Cookie information
1. Introduction
The purpose of this Cookie Policy is to provide the visitors of the s4a.hu website, operated by Safety For All Kft., with clear and detailed information regarding the use of cookies and other similar technologies applied on the website, their purpose, legal basis, duration, and the choices available to visitors. The use of cookies may serve to ensure the website's functionality, improve user experience, compile traffic statistics, and—subject to separate consent—marketing and remarketing purposes. The application of cookies and similar technologies is carried out in line with the relevant European Union and Hungarian data protection regulations, and in accordance with electronic communications / ePrivacy principles.
2. Details of the Data Controller
-
Name of the Data Controller: Safety For All Munka- és Környezetvédelmi Szakértő Mérnök Iroda Kft. (Safety For All Occupational Health and Environmental Expert Engineering Office Ltd.)
-
Registered Office: 2100 Gödöllő, Szent János utca 12. Bldg. A, Entrance 1, 4th floor, Apt. 12, Hungary
-
Company Registration Number: 13-09-230524
-
Tax Number: 32414086-2-13
-
E-mail address: s4a@s4a.hu
-
Phone number: +36 30 382 9849
-
Website: s4a.hu
-
Data Protection Contact Person: István Fodor (s4a@s4a.hu)
Pursuant to Article 13 of the GDPR, the data subject must be informed at the time when personal data are obtained, among other things, about the identity and contact details of the data controller, and, if applicable, the contact details of the data protection officer. The company has not appointed a separate formal data protection officer.
3. What is a Cookie and What Similar Technologies Exist?
A cookie is a small data file that a website places on or reads from the user's terminal equipment—such as their computer, mobile phone, or tablet. Cookies can help, for example, in maintaining sessions, remembering preferences, analyzing traffic, or marketing-related tracking. Under the logic of the ePrivacy Directive, access to information stored in a user's terminal equipment or storage on it is, as a general rule, lawful only when accompanied by appropriate information, and in non-essential cases, in accordance with the user's choice. Technologies other than cookies with similar functions may also appear on the website, particularly due to the operation of the website's engine and connected analytical or marketing services. Such technologies include:
-
local storage,
-
session storage,
-
tracking pixels (e.g., Meta and LinkedIn pixels),
-
identifiers associated with embedded external content,
-
logging and security technologies,
-
consent management technologies.
4. Categories of Cookies and Similar Technologies
The cookies used on the website can be classified into the following main categories.
4.1. Strictly Necessary Cookies
These cookies are necessary for the basic operation of the website, such as:
-
maintaining the session,
-
security functions,
-
load balancing,
-
remembering consent settings,
-
the technical operation of forms.
In the absence of these cookies, the website or parts of it would not function properly. Under Hungarian regulatory practice and ePrivacy principles, strictly necessary cookies can be applied without separate consent, but appropriate information must still be provided about them.
4.2. Preference or Functional Cookies
These cookies help remember the user's choices and convenience settings, such as:
-
language settings,
-
decisions regarding pop-up windows,
-
user interface preferences.
Some of these may be either necessary or non-essential depending on the specific implementation. If the function is not indispensable for providing the service, consent-based processing is generally recommended.
4.3. Statistical / Analytical Cookies
These cookies help the website operator obtain information about:
-
how many visitors arrive at the website,
-
which pages they view,
-
how long they stay on individual pages,
-
what device or approximate geographical region they arrive from.
This function is provided on the website by the Google Analytics 4 service. Since web analytics are not strictly necessary for the basic operation of the website, their application requires prior consent.
4.4. Marketing Cookies
These cookies can be used to track user behavior, display targeted advertisements, perform remarketing, or measure conversions. Technologies applied on the website include:
-
Meta Pixel,
-
LinkedIn Insight Tag.
These cookies can only be utilized with the prior, active consent of the data subject.
4.5. Third-Party Cookies
Any cookie or technology placed or read not directly by the website operator but by an external service provider is considered a third-party cookie, such as:
-
video embeds,
-
map services,
-
chat widgets,
-
form protection services,
-
analytical or marketing platforms.
In these cases, not only the website operator's but also the external provider's data protection practices may be relevant, which must be specifically indicated in this policy. The user must also receive a clear picture of who these third parties are.
5. Rules of Consent
For the use of non-essential cookies, the prior, voluntary, specific, informed, and unambiguous consent of the website visitor is required. Consent must provide a real choice; it cannot be considered appropriate if the visitor cannot reject cookies as easily as they accept them, or if cookies are loaded before a decision is made. Under the GDPR, consent must be demonstrable and withdrawable at any time. Consent is not considered appropriate particularly if:
-
cookies are activated before consent is given;
-
there is only an "Accept" button without a real option to reject;
-
pre-ticked check-boxes are used;
-
categories are not properly separated;
-
withdrawing consent is more complicated than giving it;
-
the visitor simply scrolls on the website or clicks on another subpage without a targeted indication of acceptance (e.g., ticking a check-box).
6. Withdrawal of Consent
The visitor is entitled to withdraw their previously given consent at any time. Withdrawing consent must be as simple as giving it. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. The option to withdraw consent is explicitly required by the GDPR. Consent on the s4a.hu website can be withdrawn in the following ways:
-
through the "Cookie Settings" link located in the website footer, by reopening the cookie banner;
-
by altering the cookie settings of the browser;
-
through the specific opt-out solutions of certain third parties, if available.
7. Cookie Banner / Consent Management Platform (CMP)
For cookie management, the website utilizes the built-in consent management (Cookie Banner) solution of Wix.com. Its tasks are to:
-
display the primary information,
-
enable selection per cookie category,
-
log consents,
-
ensure the choice can be modified at a later time.
Under Hungarian and EU practice, the banner must be clear, transparent, and provide a genuine choice. Cookies requiring consent must not be activated by default, and the website must provide visitors with a full option to reject all non-essential cookies.
8. Detailed List of Cookies and Similar Technologies Used on the Website
The data controller informs the data subject about the purposes, recipients, retention periods, and potential third-country data transfers of cookies used on the website in the following up-to-date table.
Name / ID
Service provider
Category
Purpose
Legal basis
Storage time
First/third party
Third country
Comment
consent-policy
Wix.com Ltd.
Absolutely necessary
Comment on the consent decision
Technical necessity
12 months
First party
Israel (Decision of Conformity)
It is essential for the banner to function.
XSRF-TOKEN, hs, svSession
Wix.com Ltd.
Absolutely necessary
Security and session maintenance
Technical necessity
Until the end of the session
First party
Israel (Decision of Conformity)
It is necessary for the basic functioning of the website.
_ga, ga*
Google Ireland Ltd.
Statistical
Attendance and traffic analysis
Contribution
2 years
Third party
Yes / USA (DPF framework)
It is only filled in case of explicit consent.
_fbp
Meta Platforms Ireland Ltd.
Marketing
Remarketing / conversion measurement
Contribution
3 months
Third party
Yes / USA (DPF framework)
It is only filled in case of explicit consent.
li_sugr, UserMatchHistory, bcookie
LinkedIn Ireland Unlimited Co.
Marketing
Campaign measurement, targeting and remarketing
Contribution
1-6 months
Third party
Yes / USA (DPF framework)
It is only filled in case of explicit consent.
9. Typical Third-Party Providers and Technologies
Depending on the applied technical settings, the website uses the following external services:
9.1. Analytical Services
-
Provider: Google Analytics 4 (Google Ireland Ltd.)
-
Purpose: compiling traffic and usage statistics
-
Legal Basis: consent
9.2. Marketing and Remarketing
-
Provider: Meta Pixel (Meta Platforms Ireland Ltd.) and LinkedIn Insight Tag (LinkedIn Ireland Unlimited Co.)
-
Purpose: campaign measurement, remarketing, conversion tracking
-
Legal Basis: consent
10. Categories of Data Processors and Recipients
Based on the technical solutions applied on the website, the following recipients and categories of recipients may have access to data associated with cookies:
-
hosting provider and partner providing the website operating system (Wix.com Ltd.);
-
provider of the consent management platform (CMP) (Wix.com Ltd.);
-
analytical service provider (Google Ireland Ltd.);
-
providers of marketing platforms (Meta Platforms Ireland Ltd., LinkedIn Ireland Unlimited Co.);
-
web developer or website maintenance partner (authorized partners bound by confidentiality performing potential website development and technical maintenance).
Please note that during the use of marketing technologies (Meta Pixel, LinkedIn Insight Tag), regarding the collection and transmission of visitor data to the providers, Safety For All Kft. and the respective service provider (Meta Platforms Ireland Ltd. and LinkedIn Ireland Unlimited Co.) qualify as Joint Controllers pursuant to Article 26 of the GDPR. The terms of the joint controllership are set out in the providers' own privacy policies.
11. Third-Country Data Transfers
Data associated with certain cookies and related technologies is transferred to or becomes accessible in countries outside the European Economic Area (EEA). Based on the technical solutions applied on the website, this specifically affects the United States and Israel.
During data transfers, the appropriate level of data protection and lawfulness is ensured by the following safeguards:
-
Adequacy Decision:
-
Israel: In the case of Wix.com Ltd., which provides the hosting, basic operation, and Consent Management Platform (CMP) of the website, the European Commission's adequacy decision regarding Israel is applicable.
-
United States of America: In the case of Google LLC (Google Analytics 4), Meta Platforms, Inc. (Meta Pixel), and LinkedIn Corporation (LinkedIn Insight Tag), the data transfer is based on the adequacy decision issued under the EU-U.S. Data Privacy Framework (DPF), as the service providers concerned are certified participants of the framework.
-
-
Standard Contractual Clauses (SCC): If a specific data transfer is not covered by an adequacy decision, the data processing agreements concluded with the providers are based on the Standard Contractual Clauses (SCC) approved by the European Commission.
12. Retention Periods
The retention period of cookies may vary depending on the type and purpose of the technology:
-
Session cookies: these cookies are temporary, existing only while the visitor remains on the website, and are automatically deleted from the terminal equipment when the browser is closed.
-
Persistent cookies: these cookies remain on the terminal equipment for a predetermined period of time, or until the visitor manually deletes them in their browser settings.
-
Third-party cookies: third-party providers (such as Google, Meta, or LinkedIn) may also determine retention periods for the technologies they operate, based on their own privacy policies.
The specific, up-to-date retention periods for individual cookies and similar technologies used on the website are contained in the detailed table in Section 8 of this policy.
13. Browser Settings
Most modern browsers allow for the detailed management, deletion, or disabling of cookies. The automatic acceptance of cookies can be changed in the browser settings, allowing visitors to control the operation of data-recording technologies themselves.
In their browser settings, visitors can generally: view stored cookies, delete them, block the acceptance of new cookies, and apply different settings at the device or website level. Please note that blocking or deleting cookies globally (especially those strictly necessary for the website's operation) may result in malfunctions of certain website features or significantly degrade the user experience.
14. Rights of Data Subjects
In connection with the processing of personal data related to cookies, data subjects are entitled to the following rights under the applicable data protection regulations (in particular, the GDPR):
-
right to be informed;
-
right of access;
-
right to rectification;
-
right to erasure (to be forgotten);
-
right to restriction of processing;
-
right to data portability;
-
right to object;
-
right to withdraw consent at any time.
The data subject may send any questions regarding the processing of their personal data or requests to exercise the above rights to the following official electronic contact address of the data controller: s4a@s4a.hu. The data controller will examine and respond to requests without undue delay, but at the latest within one month of receipt.
15. Legal Remedies
If a visitor believes that the processing of data related to cookies infringes their rights, they may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH) or seek judicial remedy. Under the relevant provisions of the GDPR, visitors are entitled to lodge a complaint with a supervisory authority and have the right to an effective judicial remedy. In Hungary, the supervisory authority tasks are performed by the NAIH in accordance with the Hungarian Info Act (Infotv.).
Contact details of the supervisory authority:
-
Name: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
-
Registered Office: 1055 Budapest, Falk Miksa utca 9-11., Hungary
-
Postal Address: 1363 Budapest, Pf. 9., Hungary
-
Phone: +36 (1) 391-1400
-
E-mail: ugyfelszolgalat@naih.hu
-
Website: https://www.naih.hu
In addition to the right to lodge a complaint, the data subject is entitled to bring proceedings before a court in the event of an infringement of their rights. The court hears the case in an expedited procedure. The lawsuit may also be brought, at the data subject’s choice, before the tribunal competent according to their place of residence or stay.
16. Summary of Legal Bases for Cookie Management
Cookie category
Absolutely necessary
Preference
Statistical
Marketing
Third-party embedded elements
Typical legal basis
Legitimate interest of the data controller (GDPR Article 6 (1) (f))
often contribute
contribution
contribution
depending on the solution, mostly contribution
Comment
It can be legally used even in the absence of consent, but appropriate information is required.
depends on the specific function
unless strictly necessary
prior, active consent is required
separate technical inspection required
The legal basis for processing should always be determined by the actual operation. According to the GDPR, the processing of personal data is only lawful if there is an appropriate legal basis, and in the case of consent, specificity, voluntariness and revocation are particularly important.
17. Contact Information Regarding Cookie Management
If the visitor has any questions regarding cookie management, their consent, or exercising their rights, they can contact the data controller using the details below:
-
Contact Person: Safety For All Kft.
-
E-mail: s4a@s4a.hu
-
Postal Address: 2100 Gödöllő, Szent János utca 12. Bldg. A, Entrance 1, 4th floor, Apt. 12, Hungary
-
Phone Number: +36 30 382 9849
18. Amendments and Entry into Force of the Policy
Safety For All Kft. reserves the right to unilaterally amend this Cookie Policy in the event of changes to the regulatory environment, supervisory authority practices, or the technical operation of the website. The amended policy enters into force upon its publication on the website.
Document details:
-
Version: 1.0
-
Date of Entry into Force: July 27, 2026.
-
Last Modification: July 27, 2026.
