Privacy notice

Who is responsible

The waitlist is run by the people planning the space in Vác. There is no other operator behind it.

No company or sole trader is registered yet, so there is no legal entity to name here.

Until there is a permanent address, reply to the confirmation email you got after signing up — it reaches the same people.

What we collect

The waitlist form sends only what you fill in:

Name (required)

So the confirmation email is not addressed to nobody.

Email address (required)

The only channel we have to come back to you.

How often you would use the space (required)

One of five ranges, from “not sure yet” to “almost every weekday”. This is the core demand signal.

What you would care about (optional)

Any of the planned pieces: a quiet desk, meeting room, phone booths, coffee and kitchen, small lounge.

How you work today (optional)

At home, in a café, commuting toward Budapest, or mixed.

What you would pay (optional)

A rough monthly amount in forints. It is your sense of value, not a price we are asking, and it commits you to nothing.

Free-text note (optional)

Up to 500 characters about needs, constraints, or questions. Please leave out anything sensitive — write only what you are happy to have sitting in a plain database row.

Page language

Hungarian or English, taken from the address of the page you submitted from, so we answer in the same language.

Time of your consent

The moment you ticked the consent box, stored so that the consent can be shown to have been given.

Campaign parameters (only if the link carried them)

If you arrived from an ad or a shared link containing utm_source, utm_medium, or utm_campaign, we keep those three values to see which channel works. They describe the link, not you.

Beyond that: no account, no password, no phone number, no postal address. Your IP address is not stored in the waitlist, and the form has one hidden field that only bots fill in — if it arrives filled, nothing is saved at all.

Why we ask for it

• To see whether enough people around Vác and the Danube Bend would actually use a space like this — the decision on whether to build it at all.
• To send you one confirmation that your signup arrived.
• To write to you if the plans become concrete.

That is all. No advertising profiles, no scoring, no automated decision-making, and no unrelated newsletter.

Legal basis

Your consent — Article 6(1)(a) GDPR. The form cannot be submitted without ticking the consent box, and we record when that happened.

You can withdraw your consent at any time, without giving a reason: write to us and we delete your entry. Withdrawal does not affect the processing that happened before it.

Who else handles it

We use these providers. They process the data for us, on our instructions, not for their own purposes.

Supabase — database

Stores your waitlist entry. The site itself can only add rows: the table cannot be read, changed, or deleted from the browser. We review signups in the Supabase admin interface.

Resend — email delivery

Sends your confirmation, and a one-line internal notice that a signup arrived. It receives your name, email address, chosen frequency, and ticked interests — not your note, your amount, or the campaign parameters.

Vercel — hosting

Serves the site and writes technical server logs, which can hold your IP address and browser type for a short time. Those logs exist to keep the site running and to stop abuse; we do not use them for marketing and do not join them to the waitlist.

Google Analytics and Microsoft Clarity — measurement

They measure page views, language, waitlist submits, and (Clarity) heatmaps and session replay. They load only after you accept, on the banner or the cookies page. Your name, email address, and note are never sent to them; the waitlist form is masked in recordings.

The Supabase project region is still to be confirmed and will be named here.

Resend, Vercel, Google, and Microsoft are US companies, so part of the processing can happen outside the European Economic Area. They offer data processing agreements with the European Commission's standard contractual clauses. Google and Microsoft only receive data if you accept measurement.

Details on measurement and cookies: cookies and analytics.

How long we keep it

Until we decide whether the space opens, and at most 12 months after that decision. If we drop the plan, the waitlist is deleted. If we open, we keep writing to you only as long as you want to hear from us.

A deletion request is honoured sooner than that, whenever it arrives.

Your rights

Under the GDPR you can ask us to:

• tell you what we hold about you and send you a copy;
• correct anything that is wrong;
• delete your entry, which also takes you off the waitlist;
• stop using the data while a question about it is being sorted out;
• stop the processing where you object to it;
• hand your data over in a machine-readable file;
• treat your consent as withdrawn from that point on.

Write to the contact address above. We answer within 30 days. Since we only hold what you typed into one form, deletion is usually done within days.

If you think we handle your data badly, you can complain to the supervisory authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9–11., ugyfelszolgalat@naih.hu, https://naih.hu.

What we never do

• We do not sell your data, and do not pass it to advertisers or data brokers.
• We do not use the waitlist for anything unrelated to this space.
• Being on the list is not a booking and does not commit you to renting or paying for anything.

Changes

If the plans or the tools change, we update this page and the date at the top. If a change affects data we already hold, we write to the people on the list before it takes effect.