Here you can find the operator details, purposes of processing, measurement services and cookie settings in one place. Effective from 28 August 2026.
The website operating under the NovaNow brand is run by Business Bunny Kft.
The data controller is Business Bunny Kft. For privacy enquiries, contact us at hello@novanow.hu for privacy matters. The website has no contact form or newsletter subscription, so email and telephone are the direct contact channels.
| Processing situation | Data and purpose | Legal basis | Retention |
|---|---|---|---|
| Enquiry by email or telephone | The name, contact details, company information and message you provide; used to answer the enquiry, discuss requirements and prepare an offer. | Steps taken before entering into a contract, and legitimate interests for business communication. GDPR Article 6(1)(b) and (f). | If no contract is concluded, one year after the enquiry is closed, unless a legal claim requires longer retention or you request earlier erasure. |
| Resulting business relationship | Contact, contractual and performance data; used to perform the contract, manage the client relationship and meet legal obligations. | Performance of a contract and compliance with legal obligations. GDPR Article 6(1)(b) and (c). | Contract-related data is generally retained for five years, while accounting records must be retained for eight years. |
| Web server security logs | IP address, date and time, requested page or file, and browser technical data; used for security, troubleshooting and website operation. | Legitimate interests in secure and reliable operation. GDPR Article 6(1)(f). | For the shortest period necessary for security and operational purposes, according to the hosting provider’s current log-retention settings. |
| Aggregated usage measurement | The event name, page path, language and calendar day, stored only as daily aggregate counts; used to improve website usability and content. The NovaNow measurement endpoint does not store unique identifiers, cookies, IP addresses, browser data or referring pages. | Legitimate interests in improving the website using data-minimised measurement. GDPR Article 6(1)(f). | Monthly aggregates are retained for no more than 13 months. |
| Remembering your privacy choice | We store the selected categories, save time and settings version in your browser’s local storage so that the website can respect and consistently apply your choice. | Legitimate interests in remembering your choice and operating the website lawfully. GDPR Article 6(1)(f). | 180 days, or until you delete the setting in your browser. |
| Three-minute self-assessment | Answers are evaluated locally in the browser. They are neither submitted nor stored on the server. | NovaNow does not process personal data in this feature. | No server-side retention. |
Access is limited to authorised Business Bunny Kft. personnel, the hosting provider, the technical email provider and, where a contract is concluded, the accountant or an authority acting under law, each only to the extent required for their role. We do not sell personal data.
We use access controls, logging, an up-to-date software environment and retention periods appropriate to each processing purpose. If an incident occurs, we investigate, document and notify as required by law.
We do not make solely automated decisions that produce legal or similarly significant effects. With consent, advertising providers may create advertising audiences, but this does not result in such a decision by NovaNow.
Contact is voluntary. We cannot respond without a name or contact detail; if a contract is concluded, some data is required to perform it or comply with the law.
Analytics, experience and marketing tools start only after you have allowed the relevant category. Refusing them does not limit use of the website. We do not send your email address, telephone number or message content to these services.
Non-essential measurement is off by defaultWe measure page views, sessions, click events, device and browser characteristics and approximate location to understand which content and journeys help visitors. The legal basis is consent under Article 6(1)(a) GDPR. User- and event-level retention is set to 14 months; related cookies may last for up to two years.
Google privacy ↗Heatmaps, scroll and click patterns, and masked session recordings help us find areas that are difficult to use. We do not record text input or sensitive content; the website currently has no form. The legal basis is consent. The session cookie lasts 30 minutes, the visitor identifier up to 365 days, and analysis data may be retained for up to 365 days depending on the account setting.
Hotjar privacy ↗We measure the relationship between an ad click and a later predefined action on the website. This helps us understand which campaign creates genuine enquiries. The legal basis is consent. The configured conversion window is no more than 90 days; exact cookie lifetimes are determined by Google’s current settings.
Google advertising cookies ↗Technical events connected with pages visited and important actions, browser and device data, IP address and cookie identifiers may be sent to Meta for conversion measurement, audience building and more relevant advertising. The legal basis is consent; retention is governed by Meta’s current rules.
Meta privacy ↗We see aggregated search queries, clicks, impressions, click-through rate, average position, landing page, country and device type. Search Console does not place a visitor cookie through the NovaNow website or provide us with an individual visitor profile. The legal basis is our legitimate interest in improving search performance under Article 6(1)(f) GDPR.
Search Console data ↗Depending on the service, measurement data is received by Google Ireland Limited, Meta Platforms Ireland Limited or Hotjar Limited in Malta. Only authorised members of our team may access our accounts.
Providers may use global infrastructure, so data may be processed outside the European Economic Area. Depending on the provider, appropriate safeguards are supplied by an adequacy decision, the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
We do not send customer lists or the content of email or telephone conversations to measurement tools. We configure only events needed for the business purpose and mask input fields in Hotjar recordings.
You can change your choice at any time using the “Cookie settings” button in the footer. After withdrawal, blocked tracking code will not start again and accessible related cookies are deleted.
Essential functionality is always active. Analytics, experience measurement and marketing can be allowed separately. Consent is voluntary, and refusing is as easy as accepting.
| Cookie or stored item | Provider and category | Purpose | Lifetime |
|---|---|---|---|
| nova_consent_v1 | NovaNow · necessary local storage | Remembering the privacy choice and when it was saved. | 180 days. |
| _ga, _ga_<identifier> | Google Analytics · analytics | Distinguishing visitors and sessions for aggregated usage statistics. | Up to two years by default. |
| _hjSessionUser_*, _hjSession_* | Hotjar · experience | Connecting visits and sessions for heatmaps and recordings. | Up to 365 days and 30 minutes respectively. |
| _gcl_* and related Google cookies | Google Ads · marketing | Connecting ad clicks with conversions. | Depending on the setting, typically up to 90 days. |
| _fbp, _fbc | Meta · marketing | Conversion measurement, audience building and more relevant advertising. | According to Meta’s current settings, typically up to 90 days. |
| No NovaNow cookie | Google Search Console · search performance | Displaying aggregated performance data from Google Search to the website owner. | Not applicable. |
We remember your choice for 180 days. If you withdraw a category, the website stops that service and deletes accessible, known measurement cookies belonging to the novanow.hu domain. You can also delete cookies and local storage separately in your browser.
You may request access, rectification, erasure or restriction of processing; object to processing based on legitimate interests; and, where applicable, request data portability. You may withdraw consent at any time with effect for the future. We respond without undue delay and no later than one month after receiving your request.
If you believe that processing infringes data protection law, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9–11.; ugyfelszolgalat@naih.hu; +36 1 391 1400), and you may also seek a judicial remedy.
This notice is based in particular on Regulation (EU) 2016/679 (GDPR), Hungarian Act CXII of 2011 and Act CVIII of 2001. We update it if the service, data processing or legal environment changes materially.
