Privacy notice

1. Controller and scope

KNKG Clean Hungary Kft. is the controller for knkgclean.com. Company and representative details appear below and in the legal notice. Send privacy questions or rights requests to info@knkgclean.com or our registered office.

This notice covers website visits, quote requests initiated here and related correspondence. Business contacts’ names and personally attributable business contact details are personal data too. This document does not replace the full rules for employee, recruitment or contractual customer data processing.

2. Quote requests and communication

We process data to answer enquiries, clarify requirements, prepare quotes and communicate as needed. The form is not an order and does not itself create a cleaning contract. After successful submission, we also send an automatic confirmation containing your request details to the email address provided.

Business contact data is processed on the basis of our legitimate interest under Article 6(1)(f) GDPR in managing business enquiries and communication. We use only the data needed for discussions; you may object to processing based on legitimate interests. If you would personally enter into the contract as an individual, pre-contractual steps requested by you are based on Article 6(1)(b) GDPR.

Enquiries that do not lead to a contract are retained for six months after the last substantive discussion, then deleted. In a specific legal dispute, necessary data may be retained separately for as long as needed to assert or defend claims. Where a contract is concluded, further contractual and accounting processing follows the applicable separate rules.

Providing data is voluntary. Without fields marked with an asterisk the online form cannot be sent, because we could not properly handle the enquiry. You may also contact us by phone or email. Advertising cookie consent is not required for a quote request; we do not use these data to create newsletter lists.

Completed form fields are temporarily saved in your browser’s sessionStorage under knkg:quote-draft:v1 so you can continue after changing pages or going back in the same tab. This local draft is not itself sent to the server, Google or Meta. It is deleted after successful submission or with Clear saved details. Drafts older than 24 hours are deleted on next access and are not restored. Session storage is tied to the browser tab session; closing or restoring it depends on browser behaviour.

• Required fields: contact name, email address, town/city of the work and requested service.
• Optional: company name, phone, approximate area, frequency, staffing headcount, working hours and duration, planned start and a free-text task description. If you select a specific start date, that date is required; otherwise the start can be discussed.
• Submission data: random request ID, email provider’s sending ID and processing time. Do not enter health data, official identifiers or other sensitive data in the free-text field.

2/A. Callback requests

The callback form asks for your name, phone number and preferred calling period. We use these only for the requested callback and business discussions, on the legal bases and retention terms in section 2. Requests are sent to the company mailbox info@knkgclean.com; they do not reserve an appointment. We do not send confirmation text messages.

3. Website operation and security

To serve and protect the website, provider infrastructure may process technical data: IP address, request time and path, technical browser information and errors. The purpose is secure operation and prevention of misuse, based on our legitimate operational and security interests under Article 6(1)(f) GDPR.

The application uses short-term in-memory rate limiting for quote and cookie-choice endpoints. Counters use 60-second windows; expired entries are deleted on the next request. Form text is not written to a separate application access log. Providers’ technical logs and backups are governed by their terms; further information is available on request.

4. Cookie choice and evidence

Our first-party knkg_consent cookie stores your choice, notice version, choice and expiry times and a random receipt ID for 180 days. Remembering the choice is necessary to apply your requested privacy settings.

A minimal server record contains random receipt and event IDs, allowed or refused measurement, document version, recording and expiry times. It contains no name, email, form text, IP address or browser fingerprint. Its purpose is accountability and proof of consent, based on Article 6(1)(c) GDPR in conjunction with Articles 5(2) and 7(1).

Records expire after 180 days; expired records are deleted automatically on the next logging operation. The identifier is not linked to quote requests or used for advertising.

5. Google Ads conversion measurement

Google Ads tracking loads only after Accept all or specific permission in cookie settings. Without permission, Google tracking does not load and our own code does not send page-opening or quote-request conversions to Google. The legal basis is consent under Article 6(1)(a) GDPR.

The purpose is to identify advertising visits leading to a homepage opening or successfully received quote request. Google may process technical device data, IP address, page URL, ad-click and cookie identifiers, event type and time. Successful requests send a random submission ID to prevent duplicate counting; completed form contents are not transmitted.

Google consent signals for personalised advertising, remarketing and user data for enhanced conversions remain disabled. No separate Google Analytics measurement runs. Cookie details and typical lifetimes are in the Cookie notice; Google describes further retention rules in its own notices.

You may withdraw consent at any time using Cookie settings in the footer, without affecting the lawfulness of previous processing. We try to delete accessible first-party Google Ads cookies and reload the page to stop further tracking-code loading. Cookies on other domains can be removed in your browser’s privacy settings.

• Google privacy policy ↗
• How Google uses data from partner sites ↗

5/A. Meta (Facebook) advertising conversion measurement

The Meta pixel loads only with consent to the Google Ads and Meta advertising measurement category. Earlier Google-only consent does not authorise Meta measurement; we request a new choice for the new notice. The basis is consent under Article 6(1)(a) GDPR. Quote requests work even if you decline.

Measurement assesses Facebook advertising results and successful quote requests and optimises the campaign for requests. The pixel sends PageView and, after successful receipt of a request, Lead events. A random technical ID prevents duplicate counting. Our code does not send the requester’s name, email, phone or form text; automatic advanced matching and automatic event detection are not used.

Meta may process technical device and browser data, IP address, page URL, referrer, click and cookie identifiers and event type and time. It may combine these with data from its services, including Facebook account data, and use them for advertising under its terms. We do not create a separate website-visitor remarketing audience in the current setup.

For collection and transmission to Meta, KNKG Clean Hungary Kft. and Meta Platforms Ireland Limited are joint controllers within the scope of Meta’s Controller Addendum. Meta is responsible for further processing under its notice. Withdraw consent at any time using Cookie settings; we stop the pixel, try to delete accessible _fbp and _fbc cookies and reload the page. You may also exercise rights concerning previously transmitted data with Meta.

• Meta privacy policy ↗
• Meta Controller Addendum ↗
• Meta cookie policy ↗

5/B. First-party website measurement

Only after you allow the measurement category do we count phone-link clicks, successful quote requests and successful callback requests. A phone click does not prove that a call or business agreement took place. Measurement is based on your consent; all contact options work without it.

We keep daily aggregate counters for up to 180 days: event type, selected language, service page and broad source category (such as Google advertising or a direct visit). Counters contain no name, email, phone number, IP address, visitor ID, form text, full URL or advertising click ID. Expired aggregates are deleted on the next counting operation.

With measurement enabled, sessionStorage under knkg:attribution:v1 retains only the broad source category, known landing-page service category and language for the tab session. We delete it on withdrawal. For successful enquiries we may also include the source category and landing page in the company notification email. We do not save full referrer URLs or raw campaign parameters.

Measurement permission covers our own website measurement as well as Google Ads and Meta. Because this is a new purpose, we request a fresh choice instead of using your previous one. You can withdraw consent at any time through Cookie settings.

6. Who may access the data?

Enquiries are handled by the relevant company contact. Technical providers process data as necessary for their tasks. We disclose data to authorities or other authorised bodies only where legally required or on an appropriate legal basis.

• Website publication and operation: OpenAI Sites; for services in the EEA, OpenAI Ireland Ltd. (1st Floor, The Liffey Trust Centre, 117–126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). Cloudflare services participate in the runtime infrastructure, which handles website requests and technical form processing.
• Quote email delivery: Resend, Plus Five Five, Inc. (2261 Market Street #5039, San Francisco, CA 94114, USA). It processes email addresses, message contents and technical sending data.
• Domain and receiving mailbox: Rackhost Zrt. (6722 Szeged, Tisza Lajos körút 41.; info@rackhost.hu). Request emails and reply correspondence are stored in the mailbox.
• Authorised Meta measurement: Meta Platforms Ireland Limited, in the role defined in the Controller Addendum and under its own terms for further processing.
• Authorised advertising measurement: Google Ireland Limited and Google’s infrastructure, for technical and event data processed during measurement. Google’s terms describe its independent controller role and further uses.

• OpenAI data processing terms ↗
• OpenAI subprocessors ↗
• Resend data processing terms ↗
• Rackhost processor statement ↗

7. Processing outside the EEA

The international infrastructure of OpenAI/Cloudflare, Resend, Google and Meta may involve processing outside the EEA, including the USA. We do not claim that all data remains exclusively in Hungary or the EU.

Transfer safeguards under providers’ terms may include European Commission Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework for certified recipients covered by a valid adequacy decision. Resend’s DPA explains both; OpenAI’s DPA also provides international transfer safeguards. Ask info@knkgclean.com for information about applicable safeguards and copies.

8. Your rights and handling requests

Subject to GDPR conditions, you may request access, rectification, erasure or restriction. You may object to legitimate-interest processing on grounds relating to your particular situation. Data portability may apply to automated processing based on consent or contract. Rights may be limited, for example by legal obligations or the defence of legal claims.

Send requests to info@knkgclean.com or our registered office. We respond without undue delay, normally within one month. Complex requests may be extended by two further months under the GDPR; we inform you and explain why within the first month. We request only necessary and proportionate identification data.

If you believe your privacy rights have been infringed, you may contact Hungary’s National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; ugyfelszolgalat@naih.hu). Its website explains current complaint procedures. You may also seek a judicial remedy.

• NAIH – contact and complaints ↗

9. Further information

We do not make solely automated decisions based on quote requests that produce legal or similarly significant effects on you. Quote contents are determined through discussion.

Social media and external certificate links lead to other websites, whose own rules apply. The links themselves do not load tracking code. Section 5/A describes separately consented Meta measurement; we do not use LinkedIn tracking. The certificate image is served through our own server without transmitting visitor identifiers.

We update this notice when actual processing changes. Material changes to measurement purposes require new consent. The current version is accessible in the footer and beside the quote form.