Ramona Gyorfi

Privacy Policy

How I collect, use, and protect your personal data.

Last updated: October 2026

Your privacy matters, especially in work like mine. This policy explains what personal data I collect, why, how I protect it, and what rights you have under the EU General Data Protection Regulation (GDPR) and Hungarian Act CXII of 2011 on informational self-determination (Infotv.).

1. Who is responsible for your data

  • Data controller: Győrfi Ramóna e.v.
  • Business: sole trader (egyéni vállalkozó), Hungary
  • Registered address: Árpád utca 76, 5667 Magyarbánhegyes, Hungary
  • Tax number: 57440756-1-24
  • Contact: ramonagyorfi.support@gmail.com

2. What data I collect

  • Contact details you share when you email me, send a message through the contact form, or book a call: your name, email address, phone number, and the content of your message.
  • Booking and payment details: appointment dates, invoices, and the billing information needed to issue them. If you pay online, your payment is processed by Stripe or PayPal. I never see your full card details.
  • Session information: notes about what we discuss in sessions. This may include information about your mental health and well-being, which the law treats as a special category of data that needs extra protection.
  • Technical data: when you visit this website, your browser automatically shares basic information such as your IP address with the services that host the site and load its fonts (see section 6).

I do not collect more information than I need, and I never sell your data.

3. Why I use your data, and on what legal basis

  • To reply to your messages and arrange an intro call. Legal basis: steps taken at your request before entering into an agreement (Art. 6.1.b GDPR).
  • To provide sessions and keep session notes. Legal basis: the agreement between us (Art. 6.1.b GDPR) and, for information about your health, your explicit consent (Art. 9.2.a GDPR), which I will ask for before we start working together.
  • To issue invoices and keep accounting records. Legal basis: legal obligation (Art. 6.1.c GDPR).
  • To share agreed information with a club, agent, or family member who pays for your sessions. Legal basis: your explicit consent, given in advance. Nothing is shared without it.

4. Confidentiality

What you tell me in sessions stays confidential. The only exceptions are situations where the law requires disclosure, or where there is a serious and immediate risk to your life or someone else's safety. If that ever happens, I will, wherever possible, talk to you first.

5. How long I keep your data

  • Messages from people who don't become clients: deleted within 1 year of our last contact.
  • Session notes: kept for 1 year after our last session, then securely deleted.
  • Invoices and accounting records: kept for the period required by Hungarian accounting law (currently 8 years).

6. Who else handles your data

I use a small number of trusted service providers to run my practice. They process data only on my behalf and under agreements that protect it:

  • Email: Google (Gmail) and Apple (iCloud Mail)
  • Video sessions: Google Meet
  • Contact form: Tally (Tally BV, Belgium), which receives the details you enter in the form on the Contact page
  • Booking: TidyCal and Google Calendar
  • Payments and invoicing: Stripe and PayPal (online payments), Számlázz.hu (invoicing)
  • Website hosting: Vercel Inc. (USA)
  • Fonts: Google Fonts, which loads the typefaces on this site from Google's servers and receives your IP address when you visit.

Some of these providers may store data outside the European Economic Area. Where that happens, transfers are protected by the safeguards required by the GDPR, such as the EU-US Data Privacy Framework or Standard Contractual Clauses.

7. Your rights

You can, at any time:

  • access the personal data I hold about you;
  • ask me to correct or complete it;
  • ask me to delete it, where I'm not legally required to keep it;
  • restrict or object to how I use it;
  • receive it in a portable format;
  • withdraw your consent, without affecting anything done before you withdrew it.

To exercise any of these rights, email ramonagyorfi.support@gmail.com. I will reply within one month. If you believe your data has been mishandled, you can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, www.naih.hu), or with the data protection authority in the EU country where you live, for example the Spanish AEPD (www.aepd.es).

8. Young athletes

I work with young people under 18 only with the agreement of a parent or legal guardian, who also gives consent to the processing of their personal data. Young athletes are still welcome to get in touch first, and we can then involve a parent or guardian together.

9. Security

I take appropriate measures to keep your data safe, including secure video platforms, password-protected devices and accounts, and limiting access to session notes to myself.

10. Changes to this policy

I may update this policy from time to time. The date at the top shows when it was last changed.