the platforms:
- Instagram/Meta: privacycenter.instagram.com/policy
- TikTok: tiktok.com/legal/page/eea/privacy-policy/en
- YouTube/Google: policies.google.com/privacy
- LinkedIn: linkedin.com/legal/privacy-policy
8. Recipients and third-country transfers
Recipients of your data are exclusively the service providers named in this policy (hosting, email) and the social media platforms to the extent described above. A transfer to countries outside the EU/EEA takes place to the USA, for hosting (Netlify, Inc.) on the basis of the EU-US Data Privacy Framework or, as a fallback, the EU Standard Contractual Clauses, and for our email service (Namecheap, Inc.) on the basis of the EU Standard Contractual Clauses. Data is passed on to authorities only where legally required.
9. Storage period
We store personal data only as long as necessary for the respective purpose or as statutory retention periods require. Afterwards the data is deleted or anonymised. Specific periods are stated for each processing activity.
10. Your rights
Under the GDPR you have the following rights:
- access (Art. 15)
- rectification (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- objection to processing based on legitimate interests (Art. 21)
- withdrawal of consent given, with effect for the future (Art. 7(3))
To exercise your rights, an email to contact@purrnancial.com is sufficient. We usually reply within one month.
11. Right to lodge a complaint with a supervisory authority
You can lodge a complaint with a data protection supervisory authority. In Hungary this is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9-11., website: naih.hu. If you live in another EU member state, you can also contact the authority there.
12. No automated decision-making
Automated decision-making, including profiling within the meaning of Art. 22 GDPR, does not take place.
13. Security
We take appropriate technical and organisational measures (Art. 32 GDPR), e.g. encrypted transmission (HTTPS), access restrictions and regular updates.
14. Changes to this policy
We will update this policy if the website, services or legal situation change. The version published here applies.
Last updated: 1 November 2026