Privacy Policy

Hola Experto! - Privacy Policy

Effective Date: 26.10.2025

The purpose of this Data Processing Notice (Privacy Policy) is to inform you about the rules, principles, and your rights concerning the processing of personal data within the framework of the service operated by Digital Care Studio Kft. (hereinafter: the Service). Data processing is carried out in all cases in accordance with the European Union's General Data Protection Regulation (GDPR) and the relevant Spanish legislation.

1. Data of the Data Controller

Name Digital Care Studio Kft.
Company Registration Number 20-09-078537
EU VAT Number (Hungarian) HU32159804
Contact E-mail hello@digitalcarestudio.com

2. Definitions

  • Data Subject: Any identified or identifiable natural person whose personal data is processed by the Service. In this Policy: Visitor (who subscribes) and Entrepreneur.
  • Personal Data: Any information relating to an identified or identifiable natural person (name, email address, location data, etc.).
  • Data Processing: Any operation performed on personal data (collection, recording, storage, transmission, erasure, etc.).

3. Details of Data Processing Operations

3.1. Visitor Data Processing (Newsletter Subscription)

Purpose of Data ProcessingSending newsletters, providing information about the launch of the service and new businesses listed.
Scope of Processed DataEmail address
Legal Basis for ProcessingThe **Data Subject's consent** (GDPR Article 6(1)(a)).
Duration of Data ProcessingUntil the withdrawal of consent (unsubscription).
Nature of Data ProvisionMandatory for the use of the service.

3.2. Entrepreneur Registration and Profile Management

Purpose of Data ProcessingCreation of a free entrepreneurial profile, display on the map and on the service page, performance of the Service.
Scope of Processed DataEmail address, Password (encrypted), Business name, Service location (address, coordinates), Business description.
Legal Basis for Processing**Performance of a contract** (GDPR Article 6(1)(b)) – performance of the contract for the creation of a free profile.
Duration of Data Processing**Immediately** deleted upon the Entrepreneur's request for profile deletion.
Nature of Data ProvisionEmail address, password, business name, and location are **mandatory** for the use of the service.

3.3. Optional Data (Entrepreneur Registration)

Purpose of Data ProcessingVerification of the business's authenticity, feedback to Visitors (who are looking for professionals on our site) regarding reliability.
Scope of Processed DataTax number (DNI, NIE, or other identifier).
Legal Basis for Processing**Legitimate interest** (GDPR Article 6(1)(f)) – ensuring the quality, authenticity, and security of the site.
Duration of Data Processing**Immediately** deleted upon the Entrepreneur's request for profile deletion.
Nature of Data Provision**Optional**, not a condition for registration.

4. Data Processors and Data Transfers

The Data Controller uses the following Data Processors for the operation of the Service:

Data Processor Activity Name and Address of Data Processor Scope of Processed Data
Hosting Service Hostinger International Ltd. (Lithuania/EU, or appropriate GDPR safeguards if server location is outside the EU) All data processed in the Service.
Newsletter Sending Sender.net (Senders, UAB, Lithuania/EU) Email addresses of newsletter subscribers.
Analytics, Statistics Google Ireland Ltd. (Google Analytics) IP address, browser and device data, behavioural data (see Section 5).

Data Transfer to a Third Country: Data transfer to the United States may occur during the use of Google Analytics. Google provides appropriate safeguards to comply with GDPR requirements.

5. Cookies and Google Analytics

The Service website uses cookies (small text files) to improve user experience, analyse the website, and ensure its functioning.

Cookie Type Purpose Legal Basis for Processing
Session and Functional Cookies (e.g., **language settings, admin management**) Ensuring the proper, basic functioning of the site. **Legitimate interest** (GDPR Article 6(1)(f)). **These cookies are mandatory.**
Analytical/Statistical Cookies (Google Analytics) Measuring traffic, analysing website usage. **Consent** (GDPR Article 6(1)(a)).

Google Analytics: The Service uses Google Analytics. The data collected by Google Analytics is processed and stored by Google in accordance with its own privacy policy. **IP address anonymisation (masking)** is performed.

6. Data Security Measures

The Data Controller takes appropriate technical and organisational measures to ensure the security of personal data.

  • Encrypted Connection: Data traffic between the website and users is protected by **SSL/TLS encryption** (HTTPS).
  • Password Storage: Passwords of registered Entrepreneurs are stored **securely, hashed (encrypted) in the database.**
  • Data Minimisation: Only personal data strictly necessary for the provision of the service is requested.

7. Your Rights (Data Subject Rights)

In accordance with the GDPR, you, as the Data Subject, have the following rights:

  1. Right of access: You are entitled to receive confirmation from the Data Controller as to whether or not your personal data is being processed.
  2. Right to rectification: You are entitled to have inaccurate personal data corrected without undue delay.
  3. Right to erasure ("right to be forgotten"): You may request the erasure of your data, unless the Data Controller is obliged to retain it due to a legal obligation. (e.g., **Immediately enforced upon request for Entrepreneur profile deletion**).
  4. Right to restriction of processing: You may request the restriction (temporary limitation) of the processing of your data.
  5. Right to data portability: You are entitled to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used and machine-readable format.
  6. Right to object: You are entitled to object to processing based on legitimate interest.
  7. Right to withdraw consent: Where processing is based on consent, you may withdraw your consent at any time (e.g., unsubscribing from the newsletter).

8. Remedies

If you consider that the Data Controller has infringed your rights related to data processing, you may seek legal remedies:

1. Contacting the Data Controller: Please contact us first at the email address **hello@digitalcarestudio.com**.

2. Contacting the Supervisory Authority:

  • In Spain: Agencia Española de Protección de Datos (AEPD)
  • In Hungary (according to the Data Controller's seat): Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) (Hungarian National Authority for Data Protection and Freedom of Information)