Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how personal data is handled on stress-relief.eu and when you contact us about online wingwave® coaching. In short: we only use the information you give us to reply to you and to arrange the coaching you ask for. We do not send newsletters, do not use your data for marketing, do not build profiles, and never sell or rent your data.

Wingwave® coaching is a coaching method. It is not psychotherapy or medical treatment, and we do not diagnose or treat any condition.

1. Who is responsible for your data

Website, enquiries and coaching. The data controller is:

Peter Antal, 2083 Solymár, Hungary. Email: info@stress-relief.eu

Invoicing. Invoices for paid sessions are issued by Andrea Bartha, sole trader (egyéni vállalkozó), 2083 Solymár, Hungary, tax number HU69179590. For invoicing data, Andrea Bartha is a separate data controller (see section 2.3).

For any privacy question or request, write to info@stress-relief.eu.

2. What data we process, why, and on what legal basis

2.1 Contact and booking form

When you use our booking form we receive:

  • your name and email address (required);
  • your mobile number (optional);
  • your chosen coach (Andrea or Peter) and the consultation type (free discovery call or paid wingwave session);
  • your message (optional), for example what you would like help with and times that suit you.

Purpose: to answer your enquiry and arrange the call or session you asked for.

Legal basis: steps taken at your request before entering into an agreement (Art. 6(1)(b) GDPR). If you only ask a general question, the basis is your consent, given by sending the form (Art. 6(1)(a) GDPR), which you can withdraw at any time.

Form messages are sent to our mailbox, info@stress-relief.eu, which is hosted by our hosting provider in Hungary and forwarded to a mailbox with our email service provider, Google. A copy of each submission is also stored in the website database. The form uses a simple math question to block spam; it does not track you.

Please do not share sensitive information in the form, such as details about your health, diagnoses or medication. A short note about the topic you would like to work on is enough.

2.2 Coaching sessions

If you book a session, we use your contact details to schedule it and to stay in touch about it.

Legal basis: performance of our coaching agreement with you (Art. 6(1)(b) GDPR).

Sessions take place online on a platform you choose: Google Meet, WhatsApp, Zoom, Messenger, Signal or Jitsi. The provider of the platform you choose processes data (for example your account name, connection data and call metadata) under its own terms and privacy policy, which we recommend you read.

Your coach keeps brief session notes on paper only to support your coaching. The notes are confidential, stored securely, not shared with anyone, and destroyed 6 months after your last session.

If you choose to tell us about your health or wellbeing, this is special category data. We process it only with your explicit consent (Art. 9(2)(a) GDPR), only for your coaching, and you can withdraw that consent at any time.

2.3 Invoicing (paid sessions)

Paid sessions are paid by bank transfer. Your bank and the receiving bank process the payment data (such as your name, account number/IBAN and the amount) as separate data controllers under their own terms.

For paid sessions, Andrea Bartha (sole trader, see section 1) issues an English-language invoice using the online invoicing service Számlázz.hu, operated by KBOSS.hu Kft. (1031 Budapest, Záhony utca 7/D, Hungary). The invoice contains the data required by law, such as your name, billing address, the service, the amount and the date.

Controller: Andrea Bartha. Legal basis: legal obligation under Hungarian tax and accounting law (Art. 6(1)(c) GDPR).

2.4 Website security and operation

When you visit the website, our hosting server and our security plugin (Wordfence) automatically process technical data such as your IP address, browser type, and the time and pages of your visit. This is needed to deliver the website and protect it against attacks and spam.

Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR).

2.5 Website statistics (only with your consent)

Google Analytics 4 (via Google Site Kit) is loaded only if you allow “statistics” cookies in our cookie banner. It shows us how the website is used overall, for example which pages are visited. We do not use it to identify you or for advertising. If you do not consent, Google Analytics is not loaded and no data is sent to Google for statistics.

Legal basis: your consent (Art. 6(1)(a) GDPR). You can change your choice at any time via “Manage consent” on the website.

2.6 Fonts and embedded content

  • Fonts are served from our own server. No data is sent to Google Fonts.
  • If we embed YouTube videos or use Google reCAPTCHA, they load only after you consent in the cookie banner.

3. Who receives your data

We do not sell or share your data for marketing. Your data is only received by:

  • DotRoll Kft. (1148 Budapest, Fogarasi út 3-5, Hungary): website hosting, server logs, the website database (including copies of form submissions) and our info@stress-relief.eu mailbox. DotRoll acts as our data processor, and its servers are in Budapest, Hungary (EU).
  • Google (Google Ireland Ltd. / Google LLC): our email service provider (messages sent to info@stress-relief.eu are forwarded to a Google mailbox), storage of website backups on Google Drive as our processor, and Google Analytics only if you consent to statistics cookies (section 2.5).
  • The video or messaging platform you choose for your sessions (section 2.2), under its own terms.
  • Andrea Bartha and KBOSS.hu Kft. (Számlázz.hu), for invoices for paid sessions (section 2.3).
  • Banks, for payments by bank transfer, as separate controllers (section 2.3).
  • Authorities, where we are legally required to disclose data.

4. Transfers outside the EU

Our hosting and invoicing service are in Hungary (EU). Our use of Google (email, website backups on Google Drive and, only with your consent, Google Analytics) may involve transfers to the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023, so such transfers are permitted under Art. 45 GDPR. Some session platforms you may choose are run by companies outside the EU; they transfer data under their own safeguards (such as the Data Privacy Framework or the European Commission’s Standard Contractual Clauses), as described in their privacy policies.

5. How long we keep your data

  • Enquiries that do not lead to coaching: deleted within 6 months of our last contact.
  • Client contact details and session-related correspondence: kept for 2 years after the last session, then deleted.
  • Session notes (paper): destroyed 6 months after the last session.
  • Form copies in the website database: deleted within 6 months.
  • Invoices: kept by Andrea Bartha for at least 8 years, as required by Hungarian accounting and tax law.
  • Website backups (Google Drive): overwritten on a rolling basis.
  • Google Analytics data (only if you consented): event-level data is deleted after 2 months.

6. Cookies

We use only the cookies needed for the website to work, plus statistics and other cookies only if you agree. For details, and to change your choice at any time, see our Cookie Policy (EU).

7. Your rights

Under the GDPR you have the right to:

  • access your data and get a copy (Art. 15);
  • correct inaccurate data (Art. 16);
  • have your data deleted (Art. 17);
  • restrict processing (Art. 18);
  • data portability (Art. 20);
  • object to processing based on legitimate interest (Art. 21);
  • withdraw your consent at any time, without affecting processing before the withdrawal;
  • not be subject to decisions based solely on automated processing (Art. 22). We do not make any.

To use these rights, email info@stress-relief.eu. We will reply within one month (Art. 12(3) GDPR). For invoicing data, you can also contact Andrea Bartha at the same address.

Right to complain: you can complain to the data protection authority in the EU country where you live or work, or to the Hungarian authority:

National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11, Hungary. Postal address: 1363 Budapest, Pf. 9. Phone: +36 1 391 1400. Email: ugyfelszolgalat@naih.hu. Website: www.naih.hu

8. Security

We protect your data with appropriate technical and organisational measures, including an encrypted (HTTPS) connection, a security plugin, limited access to the website administration and our mailbox, and regular backups. No method of transmission over the internet is completely secure, but we work to keep your data safe.

9. Automated decision-making

We do not use automated decision-making or profiling.

10. Children

Our services are intended for adults. We do not knowingly collect data from anyone under 16. If you believe a child has sent us data, please contact us and we will delete it.

11. Changes to this policy

We may update this policy when our services or the law change. The current version is always on this page, with the date of the last update at the top.