Petra KlingerPrivate Advisory Back to site
Legal

Privacy Policy

In effect from August 2026. This replaces the policy dated June 2025.

1. Who is responsible for your data

The practice is operated by DeFi Consulting Kft., a company registered in Hungary at 1027 Budapest, Bem József utca 6. fszt., under company registration number 01-09-394489 and tax number 27553192-2-41. The company decides how and why your personal data is handled, which in data protection law makes it the controller. The advisory work itself is carried out by Petra Klinger.

Because the company is established in the European Union, the General Data Protection Regulation applies directly, and every right described below is yours regardless of where you live.

For anything concerning your data, write to info@petraklinger.com.

2. What is collected

This website is deliberately plain. It runs no analytics, sets no cookies, loads nothing from other companies, and does not track you. Reading it leaves nothing behind beyond the ordinary server records described below.

If you send an application. Your name, your email address, what you write about why you are here, and, if you choose to answer it, how you heard about the practice. Only the first three are required.

What people write in that field often touches on health, psychological difficulty, or personal history. Data of that kind counts as a special category under Article 9 of the GDPR and is treated with more care than the rest. It is handled only because you have expressly agreed to it by ticking the box on the form, and that agreement is recorded with your application.

If you write by email. Whatever your message and your email account contain.

Server records. The hosting provider keeps short-lived technical logs of requests, including IP addresses, for security and for keeping the site running. These are not used to build a profile of you and are not linked to your application.

If you become a client. Scheduling details, payment records, and any notes made in the course of the work. Notes are kept only where they are necessary, and are stored so that they cannot be traced back to you by anyone else.

3. Why it is used, and on what basis

To reply to you and to decide together whether the work is a fit. The basis is the steps taken at your request before any agreement is entered into. Where what you write includes health or other special category information, the additional basis is your explicit consent under Article 9(2)(a).

To arrange, deliver and support the work once it begins. The basis is the agreement between you.

To meet accounting and tax obligations. The basis is legal obligation.

To keep the website available and secure. The basis is the legitimate interest in running a site that works and is not abused.

Your data is never used for automated decision making or profiling, and it is never sold, rented, or passed to anyone for advertising.

4. Cookies

This website sets no cookies of any kind, uses no local storage, and runs nothing that follows you from site to site. Visits are counted, but the counter stores nothing on your device and cannot recognise you on a return visit. There is nothing here for you to accept or refuse, which is why you were not asked.

5. Who else handles your data

A small number of service providers are involved, each only for the part named:

Netlify and Google are established in the United States. Data reaching them is transferred under the safeguards European law requires for such transfers, including the EU to US Data Privacy Framework and standard contractual clauses.

6. How long it is kept

Applications that do not lead to work are deleted within twelve months.

Client records are kept for up to three years after the last session or the last contact between you.

Correspondence and payment records are kept for up to five years, because accounting and tax rules require it.

You may ask for your data to be deleted sooner, and it will be, unless the law requires it to be kept.

7. Your rights

You may ask to see the data held about you, to have it corrected, to have it deleted, to have its use restricted, to object to its use, and to receive a copy in a portable form.

You may withdraw your explicit consent at any time. If you do so before the work begins, your application and everything in it is deleted. Once work is under way, the records that belong to the engagement itself rest on the agreement between us rather than on consent, and accounting records rest on legal obligation, so those are kept for the periods set out above. Withdrawing consent never makes anything done beforehand unlawful.

To exercise any of these, write to info@petraklinger.com. You will get an answer within thirty days.

If you are not satisfied with the answer, you may complain to a supervisory authority. Because the controller is established in Hungary, that is the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, naih.hu). If you live elsewhere in the European Union, you may complain to the authority in your own country instead.

8. Security

Access to applications, correspondence and any notes is limited to Petra Klinger alone. Transfers between your browser and this site are encrypted. Nothing you tell her, in an application or in the work itself, leaves the room, and that includes anything she writes or teaches.

9. Changes

If this policy changes, the new version appears on this page with a new date at the top. Material changes affecting people already working with her will be sent by email.

10. Contact

DeFi Consulting Kft.
1027 Budapest, Bem József utca 6. fszt.
Hungary
Company registration number: 01-09-394489
Tax number: 27553192-2-41 (EU VAT: HU27553192)
info@petraklinger.com