Legal

Privacy Policy

Last updated: 14 July 2026. This notice describes how ValueLab processes personal data under the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

1. Who we are

ValueLab Consulting Kft. ("ValueLab", "we", "us") is the data controller responsible for personal data processed through this website and our consulting engagements. Registered office: Budapest, Hungary. Contact: privacy@valuelab.hu.

2. What we collect

We process the following categories of personal data:

  • Contact data you provide voluntarily (name, business email, company, phone, message content) via the contact form or by emailing us directly.
  • Blind Spot Radar submissions — the anonymised self-assessment answers, plus your name and email address if you choose to unlock the results. Answers alone are not linked to identity unless you provide contact details.
  • Usage data — IP address, browser type, pages visited, timestamps, referrer. Collected only if you consent to analytics/retargeting cookies.
  • Cookies and similar technologies — see our Cookie Policy.

3. Why we process it — lawful bases

  • To respond to enquiries and provide information you request (Art. 6(1)(b) GDPR — steps prior to a contract, or Art. 6(1)(f) legitimate interest in responding to business enquiries).
  • To deliver the Blind Spot Radar results and send you the follow-up email you requested (Art. 6(1)(b) performance of the requested service).
  • To send occasional insights and retargeted communications about our services (Art. 6(1)(a) — your explicit opt-in consent, which you may withdraw at any time).
  • To operate and secure the website and comply with legal obligations (Art. 6(1)(f) and 6(1)(c)).

4. Who we share data with

We do not sell personal data. We share it only with vetted processors acting on our instructions under Art. 28 GDPR agreements: our email service provider, our website hosting provider, our meeting scheduling provider and the calendar service used to record the booked meeting, our analytics provider (if enabled by your consent), and — where legally required — public authorities. Where a recipient is outside the EEA, transfers are covered by Standard Contractual Clauses and, where applicable, the EU–US Data Protection Framework.

If you book a call with us, the name, email address and any details you enter in the booking form are used solely to arrange and hold that meeting (Art. 6(1)(b) GDPR). We do not use booking details for marketing without your separate opt-in.

5. How long we keep it

  • Contact-form messages: up to 24 months from last interaction.
  • Blind Spot Radar leads: up to 24 months from submission, or until you unsubscribe.
  • Meeting booking records and calendar entries: up to 24 months from the meeting date.
  • Analytics cookie data: up to 14 months.
  • Contractual/accounting records: as required by Hungarian law (up to 8 years).

6. Your rights

Under GDPR you have the right to access, rectify, erase, restrict or object to processing, port your data, and — where processing is based on consent — withdraw consent at any time without affecting the lawfulness of prior processing. To exercise any right, email privacy@valuelab.hu. You also have the right to lodge a complaint with your local supervisory authority (in Hungary: NAIH, naih.hu).

7. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including TLS in transit, access controls, and regular reviews.

8. Changes to this notice

We may update this Privacy Policy from time to time. Material changes will be notified on this page with a revised "Last updated" date.