Legal
Privacy
This page explains what happens to personal data when you use olively.io. It is written to be read, not to be survived.
Who is responsible
The data controller is Olively Korlátolt Felelősségű Társaság (Olively Kft.), a company registered in Hungary and represented by Fanni Csincsák.
| Contact | hello@olively.io |
| Registered seat | 1155 Budapest, Kolozsvár utca 4. C. lház. 2. em. 3., Hungary |
| Registration number | 01-09-404649 |
| Tax number | 32055164-2-42 |
There is no Data Protection Officer. The processing here does not meet the threshold in Article 37 GDPR that would require one. You can reach us directly at the address above.
What I collect, and why
Three things, and only three.
| What | Why | When |
|---|---|---|
| Your message — name, email address, and whatever you write | To answer you, and to keep a record of what was discussed | Only when you email me or send a message through the site |
| Booking details — name, email, time zone, anything you add to the booking form | To hold the call and send you the invitation | Only when you book a call |
| Analytics and session recordings — pages viewed, time on page, approximate location, device and browser, and a replay of how the page was used | To find out which pages are read and where people get stuck | Only if you agree to it |
| Scorecard results — the final score, which area came out weakest, and the team-size band. Not the individual answers, which never leave your browser | To see whether the scorecard is used, and where people land | Only if you agree to analytics, and only when you finish it |
We do not buy data about you, sell data about you, run advertising, or use anything here for automated decision-making or profiling.
Analytics and session recording
This is the part worth reading properly, because session recording sounds more invasive than most analytics and deserves a straight explanation.
What analytics does
I use Google Analytics 4 and PostHog to see which pages get read, how long people stay, and which links get clicked. IP addresses are anonymised in Google Analytics before storage.
What session recording does
PostHog can reconstruct a visit as something that plays back like a video of the page: where the cursor moved, what was clicked, how far the page was scrolled. It does this by recording changes to the page structure and your interactions with it — not by filming your screen and not by accessing anything outside this website.
Text you type is masked before it leaves your browser. If you fill in a form, the recording shows that a field was filled, not what was written in it. The masking happens in the browser, so the unmasked text is never transmitted.
Neither runs unless you agree. No analytics script loads, and no cookie is set, until you accept. If you reject, or if your browser sends a Global Privacy Control signal, nothing loads at all. You can change your mind at any time from the cookie page.
Recordings are stored in PostHog's EU data centre and deleted after 30 days. Analytics data is kept for 14 months, then deleted automatically.
Legal bases
| Processing | Legal basis |
|---|---|
| Answering your message | Article 6(1)(b) — steps taken at your request before entering a contract, or Article 6(1)(f) legitimate interest in replying to enquiries |
| Holding a booked call | Article 6(1)(b) — steps taken at your request |
| Analytics and session recording | Article 6(1)(a) — your consent, and Section 8 of the ePrivacy rules on storing information on your device |
| Keeping records of work and invoices | Article 6(1)(c) — legal obligation under Hungarian accounting and tax law |
Consent is the basis for anything analytics-related, which means withdrawing it is straightforward and costs you nothing. Withdrawal does not affect processing that already happened while consent was in place.
Who else sees your data
Only the services that make the site work. Each acts as a processor under a data processing agreement, and none of them is permitted to use your data for their own purposes.
| Service | What for | Where |
|---|---|---|
| Vercel | Hosting the site | See the imprint for the hosting provider |
| PostHog | Analytics and session recording | EU (eu.i.posthog.com) |
| Google Analytics | Analytics | Google Ireland, with transfers to the US |
| Cal.com | Booking calls | Named in the imprint |
| Formspree | Receiving what you type into the contact form and passing it to us | United States |
| Email provider | Receiving and replying to messages | Named in the imprint |
The contact form is handled by Formspree, who receive what you type and forward it to us by email. They keep a copy for 30 days so a lost message can be recovered, then delete it. Nothing is added to a marketing list, because there is no marketing list.
We do not share your data with anyone else unless the law requires it.
Transfers outside the EEA
PostHog data stays in the EU. Two things do leave it. Google Analytics involves transfers to the United States, and so does the contact form, because Formspree is a US company. Both rely on the EU–US Data Privacy Framework and on Standard Contractual Clauses where the Framework does not apply.
If you would rather nothing left the EEA: reject analytics, and email hello@olively.io directly rather than using the form. A direct email reaches the same inbox without passing through anyone else.
How long I keep things
| What | How long |
|---|---|
| Session recordings | 30 days, then deleted automatically |
| Analytics | 14 months |
| Emails and enquiries | Two years from our last exchange, unless it became a project |
| Project and client records | Eight years, as Hungarian accounting law requires |
| Your consent choice | Stored in your own browser until you clear it |
Your rights
Under the GDPR you can ask me to:
- Show you what I hold about you, and a copy of it (Articles 15 and 20)
- Correct anything wrong (Article 16)
- Delete it (Article 17), except where accounting law requires me to keep it
- Restrict or object to how it is used (Articles 18 and 21)
- Withdraw consent for analytics, at any time, from the cookie page
Email hello@olively.io and we will respond within 30 days. There is no charge, and I will not ask you to justify the request.
One practical limit worth stating: session recordings are not linked to your name, so if you ask me to find or delete yours specifically, I may not be able to identify which one is yours (Article 11). Rejecting session recording is the reliable way to stay out of it.
Complaining
If you think we have handled your data badly, tell us first — it is usually quicker. You also have the right to complain to the Hungarian supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9–11.
naih.hu
If you live in another EU country, you can complain to your own national authority instead.
Changes
If this policy changes in a way that affects you, the date at the top changes and, where the change is significant, you will be asked for consent again. Earlier versions are available on request.