Privacy Policy

1. Data Controller

Name: Jusztin Máté Gergő e.v. (Sole Proprietor)

Registered office: 1239 Budapest, Csendes utca 8., Hungary

Tax number: 68965459-1-43

2. Purpose and legal basis of processing

Purpose	Data	Legal basis	Retention
Contact requests	Name, email, message	GDPR Art. 6(1)(b)	up to 1 year
Website operation	Technical data	GDPR Art. 6(1)(f)	per cookie
Analytics	Anonymized IP, usage data	GDPR Art. 6(1)(a)	until consent withdrawn
Advertising measurement	Cookie IDs	GDPR Art. 6(1)(a)	until consent withdrawn

3. Cookies

This website uses:

Necessary cookies (always active)
Analytics cookies (GA4, Hotjar – consent required)
Marketing cookies (Google Ads, Meta Pixel – consent required)

Cookies are activated only after explicit consent via the cookie banner.

4. Data transfers

Data may be transferred to:

Google LLC (USA)
Meta Platforms Inc. (USA)
Hotjar Ltd. (EU)

Transfers are safeguarded under the EU–USA Data Privacy Framework and contractual protections.

4A. Google Ads API & Third-Party Platform Data

API Access for Client Services: When providing PPC campaign management services, we may access client advertising data through official platform APIs including but not limited to:

Google Ads API
Meta Business Suite / Meta Marketing API
Other advertising platform APIs as authorized by clients

Purpose of API Data Access:

Campaign performance analysis and optimization
Automated bid management and budget allocation
Creative testing and performance reporting
Audience insights and targeting recommendations

Data Security & Handling:

All API connections use secure authentication (OAuth 2.0)
Data transfers are encrypted with minimum 128-bit SSL
API access is granted on a per-project basis with client authorization
No client advertising data is shared with third parties
Clients retain full ownership of all campaign data and creative assets
API access can be revoked by clients at any time

Compliance: Our use of advertising platform APIs complies with:

Google Ads API Terms of Service
Meta Platform Terms and Developer Policies
GDPR and applicable data protection regulations
Industry-standard security practices

Data Retention: Client advertising data accessed via APIs is retained only for the duration of active service contracts, plus up to 90 days for reporting and transition purposes. Clients may request immediate deletion of all data upon contract termination.

5. Automated decision-making

No automated decision-making or profiling with legal effects is used.

6. Your rights

You have the right to access, rectify, erase, restrict, object, and request portability of your data.

Requests can be sent to hello@jusztinmate.com

7. Rights of deceased persons

Under Hungarian law, certain rights may be exercised by authorized persons for 5 years after death.

8. Remedies

You may lodge a complaint with the Hungarian Data Protection Authority (NAIH) or seek judicial remedy.