Compliance

Privacy Policy

Effective: 9 November 2026

Leanflow Kft. (hereinafter: LeanFlow) is committed to protecting the personal data of visitors and clients who use its website. This notice explains what data we process on leanflow.hu and through its forms, for what purpose and on what legal basis, for how long, and what rights you have in that regard.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.), and Act C of 2000 on Accounting (Számv. tv.). We process personal data only for specified purposes, to the extent and for the period necessary to achieve those purposes.

1. The controller

Name
Leanflow Kft.
Registered seat
1172 Budapest, III. utca 26.
Tax number
29151129-2-42
Email
info@leanflow.hu
Phone
+36 20 323 0390

LeanFlow is not required to appoint a data protection officer under Article 37 GDPR.

2. What data we process, and why

Contact form

Data processed: name, email address, phone number (optional), the selected service, and the message you provide.

Purpose: answering your enquiry, arranging a first call, and staying in contact. We use bot protection (Cloudflare Turnstile) before the form is submitted; the captcha provider may receive technical data (for example an IP address) to perform the check.

Legal basis: your consent (Article 6(1)(a) GDPR). You may withdraw consent at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Emailing the AI-readiness assessment report

Data processed: your email address, the selected language variant, and the answer identifiers for the quiz questions. Our server builds the PDF report from those answers; the browser does not upload an attachment.

Purpose: sending you the requested report. LeanFlow also receives a copy so we can offer help if useful. Legal basis: your consent (Article 6(1)(a) GDPR).

Contact by email or phone

If you contact us directly by email or phone, we process your name, contact details and any further information you share in order to answer the enquiry and stay in touch, on the basis of your consent.

Invoicing

If you use our services, we process the data needed to issue an invoice (name, address, tax number for companies, and bank-statement details for transfers) in order to comply with a legal obligation (Article 6(1)(c) GDPR, Section 169 of the Accounting Act).

Visiting the website

When the website is served, the hosting server may record the visitor's IP address, browser type and time of visit for technical reasons. We store these data only briefly, solely to keep the site running securely, on the basis of legitimate interest (Article 6(1)(f) GDPR), and we do not combine them with other data.

3. How long we keep the data

  • If the enquiry or assessment does not lead to a business relationship, we delete the data within 30 days at the latest.
  • If a business relationship starts, we process the data while it lasts and for up to 30 days afterwards, unless a longer retention period is required by law.
  • Accounting records and related data are kept for 8 years under the Accounting Act.
  • You may withdraw your consent at any time; we then delete the data without undue delay if there is no other legal basis for processing.

4. Who has access to the data

Only LeanFlow staff who need the data to answer an enquiry or deliver a service may access it; all of them are bound by confidentiality. We do not sell the data to third parties. Personal data from the contact form or the assessment are not passed on for marketing purposes.

The following processors access data on our behalf, under our instructions, only to the extent needed for their service:

  • Resend, Inc.
    2261 Market Street #5039, San Francisco, CA 94114, USA
    Delivering emails for form submissions and assessment reports.
  • Google Ireland Limited
    Gordon House, Barrow Street, Dublin 4, Ireland
    Measuring website traffic (Google Analytics) and — with your consent — measuring and personalising ads (Google Ads / marketing cookies).
  • Cloudflare, Inc.
    101 Townsend St, San Francisco, CA 94107, USA
    Bot protection (Turnstile) before form submissions.

If a processor also processes data outside the European Economic Area (for example in the United States), the transfer relies on Chapter V GDPR safeguards — an adequacy decision of the European Commission or standard contractual clauses.

5. Cookies, analytics and marketing

Our website may use Google services for independent purposes, each of which needs your consent. On the first visit the site asks whether you accept cookies; you can change your choice at any time with the Cookie settings control in the footer. The Google tag (gtag.js) only sets analytics or marketing cookies after consent. Until you accept, Google records the absence of consent and does not store advertising or statistics cookies.

Statistics (Google Analytics)

We measure traffic with Google Analytics so we can see which pages visitors open and improve the site. Google Analytics sets cookies (_ga, _ga_<id>) in your browser that last up to 2 years, and records pages viewed, visit time and duration, the referrer, and device and browser type. Google Analytics does not store the IP address; it derives an approximate location (country, city) from it only at the moment of the visit. We use the data as aggregate statistics, not to identify visitors, and we do not combine it with form data.

Marketing (Google Ads)

LeanFlow may advertise with Google Ads. If you also accept the marketing category, you consent to Google using visit-related data for advertising — measuring the effectiveness of our ads and personalising them — and setting advertising cookies (for example _gcl_au, for up to 90 days) in your browser.

When a form is submitted successfully, we may at most signal to Google Ads that a conversion occurred; Google does not receive the personal data you entered on the form — name, contact details or message.

Both categories operate only with your consent (Article 6(1)(a) GDPR and Section 155(4) of the Electronic Communications Act). Your browser remembers the choice. You may withdraw consent at any time with Cookie settings in the footer; we then delete the relevant Google cookies. Withdrawal does not affect the lawfulness of processing before withdrawal.

6. Data security

The website and forms run over encrypted (HTTPS) connections. We apply appropriate technical and organisational measures so that unauthorised persons cannot access the data, and so that the data are not damaged, lost or altered. In the event of a personal data breach we act under Articles 33–34 GDPR.

7. Your rights

Under the GDPR you have the following rights in relation to processing:

  • Access: you may ask what data we process about you and request a copy (Article 15).
  • Rectification: you may ask us to correct or complete inaccurate data (Article 16).
  • Erasure: you may ask us to delete your data when processing is no longer necessary or you have withdrawn consent (Article 17).
  • Restriction: you may ask us to restrict processing, for example if you contest the accuracy of the data (Article 18).
  • Data portability: you may ask us to provide the data you gave us in a machine-readable form to you or another controller (Article 20).
  • Objection: you may object to processing based on legitimate interest (Article 21).
  • Withdrawal of consent: you may withdraw consent at any time; this does not affect the lawfulness of processing before withdrawal (Article 7(3)).

Send your request to info@leanflow.hu. We will reply free of charge without undue delay and within one month at the latest.

8. Remedies

If you believe processing of your data breaches the law, please contact us first so we can resolve the issue together. You may also lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, P.O. Box 9, Hungary
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Website: naih.hu

You may also bring a claim before a court. At your choice, proceedings may also be brought before the court competent for your place of residence or stay.

9. Changes to this notice

We may update this notice from time to time if our processing practices or the law change. The current version is always available on this page; the effective date appears at the top.