Privacy Policy

1. Data controller

The data controller has not appointed a Data Protection Officer (DPO), as this is not legally required.

2. Scope of this policy

This privacy policy applies to the mindbridge.nexus website. The website currently collects personal data at a single point: the contact form.

3. Data collected through the contact form

Submitting the contact form at the bottom of the site collects:

• name
• email address

The data submitted is forwarded to Mind Bridge Kft.'s own internal customer relationship system (Brand Navigator CRM) and — where consent is given — to the Brevo email platform, solely for the purpose of responding to the inquiry and any further communication.

Legal basis: GDPR Art. 6(1)(a) — consent given by voluntarily submitting the form.

The form is protected against spam with a hidden honeypot field and request rate limiting; this technical data is not stored and is only used to filter abuse.

4. VET diagnostic tool — anonymous assessment

mindbridge.nexus offers free diagnostic tools, including the VET (Entrepreneurial Resource Map) assessment. Filling out VET is anonymous: starting it does not require a name or email address, and your answers are never linked back to your identity afterward.

The anonymous responses are used to generate your own personal result, and in aggregate, anonymous form, for research and methodology development.

If you separately request a personal Action Plan, a consultation, or ask to receive the aggregated research results once available, that is handled as a new, separate, identified request — not as a continuation of, or a link back to, your anonymous VET submission. That request may include your name and/or email address, a snapshot of the inputs needed to generate the Action Plan, and — for a consultation request — your message and/or phone number.

Legal basis: for the anonymous assessment itself, no identifying data is collected at all; for an identified request (Action Plan, consultation, research-results subscription), GDPR Art. 6(1)(a) — consent given when the request is submitted.

There is no application-level record, field, or identifier anywhere in our systems that links an anonymous VET submission to a later identified request — an identified request is always a separate, independently created record, not an update to the anonymous one. Our web server also does not record the visitor's IP address for the VET assessment page or for submitting an anonymous VET response, specifically so this can't be reconstructed from our own standard technical logs either (see section 6).

5. Cookies and browser storage

mindbridge.nexus currently does not use analytics or marketing cookies (e.g. Google Analytics, Meta Pixel). The site only relies on strictly necessary, functional storage:

• the fact that the cookie notice was accepted, stored in the browser's localStorage (not on the server) — this prevents the banner from reappearing on every visit
• the VET assessment's in-progress answers, stored in the browser's localStorage only (not on the server) — this lets you refresh or go back during the assessment without losing your progress

Should analytics or marketing measurement be introduced in the future, it will only be loaded after the visitor's prior consent, as offered in the banner.

6. Technical log data

The web server may record technical data — IP address, requested page, timestamp — for most requests, for security and operational purposes (such as the rate limiting mentioned above). This is kept only for a short, limited period (currently up to 14 days) and is not used for any other purpose.

The VET assessment page and the anonymous VET response submission are a specific exception: our web server is configured not to record the visitor's IP address for these two requests at all, so that no normal technical log we keep could later be used to connect an anonymous VET submission to anyone's identity.

7. Data processors

8. Data retention period

Data submitted through the contact form is kept for the duration of the business relationship, or until a deletion request is received. Email addresses subscribed to the newsletter are kept until unsubscription.

Anonymous VET responses contain no identifying data and are kept indefinitely in anonymous, aggregate form for research and methodology development.

Identified VET Action Plan requests and identified VET consultation requests are kept for 12 months from the request, after which they are deleted — unless an active client relationship has since developed, in which case the normal retention rules for our client/CRM data apply instead of this VET-specific period. Research-results subscriptions (email address only) are kept until unsubscription or a deletion request.

9. Your rights

You are entitled to:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to object
• right to withdraw consent

To exercise these rights, contact us at hello@mindbridge.hu. We respond to requests within 30 days. As anonymous VET responses are not linked to any identity, we have no technical means of locating or acting on a specific one.

10. Data security

Data is submitted over an encrypted (HTTPS) connection, and the server infrastructure is kept up to date with regular security updates.

11. Filing a complaint

You may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): www.naih.hu, or with the data protection authority of your own EU member state.

12. Changes to this policy

The data controller reserves the right to amend this policy. Significant changes will be clearly announced on the website.