Legal
Privacy Policy
Last updated: 27 September 2026
1. Who controls your data
Tamás Marosvári, sole trader (egyéni vállalkozó), trading as Fieldnote Society. Registered seat: 2084 Pilisszentiván, Szabadság utca 103, Hungary. Tax number: 90747984-1-33. Email: hello@fieldnotesociety.com.
We have not appointed a data protection officer; our activities do not require one.
2. What we process, why, and for how long
| Purpose | Data | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Answering enquiries and holding introductory calls | Name, email, message, preferred call times | Steps before a contract, Art. 6(1)(b) | 12 months if no order follows |
| Delivering your order | Name, email, billing address, intake answers, trip preferences, dates, group details, call notes, the itinerary | Contract, Art. 6(1)(b) | 5 years after delivery, the limitation period for claims |
| Health-related intake answers you choose to give | Fitness level, medical or altitude considerations, allergies, dietary needs | Explicit consent, Art. 9(2)(a) | 12 months after your travel dates, or earlier on request |
| Payment and invoicing | Name, billing address, email, amount, transaction ID (card details go to Stripe, never to us) | Legal obligation, Art. 6(1)(c), Hungarian accounting and tax law | 8 years, Act C of 2000 on Accounting, s. 169 |
| Newsletter and free route guide | Email, first name, record of consent | Consent, Art. 6(1)(a) | Until you unsubscribe |
| Running and securing the site | IP address, browser, device, server logs | Legitimate interest, Art. 6(1)(f), keeping the site available and secure | 30 days |
| Testimonials | Name or initials, quote, photo if you send one | Consent, Art. 6(1)(a) | Until you withdraw consent |
We do not use automated decision-making or profiling that produces legal or similarly significant effects.
3. People travelling with you
An order can cover up to 4 travellers. If you give us details about the others, including children, please share only what planning requires and make sure they have seen this policy. We use it solely to prepare your itinerary.
4. Who we share data with
We do not sell or rent personal data. We share it only with providers who process it on our behalf under data-processing agreements, and with authorities where the law requires it.
| Provider | Role | Location and safeguard |
|---|---|---|
| Lovable | Website hosting | EU |
| Supabase | Database, forms, admin | EU |
| Stripe | Payment processing | EU entity; US transfers under the Data Privacy Framework and SCCs |
| Resend | Transactional email | US; Data Privacy Framework / SCCs |
| Google Workspace and Calendar | Email and scheduling | US; Data Privacy Framework / SCCs |
| Notion | Client records | US; Data Privacy Framework / SCCs |
| Billingo | Invoicing and tax reporting | Hungary |
We never pass your data to airlines, hotels or tour operators. You book with them yourself.
5. Transfers outside the EEA
Where a provider processes data outside the European Economic Area, we rely on an adequacy decision, such as the EU–US Data Privacy Framework for certified companies, or on the European Commission's Standard Contractual Clauses.
6. Cookies
We use only strictly necessary cookies, which keep the site, checkout and security working and need no consent. We do not use analytics or advertising cookies. If we add them, we will ask for your consent through a cookie banner before any such cookie is set, and update this policy.
7. Your rights
You may ask us to give you access to your data, correct it, delete it, restrict or stop processing it, or send it to you in a portable format. You can withdraw consent at any time, which does not affect processing already carried out. Write to hello@fieldnotesociety.com and we will answer within one month. Every marketing email carries an unsubscribe link.
If you believe we have mishandled your data, you may complain to the Hungarian authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11, ugyfelszolgalat@naih.hu, naih.hu. If you live in another EU country, you may complain to your own authority instead.
8. Age
You must be 18 or over to place an order, and at least 16 to subscribe to the newsletter or download the free route guide.
9. Security
We protect your data with access controls, encrypted connections and reputable providers. No online system is completely secure; if a breach affects you, we will notify you and the authority as the law requires.
10. Changes
We will post any update here with a new date, and email subscribers about significant changes.