Privacy.

Who is responsible

The website operator and intended data controller is [To be provided], trading as Grismont. Business address: [To be provided]. Privacy contact: hello@grismont.hu.

What the website collects

Browsing the website does not create an account or a visitor profile. There is no analytics, embedded booking tool or advertising tracker, and fonts are served with the website rather than fetched from a third-party font service. The Discovery Scorecard and Advanced Audit store answers on the server so progress can be resumed and reports downloaded.

Loading a website still involves sending technical information to its hosting infrastructure. Depending on the production host, access or security logs may include an IP address, request time, requested page, browser information, and error details. The hosting provider and its actual logging settings have not yet been selected or verified.

Hosting provider

[To be confirmed before publication]

Hosting and processing locations

[To be confirmed before publication]

Log retention

[To be confirmed before publication]

Purpose and legal basis for hosting logs

[To be confirmed against the production host and applicable law]

Any hosting subprocessors, transfers outside the relevant jurisdiction, and applicable transfer safeguards must also be confirmed before launch.

The Advanced Audit

Starting the audit creates a random private resume link. We store the process name, questionnaire answers, rule-based assessment, and model version. The audit does not ask for a name or email address, and the application does not attach an IP address to audit answers. Please keep personal or confidential information out of the free-text fields.

Purpose

Saving answers so you can resume with the private link, and generating the assessment and downloadable PDF/JSON report.

Retention

Unfinished audits are deleted after 30 days. Completed audits and reports are deleted after 12 months.

Sharing and assessment

Anyone who has your private resume or report link can use it. Search engines are instructed not to index these pages. The assessment applies fixed rules and does not make a decision with legal or similarly significant effect about you.

Hosting and database providers are listed in the hosting information above. Keep your private link to resume; you can also request deletion within the retention period by contacting hello@grismont.hu.

The Discovery Scorecard

If you start the scorecard, we store the details you enter on the first page (first name, email address, company size, type of work and, if you choose to give them, company name and role), your answers, the report generated from them, your chosen language, the time you confirmed this notice, and a one-way hash of your IP address used only to limit repeated sign-ups. We save your language so your report and reminders arrive in that language too.

Purposes

Saving your progress so you can resume; generating your report; emailing the report as a PDF; sending up to three reminders if you don't finish; letting Attila review your report and prepare the follow-up call you can book.

Legal basis

Your consent, given on the first page of the scorecard. You can withdraw it at any time with the delete link in every email, which erases your data immediately. [Legal basis to be confirmed by the operator.]

Emails

Your report is emailed immediately after submission. If you leave the scorecard unfinished, we send up to three reminders around 1, 3 and 5 days after your last activity. There is no newsletter or marketing list.

Retention

Unfinished scorecards: deleted automatically after 30 days. Completed scorecards and reports: deleted automatically after 12 months. A copy of the notification email about your submission remains in the operator's mailbox.

Processors

Website hosting: [To be confirmed before publication]. Database: [Neon, EU region (Frankfurt), to be confirmed before publication]. Email delivery: [Resend, to be confirmed before publication].

Automated assessment

Your report is produced by fixed rules applied to your answers. It is advice for you to use, and no decision with legal or similarly significant effect is made about you.

Anyone with your report link can open the report, so share it only with people you choose. The links are long random codes and the pages are excluded from search engines.

Contact and future features

Apart from the scorecard, there is currently no inquiry form or booking integration. You can email hello@grismont.hu; the business receives the information you choose to send. The operator still needs to confirm and document the legal basis, recipients and retention for email enquiries before public launch.

If analytics, a booking service, or another feature is introduced, this notice and the cookie information will be updated to describe the actual processing before the feature is enabled.

Your rights

Where the GDPR applies, you may have rights to access, correct, erase, or restrict use of your personal data, and rights to portability or to object, depending on the processing and its legal basis. Where processing relies on consent, you can withdraw that consent. You may also complain to a competent supervisory authority.

Contact for rights requests: hello@grismont.hu. Relevant supervisory authority: [To be confirmed for the business country].

For general information, see the European Union guidance on online privacy.