Skip to content
bloom

Privacy

Privacy notice

This notice explains how personal data provided through the website is handled.

Last updated: 28 August 2026

Data controller

Name
Tóth-Fazekas Dóra, sole proprietor
Registered address
2051 Biatorbágy, Szily Kálmán út 2/C, Hungary
Tax number
69954751-1-33
Privacy contact
info@bloombydori.hu

Contact and class enquiries

The form asks for your name, email address and selected class. A phone number and message are optional. Limited technical log data — such as an IP address, timestamp and request data — may also be generated by the hosting service to operate the site securely.

We process the data to respond to your enquiry, discuss availability and participation, and take steps at your request before a possible service agreement. For a general question not aimed at entering an agreement, the controller’s legitimate interest is to answer and manage the correspondence.

Your name, email address and selected class are needed to identify and answer the enquiry. The form cannot be submitted without them.

  • Legal basis: steps taken at the data subject’s request before entering into a contract under Article 6(1)(b) GDPR; for general enquiries, legitimate interests under Article 6(1)(f) GDPR.
  • Retention: up to 6 months after the enquiry is closed. If a service relationship or legal claim follows, relevant records may be retained for the applicable legal and accounting periods.
  • The controller does not use automated decision-making or profiling when processing the contact form.

Enquiries concerning children and sensitive data

An enquiry about a children’s class must be submitted by the child’s parent or another adult legal guardian. Please do not include health information or other special-category or sensitive personal data in the message. If such information later becomes strictly necessary for participation, it will be discussed separately with appropriate information.

Technical service providers

We use technical service providers only to the extent necessary to operate the website and deliver messages. Submissions may be accessed by the controller and the authorised personnel involved in the following services.

  • Vercel: hosting and operation of the website and contact endpoint, including technical logs.
  • Resend: transmitting the contact-form submission by email.
  • The email service provider operating the info@bloombydori.hu mailbox: receiving, storing and enabling replies to correspondence.
  • Google Analytics and Google Tag Manager: only after consent to Analytics, to produce aggregated website-usage statistics and deliver measurement events permitted by that consent.
  • Meta Platforms Ireland Limited: only after consent to Marketing and when the Meta Pixel feature is enabled, to measure Meta ad results, optimise ad delivery and support the creation of remarketing audiences.
  • Google Maps: loaded only after the visitor allows External services or expressly asks to load the map; this creates a direct connection to Google’s service.

Meta Pixel and Meta advertising measurement

The Meta Pixel activates only when the feature is technically enabled and the visitor has consented to the separate Marketing category. It is intended to measure whether ads shown on Facebook or Instagram result in website visits, enquiries, bookings or purchases, and to support campaign attribution, optimisation and the creation of remarketing audiences.

Event data may include the event type and time, the URL and title of the visited page, referrer, technical browser and device data, IP address, and Pixel, browser or ad-click identifiers. Our implementation does not place a name, email address, telephone number, contact-form message, selected class or data about an identifiable child in Meta events. Meta may nevertheless receive the URL and title of publicly available pages as technical event data.

The recipient and provider of the Meta Business Tools is Meta Platforms Ireland Limited. Under its own terms and privacy notice, Meta may combine the data with information from other Meta products and may process it outside the European Economic Area. Meta’s current notices describe the applicable transfer safeguards.

  • Legal basis: consent under Article 6(1)(a) GDPR and consent to optional storage of and access to information on the device.
  • Withdrawal: Marketing can be disabled at any time through Cookie settings in the footer. Future Meta measurement then stops and _fbp and _fbc cookies accessible to the website are deleted. Withdrawal does not affect the lawfulness of processing based on consent before withdrawal; data already received by Meta may also remain subject to Meta’s own retention and deletion rules.
Meta Privacy Policy

Meta Business Tools Terms

When Meta Pixel is used, the website operator is responsible for selecting the technology, obtaining consent, and collecting and transmitting event data to Meta. Meta processes the data it receives further under its own terms; the applicable joint-controller and processing provisions are described in the current Meta Business Tools Terms.

Meta Business Tools Terms

International data transfers

Some technical service providers may process data outside the European Economic Area. Where this occurs, the transfer relies on the applicable GDPR safeguard made available by the provider, such as an adequacy decision or standard contractual clauses.

Google Maps

Google Maps loads only after you allow External services or select “Load map”. From that point, Google’s own terms and privacy notice may also apply.

Google Privacy Policy

Your rights

Where the legal conditions apply, you may request access to, correction or erasure of your personal data, restriction of processing, object to processing based on legitimate interests, and exercise your right to data portability. Send requests to info@bloombydori.hu.

If you believe that the processing infringes your rights, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information or seek a judicial remedy.

Hungarian data-protection authority

Changes to this notice

We may update this notice when services, technical settings or legal requirements change. The current version is always available on this page.