Privacy notice
Assessment request form
Version 2026-08-21-v2 · Effective upon publication
1. Who controls your data?
The data controller for assessment requests submitted through the Cigle Digital website is:
- Controller: Dóczi Tibor
- Current status: private individual; not yet registered as a sole proprietor
- Privacy contact: tib987@gmail.com
No residential address is published in this notice.
2. What data is processed?
When you submit an assessment request, the following information is processed:
- your name and email address;
- the website or Google Business Profile URL you provide, or your indication that you do not yet have either;
- your message about what you would like to improve, which is optional when a link is supplied and required when no link is available;
- the selected site language;
- a unique request identifier, submission time, notice version, source, and internal workflow fields;
- anti-abuse and technical data needed to deliver and protect the form, which may include a Turnstile token, IP address, browser or device information, request timing, routing data, and limited security logs; and
- limited traffic measurements recorded automatically by the hosting service, including unique visitors and page views.
Please do not include special-category or other unnecessary sensitive personal data in the message.
3. Why is the data processed?
Respond to and manage your request
Submitted contact and enquiry content, request metadata, and workflow fields are used to assess the request, reply to you, and manage it as a potential service lead.
Proposed legal basis: GDPR Article 6(1)(b), steps taken at your request before a possible contract.
Keep the form secure and reliable
Technical request data, the request identifier, timing, status, and minimal operational logs are used to prevent spam, automated abuse, duplicate writes, and security incidents.
Proposed legal basis: GDPR Article 6(1)(f), legitimate interests in securing and operating the service.
The data is not used for unrelated marketing, mailing-list enrolment, sale, or disclosure for another party's marketing.
4. Is providing the data required?
Providing the form data is voluntary. Name and email address are required. You must either provide a valid website or Google Business Profile URL, or indicate that you do not yet have either and provide a non-empty message explaining what you would like assessed. Without one of these paths or the anti-abuse check, the form cannot submit the request.
5. Who receives or processes the data?
Access is limited to the controller and the service providers needed to operate the form:
OpenAI
Hosts the website and same-origin form endpoint and provides automatic site-traffic analytics.
Request data in transit, technical request or log data, and traffic measurements.
Cloudflare
Provides Turnstile bot and abuse protection.
Turnstile token and related network, browser or device, timing, and security data.
Provides Apps Script delivery and the Google Sheet used as the assessment-request register.
Accepted form fields, request metadata, timestamps, and internal workflow fields.
This necessary service-provider processing is not a sale of personal data and does not authorize use of assessment requests for the providers' own marketing. Data may also be disclosed where required by law or necessary to establish, exercise, or defend legal claims.
6. International processing
The service providers operate internationally, so personal data may be processed outside Hungary or the European Economic Area. Where data-protection law requires safeguards, the relevant provider terms and legally recognized transfer mechanisms apply.
7. How long is the data kept?
- Ordinary assessment enquiries are deleted no later than 12 months after the last meaningful activity.
- Spam and synthetic test records are deleted within 30 days.
- If a request becomes a client engagement, only necessary information is moved to the appropriate client or accounting records; the assessment-request sheet is not the long-term client archive.
- Technical and provider logs follow the applicable service configuration, provider terms, security needs, and legal requirements.
8. Automated decision-making
Cigle Digital does not use the enquiry to make a solely automated decision with legal or similarly significant effects. Turnstile may automatically allow or reject a form submission for abuse prevention, but it does not decide whether you qualify for a service. If the check fails, you may contact the controller by email.
9. Your rights
Subject to applicable legal conditions and limits, you may request:
- access to your personal data;
- correction of inaccurate data;
- deletion or restriction of processing;
- data portability where applicable; and
- objection to processing based on legitimate interests.
Send a request to tib987@gmail.com
You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH). NAIH
10. Security and changes
The form uses server-side validation, Turnstile, signed server-to-server delivery, duplicate protection, access controls, and restricted spreadsheet access. No internet service can be guaranteed completely secure.
Material changes to the purpose, data, providers, retention, or legal basis require an updated notice and version identifier. The notice version in force at submission is recorded with every accepted request.