Privacy and cookies.

Who holds this data

The controller of the personal data described below is WLWYB Global Korlátolt Felelősségű Társaság (WLWYB Global Kft.), a limited liability company registered in Hungary and trading as WLWYB.

What this site collects

The typefaces, images and stylesheets are all served from this site, so reading it makes no request to a third party except for the measurement described under Measurement below, and that only to the extent you allow.

The client area is by invitation and collects only what running it requires:

• Your email address, because it is what an invitation is issued against and what identifies you when you return.
• Which client organisation you belong to, because that is what determines which documents you can open.
• Which sample deliverables have been prepared for you, and when.
• Sign-in records kept by our authentication provider: timestamps, IP address and browser user agent.

No payment details are collected or stored anywhere on this site. No special category data is collected. Nothing here is used to build a profile, sold, or shared for advertising.

Measurement

Plausible counts page views, referrer, device type and country in aggregate. It sets no cookie, does no fingerprinting and cannot identify you, so it needs no consent and runs for everyone. It is named here anyway, because needing no consent is not the same as needing no mention.

The rest run only if you allow them, and are not loaded at all until you do. Not loaded and then restrained: not requested.

• Google Analytics 4 (analytics): how the site is used and which enquiries come from where. IP addresses are truncated.
• Microsoft Clarity (analytics): heatmaps and anonymised recordings of how pages are scrolled and clicked.
• LinkedIn Insight Tag (marketing): lets us recognise this visit if you later see us on LinkedIn.

You can change or withdraw that choice at any time from Cookie choices in the footer. Withdrawing reloads the page so that anything already running stops immediately.

Cookies

The two necessary cookies are set regardless: without the first the client area cannot work, and without the second we could not remember that you declined the others.

Who else sees it

Supabase hosts the database, the authentication and the document storage. The project is provisioned in the Frankfurt region, so the data described above is stored in the European Union.

Google is involved only if you choose to sign in with a Google account, and only to confirm that the account is yours. If you sign in with an access link instead, Google is not contacted at all.

Plausible (EU-hosted), and, only with your consent, Google, Microsoft and LinkedInfor the measurement described above. Those three involve transfers outside the EU, made under the European Commission's standard contractual clauses and the EU-US Data Privacy Framework. Decline them and no such transfer occurs.

There are no other processors and no other recipients.

How long it is kept

Account and invitation records are kept while the account is open, and removed within 30 days of a request to close it. Sign-in logs are kept for as long as our authentication provider retains them, which is a matter of weeks. Documents prepared for you are kept for as long as the discussion they belong to is live.

Your rights

Under the GDPR you can ask for a copy of your data, ask for it to be corrected or erased, ask us to restrict what we do with it, object to it being processed, ask for it in a portable form, and withdraw any consent you have given. Write to tower@lhch-lyb.com. We answer within 30 days.

If you are not satisfied, you can complain to the Hungarian supervisory authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Budapest, or to the authority in your own country of residence.

Changes

If this policy changes materially, the date at the top of this page changes with it and anyone holding an account is told. It is not revised quietly.