Privacy

Privacy notice

In force from 10 November 2026

This notice explains how Hype Productions Kft. handles the personal data of visitors to the hypestab.com website and of people who send an enquiry through it. It is based on the European Union's General Data Protection Regulation (GDPR) and Hungarian data protection law. The Hungarian version is authoritative.

1. The controller

The controller is Hype Productions Korlátolt Felelősségű Társaság (Hype Productions Kft.). You can reach us with any data protection question or request at the details below.

Registered office: 3036 Gyöngyöstarján, Kossuth Lajos utca 3., Hungary
Company registration no.: 10-09-041944 (Company Registry Court of the Eger Regional Court)
Tax number: 23995828-2-10
Email: info@hypestab.hu
Phone: +36 30 705 1348
Budapest office and studio: 1142 Budapest, Tatai utca 95.

2. What data we process, for what purpose and on what legal basis

You do not need to register to visit the website, and viewing the public pages does not involve giving personal data. We process personal data in the following cases.

2.1. Contact and quote request forms

If you send an enquiry through a form, we process the data you provide: your name, email address, your message and — if you give them — your phone number, what you are interested in (the service), the planned date and the goal of the project. For the quote request form we also record which page the enquiry came from.

The purpose is to answer your enquiry, keep in touch and — if you ask for it — prepare an individual quote.

Legal basis: the data subject's consent (Article 6(1)(a) GDPR) where you give it by ticking the box on the form; for a quote request, taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). You can withdraw your consent at any time; withdrawal does not affect the lawfulness of processing before it.

Sending the form is not an order and does not create a contract; the terms for that are set out in the general terms and conditions. Please do not give any data on the form that is not needed for the enquiry, in particular special-category personal data.

2.2. Direct enquiries by email or phone

If you contact us by email or phone, we process the data you give in the enquiry (name, contact details, the content of the enquiry) to answer it and keep in touch.

Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR); otherwise the controller's legitimate interest in answering enquiries (Article 6(1)(f) GDPR).

2.3. Technical data related to running the website

While the website is served, the technical data of the connection — in particular the IP address, the time of the request, the page requested and the browser type — is temporarily recorded on the hosting provider's server (Railway Corporation). We need it to run the website securely and without errors and to fend off abuse.

The videos and images on the website are loaded through the R2 service of Cloudflare, Inc. When that happens your browser connects directly to Cloudflare's servers, so your IP address and the technical data of the connection also reach Cloudflare.

Legal basis: the controller's legitimate interest in running the website securely and reliably (Article 6(1)(f) GDPR).

2.4. Cookies and advertising measurement

Displaying the website does not in itself require a cookie, and we do not load fonts from an external provider: we serve the fonts from our own server.

The website runs the Google Ads measurement tag (gtag.js, advertising ID: AW-18545997164). It places a cookie on your device and measures whether visits arriving from our advertising turn into an enquiry (conversion tracking), and makes it possible to show our ads to you again (remarketing). The tag opens a direct connection between your browser and Google's servers, so your IP address, the address of the page you are viewing and your browser's technical data reach Google.

On the same condition the website runs OpenAI's measurement tag (the OpenAI pixel), which measures how our ads shown in ChatGPT perform: it places a cookie on your device and reports when a visit arriving from one of our ads turns into an enquiry. Your browser then connects directly to OpenAI's servers, so your IP address, the address of the page you are viewing and your browser's technical data reach OpenAI.

These tags are only loaded after your prior consent. Until you accept them on the cookie bar at the bottom of the page, no request is sent to Google or OpenAI and no cookie is placed on your device. Every other function of the website works unchanged regardless.

Legal basis: your consent (Article 6(1)(a) GDPR, and Section 155(4) of Act C of 2003 on Electronic Communications).

You may withdraw your consent at any time with effect for the future, using “Cookie settings” in the footer; withdrawing is exactly as easy as giving it. Withdrawal does not affect the lawfulness of processing carried out before it. Cookies already placed can be deleted in your browser's settings.

3. Who we pass your data to

We do not sell your data. The data needed for advertising measurement reaches Google and OpenAI — only where you have consented to it; beyond that we do not hand your data to third parties for marketing. The following processors are involved in handling data; they act on our behalf and on our instructions:

Railway Corporation: Hosting and server of the website. 548 Market St, Suite 68956, San Francisco, CA 94104, USA; team@railway.com.
Cloudflare, Inc.: Storage and delivery of the videos and images shown on the website (R2). 101 Townsend St., San Francisco, CA 94107, USA; support@cloudflare.com.
Email provider: The provider that supplies the info@hypestab.hu mailbox and delivers enquiries.
Google Ireland Limited: Provider of Google Ads measurement (conversion tracking and remarketing) — only where you have consented to it. Gordon House, Barrow Street, Dublin 4, Ireland.
OpenAI Ireland Limited: Provider of OpenAI advertising measurement (conversion tracking) — only where you have consented to it. 1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.

Where the law requires it, we may also disclose data to an authority entitled to it.

4. Transfers outside the European Economic Area

Railway Corporation and Cloudflare, Inc. operate in the United States, so technical data related to using the website may leave the European Economic Area. The transfer relies on the European Commission's adequacy decision (the EU–US Data Privacy Framework) or, failing that, on the standard contractual clauses in the contract with the provider.

Our contracting party for advertising measurement, Google Ireland Limited, operates within the European Union, but the data may also be processed by the Google group's systems in the United States. That transfer relies on the same EU–US Data Privacy Framework or on standard contractual clauses, and it only happens if you have consented to the cookies.

The same applies to OpenAI Ireland Limited: the data may also be processed by the OpenAI group's systems in the United States, on the basis of the EU–US Data Privacy Framework or standard contractual clauses, and only if you have consented to the cookies.

5. How long we keep your data

We keep the data of an enquiry sent through the form or directly until the enquiry is closed and, if there is no quote or contract, for at most one year after it is closed, after which we delete it. If a contract is made on the basis of the enquiry, we handle the related data according to the relevant law (for example the eight-year retention period for accounting records).

Data processed on the basis of consent is kept until you withdraw it, but at most for the period above. Technical logs recorded at the hosting provider are kept for the period set by the provider's usual logging practice.

6. Data security

The website is available over an encrypted (HTTPS) connection, and only staff authorised to handle enquiries have access to the data sent through the form. We protect data from unauthorised access, alteration and loss with the necessary technical and organisational measures.

7. Your rights

You may ask for information about the processing at any time, and you have the following rights:

Access: You may ask whether we process your personal data and ask for a copy of it.
Rectification: You may ask for inaccurate or incomplete data to be corrected or completed.
Erasure: You may ask for your data to be deleted if the processing no longer has a legal basis or purpose.
Restriction: You may ask for the processing to be restricted, for example while we verify the accuracy of data you dispute.
Objection: You may object to processing based on legitimate interest.
Data portability: You may ask for the data you gave us in a structured, machine-readable format.
Withdrawing consent: You may withdraw your consent at any time, which does not affect the lawfulness of earlier processing.

You can make a request at info@hypestab.hu or on the phone number given. We reply within one month at the latest; where necessary this can be extended by a further two months given the complexity and number of requests, and we will tell you if so. We may ask for further information to identify you where needed.

8. Remedies

If you believe the processing of your data breaches the law, please first bring your complaint to us at info@hypestab.hu. You may also lodge a complaint with the supervisory authority or go to court; you may bring the case before the regional court of your place of residence or stay if you prefer.

National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11. Postal address: 1363 Budapest, Pf. 9. Phone: +36 1 391 1400. Email: ugyfelszolgalat@naih.hu. Website: www.naih.hu

9. Children's data

The website is not aimed at children. We do not knowingly ask for or process the data of persons under sixteen. If such data does reach us, we delete it once it is brought to our attention.

10. Changes to this notice

The current version of this notice is available on this page. If our processing changes materially, we will publish the modified text and update the date it takes effect.