Who is responsible for your data?
adShaper is a product and brand operated by High Voltage Kft. High Voltage Kft. is the data controller for the processing described in this notice.
- Registered name
- High Voltage Kft.
- Registered office
- 1084 Budapest, József u. 3., Hungary
- Company registration no.
- 01-09-888-108
- Tax no.
- 14083778-2-42
- EU VAT no.
- HU14083778
- Privacy contact
The privacy contact is not described as a formally appointed Data Protection Officer.
What this notice covers
This notice covers visits to ad-shaper.com, demo bookings, subscriptions to Production Notes, consent preferences, and the related communications. It does not govern the processing performed inside the adShaper application for registered customers under a separate contract.
When we ask for information, fields marked as required are necessary to provide the requested service. Please do not enter special-category data, confidential client information or unpublished campaign material in the free-text demo field.
What we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Website delivery, security and troubleshooting | IP address, request and error data, date and time, browser/device and security logs. | Our legitimate interest in operating a secure and reliable website (GDPR Art. 6(1)(f)). | Routine HTTP(S) access and web-server error logs are retained for 30 days and then deleted automatically. Relevant log extracts isolated for the investigation of a security incident may be retained for up to 90 days, or until an ongoing investigation, legal claim or mandatory authority procedure is closed. |
| Demo booking and follow-up | Name, email address, company or brand, booking answers, selected time, time zone, optional guests, meeting details and technical metadata. | Steps at your request before entering into a contract (Art. 6(1)(b)); security and abuse prevention may rely on legitimate interests (Art. 6(1)(f)). | Two years after the last substantive contact, unless a contract or legal obligation requires longer retention. |
| Production Notes newsletter | Name, email, language/source group, consent and double-opt-in evidence, subscription status, delivery, open and click engagement data. | Your consent (Art. 6(1)(a)). Evidence of consent and suppression records may be retained for compliance and defence of legal claims. | Unconfirmed sign-ups for 30 days; active subscriptions until withdrawal; consent and suppression evidence for five years after withdrawal. |
| Audience measurement | Pseudonymous online identifiers; page URL and title; referrer; interactions; language; browser, device and screen information; and approximate location. Google Analytics uses IP addresses for geolocation and service security but does not log or store individual IP addresses. | Your consent (Art. 6(1)(a)). The Google tag is blocked until you choose “Allow analytics”; advertising storage, signals and personalisation remain disabled. | Analytics cookies for up to 395 days. User- and event-level data in Google Analytics is deleted according to the property setting and no later than 14 months; aggregated reports may remain available longer. |
You can unsubscribe from Production Notes through the link in every newsletter or by contacting us. Withdrawing consent does not affect processing carried out before withdrawal. Sender may use tracking pixels and tracked links to record message delivery, opens and clicks so that we can understand newsletter performance.
Who may receive the data?
Sender.net
UAB “Sender.lt”, Lvivo st. 25, Vilnius, Lithuania, company code 302820904, VAT LT100008985714. It provides the newsletter form, double opt-in, subscriber management, campaign delivery and engagement reporting. Sender states that subscriber data is hosted in the EU.
Sender privacy policy ↗Cal.com
Cal.com, Inc., 2261 Market Street #4382, San Francisco, CA 94114, USA. It provides demo scheduling. Cal.com may process data in the United States and uses subprocessors. Cal states that it relies on recognised transfer mechanisms, including standard contractual clauses where appropriate.
Cal.com privacy policy ↗Google services
Google services may support reCAPTCHA, Calendar, Meet and—only after consent—Analytics. Calendar/Meet can receive meeting title, time, organiser and attendee details. Analytics receives the audience-measurement data described above; advertising storage, Google signals and advertising personalisation are disabled. The applicable Google entities and safeguards depend on the service and agreement. Website fonts are served locally from ad-shaper.com.
Google privacy policy ↗RackForest — website hosting
Rackforest Informatikai Kereskedelmi Szolgáltató és Tanácsadó Zrt., 1132 Budapest, Victor Hugo utca 11., 5th floor B05001, Hungary; company registration no. 01-10-142004; tax no. 32056842-2-41. It provides website hosting and infrastructure and may therefore process technical request, error, IP and security-log data. RackForest’s public information places its server infrastructure in Budapest. Routine HTTP(S) access and web-server error logs are retained for 30 days and then deleted automatically. Relevant log extracts isolated for a security incident may be retained for up to 90 days, or until the related investigation, legal claim or mandatory authority procedure is closed.
RackForest privacy policy ↗Sender makes a data processing agreement available on request, while Cal.com states that it processes booking data under its data processing agreement. Where a provider processes data outside the European Economic Area, we use or require an applicable GDPR transfer mechanism, such as an adequacy decision or standard contractual clauses, and assess supplementary safeguards where required.
Your choices and data protection rights
Subject to the conditions in the GDPR, you may request access to your data, rectification, erasure, restriction, data portability, or object to processing based on legitimate interests. You may withdraw consent at any time. For direct marketing, you may object at any time and we will stop using your data for that purpose.
Send requests to this address: . We may need to verify your identity. We normally respond within one month; the GDPR allows an extension for complex or numerous requests, with notice to you.
We do not use the processing described here to make solely automated decisions that produce legal or similarly significant effects.
How to raise a concern
Please contact us first so we can investigate. You also have the right to complain to the Hungarian supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9.
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
Official contact information ↗
NAIH notes that a formal authority procedure cannot be initiated by ordinary email alone; its website explains the available filing methods.
How we protect data and update this notice
We apply proportionate organisational and technical measures, limit access to people and providers who need it, and review the services used in the lead-generation flow. No internet transmission or storage system is completely risk-free.
We may update this notice when the website, providers, legal requirements or our processing changes. The date at the top shows the latest version. Material changes will be highlighted where appropriate.