Legal

Privacy & legal notice

This page covers onlinefactory.org — who runs it, what happens to anything you send us through it, and how to have it removed.

Last updated: 2 September 2026.

Legal notice (Impresszum)

Published under Act CVIII of 2001 on electronic commerce services (Ekertv.).

Service provider: Online Factory Kft.
Registered seat: 2141 Csömör, Mogyoródi út 14/A, Hungary
Company registration number: 13-09-232311
Tax number: 32488038-2-13
EU VAT number: HU32488038
Represented by: Szabó Dániel, Director
Email: info@onlinefactory.org
Telephone: +36 20 339 04 38
Hosting provider: Trust-IT Kft., 1203 Budapest, Közműhelytelep u. 28/a · tax number: 13341802-2-43

There is no supervisory or conciliation body registration to declare: we do not sell to consumers through this site.

Who is responsible for your data

Online Factory Kft. is the data controller for everything described below. There is one person answerable for it — Daniel Szabó — and you can reach him directly at info@onlinefactory.org. We have not appointed a Data Protection Officer, because we are not required to: we do not monitor people at scale and we do not process special categories of data.

What we collect, and why

The contact form

The form on the Contact page asks for your name and email address, optionally your company and role, and whatever you write in the message field.

Why: so that we can read your enquiry and answer it.
Legal basis: Article 6(1)(b) GDPR — steps taken at your request before entering into a contract; and where your message is not about working together, Article 6(1)(f) — our legitimate interest in answering people who write to us.
How it reaches us: the form is delivered by the mail server on our own hosting and arrives in the info@onlinefactory.org mailbox. It is not passed to a marketing platform, a CRM or a form-collection service.
How long: two years after our last exchange, then deleted. If the enquiry becomes a project, the contract documents are kept for as long as accounting law requires.

The KrAIken page carries a second, smaller form. It asks for your email address and nothing else, so that we can tell you once when that product ships. It arrives in the same mailbox by the same route, under the same legal basis and the same two-year limit. It is not a mailing list, and there is no list for you to be on: one message, written by a person, when there is something to say.

Writing or calling us directly

If you email or telephone us instead, the same applies: we keep the correspondence for two years after the last message, and we use it only to answer you.

Server logs

Like every web server, ours records each request: the IP address, the time, the page asked for, and the browser's user-agent string. This is needed to serve the page at all, and to see whether something is broken or under attack. Legal basis: Article 6(1)(f), our legitimate interest in operating and securing the site. Logs are kept short-term by the hosting provider and are not used to build a picture of you.

Visitor statistics

We count visits with Umami Cloud (cloud.umami.is), configured without cookies. It records that a page was viewed — which page, roughly where in the world, which kind of device — and nothing that identifies you. There is no cross-site tracking, no advertising identifier, and no profile. Because it stores nothing on your device and processes no personal data, there is no cookie banner on this site.

Cookies

This site sets no cookies at all. Not for analytics, not for preferences, not for advertising. Nothing is written to your browser's storage.

Only the people and companies that have to:

Trust-IT Kft. (Budapest, Hungary) — runs the server and the mail service that carries your message. Acting as our processor, under a data processing agreement.
Umami — visitor statistics, as described above. No personal data reaches it.

We do not sell your details, we do not rent them, we do not add you to a mailing list, and we do not pass them to advertisers. There is no newsletter on this site to be signed up to by accident.

Transfers outside the EU

Everything that identifies you — your enquiry, your email address, your correspondence with us — stays inside the European Union, on our own hosting. The one service outside that boundary is the visitor counter described above, and it receives no personal data at all: it is told that a page was viewed, never who viewed it. If that ever has to change, this page will name the country, the recipient and the safeguard used, before it happens.

A word about our products

Gantora keeps your plan in a file on your own machine. It has no server, no account and no sync, so your project data never reaches us — there is nothing for us to hold, lose or hand over. KrAIken is not released yet; when it is, it will carry its own notice describing what it does with data.

Your rights

Under the GDPR you can ask us to:

tell you what we hold about you, and give you a copy (access);
correct anything that is wrong (rectification);
delete it (erasure);
stop using it while a dispute is resolved (restriction);
hand it to you or another controller in a machine-readable form (portability);
stop processing based on legitimate interest (objection).

Write to info@onlinefactory.org and you will get an answer from Daniel, within a month at the latest and usually within a day or two. We will not ask you to fill in a form or prove anything unreasonable — we only need to be sure it is your data we are handing over.

We make no automated decisions about you and we do not profile you.

If you are not satisfied

Tell us first — it is usually faster. If that does not settle it, you can complain to the Hungarian supervisory authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH); its current address, telephone and email are published at naih.hu. You may also take the matter to a Hungarian court.

Changes to this notice

If what we do with your data changes, this page changes first, and the date at the top moves with it. We will not quietly widen what we collect.