Privacy Policy

This Privacy Policy explains how InnovaTeQ Solutions Kft. (“InnovaTeQ”, “we”, “us”) processes personal data of visitors to innovateq.io. It reflects the current static Astro site hosted on Cloudflare Workers. It replaces earlier WordPress-era notices that referred to Google Analytics, advertising cookies or a different host.

Processing follows Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on informational self-determination and freedom of information (Infotv.), where they apply.

Data controller

Name: InnovaTeQ Solutions Kft.
Registered office: 1162 Budapest, Asztag Street 9, 1st floor, door 7
Email: info@innovateq.io
Tax ID: HU32342101
Company registration: 0109419137

Data Protection Officer: VFK Data Pro. Ltd. — info@vfkdatapro.hu

What this site does (and does not do)

This marketing site is a static Astro 7 build served as Cloudflare Workers static assets. The contact page sends your enquiry to us and stores it in our customer system so we can reply. Newsletter forms collect an email address when you choose to subscribe. HubSpot keeps that signup, and Resend stores the subscriber list and sends the letter. info@innovateq.io is shown on the page as plain text if a form cannot be sent. Fonts are self-hosted. Google Analytics 4 loads only after you allow analytics in the cookie notice. We do not run Google Tag Manager, advertising pixels, or a third-party cookie-consent service. A cookieless Cloudflare Web Analytics beacon runs. A first-party notice on this site remembers your cookie choice.

Personal data we process

1. Enquiries (email / contact form)

Data: name, business email, company (optional), phone (optional), situation category (optional), message, and the source of the enquiry (contact form).
Source: you, when you use the contact form or email info@innovateq.io.
Purpose: identify you, reply to discovery conversations and service enquiries, and keep a record of the conversation where needed for follow-on work.
Legal basis: Art. 6(1)(b) GDPR (steps prior to a contract / at your request) and/or Art. 6(1)(f) (legitimate interest in responding to business enquiries). Where you tick the privacy acceptance on the contact page, that records your acknowledgement of this notice.
Retention: for as long as needed to handle the conversation and any related engagement or civil-law claims; then deleted or minimised unless a longer legal retention applies. Form enquiries are kept in HubSpot for that purpose.

Data: email address; the language you subscribed in (English or Hungarian); where on the site you subscribed (newsletter page, footer, homepage, or the end of an insight); the time of signup; the record that you accepted this notice; and, at the email provider, send and delivery metadata. We do not use open or click tracking.
Source: you, when you use a newsletter form on this site (the newsletter page, the footer, the homepage, or the end of an insight). HubSpot stores the source as newsletter forms. Resend stores the place you used (newsletter page, footer, homepage, or insight) as a tag.
Purpose: send a short, ad-free email every two weeks, written by Ádám Tóth. The letter is not marketing: related stories, interesting facts and the everyday business impact of outages, slowdowns and downtime, and how to prepare for them and manage the risk. A newsletter signup is not a sales enquiry. We do not ask for your name. We use Resend to send the newsletter and transactional email, and to store the subscriber list used for sending.
Legal basis: Art. 6(1)(a) GDPR (consent). The checkbox is unchecked until you tick it. You may withdraw consent at any time with the unsubscribe link in a letter, or by emailing info@innovateq.io. Withdrawal does not affect processing that was lawful before it.
Retention: until you withdraw consent or we stop sending the newsletter; then deleted or minimised, unless a longer legal retention applies. The signup is stored in HubSpot and in Resend.

3. Technical / hosting data

Data: IP address, user agent, request URL, timestamps and similar connection metadata that may appear in Cloudflare edge logs or security tooling.
Purpose: deliver the site, operate and secure the infrastructure, diagnose abuse or outages.
Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, reliable hosting).
Processor: Cloudflare, Inc. (and affiliates) as host / CDN for Workers static assets.
Retention: only as long as needed for security and operations under Cloudflare’s and our operational practice.

We do not sell personal data. We do not use personal data from this site for advertising profiling.

Recipients and processors

Personal data may be processed by:

Cloudflare — website hosting and delivery. The contact form and the newsletter form are received by our site and then forwarded to HubSpot. A newsletter signup is also forwarded to Resend. The page does not send your details to HubSpot or Resend from the browser.
HubSpot — customer relationship management for contact-form enquiries (name, email, company, phone, message, situation, and lead source) and for newsletter signups (email address).
Resend (Plus Five Five, Inc., 2261 Market Street #5039, San Francisco, CA 94114, USA, privacy@resend.com) — sending the newsletter and transactional email, and storing the subscriber list for sending. Data: email address, subscription language and source tags, and send and delivery metadata. Open and click tracking is off. Resend does not set a cookie on this site. Its sub-processors are listed at resend.com/legal/subprocessors.
Google — Google Analytics 4, only after you allow analytics in the cookie notice. Page measurement is described in the Cookie Policy.
Email providers used to receive and store mail to info@innovateq.io.
Professional advisers (for example legal or accounting) where necessary.
Authorities where required by law.

Processors may only use personal data to provide their service to us.

International transfers

Cloudflare, HubSpot, and Google (only if you allow analytics) may process data in the EU/EEA and in other countries, including the United States. Resend sends the newsletter from the EU (eu-west-1). Data Resend stores — contacts, logs, and message content — is in the United States. Where a transfer leaves the EEA, it relies on an appropriate safeguard: the EU Standard Contractual Clauses and/or an adequacy decision such as the EU–US Data Privacy Framework, where the provider is certified. Resend is certified under the EU–US Data Privacy Framework. The EU Standard Contractual Clauses in Resend’s data processing agreement are the backup. Cloudflare, HubSpot, and Google describe their own safeguards in their public documentation.

Your rights

You may request access, rectification, erasure, restriction of processing, objection (where processing is based on legitimate interest), and — where processing is consent-based or contract-based and automated — data portability, subject to the conditions in the GDPR.

To exercise rights, email info@innovateq.io or the DPO at info@vfkdatapro.hu. We respond within one month of receipt (extendable by two months for complex or numerous requests, with notice).

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1363 Budapest, Pf. 9.; ugyfelszolgalat@naih.hu; www.naih.hu. You may also seek a judicial remedy.

Cookies and similar technologies

See the Cookie Policy. A first-party notice stores your choice in a necessary cookie (cc_cookie, up to 182 days). Google Analytics 4, and its cookies, load only if you allow the analytics category. Advertising pixels are not used. A cookieless Cloudflare Web Analytics beacon runs either way. You can reopen the notice from Cookie settings in the footer.

Security

We and our processors apply technical and organisational measures appropriate to the risk (HTTPS, access limitation, infrastructure security controls). No method of transmission or storage is perfectly secure.

Updates

We may update this policy when practices or the site change. The version published on this page is the current one.

Effective date: 22 October 2026