PRIVACY POLICY
1. Data Controller
The entity responsible for the processing of personal data on this website is:
Obenhof Ltd.
Ermihalyfalva Str. 10.
HU-4080 Hajdunanas
Hungary
Phone: +36 70 651 3490
Email: info@obenhof.eu
Website: www.obenhof.eu
2. General Information on Data Protection
Protecting your personal data is important to us. We process personal data exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR).
Personal data means any information that can be used to identify a natural person, directly or indirectly, such as a name, email address, telephone number, IP address or other online identifiers.
3. Contact and Contact Form
If you contact us via our contact form, by email or by telephone, we process the information you provide in order to handle your enquiry and communicate with you.
This information may include your name, email address, the content of your message and any additional information you voluntarily provide.
Where your enquiry relates to the conclusion or preparation of a contract, processing is based on Article 6(1)(b) GDPR.
For general business enquiries or other requests, processing is based on our legitimate interest in handling and responding to incoming enquiries in accordance with Article 6(1)(f) GDPR.
The information you provide will only be retained for as long as necessary to process your enquiry or to comply with applicable statutory retention requirements.
4. Website Hosting and Technical Operation
This website is operated using the Webnode website platform.
The service provider is:
Webnode AG
Badenerstrasse 47
8004 Zurich
Switzerland
According to the provider, the ongoing technical operation and maintenance of Webnode services also involve Webnode s.r.o., based in Brno, Czech Republic.
As part of operating our website, Webnode processes personal data on our behalf and provides hosting services and technical infrastructure. This may involve the processing of IP addresses, technical device and browser information, access times and server log data.
This processing is based on our legitimate interest in ensuring the secure, stable and reliable operation of our website in accordance with Article 6(1)(f) GDPR.
A data processing agreement pursuant to Article 28 GDPR is in place with Webnode.
5. Google reCAPTCHA
We use Google reCAPTCHA to protect our contact form against automated access, spam, misuse and fraudulent activities.
When reCAPTCHA is used, technical information necessary to identify automated or potentially abusive access may be processed. This may include IP addresses, browser and device information, usage data and technical security information.
For customers established in the European Economic Area (EEA), Google Cloud EMEA Limited is generally the contracting entity under Google's cloud services contractual framework, unless another Google entity is responsible. In this context, Google processes reCAPTCHA customer data as a data processor.
The use of reCAPTCHA is based on our legitimate interest in protecting our website, particularly our contact form, against spam, misuse and automated attacks, in accordance with Article 6(1)(f) GDPR.
Where personal data is processed outside the European Economic Area, such transfers are carried out in accordance with the data protection safeguards provided by Google, particularly the applicable provisions of the Google Cloud Data Processing Addendum and, where necessary, the European Commission's Standard Contractual Clauses.
6. Google Analytics
We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics helps us understand how visitors use our website. For this purpose, information such as page views, session duration, devices and browsers used, technical usage data and approximate location information may be processed. IP addresses may also be processed as part of the technical operation of the service.
Our website uses a cookie consent banner provided by Webnode. According to Webnode, Google Consent Mode v2 is also enabled. Google tags adjust their behaviour according to the visitor's consent preferences communicated through the cookie banner.
Where consent is required for the use of Google Analytics, processing is based on Article 6(1)(a) GDPR. Consent may be changed or withdrawn at any time with future effect through the website's cookie settings.
Google may process data on servers located outside the European Economic Area. According to Google, recognised data transfer mechanisms are used for such transfers, particularly the EU-U.S. Data Privacy Framework and, where necessary, the European Commission's Standard Contractual Clauses.
Further information about how Google processes personal data can be found in Google's privacy documentation.
7. Cookies and Technically Necessary Technologies
Our website may use cookies and similar technologies.
Technically necessary cookies and technologies may be used where required to ensure the secure and proper operation of the website.
Where cookies or similar technologies require prior consent, they will only be activated after you have provided the appropriate consent.
Any consent given may be changed or withdrawn at any time with future effect through the cookie settings available on our website.
8. Recipients and Data Processors
To provide and securely operate our website, personal data may be shared with service providers who process data on our behalf.
These include, in particular, Webnode as our website hosting and service provider, as well as Google in connection with the provision of reCAPTCHA and Google Analytics.
Any further disclosure of personal data will only take place where legally permitted or required, necessary to fulfil contractual obligations, or where appropriate consent has been obtained.
9. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and processed.
Once the relevant processing purpose no longer applies, the data will be deleted unless statutory retention, documentation or record-keeping obligations require its continued storage.
10. Your Rights
Subject to the applicable legal requirements, you have the right to obtain information about the personal data we process concerning you, as well as the right to request its rectification, erasure or restriction of processing.
You may also have the right to data portability and the right to object to certain types of processing.
Where processing is based on your consent, you may withdraw that consent at any time with future effect. The lawfulness of processing carried out before the withdrawal remains unaffected.
To exercise your rights, you may contact us at any time at info@obenhof.de.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
11. Data Security
We implement appropriate technical and organisational measures to protect personal data against loss, alteration, unauthorised access, disclosure and other unlawful processing.
12. Changes to This Privacy Policy
We reserve the right to update this Privacy Policy if legal requirements, the services we use or the technical functions of our website change.
Last updated: September 2026