Privacy notice

1. Controller

Takács Rajmund egyéni vállalkozó, 1113 Budapest, Karolina út 60. 3/8., Magyarország.

Privacy contact: info@walkalong.eu · Telephone: +43 690 1001 76 44

2. Website and security logs

Technically necessary data such as IP address, time, requested resource, browser/device details and error data are processed when the site is accessed. The purposes are delivery, security and abuse prevention. The legal basis is Article 6(1)(f) GDPR and the legitimate interest is secure, reliable operation. Logs are retained only as long as needed for operation, troubleshooting or handling a security incident, and are then deleted.

3. Local preferences and offline content

Language, colour profile, appearance and accessibility preferences, tour progress and expressly downloaded offline content are stored locally in the browser. They remain on the device until deleted in Walkalong or the browser. They are technically necessary for the selected functions; no advertising or profiling cookies are used.

4. Contact and quote requests

We process optional title, first and last name, organisation/venue, email, package interest, tour type, optional station count and tour languages, message, requested start period, interface language and technical user-agent data. The IP address is kept in server memory only for the one-hour abuse-prevention window and is not stored with the enquiry in the database. The purposes are responding, clarifying requirements and preparing a quote; the legal basis is Article 6(1)(b) GDPR, while abuse prevention relies on Article 6(1)(f) GDPR. Fields marked as required are necessary to process the request. Processing is documented as new, contacted, converted to a customer relationship, lost or closed without a response. A closure time is recorded for each of the three closed outcomes; after the separately defined period expires, the enquiry is deleted automatically unless a legal obligation or separate contract record requires further retention.

4a. Accounts, portal and customer briefings

Lead, customer and administration accounts may contain name, email, organisation, telephone number, role, account status, subscription and access period, assigned tours, notes and last login. The purposes are access management, customer support, contract performance and system security. The legal basis is Article 6(1)(b) GDPR for pre-contractual and contractual services and Article 6(1)(f) GDPR for secure administration and abuse prevention.

Customer briefings may contain questions, deadlines, processing status and answers entered by the customer. The relevant account holder and authorised Walkalong administrators have access. The data are processed to deliver the project and document customer approval.

Login uses a random, technically necessary HttpOnly session cookie. The session is held only in server memory, expires after no more than eight hours and is deleted on logout. Failed login attempts are limited using IP address and email for no more than 15 minutes in server memory. Account, assignment and briefing data are kept only for the lead/customer relationship and subsequent statutory retention or claim periods, then deleted or anonymised.

5. Tour feedback, cookies and usage analytics

Voluntary feedback may contain a rating, comment, listened stations and technical browser data. It is used to improve tours under Article 6(1)(f) GDPR.

We use a self-hosted Umami Analytics instance on Hetzner EU infrastructure to improve the website and demonstration tour in aggregate. The legal basis is Article 6(1)(f) GDPR, our legitimate interest in improving the product and its public content. Measured data include page path and title, referrer, time, approximate country, browser, operating system, device type, screen size, language, and predefined events such as opening the demo, stations and audio playback. Form contents, names, contact details, customer or tour data, full URL query strings and session recordings are not collected.

The IP address is used transiently to determine the approximate country and an anonymous, regularly changing session identifier, but is not stored in the analytics database. Measurement uses no cookies, cross-site tracking or advertising profiling. Do Not Track is respected and analytics data are retained for no more than 13 months. Measurement can be switched off directly below or in Data settings; the choice is stored on this device. You may also object by contacting info@walkalong.eu.

Additional direct storage of individual visitor events is disabled; the former public event endpoint no longer accepts data. For active protected demo shares, the Walkalong application database keeps only non-personal aggregate counters per share, such as opens, starts, station and audio usage, and total active viewing time. No IP address, device identifier or individual session is stored in these counters.

6. Free consultation booking

Appointments are booked on the RI Web Studio website. The selected time, name, email and optional telephone number and note are processed there. A notice is shown before redirection. See the linked RI Web Studio privacy notice below for details.

7. Recipients and transfers

Hosting and database: Hetzner Online GmbH, Germany (EU). Backups are processed on self-managed Hetzner infrastructure in Germany. Providers act only as necessary. Data is not sold or used for advertising. No transfer to third countries is currently intended.

8. Rights and complaints

Requests for access, rectification, erasure, restriction, portability or objection can be sent to info@walkalong.eu. Consent may be withdrawn for the future. Complaints may be made to the Hungarian NAIH (1055 Budapest, Falk Miksa utca 9–11., naih.hu) or, for residents in Austria, the Austrian Data Protection Authority (dsb.gv.at).

9. Automated decisions and changes

No automated decision-making, including profiling, takes place. Material changes will be published here with a new version date.