Privacy notice
This notice explains how UD Management Kft. processes personal data when visitors use the UDM Consulting website or contact us about potential business engagements.
1. Controller
UD Management Korlátolt Felelősségű Társaság (UD Management Kft.), registered office: Dsida Jenő utca 4., 7400 Kaposvár, Hungary; company registration number: 14-09-320818; tax number: 32538250-2-14. General enquiries: contact@udmconsulting.com. Privacy requests: privacy@udmconsulting.com. We have not appointed a separate data protection officer; the management handles privacy enquiries.
2. Personal data we process
Contact information: name, email address, company name, type of enquiry, message or project description and, where provided, website, proposed timing and language. The form indicates which fields are required. If you email us directly, we may process email headers, content, attachments and replies.
Enquiry administration: internal reference, received timestamp, status, notification result, last substantive contact, retention reviews and, where necessary, reasons and dates for a legal hold. Access-protected administrative actions may also create an audit trail including the authorised administrator's email address.
Technical and security information: IP addresses, browser and request metadata, timestamps and anti-abuse signals necessary for hosting and securing the website. For submission rate limiting, the Worker derives a SHA-256 technical counter key from the client IP. We do not store the raw IP or that counter key in our own D1 enquiry database.
Please do not submit passwords, health information, other sensitive personal data or confidential client documents through the public form. Unnecessary data accidentally received is assessed for removal or restricted handling.
3. Purposes and legal bases
Responding to B2B enquiries and preparing proposals: our legitimate interest under Article 6(1)(f) GDPR in handling business contact initiated by you. Where an individual personally requests steps prior to entering into their own contract, Article 6(1)(b) may apply as appropriate.
Enquiry tracking, operation, information security and abuse prevention: our legitimate interests under Article 6(1)(f) GDPR in managing business communications, protecting service availability and preventing unauthorised access, spam or misuse.
Legal claims and legal duties: where necessary, Article 6(1)(f) (establishment, exercise or defence of claims) or Article 6(1)(c) (a particular legal obligation). A legal-hold flag alone does not establish a new lawful basis.
Submitting the form is not a subscription to a newsletter or consent to marketing. We do not automatically enrol enquiries in promotional campaigns.
4. Processors and recipients
Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA, provides Cloudflare Workers hosting, D1 storage, Turnstile protection and related network and security functionality. Locating the D1 database within an EU jurisdiction does not establish that all related technical processing occurs only in the EU. See the Cloudflare DPA.
Plus Five Five, Inc. (Resend) processes transactional email notifications generated by the contact form. Resend states that it stores customer data in the United States and generally retains email and log data for 30 days on its Free plan. See Resend GDPR information.
Zoho Mail provides company email accounts and storage for enquiry notifications, correspondence and replies. Our mail environment uses the mail.zoho.eu European region. The relevant contracting and processing entities and subprocessors follow Zoho's applicable service terms; the EU region does not rule out cross-border support access subject to safeguards. See Zoho Mail GDPR information.
Access is restricted to those who need it for the purposes described. Authorities, courts and professional or legal advisers may receive necessary information where required by law or relevant to legal claims.
5. International transfers
Cloudflare and Resend services, and certain provider support operations, may involve processing outside the European Economic Area. International transfers are subject to the relevant providers' contractual and other appropriate safeguards, including the European Commission's Standard Contractual Clauses (SCCs) where applicable. Resend describes US storage and an SCC transfer mechanism. Further information on relevant safeguards may be requested at privacy@udmconsulting.com.
6. How long we keep information
Business enquiries: if no engagement results, normally for no longer than 12 months after the last meaningful contact, or after the initial enquiry if there was no subsequent communication. We may erase information sooner if it is no longer needed.
Obvious spam: for at most 30 days after receipt; spam enquiries are reviewed at least every 14 days. Other ongoing enquiries are reviewed at least every 30 days.
Active engagements, contracts or legal matters: relevant records may be kept for different periods where necessary under contractual, accounting or legal obligations, or to support substantiated legal claims. Legal holds are documented and periodically reviewed. D1 enquiry deletion and deletion of Zoho copies are controlled manual operations; there is no automatic deletion of these records.
Retention of related provider copies, email records and security logs may differ from D1 retention. Resend's service retention, Zoho mailbox copies and technical infrastructure logs are handled separately.
7. Cookies and security technologies
We have not installed advertising cookies or our own behaviour-profiling analytics on this website. Cloudflare and Turnstile may use necessary technical and security mechanisms to provide the service and protect the site and contact form. We do not use these mechanisms for marketing.
8. Your rights and requests
Subject to the conditions of applicable law, you may request access, rectification, erasure or restriction, and where applicable data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. Where processing is based on consent, you may withdraw consent; our ordinary enquiry processing does not generally rely on consent.
Contact privacy@udmconsulting.com or write to our registered address. We respond without undue delay and generally within one month. Where GDPR conditions are met, this period can be extended by up to two further months. We request additional identity information only where necessary and proportionate. Particular rights are subject to their statutory conditions.
9. Complaints and remedies
You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), Falk Miksa utca 9–11., 1055 Budapest, Hungary; postal address: 1363 Budapest, Pf. 9.; website www.naih.hu, or seek a judicial remedy.
10. Required information and automated decisions
Contacting us is voluntary. Required form fields must be completed for an online submission. Providing information is not a legal obligation and does not itself create a contract. We do not use solely automated decisions producing legal or similarly significant effects within the meaning of Article 22 GDPR. Turnstile performs a technical anti-bot check.
11. Changes to this notice
We update this notice if our services or relevant legal arrangements change. The current notice is available on this website.
Last updated: 31 October 2026.