Last updated: 26 October 2026
1. Who we are
SmartB2B.Marketing Kft. provides LinkedIn marketing, advertising, consulting and related services. This policy explains how we use personal data when you visit smartb2b.marketing, contact us, book a consultation or engage our services.
We are the controller of the processing described in this policy, meaning that we decide why and how personal data is used.
Registered company name: SmartB2B.Marketing Korlátolt Felelősségű Társaság, a Hungarian limited liability company
Registered office: 1135 Budapest, Petneházy utca 70–72, Hungary
Company registration number: 01-09-415396
Email: info@smartb2b.marketing
Website: https://smartb2b.marketing
We process personal data in accordance with the General Data Protection Regulation, Regulation (EU) 2016/679, and applicable Hungarian law. Where we process personal data solely on a client’s instructions, the client’s privacy information and our data processing agreement apply to that activity.
2. Information we collect
Contact requests. Our contact form collects your name, email address, selected service category and question or project description. These fields are required. Your company name is optional. We also receive any information you choose to include in your message or subsequent correspondence.
Bookings and client relationships. We process appointment details, contact information, booking answers, correspondence and information needed to discuss or provide our services. If you become a client, this may include contractual, billing and payment information. A colleague or your organisation may provide your professional contact details so that we can work with you.
Website and security information. Website systems process technical information such as IP addresses, browser and device details, requested pages, timestamps, error information and security events. Our spam protection service also analyses technical and interaction signals to assess whether a request is likely to be automated.
Optional analytics information. With your consent, analytics tools collect information about visits and interactions, including page views, referral sources, approximate location, browser and device information, online identifiers, clicks, scrolling and session activity.
Privacy choices. We process information about your consent choices and any privacy requests, including the relevant identifier, date, time and action taken.
We obtain information directly from you, automatically through the website and its authorised tools, or through booking and business communication platforms. Please avoid including sensitive personal information or other people’s information unless it is necessary for your request and you are entitled to share it.
3. Why we use information and our legal grounds
Answering enquiries and arranging consultations. We use your information to respond, understand your requirements, prepare proposals and manage bookings. Where you are considering a contract with us personally, this is necessary to take steps at your request before a contract, under GDPR Article 6(1)(b). For company representatives and other business enquiries, our basis is our legitimate interest in responding to requests and managing business relationships, under Article 6(1)(f).
Providing services. We process information necessary to perform a contract with you under Article 6(1)(b). When the client is an organisation, we process its representatives’ information under Article 6(1)(f), for our legitimate interest in delivering and administering the engagement.
Website operation and security. We process necessary technical information to operate the website, diagnose faults and protect it against misuse. Our basis is our legitimate interest in maintaining a functioning and secure website, under Article 6(1)(f). The separate consent arrangements for reCAPTCHA and optional analytics are explained below.
Legal obligations and claims. We process information needed to comply with applicable accounting, tax and data protection obligations under Article 6(1)(c). We retain relevant evidence where necessary for our legitimate interest in establishing, exercising or defending legal claims, under Article 6(1)(f).
Optional technologies and testimonials. We rely on consent under Article 6(1)(a) for optional analytics, activation of reCAPTCHA and publication of identifiable testimonials with your permission. We record and respect consent choices to fulfil our obligations under Articles 5(2) and 7 of the GDPR, relying on Article 6(1)(c) where applicable.
Providing information through a form or booking is voluntary, but we need the required details to handle that request. Billing information may be required by law when you purchase a service. You can browse the website and contact us by email without agreeing to optional analytics.
4. Contact forms and spam protection
We use Google reCAPTCHA v3 to help protect our contact form against spam and automated abuse. It assesses signals such as your IP address, browser and device characteristics and interactions with the website, and returns a risk assessment. This may involve a security cookie and transmission of information to Google.
We activate reCAPTCHA after you consent to this feature. You may decline or withdraw consent through Cookie settings. If you prefer not to activate reCAPTCHA, or the form rejects your submission, you can send your request directly to info@smartb2b.marketing.
Google processes reCAPTCHA customer data on our behalf under its applicable data processing terms. Information about that processing is available in the Google reCAPTCHA documentation.
Our processing of the enquiry itself is based on the grounds described in Section 3, independently of your choice about reCAPTCHA.
5. Consultation bookings and communications
We use Calendly to arrange consultations, including our 15 minute introductory call. When you use the booking facility, Calendly receives your contact information, selected appointment, time zone and any answers you provide. Relevant details are also available to us and may be added to our business calendar.
Calendly processes booking information on our behalf and processes some information for its own purposes as described in its privacy notice. You may contact us by email instead of using Calendly.
We use Microsoft 365 for business email, calendars and document storage. Microsoft processes relevant correspondence, attachments, booking information and business records under its applicable service and data protection terms. Further information is available in the Microsoft Privacy Statement.
6 Website analytics and search performance
Google Analytics
With your analytics consent, we use Google Analytics 4 to understand website use, evaluate content and improve the website. It processes information such as page views, interactions, referral sources, device and browser details, approximate location and online identifiers.
We do not activate Google Analytics collection before your consent. We configure our analytics to exclude contact form contents and direct identifiers such as names and email addresses. Google states that Google Analytics 4 does not log or store individual IP addresses; other analytics identifiers can still be personal data.
User and event data covered by the Google Analytics retention setting are retained for up to 14 months, with the automatic reset of user data retention on new activity disabled. This setting does not govern all aggregated reports or cookie lifetimes. See Google’s privacy information.
Microsoft Clarity
With your analytics consent, we use Microsoft Clarity to understand how visitors navigate the website and identify usability problems. Clarity processes interaction information, including clicks, scrolling, pointer movements, device and browser information and online identifiers. It creates heatmaps and session replays that reconstruct activity on our website. These are not webcam or microphone recordings.
We configure Clarity to mask contact form entries and other personal content. We do not activate Clarity collection before your analytics consent, and we do not enable Clarity data sharing with Microsoft Advertising in our current website configuration.
Microsoft also acts as a controller for its processing under the Clarity terms. Its use and protection of information are described in the Microsoft Privacy Statement.
Clarity retains ordinary session playback data for 30 days. Click and heatmap data, and sessions that are labelled or saved as favourites, are retained for up to nine months.
Google Search Console
We use Google Search Console to monitor website indexing, technical issues and performance in Google Search. It provides reports such as search impressions, clicks, queries and page performance. Search Console itself does not require us to install a visitor tracking cookie or session recording script. Our use of these reports does not give us a list of the people who searched for or visited the website.
7. Cookies and privacy choices
We use CookieYes to present privacy choices and remember your selections. CookieYes Limited processes consent information on our behalf, which can include a consent identifier, your choices, timestamps and associated technical information. Its privacy information and data processing agreement explain its role.
Strictly necessary technologies support essential website functions, security and the recording of privacy choices. Optional analytics technologies and consent controlled features are activated only after the relevant consent.
You can accept or reject optional categories and change or withdraw your choices at any time through the Cookie settings control on the website. Continuing to browse does not constitute consent. Withdrawal does not affect processing that was lawful before you withdrew consent.
The detailed cookie information available through Cookie settings identifies the cookies and similar technologies in use, their providers, purposes and lifetimes. Cookie lifetimes are different from the periods for which collected information is stored on servers. You can also delete cookies through your browser, although doing so may remove your saved privacy choices.
8. Social platforms and marketing
Our website includes links to services such as LinkedIn and Upwork. When you follow those links or interact on those platforms, the platform processes your information under its own privacy notice. We process information you send to us through those services to respond and manage our relationship.
If you subscribe to our newsletter on LinkedIn, LinkedIn manages that subscription and delivery under its privacy policy. You can manage the subscription through LinkedIn. Upwork’s processing is described in its privacy policy.
Submitting an enquiry or booking a call does not subscribe you to an email newsletter. We do not currently upload contact details collected through this website to advertising platforms for audience matching. Before introducing additional website advertising tracking or a new use of your contact details, we will provide the relevant information and obtain consent where required.
9. Testimonials and case studies
With your permission, we may publish an agreed testimonial or case study containing your name, role, company, photograph or comments. Published information is accessible to website visitors worldwide.
Our basis for publishing your identifiable contribution under this section is consent. We retain it while that consent remains valid and the content remains relevant. You may withdraw consent by contacting us, and we will remove your identifiable contribution from channels we control. Necessary permission records may be retained separately for compliance or legal claims.
10. Who can access personal data
Access within our company is limited to people who need the information for their work. Relevant information is also processed by providers of website hosting, databases, backups, form delivery, technical maintenance and security, together with the Google, Microsoft, Calendly and CookieYes services described above.
Where a provider processes information on our behalf, we require appropriate contractual protections. If technical support requires access, it is limited to what is necessary for the support task. Providers that determine their own processing purposes are responsible for that processing under their own privacy notices.
We may disclose necessary information to accountants, legal advisers, courts and public authorities where required by law or necessary to establish, exercise or defend legal rights. Public testimonials and case studies are disclosed as described in Section 9.
11. International processing
Some providers and their subprocessors process information outside the European Economic Area, including in the United States and the United Kingdom. Information can be transferred through storage, service delivery or remote support access.
For transfers we arrange, we rely on an applicable European Commission adequacy decision or appropriate safeguards under the GDPR, including the European Commission’s Standard Contractual Clauses and supplementary measures where necessary. The EU–US Data Privacy Framework applies only where the relevant US recipient and processing are covered by a valid certification and the applicable adequacy decision.
Calendly’s data processing agreement describes its transfer arrangements. CookieYes’s data processing agreement includes contractual safeguards for restricted transfers. Google and Microsoft provide transfer safeguards through their applicable service and data protection terms.
Contact info@smartb2b.marketing for information about the safeguards relevant to your data or a copy of the applicable safeguards, subject to necessary protection of confidential information and other people’s rights.
12. How long we keep information
We keep personal data only while it is needed for the relevant purpose or a legal obligation. The following periods apply to records under our control:
- Enquiries, unsuccessful proposals and bookings that do not become client work: up to 24 months after the last substantive discussion or appointment, where needed for the business enquiry and its follow up. We review these records at least annually and delete them earlier when no longer needed.
- Client contracts and relevant service correspondence: during the engagement and normally up to five years afterwards where needed for contractual rights and claims. The applicable limitation period may require a different period for particular records.
- Invoices and supporting accounting records: at least eight years where required by Section 169 of Hungarian Act C of 2000 on Accounting, and longer only where another applicable obligation or legal hold requires it.
- Routine website security logs under our control: up to 90 days. Relevant incident evidence may be retained for an investigation and associated legal proceedings.
- Google Analytics user and event data subject to its retention setting: up to 14 months. Aggregated reports that no longer identify individuals may be retained longer.
- Microsoft Clarity: 30 days for ordinary session playback; up to nine months for click and heatmap data and labelled or favourited sessions.
- Cookie consent records: up to 12 months in our current consent management service. Necessary evidence concerning a specific complaint or dispute may be retained for that matter.
- Privacy requests and compliance correspondence: for as long as necessary to handle the request and demonstrate compliance, normally up to three years after closure, with longer retention only where a relevant claim or legal obligation requires it.
Deleted records may remain in our routine website and database backups until those backups are overwritten, for up to 90 days. They are kept out of ordinary use; if a backup is restored, relevant deletion instructions are reapplied. This backup period does not extend the published retention periods of independent third party services such as Clarity.
Cookie and browser storage lifetimes are shown in Cookie settings. Service providers may retain separate records for their own lawful purposes under their privacy notices. Withdrawal of consent, a valid objection or a valid erasure request may require processing to stop or information to be deleted earlier.
13. Your rights
Subject to the conditions in the GDPR, you can request access to your personal data, correction of inaccurate information, erasure, restriction of processing and a portable copy of information you provided. Portability applies to automated processing based on consent or a contract.
You may object to processing based on legitimate interests because of your particular circumstances. You may object to direct marketing, including related profiling, at any time, and we will stop that use.
You can withdraw consent at any time. For website technologies, use Cookie settings. For other consent or rights requests, email info@smartb2b.marketing or write to our registered office.
We respond without undue delay and normally within one month. Where the complexity or number of requests requires an extension of up to two further months, we explain this within the first month. We may request proportionate information to verify your identity. Requests are normally free; a fee or refusal is possible only where permitted by the GDPR.
You can complain to a supervisory authority, including in the country where you live or work or where you believe an infringement occurred. In Hungary, the authority is the Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), the Hungarian data protection authority.
Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary
Postal address: 1363 Budapest, Pf. 9, Hungary
Website and complaint procedures: https://www.naih.hu
You do not have to contact us before making a complaint. You may also seek a judicial remedy.
14. Security and automated processing
We use appropriate technical and organisational measures to protect personal data, including access restrictions, protection of business accounts and measures appropriate to the services used.
Spam protection may automatically assess and reject a form submission. You can contact us by email if this happens. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.
Our website and services are directed at adult business users and professionals, not children.
15. Changes to this policy
We update this policy when our processing changes and show the latest revision date above. Where necessary, we provide additional information before a new use begins and obtain consent where required. Updating this policy does not itself provide consent for a new purpose.