Privacy policy

1. Data Controller

Controller: Mátyás Kurta, private individual (trading as KML Global Reach)
Email: matyas.kurta@kmlglobalreach.com
Website: www.kmlglobalreach.com
Location: Budapest, Hungary

2. What data do we collect and why?

Data	Purpose	Legal basis	Retention
Name, company	Identification, communication	Consent (GDPR Art. 6(1)(a))	2 years
Email address	Sending a response	Consent	2 years
Phone number	Consultation scheduling	Consent	2 years
Message content	Preparing a proposal	Consent	2 years

3. Cookies

Category	Description	Legal basis
Necessary	Essential for website operation (e.g. cookie consent storage).	Legitimate interest
Cookieless statistics	Umami: page views, referrer, country, device type. No cookies, no personal identification, so no consent is required.	Legitimate interest
CRM tracking	HubSpot tracking code: records which pages a visitor viewed once they submit the form. Loaded only with consent.	Consent

Change your cookie preferences anytime:

4. Data transfers and processors

Netlify, Inc. (USA), hosting and contact form processing. Transfer lawful under EU–US Data Privacy Framework (DPF).
Umami Software, Inc. (EU servers), cookieless visitor statistics.
HubSpot, Inc. (EU data centre), CRM and meeting scheduling; tracking code only with consent. DPF-based transfer.

5. Your rights (GDPR)

Access, find out what data we hold
Rectification, correct inaccurate data
Erasure ("right to be forgotten")
Data portability
Object to processing
Withdraw consent, at any time, without consequence

To exercise rights: matyas.kurta@kmlglobalreach.com

Complaints: Hungarian NAIH, www.naih.hu

6. Data security

Data is transmitted via HTTPS and retained only as long as necessary. Access is limited to KML Global Reach's representative.

7. Changes

We reserve the right to amend this policy. Significant changes will be announced on the website.