Privacy policy

Data controller: Pályázat Szakértő Iroda Kft. (Faroleiro), 5000 Szolnok, Keszeg utca 4., Magyarország, email: info@faroleiro.pt.

What data do we process, why, and on what legal basis?

1. Contact and quote request form: name, email address, link to your website or Google profile (if you provide it), the text of your message, the time it was sent. Purpose: replying to your enquiry, arranging a time, preparing a quote. Legal basis: steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)), and our legitimate interest in replying to your enquiry (Art. 6(1)(f)).
2. Email and WhatsApp correspondence: the contact details you provide and the content of the messages. Purpose and legal basis: as above.
3. AI chat: the questions you type and the replies. Purpose: answering your questions on the website. Your chat messages are processed by an AI provider (currently Google's Gemini model via Lovable's AI service) to generate the reply; we do not store the conversation. To prevent abuse, the chat limits the number of questions per hour from one IP address; for this we process the IP address for a short time. Please do not enter personal or sensitive data in the chat. Legal basis: legitimate interest (Art. 6(1)(f)).
4. Client data (where there is a contract): contact person's name, contact details, billing details. Purpose: performing the contract and invoicing. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) – accounting records are kept for 8 years as required by law.
5. Technical data: data needed for the website to work (e.g. IP address in the hosting provider's logs, the anti-abuse limit in the chat). Legal basis: legitimate interest in secure operation.

We only send marketing newsletters with your explicit consent. This website does not use analytics, marketing or tracking cookies.

How long do we keep it?

Form and correspondence data for up to 12 months after the enquiry is closed, if no contract is concluded. Where there is a contract, until the contract ends and for the subsequent limitation period (usually 5 years); accounting data for 8 years.

Who has access to the data (processors)?

• Lovable Labs Sweden AB (hosting, running the website and database; the database runs on Supabase infrastructure),
• the provider of the AI chat model (via Lovable's AI service),
• our email provider [to be added],
• our accountant (only clients' billing data).

Some providers may also process data outside the European Union (e.g. in the USA); in that case the transfer is based on the EU Standard Contractual Clauses (SCC) or the EU–US Data Privacy Framework.

Your rights

Access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent. Send your request to info@faroleiro.pt; we will reply within 30 days.

Complaints

Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa u. 9–11., www.naih.hu. In Portugal: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. You may also go to court.

Effective date

[day] November 2026. We update this policy when necessary; changes are published on this page.