Privacy notice

The booking form collects: your name, email address, phone number, the service you chose, the affected body region, a free-text description of your complaint, your preferred time, and — if you fill it in — any other notes.

The free-text description of your complaint may contain information about your health. Under the GDPR this counts as a special category of data — health data — so it carries extra protection, and processing it requires your explicit consent.

We use the data only to process your appointment request and to arrange a time — nothing else.

The legal basis for processing is your consent, given by ticking the checkbox when you submit the form. This consent also covers the health data (GDPR Article 6(1)(a), and Article 9(2)(a) for the special category data).

You can withdraw your consent at any time, without giving a reason. Withdrawal does not affect the lawfulness of processing carried out before it.

When you submit the form, the data is sent to Fülep László by email. We keep it in no database of our own: there is no system of ours that saves the contents of an appointment request — the data lives on in the receiving email inbox. If you upload a medical report or other health document, it arrives the same way, as an attachment to that email, and likewise stays in the inbox; we do not store it on our server.

Email delivery is carried out by Resend (Resend, Inc.), acting as a data processor. This means the full contents of your appointment request — including the free-text description of your complaint — passes through Resend’s systems, for the sole purpose of delivering the message. Resend does not use this data for its own purposes.

If a message fails to send for technical reasons, the system writes a log entry so the enquiry is not lost and we can call you back. That entry contains exactly three things: your name, your email address and your phone number. Nothing else — not the free-text description of your complaint nor its length, not the service you chose, and not the body region concerned. The log is created at our hosting provider (Vercel) and is retained for a limited period.

The site offers a conversational assistant called Greta. What you type to her leaves your browser: the messages are processed by Anthropic (Anthropic PBC), acting as a data processor, using their language model. Because a description of your complaint is health information, this is worth knowing before you write to her.

The conversation is stored nowhere. It reaches no database, it is not emailed to Fülep László, and the contents of the messages are not written to the server log either. It lives in your browser’s memory for as long as the page is open — reload the page or close the tab and it is gone.

Greta does not ask you for a name, phone number or email address, and we ask that you do not give her one: the booking form is what that is for. Greta cannot book appointments.

Greta informs, she does not diagnose, and she is not a substitute for a medical examination. If you describe something that may need urgent care she will direct you to a doctor — that is the one situation in which she will not talk about the clinic’s services.

If you book a confirmed appointment, the booking is created as an entry in Fülep László’s Google Calendar (Google Ireland Limited, acting as a data processor). The entry contains your name, email address, phone number, the service you chose, and how long the appointment runs.

The free-text description of your complaint and any documents you upload are deliberately kept OUT of the calendar entry. They reach Fülep László by email only, exactly as before. The reason is practical: a calendar entry surfaces in phone notifications and in every calendar app the account is connected to, and a description of someone’s health has no business there.

If the calendar is unreachable, your booking is not lost — it arrives by email as a request instead, and the form says so. In that case nothing is written to the calendar at all.

Cancellation links store nothing about you: they carry a signature of the calendar entry’s identifier, so no separate database is needed for the link to work.

For the prevention-training waiting list we process your email address — and your phone number, if you choose to give it. This form collects no health information.

The legal basis is your consent, given by ticking the checkbox on the waiting list form (GDPR Article 6(1)(a)). The purpose is a single notification: to tell you when the service launches.

Your email address is stored with Resend (Resend, Inc.) in a contact list kept for this purpose — the list the launch notification will be sent from. Unlike an appointment request, this is persistent storage, held by a third party.

Fülep László also receives a notification email about the signup, containing your email address and — if you gave it — your phone number. That message is delivered by Resend as well. If it fails to send for technical reasons, the same details — your email address, the phone number if you gave one, and which waiting list it was for — are written to a log entry at our hosting provider (Vercel), retained for a limited period.

You can leave the list at any time: email info@prehabdebrecen.hu and we will delete your address.

We measure site traffic with Vercel Analytics. It sets no cookies and creates no persistent identifier: it records only aggregated, anonymous information about the page viewed — such as the page path, the referring source, country-level location, and device type — which cannot identify you and is never linked to anything you enter in the form.

This site uses no cookies. None for tracking, none for advertising, none for statistics: there is no Google Analytics, Meta Pixel, ad tag or session recorder on it. Vercel Analytics, which measures traffic, works without cookies.

That is why you see no consent banner: there is nothing to consent to. Your language is not held in a cookie but in the address itself — the Hungarian site lives at the short URL and the English one under /en.

Appointment request data never reaches a database of ours, so its retention follows the ordinary retention practice of the email inbox. We keep it for as long as it is needed to arrange and carry out the appointment.

The calendar entry for a confirmed booking stays until Fülep László deletes it from the calendar. If you cancel — using the link in your confirmation email, or by phone — the entry is deleted at that moment.

Email addresses on the waiting list are kept until the service launches and the notification has been sent, or until you ask to be removed — whichever comes first.

If you ask us to delete it sooner, we will do so as soon as possible and no later than 30 days after your request.

You have the following rights over your data: access to what we hold about you; rectification if anything is inaccurate; erasure; restriction of processing; objection to processing; and withdrawing your consent at any time.

If you believe our handling of your data breaches your rights, you can lodge a complaint with the Hungarian data protection authority, the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH, naih.hu).

Send an erasure request, or any question about how we handle your data, to info@prehabdebrecen.hu.