Legal
Cookies, briefly.
This site stores as little as possible in your browser. Anything that is not strictly necessary runs only after you say so — and you can take that back at any time.
1. What a cookie is
A cookie is a small file a website stores in your browser, allowing the site to recognise the browser on a later visit or to remember a setting. This notice covers similar technologies too, such as the browser's local storage, because they raise the same privacy questions.
2. The categories
The site distinguishes five categories. The Strictly necessary category operates without consent; you can decide separately whether to allow each of the other four categories:
- Strictly necessary — needed to run the site securely and to remember your choice. This category cannot be switched off, because without it the service cannot be delivered. Its legal basis is not consent but the provision of the service you asked for.
- Preferences and convenience — remembering settings you make on the site.
- External media — content embedded from a third party, such as a map or a video.
- Statistics — first-party audience measurement (analytics cookie, IP address, browser identifier) to understand which pages are opened.
- Marketing — conversion measurement and advertising services.
The latter four operate on the basis of your consent only (Article 6(1)(a) GDPR and Article 5(3) of the ePrivacy Directive). Until you consent, those services are not loaded and send nothing anywhere.
3. What this site uses today
The table below is generated from the site's live configuration, so it always shows what is actually in use.
| Cookie | Category | Purpose | Lifetime |
|---|---|---|---|
| vs_consent | Strictly necessary | Remembers your cookie choice so the site does not ask again on every page | 180 days |
| vs_aid | Statistics | First-party random visitor identifier for audience measurement. Set only after Statistics consent; HttpOnly, SameSite=Lax | 13 months (395 days) |
| vs_admin_sid | Strictly necessary | Keeps the signed-in administrator session in the /admin area; never set in a visitor’s browser | Until the browser closes; the session expires after 30 minutes of inactivity and after 8 hours in any case |
4. First-party measurement and the consent banner
The site keeps a first-party record of public page openings. This is the Statistics category, and it starts only after you have consented in the consent banner or Cookie settings. Until you consent, the vs_aid cookie is not set and nothing is written to the page-view log.
This measurement processes personal data (IP address, browser identifier, cookie identifier), so it is not anonymous. It is not sent to a third party, is not used for advertising or profiling, and does not produce automated decisions.
5. How first-party measurement works
How it runs
- You consent to Statistics. The choice is stored in the
vs_consentcookie, and a receipt is recorded. - On the next public page opening the browser reports the path to this site’s own server.
- The server checks consent, filters bots, and — if needed — sets the
vs_aidcookie: a random UUID, HttpOnly and SameSite=Lax. - The log stores: the path (without the query string), the page title, the language, the time (Europe/Budapest), the
vs_aididentifier, the IP address and the User-Agent. - The same path with the same
vs_aidcounts once within 30 minutes.
Legal basis
Article 6(1)(a) GDPR — consent, together with Article 5(3) of the ePrivacy Directive. Consent is voluntary, informed and may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing before it.
Retention
The vs_aid cookie and the page-view log (including IP address and User-Agent) are kept for 13 months (395 days), then deleted automatically. When you withdraw consent the cookie is deleted at once and measurement stops; rows already recorded remain until the retention period ends, unless you ask for erasure under the GDPR.
Recipients and access
I am the controller, as the operator of Vital Structura. The hosting provider stores the server as a processor. In the administration area, page views — with IP address and User-Agent — are visible only to signed-in users with the relevant permission. The data is not sold and is not added to a marketing list.
Your rights
You may request access, rectification, erasure, restriction and withdrawal of consent as set out in section 11 of the Privacy notice. You may also lodge a complaint with the Hungarian authority (NAIH); the details are in the same notice.
6. Changing or withdrawing your choice
You can change your mind at any time, without giving a reason. The Cookie settings link in the footer reopens the settings panel on any page, where each category can be switched on or off:
Withdrawing is as easy as giving consent was. Withdrawal does not affect the lawfulness of processing carried out before it.
Cookies can also be blocked or deleted in any browser's settings. If you block the strictly necessary ones too, the content of the site remains readable, but it cannot remember your consent choice, so the question will come back on every visit.
7. How consent is evidenced
Article 7(1) GDPR requires the controller to demonstrate that consent was given. Every decision is therefore recorded as a receipt: the random identifier generated by your browser, the time of the decision, what was decided, and the version of this notice in force at that moment. The receipt contains no IP address, name, email address or browser fingerprint, so it cannot be linked back to you directly. Receipts are kept for 24 months and then deleted automatically.
8. Embedded and external content
The site links to a LinkedIn profile and to downloadable PDF material. Once you open those links, the destination's own privacy practice applies, which is outside my control. The site currently contains no embedded social buttons, videos or maps. Should any be added, they fall under "External media": a notice appears in place of the embed first, and the content loads only after you consent.
9. Fonts
The typography is served from this site's own server, so loading it involves no request to a third-party font provider. The fonts set no cookie in the browser and use no tracking identifier.
10. Related notices
- Privacy notice — how personal data is processed
- Imprint — who operates the site