Back to the home page

Privacy policy

Effective: 30 October 2026 Draft, before legal review

This policy explains what data Feri’s memorial site handles, what we use it for, how long we keep it, and what rights you have. The site uses no cookies, no analytics and no advertising trackers.

1. Who is responsible for your data?

Controller: Laido Dittmar, [address], email: laidodittmar@gmail.com. The site was built by Feri’s friends; the controller named above is responsible for your data.

2. What data we handle, why, and for how long

Data	Purpose	Legal basis	How long
When you share a story: name, email address, how you knew Feri, your story, the photos and videos you upload (with the technical data stored in them, such as when or where they were taken), any video link you give, the photographer’s name, your consents	Reading your story; if you agreed, publishing it on the site with your name and/or in the book; contacting you about your story	Your consent (GDPR Article 6(1)(a))	Until you withdraw your consent or ask us to delete it. If you agreed to neither the site nor the book, we delete it after the book is published.
Book notification: name, email address, language	Telling you when the book is ready	Your consent (Article 6(1)(a))	Until you unsubscribe, at most one year after the book is published
Lighting a candle: a random anonymous ID; a code made from your network address with a secret key, which cannot be reversed	Counting each person only once and preventing abuse (at most 10 new candles per network per day)	Legitimate interest (Article 6(1)(f)): an accurate, fair count	The ID for as long as the counter runs; the network code for one day
When you use the site: IP address, browser data, time of requests; a bot check on the forms (Cloudflare Turnstile)	Serving the site, preventing attacks and spam	Legitimate interest (Article 6(1)(f)): keeping the site secure	Briefly, under Cloudflare’s logging rules
Emails you send us	Answering your question, handling your request	Legitimate interest (Article 6(1)(f))	Until your request is closed, at most one year

Giving us data is voluntary. We cannot accept a story or photo without a name and email address, because we need them to reach you with questions and to show that you gave consent.

3. What is stored in your browser

We use no cookies. Your browser’s local storage only holds: your chosen language (if you switch), whether you have already seen the opening animation in this session, and, when you light a candle, the candle’s state and the anonymous ID. You can clear these at any time in your browser settings.

When you send a form, Cloudflare’s bot check (Turnstile) checks that a person is sending it; for this it processes technical data such as your IP address and browser data. We host our own fonts. The memorial’s public performance film plays from our own hosting in your browser’s video player. Players for submitted YouTube and Google Drive videos appear only in the admin panel and can load when an admin views a submission. The admin’s browser then connects to Google and sends the admin’s IP address.

The public counter totals sharing actions started on this site. Each action has a temporary random identifier so a repeated request counts only once.

4. Who can see the data?

Only the controller and the editors they appoint can see what you send. Visitors can see your published story, your name, and the main photo and photographer credit you choose to include. Only admins can access your other uploads and submitted video links on this site. A story included in the book can be read in its printed and electronic copies. We never publish your email address.

Processors

• Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA): hosting, database, file storage, bot check. Data may reach the United States; Cloudflare participates in the EU–US Data Privacy Framework and uses the European Commission’s standard contractual clauses.
• Cloudflare delivers alerts to admins who have enabled them. A memory alert includes the submission text, name, email address, any submitted video link, file names and consent choices. Admins sign in to open uploaded files. A new book waiting-list alert includes the subscriber’s name and email address. There is currently no sending provider for book announcements to subscribers.

If the book goes on sale, the payment provider will be listed here too. We never sell your data or pass it on for advertising.

5. Children

If you are under 16, please share a story only with a parent’s or guardian’s consent; it is best if they send it. We publish photos of children, including Feri’s daughter, only with their parent’s or guardian’s consent.

6. Your rights

• Access: you can ask what data we hold about you and request a copy.
• Correction: you can ask us to correct inaccurate data.
• Deletion: you can ask us to delete your data and what you sent.
• Restriction and portability: you can ask us to restrict processing, or to give you your data in a machine-readable format.
• Objection: you can object to processing based on legitimate interest.
• Withdrawing consent: you can withdraw it at any time; this does not affect processing that happened before.

Send your request to laidodittmar@gmail.com; we answer within one month. If you think we have breached your rights, you can complain to the Hungarian data protection authority (NAIH, 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, Pf. 9; ugyfelszolgalat@naih.hu; www.naih.hu) or to the authority in your own EU country, or go to court.

7. Automated decisions

We make no automated decisions and build no profiles from your data.

8. Changes

If this policy changes, we publish the new version here with its effective date. For significant changes we also email everyone subscribed to the book notification.