Privacy Policy
1. Introduction
Poppy & Partners Kft. values your privacy and is committed to processing your personal data in a secure and responsible manner. This Privacy Policy describes how we collect, use, store and protect personal data when you visit our website, contact us or use our services.
We process personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection legislation.
Our website also uses tools for web analytics, cookie management and digital marketing. Depending on your settings and consent, these tools may collect information about how the website is used and how our advertisements perform.
2. Data Controller
Poppy & Partners Kft. is the data controller responsible for the processing of your personal data.
Company: Poppy & Partners Kft.
Company Registration Number / VAT.no: HU32819230
Contact Person: Sofia Andreasson
Address: Akácfa utca 25. 1. em 5. ajtó, 1072 Budapest, Hungary
Telephone: +36 70 721 66 27
Email: info@poppyandpartners.com
Poppy & Partners Kft. (VAT no. HU32819230) is the Data Controller responsible for the processing of personal data described in this policy.
3. What Is Personal Data?
Personal data means any information that can be directly or indirectly linked to an identified or identifiable natural person. Examples include names, email addresses, telephone numbers, IP addresses or information about how an identifiable person uses a website.
The processing of personal data includes any operation performed on such data, such as collection, recording, storage, use, transfer and deletion.
4. What Personal Data Do We Collect?
The information we process depends on how you contact us and how you use our website.
Information You Provide to Us
When you contact us via a contact form, email or telephone, we may process the following information:
- Name
- Email address
- Telephone number
- Company name and other information you choose to provide
- The content of your message or enquiry
- Information necessary to manage a customer relationship or assignment
Information Collected When Using the Website
When you visit our website, certain information may be collected automatically, depending on the website’s technical features and your cookie settings. This may include:
- IP address and online identifiers
- Information about your browser, device and operating system
- Which pages you visit and how you navigate the website
- Time and date of visits and interactions with the website
- Information about referring websites and advertising interactions
- Conversion information, such as when a contact form is submitted
- Your cookie and consent preferences
We strive to process only information that is relevant to the purposes described in this policy.
5. Purposes and Legal Bases for Processing
We process personal data for the following purposes and on the following legal bases, depending on the specific processing activity.
To Respond to Enquiries
When you contact us via a form, email or telephone, we use your information to answer questions, provide information about our services and follow up on enquiries.
Legal basis: Our legitimate interest in handling incoming enquiries and communicating with potential customers. Where the contact concerns steps taken at your request prior to entering into a possible agreement, the processing may instead be based on the necessity of taking such steps before entering into a contract.
To Manage Customer Relationships and Assignments
We process personal data to administer customer relationships, communicate regarding assignments, provide our services and fulfil our contractual obligations.
Legal basis: Performance of a contract or taking steps prior to entering into a contract. Where applicable, we also process information to comply with legal obligations, such as those under accounting legislation.
For Web Analytics and Website Improvement
We may use analytics tools to understand how our website is used, which pages are relevant to visitors and how the website’s features can be improved.
Legal basis: Consent when analytics relies on cookies or other technologies that require consent. For processing that does not require consent, another applicable legal basis may be used following an assessment of the processing activity.
For Marketing and Advertising Measurement
We may process information to measure the effectiveness of advertisements, understand how visitors find our website and evaluate our marketing activities. If audience features are used, information may also be processed to create or customise advertising audiences.
Legal basis: Consent when cookies or tracking technologies require it. If other processing activities are carried out on the basis of legitimate interest, this must be assessed separately and communicated clearly.
For Consent and Cookie Management
We use tools to manage your choices regarding cookies and similar technologies, as well as to document and apply your consent preferences.
Legal basis: Our legitimate interest in administering consent and complying with applicable legal requirements. Where the processing concerns information that requires a different legal basis, that basis is applied separately.
6. Cookies and Similar Technologies
Our website uses cookies and may use similar technologies to ensure that the website functions properly, analyse website usage and measure or customise marketing activities.
Cookies are small text files stored in your browser or on your device. They may be used, among other things, to remember settings, measure traffic or associate visits with advertising campaigns.
We distinguish between necessary cookies and cookies or technologies used for purposes such as analytics and marketing. Where consent is required, these are only activated after you have given your consent.
You can change or withdraw your consent through the website’s cookie settings. You can also manage cookies through your browser. If you block certain cookies, parts of the website may not function as intended.
7. Tools and Third-Party Services
We use or may use the following tools on our website. The information actually processed depends on how each tool is configured.
Google Analytics
We use Google Analytics to analyse how visitors use our website and to obtain statistics that help us improve its content, functionality and user experience.
The information may include pages visited, interactions, visit duration, technical information about browsers and devices, and online identifiers. The information is used for statistical analysis and to understand how visitors find and use our website.
When processing is based on cookies or other technologies that require consent, these are only activated after you have given your consent.
Google may process information in accordance with its terms and privacy policy. More information is available at:
https://policies.google.com/privacy
Google Tag Manager
We use Google Tag Manager to administer and manage scripts and tracking tags on our website. The tool helps us control which technical features and measurement tools are used.
Google Tag Manager is, in itself, a tag management tool. Any personal data that may be collected depends on which tags have been installed and how they are configured.
We use the tool to manage tracking in a structured manner and to ensure that relevant consent settings are applied. The fact that a tag is managed through Google Tag Manager does not in itself mean that all processing requires or is covered by the same legal basis; this depends on the tag’s function and the processing it performs.
More information is available at:
https://policies.google.com/privacy
Meta Ads, Meta Pixel and Conversions API
We use Meta Ads to market our services on Facebook and Instagram and to measure and evaluate the results of our digital advertising.
On our website, we use Meta Pixel and may use Meta Conversions API to collect and transfer information about visits and relevant events on the website to Meta. The tools and features used depend on our technical configuration.
The information may include page views, interactions and submitted contact forms, to the extent that these events are configured to be recorded. The tools are used to measure advertising effectiveness, understand how visitors interact with the website and, if audience features are enabled, create or customise audiences for marketing purposes.
The information processed may include details about website visits and events, technical information, IP addresses, cookie and advertising identifiers, as well as other information necessary to link website events to advertising activities. Depending on the configuration and functionality, information provided in connection with a contact enquiry may also be processed. We will not transfer sensitive personal data or information that is not necessary for the relevant purpose.
Meta Pixel uses browser-based technology to record events on the website. Conversions API enables relevant event data to be transferred directly from a server to Meta. Depending on the configuration, information from these tools may overlap.
Where processing requires consent, marketing cookies and corresponding tracking technologies are only activated after you have given your consent. We will also configure any server-based transfers through Conversions API to comply with applicable consent requirements and your choices. The fact that information is transferred via a server does not in itself mean that the transfer is exempt from data protection regulations or consent requirements.
You can change or withdraw your consent at any time through the website’s cookie settings.
Meta may process information in accordance with its terms and privacy policy. Depending on the design of the services, Meta and Company Name may have different roles and responsibilities regarding the processing of personal data.
More information is available in Meta’s Privacy Policy:
https://www.facebook.com/privacy/policy
Cookiebot
We use Cookiebot to manage cookies and consent on our website. The tool may display information about the types of cookies being used and allow you to accept, reject or customise your consent.
Cookiebot may process information about your consent choices and technical information necessary to remember or document these choices.
We use this information to respect your preferences and manage consent for cookies and similar technologies.
More information is available at:
8. Sharing of Personal Data
We do not sell your personal data.
We may share personal data with suppliers and business partners when necessary to operate our business, provide our website, manage customer contacts or use the tools described in this policy.
Such recipients may include providers of web hosting, IT systems, form functionalities, web analytics, consent management and digital advertising services.
When a supplier processes personal data on our behalf, the processing will be governed by a data processing agreement where required. Certain suppliers may also process information for their own purposes and have their own responsibilities under applicable legislation.
We do not share more information than is necessary for the relevant purpose.
9. Transfers of Personal Data Outside the EU/EEA
Some of the services we use are provided by companies that may process personal data outside the EU/EEA or allow access to personal data from countries outside the EU/EEA.
If personal data is transferred to a country outside the EU/EEA, the transfer must comply with the GDPR. This may involve using an adequacy decision issued by the European Commission or appropriate safeguards, such as Standard Contractual Clauses, where required.
Additional information about a specific transfer can be provided upon request, to the extent that we have access to such information and are able to disclose it.
10. How Long Do We Retain Personal Data?
We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
Enquiries via Contact Forms, Email and Telephone
Information provided in connection with an enquiry is normally retained for up to 90 days after the matter has been concluded, unless the information needs to be retained for a longer period to follow up on the matter, manage ongoing communication or comply with legal obligations.
Customer Relationships and Assignments
Information necessary to manage a customer relationship or assignment is retained for as long as the relationship or assignment remains active and thereafter for as long as necessary for purposes such as follow-ups, complaints or legal claims.
Information subject to statutory accounting requirements is retained in accordance with the legally prescribed retention periods.
Analytics and Marketing Data
Information processed through analytics and marketing tools is retained in accordance with the settings of each respective tool, our agreements with suppliers and the retention periods applicable to the relevant processing activity. Where possible, retention periods are limited to what is necessary for the intended purpose.
Consent information may be retained for as long as necessary to document and demonstrate the choices made and to manage compliance with applicable regulations.
11. How Do We Protect Your Personal Data?
We implement appropriate technical and organisational security measures to protect personal data against unauthorised access, loss, alteration or unauthorised disclosure.
We strive to restrict access to personal data to individuals who need the information to perform their duties. We also work to ensure that our suppliers handle information in a secure and responsible manner.
12. Your Rights
Under the GDPR, you have several rights in relation to your personal data. Which rights apply in a particular case depends, among other things, on the legal basis for the processing.
Right to Information and Access
You have the right to receive information about how we process your personal data and to request a copy of the information we process about you.
Right to Rectification
You have the right to request that inaccurate or incomplete personal data be corrected.
Right to Erasure
In certain circumstances, you may request that your personal data be erased. This right does not apply where, for example, we are required to retain information to comply with a legal obligation.
Right to Restriction of Processing
In certain circumstances, you may request that the processing of your personal data be restricted.
Right to Object
You have the right to object to processing based on our legitimate interests. We must then assess whether there are grounds to continue the processing. You always have the right to object to the processing of personal data for direct marketing purposes.
Right to Data Portability
Where processing is based on consent or a contract and is carried out by automated means, you may, in certain circumstances, have the right to receive the information you have provided to us in a structured, commonly used and machine-readable format.
Right to Withdraw Consent
If we process personal data based on your consent, you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
You can change your cookie settings through the website’s cookie settings. If you wish to exercise any other right, please contact us using the details provided in Section 2.
13. Complaints to the Supervisory Authority
If you believe that we process your personal data in violation of data protection regulations, you have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY), which is the supervisory authority in Sweden.
You can find more information on IMY’s website:
We appreciate it if you contact us first, so that we have the opportunity to answer your questions or address any potential issues.
14. Changes to This Privacy Policy
We may update this Privacy Policy when our personal data processing activities change or when legislation and guidance are updated.
The latest version will be published on our website. We recommend that you review this policy periodically.
Last updated: [November 3rd, 2026]
