Privacy notice
Contact form
This notice explains how we handle your personal data when you write to us through the contact form on wellenced.com. It is based on the EU General Data Protection Regulation (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.
1. Who is responsible for your data?
- Controller
- Soluna Labs Kft.
- Registered office
- H-1071 Budapest, Damjanich utca 33.
- Company registration no.
- […]
- Tax no.
- […]
- hello@wellenced.com
- Data protection officer
- [If appointed: name and contact details]
2. Why do we process your data?
- To answer your message and get in touch with you (for example about a workshop, a call or sending materials).
- To prepare and organise a Wellenced pilot if you’re interested in one.
- To send you an automatic email confirming that we’ve received your message.
- To protect the form against spam, bots and abuse.
3. On what legal basis?
- GDPR Article 6(1)(b): steps taken at your request prior to entering into a contract (for example a pilot offer or a meeting).
- GDPR Article 6(1)(f): legitimate interest – answering business enquiries and protecting the form against abuse. Legitimate interest assessment: […]
This processing is not based on your consent. The box you tick on the form only records that you’ve read this notice.
4. What data do we process?
- The data you enter in the form: name, company, job title, email address, phone number, planned headcount, message and the type of request.
- Technical data: the time of submission, the language, your browser’s identification string (user agent) and the campaign code if the link contained one (for example
?src=hrfest). - A keyed hash (HMAC) of your IP address. We don’t store the IP address itself. We use the hash to detect abuse and too many submissions.
- For submission limits, we use short-lived technical counters. They don’t store the addresses themselves; they are keyed by hashed identifiers derived from your IP address and your normalised email address (lowercase, without any “+” tag). The counters expire after about 24 hours at most, and we delete expired counters automatically every day.
Please don’t include health data or other special categories of data in your message.
5. How long do we keep your data?
- We keep the data sent through the form for 12 months from submission and then delete it automatically.
- We delete the IP address hash after 30 days.
- The notification and confirmation emails are sent through a mail queue. The form data, including your email address, stays in the queue until the email is sent and, if sending fails, among the failed jobs for up to 30 days.
- We receive a notification email about your message in the team mailbox. Retention period: […]
- We keep the application’s server logs for 14 days. They may contain technical error details, including your email address if an email could not be delivered. Retention period of the web server access logs: […]
- The database is backed up on the hosting provider’s schedule. Backup retention period: […] Deleted data disappears from the backups when they expire.
6. Who has access to your data?
Your data is seen by the members of the Wellenced team who need it to answer your enquiry. The following processors are involved:
- Hosting provider: [Name, registered office] – runs the website and the database.
- Email provider: [Name, registered office] – delivers the notification and confirmation emails.
- Cloudflare, Inc. (Turnstile bot protection) – when the form loads and when you submit it, processes your IP address and technical characteristics of your browser (such as the user agent) to tell people from bots. Details: Cloudflare privacy policy and Turnstile privacy addendum. Legal basis for the transfer to a third country (USA): […]
We don’t sell your data or use it for marketing.
7. What are your rights?
- Access: you can ask what data we hold about you and request a copy (GDPR Article 15).
- Rectification: you can ask us to correct inaccurate data (Article 16).
- Erasure: you can ask us to delete your data (Article 17).
- Restriction: you can ask us to restrict processing (Article 18).
- Objection: you can object to processing based on legitimate interest (Article 21).
- Portability: you can request the data you provided for pre-contractual steps in a machine-readable format (Article 20).
Send your request to hello@wellenced.com. We’ll reply within one month at the latest.
8. Where can you complain?
If you feel we’ve infringed your rights, please write to us first. You can also lodge a complaint with the supervisory authority or go to court (including the regional court of your place of residence).
- Authority
- Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
- Address
- 1055 Budapest, Falk Miksa utca 9–11, Hungary
- Postal address
- 1363 Budapest, Pf. 9, Hungary
- Phone
- +36 1 391 1400
- Web
- naih.hu
9. Changes
If this notice changes, we’ll publish the updated version on this page together with its effective date.