Privacy notice

1. The data controller and the scope of this notice

Data controller

Provisio Consulting Korlátolt Felelősségű Társaság

Registered office

1048 Budapest, Homoktövis utca 123. 1. em. 3. ajtó

Company registration number

01-09-409426

Tax number

32154995-1-41

Contact person

Borsos Péter Mihály, Managing Director

Data protection contact

hello@fituniversum.hu

This notice applies to Borsos Péter's personal professional website and its contact form. The website address is borsospeter.hu; it also applies to the version available at the website's former address, borsos-peter.borsospeter-media.chatgpt.site.

Data processing for registrations and purchases on FitUniversum is explained in FitUniversum's separate privacy notice.

2. What information do we request, and how do we use it?

The form requests your name, an email address for replying, a subject and your message. We use this information to respond to your enquiry, discuss a proposal or collaboration, and handle related correspondence. The email may also include the time of your message and the address of the website from which it was sent.

You provide this information yourself, and contacting us is voluntary. You cannot send a message through the form without completing the required fields, but you can still browse the website freely. Sending a message does not subscribe you to a newsletter, and the information is not used for automated advertising messages.

Only provide information necessary for your enquiry. Please do not send health information, medical reports or other special categories of personal data through this form. For enquiries about a child's training, write as a parent or legal representative and do not include the child's detailed personal or health information in your first message.

Legal basis for processing

• If you request a proposal or discussion about a contract to be entered into with you personally, the legal basis is Article 6(1)(b) of the GDPR: steps taken at your request before entering into a contract.
• For general questions, business enquiries and communication with partners, the legal basis is Article 6(1)(f) of the GDPR. Our legitimate interest is to respond to and follow up on an enquiry initiated by you, limited to the information necessary for that purpose.

The form does not request consent to advertising or general acceptance of terms and conditions. You may object to processing based on legitimate interests as described below.

How your message is delivered

When you press send, your browser transmits the data over HTTPS to this website’s own server endpoint. After validation, the server passes the message to FormSubmit, which delivers it by email to hello@fituniversum.hu. The controller’s staff handling enquiries and the technical providers involved in forwarding and email processing can access messages as necessary for their tasks.

This website’s own database does not store your message content, name, raw email address or IP address. Your text may remain in the current page’s form fields until you leave or reload the page; after a failed submission it stays in the fields so you can try again. The form does not use cookies or browser local storage.

Protecting the contact form against abuse

To prevent unsolicited and excessively frequent submissions, the server temporarily processes the submission time, email address and, where available, network IP address. It stores counters associated with daily changing keyed digests and the status of one-time submission identifiers. These are pseudonymised security data and are not used for visitor profiling. Each record remains valid for at most 24 hours; expired records are deleted when the next form request is processed. The purpose is to protect the website and mailbox against abuse, based on legitimate interest under Article 6(1)(f) GDPR.

3. How long do we keep information?

We keep enquiry correspondence for up to one year after the matter is closed. Requests for earlier deletion are assessed in light of the purpose of processing and the applicable legal conditions.

If your enquiry leads to a contract, the information required for that contract is covered by the relevant service's separate notice and statutory retention rules. Where a specific legal claim or statutory retention obligation applies, the necessary information is kept for as long as required to pursue that claim or fulfil the obligation.

FormSubmit's documentation specifies a 30-day retention period for submitted form information in its own archive. This is separate from retention of the email in the data controller's mailbox. FormSubmit documentation

4. Technical service providers and recipients

The website's own application does not build visitor profiles, run Google Analytics or Meta Pixel tracking code, or make automated decisions that have legal effects on you. Details of technical processing for hosting security are described in the infrastructure providers' privacy notices.

Aggregate website statistics

The website's own server-side counter stores only an aggregate daily number of views for each page. It does not store IP addresses, email addresses, visitor identifiers, full browser information, referrer addresses or URL parameters after the question mark. It does not link a visitor's page views together and does not use cookies or browser storage. Only the website owner can access these totals after authenticated sign-in.

The totals help us understand which content attracts interest. Browser information in a request is examined temporarily to filter known bots and preloads, but the counter does not retain it. The counter skips requests carrying a Do Not Track or Global Privacy Control header. Separate technical and security processing by the hosting infrastructure is covered by the provider notices above.

International data processing

International infrastructure providers may process information outside the European Economic Area, including in the United States. OpenAI, Cloudflare and Google describe international data transfers and their safeguards in their own notices. You may also request information from the data controller.

FormSubmit's public notice does not specify the country of processing or the particular safeguards for transfers outside the EEA. Messages are delivered through this service; this aspect of its terms still requires clarification.

5. YouTube videos, cookies and external links

The FitGeneration video player loads only when you request it using the “I agree, load the video” button. Until then, the website does not load the YouTube embed. Consent is based on Article 6(1)(a) of the GDPR and applies to the current page; your choice is not stored in your browser.

Once the player loads, YouTube may receive technical and usage information, such as your IP address, browser information and interactions with the video. Google may process this information under its own privacy policy, and the player may use cookies or other browser storage. We use youtube-nocookie.com for privacy-enhanced mode; this does not mean that no processing takes place.

The “Close video and withdraw consent” button removes the player and stops further video loading initiated by the page. It does not retrospectively delete information already processed or cookies already placed by Google. You can manage these in your browser or your Google account's privacy settings.

For information about YouTube and Google's data processing, see Google's privacy policy. You can use the rest of the website without loading the video.

The website's own code does not place marketing or analytics cookies or use local storage to track visitors. Hosting security and external content you choose to load may involve different technical processing. When you open external links, such as the FitUniversum blog or YouTube videos, the destination website's own notice applies.

When you close the Functional Step offer or open its details, this browser tab remembers your dismissal until the session ends. This only prevents the offer from appearing repeatedly; it contains no personal identifier, is not linked to statistics and is not transmitted. The website remains usable if browser storage is unavailable.

6. What are your rights?

Subject to the conditions of the GDPR, you may request access to your personal data and ask for it to be corrected, erased or restricted. You may object to processing based on legitimate interests for reasons relating to your particular situation. Where processing is based on consent, you may withdraw consent without affecting the lawfulness of processing before withdrawal. You may request data portability for automated processing based on consent or a contract.

You can send your request to hello@fituniversum.hu or the data controller's registered office. You may also use the contact form for data protection questions. We will respond without undue delay and within one month at the latest. For complex or multiple requests, this may be extended by a further two months; we will inform you of the extension and the reasons within the first month.

Complaints and remedies

You may complain to Hungary's National Authority for Data Protection and Freedom of Information (NAIH) or seek a remedy in court. NAIH's address is 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9. Information about starting a procedure is available on the Authority's official website.

7. Changes to this notice

We update this notice when the way the website operates changes. The current version and its effective date are shown on this page.

Legal framework: Regulation (EU) 2016/679 of the European Parliament and of the Council, the GDPR. Official text of the regulation