Privacy Policy

Data controller

Overit Luxembourg is operated by Verde Holding Kft. (contact: office@verdeholding.hu). You can reach us at this address with any privacy-related request.

What we process

• Account: your email address, your password as a hash (never the password itself), your language, the page you signed up from, sign-in times, and a keyed, non-reversible fingerprint of the network addresses used, for security alerts and rate limiting.
• Payment: handled by Stripe. Your name, billing address and VAT number are collected by Stripe; card details never reach us. We keep the Stripe customer and subscription identifiers.
• Invoicing: every payment produces an invoice issued through bizonylat.hu in Verde Holding Kft.'s name (name, address, VAT number, amount) and reported to the Hungarian tax authority.
• Email: account emails (welcome, security, billing) are sent through Resend.
• Operations log: signups, payments and errors are reported to the team in an internal Telegram channel, with the email address of the account concerned.
• Audience measurement: a Verde Holding script counts page views. Google Analytics loads only after you accept it and is not linked to your account.

Purpose and legal basis

Account and payment data serve to provide the service you asked for (Art. 6(1)(b) GDPR). Invoices are a legal obligation (c). Address fingerprints and the operations log rest on our legitimate interest in securing the service (f). Google Analytics rests on your consent (a).

Processors

Cloudflare (hosting), Neon (database), Stripe (payment), Resend (email), bizonylat.hu (invoicing), Telegram (internal log), Google (audience measurement, with your consent). Some are outside the European Union; transfers rely on the safeguards the GDPR provides for.

Retention

The account is kept until you delete it, which you can do at any time from your account. Invoices are kept for 8 years, as Hungarian accounting law requires, anonymised once the account is deleted.

Your rights

• access to your data and a copy of it — the "Download my data" button in your account does it at once,
• rectification of inaccurate data,
• erasure — the "Delete the account" button,
• objection to processing based on legitimate interest, and withdrawal of consent at any time,
• lodging a complaint with the National Commission for Data Protection (CNPD, cnpd.lu) or the authority of your country of residence. For any request: office@verdeholding.hu.

Company data

Company information comes from the annual accounts published by STATEC's Centrale des Bilans (CC BY-SA 4.0 licence) and from the EU VIES system. It concerns legal entities; where a published figure identifies a natural person, it appears here only where the source's re-use terms explicitly allow it.