Privacy & Cookie Policy
Last updated: 2026.10.18.
This Privacy & Cookie Policy explains how FrontEndART Software Ltd. ("FrontEndART", "we", "us") processes personal data when you visit frontendart.com, contact us through this website, register for one of our events or apply for a job with us, and which cookies the website uses. It is provided in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Hungarian Privacy Act) and Section 155(4) of Act C of 2003 on Electronic Communications.
This policy is available in Hungarian and English. In case of any discrepancy, the Hungarian version prevails for data subjects in Hungary.
1.Data controller
- FrontEndART Software Ltd.
- Registered seat: 6721 Szeged, Szilágyi u. 5-2., Hungary
- Company registration number: 06-09-007548 · Tax number: 12702644-2-06
- Email: info@frontendart.com · Phone: +36 30 438 6099
- Further statutory details: see our Impressum.
We have not appointed a data protection officer, as we are not required to do so under Article 37 GDPR. Any question about this policy can be sent to the contact details above.
2.What personal data we process, why, and for how long
2.1Contact form and email enquiries
| Data | Name, email address, topic of enquiry, message (required); phone number, company name (optional). Any further data you include in your message. |
|---|---|
| Purpose | Answering your enquiry, arranging a consultation, sending requested information and, where applicable, preparing a proposal. |
| Legal basis | Where your enquiry concerns our services: steps taken at your request prior to entering into a contract – Art. 6(1)(b) GDPR. For any other enquiry: our legitimate interest in responding to people who contact us – Art. 6(1)(f) GDPR. We have assessed that this interest does not override your interests or rights, since you initiate the contact and reasonably expect a reply. |
| Is providing the data mandatory? | Fields marked with an asterisk are required; without them we cannot reply. The other fields are optional. |
| Retention | If no business relationship follows: we delete your enquiry 12 months after our last correspondence. If a business relationship follows: for the duration of the relationship, then for 5 years after its end (general limitation period, Section 6:22 of the Hungarian Civil Code); documents supporting accounting records are kept for 8 years (Section 169 of Act C of 2000 on Accounting). |
2.2Job applications (CV submission form and applications by email)
| Data | Name, email address, phone number, the CV / résumé you upload and everything it contains (education, work history, skills, languages, and any photo or other information you choose to include), the position you apply for, and optionally a cover letter or message and links to your LinkedIn profile or portfolio. Notes taken during interviews and the outcome of the selection process. Please do not include special categories of data (for example health, religious or political information) in your application – we do not need them and will not take them into account. |
|---|---|
| Purpose | Assessing your application for the advertised position or, for spontaneous applications, for roles currently or soon open; contacting you about interviews; deciding on employment. With your separate consent: keeping your application on file for future positions (talent pool). |
| Legal basis | Steps taken at your request prior to entering into an employment contract – Art. 6(1)(b) GDPR. For spontaneous applications and for documenting how the selection was carried out: our legitimate interest in recruiting suitable staff and in being able to demonstrate a fair process – Art. 6(1)(f) GDPR. For retention in our talent pool after the process has ended: your consent – Art. 6(1)(a) GDPR, which you can withdraw at any time. |
| Is providing the data mandatory? | Name, email address and a CV are required to consider your application. Everything else is optional. |
| Retention | Your data is kept for the duration of the selection process. If you are not hired, we delete your application within 30 days after the position is filled or the process is closed – unless you have consented to being kept in our talent pool, in which case we keep it for 12 months from your consent and then delete it (or ask whether you wish to renew your consent). Spontaneous applications for which we have no suitable role are deleted within 30 days unless you consent to the talent pool. If you are hired, your application becomes part of your personnel file and is processed under our employee privacy notice. |
| Who has access | Only HR staff, the hiring manager and the colleagues who take part in the interviews. We do not pass your application to third parties, and we do not contact references or previous employers without your prior agreement. |
| Automated decision-making | We do not use automated decision-making or AI-based screening in our recruitment. Every application is reviewed by a person. |
2.3Server logs and website security
| Data | IP address, date and time of access, requested URL, HTTP status, browser type and version, operating system, referring page. |
|---|---|
| Purpose | Delivering the website, ensuring its security and stability, detecting and investigating attacks and misuse. |
| Legal basis | Our legitimate interest in the secure operation of the website – Art. 6(1)(f) GDPR. |
| Retention | 30 days, unless a longer retention is needed to investigate a specific security incident. |
2.4Website analytics (Google Analytics 4)
| Data | Pseudonymous client ID stored in a cookie, pages viewed, approximate location derived from a truncated IP address (the full IP address is not stored by Google Analytics 4), device and browser type, referring source, interaction events. |
|---|---|
| Purpose | Understanding how visitors use the website, in order to improve its content and structure. |
| Legal basis | Your consent, given via the cookie banner – Art. 6(1)(a) GDPR and Section 155(4) of Act C of 2003. You may withdraw your consent at any time (see Section 4). |
| Retention | Cookie duration: up to 2 years (see Section 4). Event-level data in Google Analytics: 14 months. |
2.5Event registration
When you register for one of our events (for example a business breakfast, workshop or conference), we use the data you give on the registration form – typically your name, email address and company, and optionally your phone number, position, the number of participants and your question – to organise the event, confirm your registration and keep in touch with you about it (legal basis: steps taken at your request – Art. 6(1)(b) GDPR). We delete this data 12 months after the event. If you also ask to be notified about our future events, we use your name and email address for that purpose based on your consent (Art. 6(1)(a) GDPR) until you withdraw it, which you can do at any time by writing to info@frontendart.com.
2.6What we do not do
We do not use advertising or remarketing cookies. If this changes, we will update this policy and, where required, ask for your consent.
3.Recipients and data processors
Our website and content management system run on our own infrastructure in Szeged. We use the following external service providers, who process personal data on our behalf under a data processing agreement pursuant to Article 28 GDPR:
| Processor | Service | Location |
|---|---|---|
| Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) | Google Workspace – email hosting for info@frontendart.com, where form notifications, your email enquiries and applications sent by email are received and stored | EU / USA (see Section 5) |
| Google Ireland Limited | Google Analytics 4 and Google Tag Manager – only if you consent to analytics cookies | EU / USA (see Section 5) |
Within FrontEndART, only employees whose job requires it have access to your data: sales and management for business enquiries; HR, the hiring manager and the interviewers for job applications; website administrators for technical operation.
We do not sell personal data and do not share it with third parties for their own marketing purposes. We disclose personal data to authorities only where we are legally obliged to do so.
4.Cookies
Cookies are small text files placed on your device by the website. We use the following cookies:
| Cookie | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
cookie_consent | frontendart.com | Stores your cookie choices and when you made them, so the banner is not shown on every page. | Strictly necessary – no consent required (Section 155(4) of Act C of 2003) | 1 year |
_ga | Distinguishes visitors (pseudonymous client ID). | Analytics – set only after consent | 2 years | |
_ga_* | Maintains session state for Google Analytics 4. | Analytics – set only after consent | 2 years |
How consent works. On your first visit a cookie banner lets you accept or reject analytics cookies with a single click each. We use Google Consent Mode in "basic" configuration: the Google Tag Manager container is loaded, but no Google Analytics tag runs, no analytics cookie is set and no data is sent to Google until you click "Accept". If you click "Reject", only the cookie_consent cookie is stored, to remember your choice.
Withdrawing consent. You can change or withdraw your choice at any time by clicking the cookie icon at the bottom of the page, which opens the cookie settings. Withdrawal does not affect the lawfulness of processing carried out before it. You can also delete cookies in your browser settings; if you do so, the banner will appear again on your next visit. Blocking all cookies in your browser does not affect the functionality of this website.
5.International data transfers
Our website, content management system and the data submitted through our forms are stored in Hungary. Google Workspace (email) and Google Analytics data are processed by Google Ireland Limited; Google may transfer this data to Google LLC and its sub-processors in the United States. Where possible, we have configured Google Workspace to store data in the EU (data region policy). Any transfer to the United States is based on the European Commission's adequacy decision of 10 July 2023 for the EU-U.S. Data Privacy Framework, under which Google LLC is certified, and additionally on the European Commission's Standard Contractual Clauses included in Google's data processing terms.
6.Automated decision-making
We do not use your personal data for automated decision-making or profiling within the meaning of Article 22 GDPR – neither on the website nor in recruitment.
7.Data security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including TLS encryption of the website, access control based on the principle of least privilege, segregated storage of job applications with restricted access, regular software updates, and contractual obligations imposed on our processors.
8.Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it (Art. 15);
- rectification of inaccurate or incomplete data (Art. 16);
- erasure ("right to be forgotten") where the data is no longer needed, you withdraw consent, or you object and there is no overriding ground (Art. 17);
- restriction of processing in the cases set out in Art. 18;
- data portability – receiving data you provided to us in a structured, machine-readable format, where processing is based on consent or contract and carried out by automated means (Art. 20);
- object to processing based on our legitimate interests (Art. 21); we will then stop processing unless we demonstrate compelling legitimate grounds;
- withdraw consent at any time where processing is based on consent (Art. 7(3)) – for example, by asking to be removed from our talent pool – without affecting the lawfulness of prior processing.
To exercise these rights, write to info@frontendart.com or to our postal address in Section 1. We will respond without undue delay and in any event within one month of receipt of your request; this period may be extended by two further months where necessary, in which case we will inform you of the reasons. Exercising your rights is free of charge, except in the case of manifestly unfounded or excessive requests. We may ask you to verify your identity before acting on a request.
9.Remedies
Complaint to the supervisory authority. If you believe that we have processed your personal data unlawfully, you may lodge a complaint with:
- Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
- Address: 1055 Budapest, Falk Miksa utca 9-11.
- Postal address: 1363 Budapest, Pf. 9.
- Phone: +36 1 391 1400
- Email: ugyfelszolgalat@naih.hu
- Web: naih.hu
You may also lodge a complaint with the supervisory authority of the EU Member State of your habitual residence or place of work.
Court proceedings. You may bring an action before a court under Section 23 of the Hungarian Privacy Act and Article 79 GDPR. The regional court (törvényszék) has jurisdiction; you may choose to bring the action before the court of your place of residence or stay.
We ask that you contact us first so that we can resolve any concern directly.
10.Changes to this policy
We may update this policy when our website, our service providers or the applicable law change. The current version is always available at frontendart.com/en/privacy-and-cookie-policy, and the "Last updated" date at the top indicates the latest revision. In the case of material changes we will display a notice on the website.