Privacy Policy

The data controller is the operator of the gerenda.studio service, Norbert Hőgyes EV. (hereinafter: Data Controller). Contact: info@gerenda.studio.

On the gerenda.studio website and application, we process personal data for the following purposes:

• Providing the service: Creating an account, saving 3D models, drawings, and quotes (legal basis: performance of a contract - GDPR Art. 6(1)(b)).
• Contact and support: Customer service communication (legal basis: our legitimate interest in maintaining and supporting the Service - GDPR Art. 6(1)(f)).
• Service development and testing: We use technical model and usage data (e.g., 3D models, dimensions, generated drawings and other outputs, feature usage) - in anonymized or aggregated form, and excluding your clients' personal data - to operate, test, and improve the Service, including during and after the beta (legal basis: our legitimate interest in developing the Service - GDPR Art. 6(1)(f)).
• Newsletter: If you subscribe, we send occasional product news and launch updates by email until you unsubscribe (legal basis: your consent - GDPR Art. 6(1)(a)). Every message contains an unsubscribe link, and you can withdraw your consent at any time.
• Analytics: Measuring site traffic and usage using Google Analytics (legal basis: data subject's consent - GDPR Art. 6(1)(a)).

• Name and email address (for registration)
• Login credentials (hashed password)
• IP address and browser data (for security and analytics)
• Data of projects and quotes recorded in the application

Our website uses two types of cookies:

• Essential cookies: Necessary for maintaining the session and logging in (Sanctum). The system cannot function without them.
• Analytical cookies: Google Analytics cookies that anonymously collect data on site usage. These are only loaded after your explicit consent (banner).

Data associated with a user account is kept until the account is deleted, or for 5 years from the last login. Billing data is stored for 8 years in accordance with accounting laws.

The Data Controller uses the following data processors to provide the service:

• Contabo GmbH (Welfenstrasse 22, 81541 Munich, Germany) - Hosting provider (cloud servers).
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) - Google Analytics (only if you consent). In this case data may be transferred to the United States; the transfer is safeguarded by Google's certification under the EU-US Data Privacy Framework and by the European Commission's Standard Contractual Clauses.
• Mailgun (Mailgun Technologies, Inc. / Sinch) - email delivery (transactional emails and, if you subscribe, the newsletter). Where the EU region is used, data is stored in the EU; otherwise transfers to the United States are safeguarded by the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.

If you record the personal data of your own clients (third parties) (e.g., name, address) in the quote module, you are considered the Data Controller of this data, and gerenda.studio acts as the Data Processor. This relationship is governed by the Data Processing Agreement (DPA) set out in the Terms of Service.

You have the right to:

• access personal data concerning you,
• request the rectification or erasure of data,
• request the restriction of processing,
• object to processing based on our legitimate interest,
• data portability - receive your data in a structured, commonly used, machine-readable format,
• withdraw your consent at any time (without affecting the lawfulness of processing before the withdrawal).

You can submit your requests to info@gerenda.studio. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; 1055 Budapest, Falk Miksa utca 9-11.; postal: 1363 Budapest, Pf. 9.; naih.hu).