PRIVACY NOTICE

Last updated: September 2026

This Privacy Notice explains how Csapó András sole proprietor (“Data Controller”, “I”, “me” or “my”) processes personal data collected through the website www.andrascsapo.com and in connection with the services and activities presented on the website.

I am committed to protecting your personal data and processing it in accordance with the applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 – GDPR.

1. Data Controller

Name: Csapó András sole proprietor
Registered address: 1035 Budapest, Kerek utca 30., 10th floor, Hungary
Tax identification number: HU69954287
Sole proprietor registration number: 53926960
Email: hello@andrascsapo.com
Website: www.andrascsapo.com

For any questions regarding the processing of your personal data, please contact me at:

hello@andrascsapo.com

2. What personal data do I process?

Depending on how you use the website, I may process the following personal data:

2.1. Website visitors

When you visit the website, certain technical information may be automatically processed, such as:

IP address
browser type and version
operating system
device information
date and time of access
pages visited
technical information necessary for the operation and security of the website.

This information is primarily used to ensure the proper functioning, security and improvement of the website.

2.2. Contact requests

If you contact me through the website or by email, I may process:

your name
email address
any other personal information you voluntarily provide in your message.

This information is used solely to respond to your enquiry and communicate with you regarding your request.

2.3. Notifications about the book Bali and the Fabric of Reality

If you sign up to receive information about the publication and availability of my book “Bali and the Fabric of Reality”, I may process:

your name
email address
your consent to receive these notifications
information relating to your subscription and confirmation of consent.

Your email address will be added to the relevant mailing list only after completing the required confirmation process (double opt-in).

The purpose of this processing is to notify you when the book becomes available for purchase and, where relevant, to provide information directly related to its publication and availability.

You may unsubscribe at any time by using the unsubscribe link included in the emails.

3. Legal basis for processing

Depending on the purpose, personal data may be processed on the following legal bases:

Consent – Article 6(1)(a) GDPR

Where you voluntarily subscribe to receive information about the book or other communications requiring consent, your personal data is processed based on your consent.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Contract or pre-contractual steps – Article 6(1)(b) GDPR

Where processing is necessary to respond to a request or to take steps at your request before entering into a contract.

Legitimate interests – Article 6(1)(f) GDPR

Where necessary for the operation, security and protection of the website, or for other legitimate business purposes, provided that these interests are not overridden by your rights and freedoms.

Legal obligations – Article 6(1)(c) GDPR

Where processing is necessary to comply with a legal obligation applicable to the Data Controller.

4. Email communication and Brevo

For managing subscriptions and sending emails, I use Brevo (formerly Sendinblue), an email marketing and communication service.

When you subscribe to receive information about the book, the personal data you provide may be transferred to Brevo for processing on my behalf.

Brevo may process information such as your name, email address, subscription status and information related to your consent and email interactions.

The use of Brevo is intended to enable the secure management of subscriptions, confirmation of consent and delivery of requested emails.

You can find further information about Brevo's privacy practices and data processing in Brevo's own privacy documentation.

5. Double opt-in

The book notification form uses a double opt-in process.

After submitting the form, you will receive a confirmation email containing a confirmation link. Your subscription will only become active after you click this link.

This process helps prevent unauthorized subscriptions and provides evidence that the email address was intentionally subscribed.

6. Website provider – Wix

This website is operated using Wix.com.

Wix may process certain personal and technical data on my behalf as a data processor in connection with hosting, website operation, security and related technical services.

Wix may process data on servers located outside the European Economic Area where appropriate safeguards are in place in accordance with applicable data protection legislation.

For more information, please refer to Wix's privacy and data protection documentation.

7. Cookies

The website may use cookies and similar technologies.

Cookies may be necessary for:

the technical operation of the website;
maintaining security;
remembering certain settings;
understanding how visitors use the website;
improving the website and its functionality.

Where legally required, non-essential cookies will only be used with your consent.

You can manage or withdraw your cookie preferences through the cookie settings available on the website.

8. How long is your personal data stored?

Personal data is retained only for as long as necessary for the purpose for which it was collected, unless a longer retention period is required by law.

For the book notification mailing list, your data will generally be retained until:

you unsubscribe;
you withdraw your consent; or
the mailing list is no longer required for the stated purpose.

Certain records may need to be retained for longer periods where required by applicable legal obligations or for the establishment, exercise or defence of legal claims.

9. Data security

I take reasonable technical and organisational measures to protect personal data against:

unauthorized access;
accidental loss;
destruction;
alteration;
disclosure; and
other unauthorized processing.

However, no method of transmitting or storing information online can be guaranteed to be completely secure.

10. Data sharing and data processors

Personal data may be processed by service providers acting on my behalf where this is necessary to operate the website and provide the requested services.

These may include, where applicable:

Wix – website hosting and website-related services;
Brevo – email marketing, subscription management and email delivery;
other technical service providers necessary for the secure operation of the website.

Such service providers process personal data only for the purposes specified by me and in accordance with applicable data protection requirements.

Personal data will not be sold to third parties.

11. International data transfers

Some service providers used for operating the website may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, appropriate safeguards required by applicable data protection legislation will be used, where applicable, such as an adequacy decision or appropriate contractual safeguards.

12. Your rights under the GDPR

Depending on the circumstances, you have the following rights regarding your personal data:

Right of access – you may request information about whether and how your personal data is being processed.
Right to rectification – you may request correction of inaccurate or incomplete personal data.
Right to erasure – you may request deletion of your personal data where the legal requirements are met.
Right to restriction of processing – you may request that processing of your personal data be restricted in certain circumstances.
Right to data portability – where applicable, you may request your personal data in a structured, commonly used and machine-readable format.
Right to object – you may object to certain types of processing, including processing based on legitimate interests.
Right to withdraw consent – where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

13. How to exercise your rights

To exercise any of your rights or to ask questions about the processing of your personal data, please contact:

hello@andrascsapo.com

I may need to take reasonable steps to verify your identity before fulfilling certain requests.

I will respond to requests within the timeframe required by applicable data protection legislation.

14. Right to lodge a complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the competent data protection supervisory authority.

In Hungary, the relevant authority is:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary

You may also contact another competent supervisory authority where applicable under the GDPR.

15. Changes to this Privacy Notice

I may update this Privacy Notice from time to time, for example when the website, services or applicable legal requirements change.

The latest version will always be published on this page, together with the date of the latest update.