top of page

Cookie information

1. Introduction

​

The purpose of this Cookie Policy is to provide the visitors of the s4a.hu website, operated by Safety For All Kft., with clear and detailed information regarding the use of cookies and other similar technologies applied on the website, their purpose, legal basis, duration, and the choices available to visitors. The use of cookies may serve to ensure the website's functionality, improve user experience, compile traffic statistics, and—subject to separate consent—marketing and remarketing purposes. The application of cookies and similar technologies is carried out in line with the relevant European Union and Hungarian data protection regulations, and in accordance with electronic communications / ePrivacy principles.

 

2. Details of the Data Controller

​

  • Name of the Data Controller: Safety For All Munka- és Környezetvédelmi Szakértő Mérnök Iroda Kft. (Safety For All Occupational Health and Environmental Expert Engineering Office Ltd.)

  • Registered Office: 2100 Gödöllő, Szent János utca 12. Bldg. A, Entrance 1, 4th floor, Apt. 12, Hungary

  • Company Registration Number: 13-09-230524

  • Tax Number: 32414086-2-13

  • E-mail address: s4a@s4a.hu

  • Phone number: +36 30 382 9849

  • Website: s4a.hu

  • Data Protection Contact Person: István Fodor (s4a@s4a.hu)

 

Pursuant to Article 13 of the GDPR, the data subject must be informed at the time when personal data are obtained, among other things, about the identity and contact details of the data controller, and, if applicable, the contact details of the data protection officer. The company has not appointed a separate formal data protection officer.

 

3. What is a Cookie and What Similar Technologies Exist?

​

A cookie is a small data file that a website places on or reads from the user's terminal equipment—such as their computer, mobile phone, or tablet. Cookies can help, for example, in maintaining sessions, remembering preferences, analyzing traffic, or marketing-related tracking. Under the logic of the ePrivacy Directive, access to information stored in a user's terminal equipment or storage on it is, as a general rule, lawful only when accompanied by appropriate information, and in non-essential cases, in accordance with the user's choice. Technologies other than cookies with similar functions may also appear on the website, particularly due to the operation of the website's engine and connected analytical or marketing services. Such technologies include:

  • local storage,

  • session storage,

  • tracking pixels (e.g., Meta and LinkedIn pixels),

  • identifiers associated with embedded external content,

  • logging and security technologies,

  • consent management technologies.

 

4. Categories of Cookies and Similar Technologies

​

The cookies used on the website can be classified into the following main categories.

 

4.1. Strictly Necessary Cookies

​

These cookies are necessary for the basic operation of the website, such as:

  • maintaining the session,

  • security functions,

  • load balancing,

  • remembering consent settings,

  • the technical operation of forms.

 

In the absence of these cookies, the website or parts of it would not function properly. Under Hungarian regulatory practice and ePrivacy principles, strictly necessary cookies can be applied without separate consent, but appropriate information must still be provided about them.

 

4.2. Preference or Functional Cookies

​

These cookies help remember the user's choices and convenience settings, such as:

  • language settings,

  • decisions regarding pop-up windows,

  • user interface preferences.

 

Some of these may be either necessary or non-essential depending on the specific implementation. If the function is not indispensable for providing the service, consent-based processing is generally recommended.

 

4.3. Statistical / Analytical Cookies

​

These cookies help the website operator obtain information about:

  • how many visitors arrive at the website,

  • which pages they view,

  • how long they stay on individual pages,

  • what device or approximate geographical region they arrive from.

 

This function is provided on the website by the Google Analytics 4 service. Since web analytics are not strictly necessary for the basic operation of the website, their application requires prior consent.

 

4.4. Marketing Cookies

​

These cookies can be used to track user behavior, display targeted advertisements, perform remarketing, or measure conversions. Technologies applied on the website include:

  • Meta Pixel,

  • LinkedIn Insight Tag.

 

These cookies can only be utilized with the prior, active consent of the data subject.

 

4.5. Third-Party Cookies

​

Any cookie or technology placed or read not directly by the website operator but by an external service provider is considered a third-party cookie, such as:

  • video embeds,

  • map services,

  • chat widgets,

  • form protection services,

  • analytical or marketing platforms.

 

In these cases, not only the website operator's but also the external provider's data protection practices may be relevant, which must be specifically indicated in this policy. The user must also receive a clear picture of who these third parties are.

 

5. Rules of Consent

​

For the use of non-essential cookies, the prior, voluntary, specific, informed, and unambiguous consent of the website visitor is required. Consent must provide a real choice; it cannot be considered appropriate if the visitor cannot reject cookies as easily as they accept them, or if cookies are loaded before a decision is made. Under the GDPR, consent must be demonstrable and withdrawable at any time. Consent is not considered appropriate particularly if:

​

  • cookies are activated before consent is given;

  • there is only an "Accept" button without a real option to reject;

  • pre-ticked check-boxes are used;

  • categories are not properly separated;

  • withdrawing consent is more complicated than giving it;

  • the visitor simply scrolls on the website or clicks on another subpage without a targeted indication of acceptance (e.g., ticking a check-box).

 

6. Withdrawal of Consent

​

The visitor is entitled to withdraw their previously given consent at any time. Withdrawing consent must be as simple as giving it. The withdrawal does not affect the lawfulness of processing based on consent before its withdrawal. The option to withdraw consent is explicitly required by the GDPR. Consent on the s4a.hu website can be withdrawn in the following ways:

  • through the "Cookie Settings" link located in the website footer, by reopening the cookie banner;

  • by altering the cookie settings of the browser;

  • through the specific opt-out solutions of certain third parties, if available.

 

7. Cookie Banner / Consent Management Platform (CMP)

​

For cookie management, the website utilizes the built-in consent management (Cookie Banner) solution of Wix.com. Its tasks are to:

  • display the primary information,

  • enable selection per cookie category,

  • log consents,

  • ensure the choice can be modified at a later time.

 

Under Hungarian and EU practice, the banner must be clear, transparent, and provide a genuine choice. Cookies requiring consent must not be activated by default, and the website must provide visitors with a full option to reject all non-essential cookies.

 

8. Detailed List of Cookies and Similar Technologies Used on the Website

​

The data controller informs the data subject about the purposes, recipients, retention periods, and potential third-country data transfers of cookies used on the website in the following up-to-date table.

Name / ID

Service provider

Category

Purpose

Legal basis

Storage time

First/third party

Third country

Comment

consent-policy

Wix.com Ltd.

Absolutely necessary

Comment on the consent decision

Technical necessity

12 months

First party

Israel (Decision of Conformity)

It is essential for the banner to function.

XSRF-TOKEN, hs, svSession

Wix.com Ltd.

Absolutely necessary

Security and session maintenance

Technical necessity

Until the end of the session

First party

Israel (Decision of Conformity)

It is necessary for the basic functioning of the website.

_ga, ga*

Google Ireland Ltd.

Statistical

Attendance and traffic analysis

Contribution

2 years

Third party

Yes / USA (DPF framework)

It is only filled in case of explicit consent.

_fbp

Meta Platforms Ireland Ltd.

Marketing

Remarketing / conversion measurement

Contribution

3 months

Third party

Yes / USA (DPF framework)

It is only filled in case of explicit consent.

li_sugr, UserMatchHistory, bcookie

LinkedIn Ireland Unlimited Co.

Marketing

Campaign measurement, targeting and remarketing

Contribution

1-6 months

Third party

Yes / USA (DPF framework)

It is only filled in case of explicit consent.

9. Typical Third-Party Providers and Technologies

​

Depending on the applied technical settings, the website uses the following external services:

 

9.1. Analytical Services

​

  • Provider: Google Analytics 4 (Google Ireland Ltd.)

  • Purpose: compiling traffic and usage statistics

  • Legal Basis: consent

 

9.2. Marketing and Remarketing

​

  • Provider: Meta Pixel (Meta Platforms Ireland Ltd.) and LinkedIn Insight Tag (LinkedIn Ireland Unlimited Co.)

  • Purpose: campaign measurement, remarketing, conversion tracking

  • Legal Basis: consent

 

10. Categories of Data Processors and Recipients

​

Based on the technical solutions applied on the website, the following recipients and categories of recipients may have access to data associated with cookies:

​

  • hosting provider and partner providing the website operating system (Wix.com Ltd.);

  • provider of the consent management platform (CMP) (Wix.com Ltd.);

  • analytical service provider (Google Ireland Ltd.);

  • providers of marketing platforms (Meta Platforms Ireland Ltd., LinkedIn Ireland Unlimited Co.);

  • web developer or website maintenance partner (authorized partners bound by confidentiality performing potential website development and technical maintenance).

 

Please note that during the use of marketing technologies (Meta Pixel, LinkedIn Insight Tag), regarding the collection and transmission of visitor data to the providers, Safety For All Kft. and the respective service provider (Meta Platforms Ireland Ltd. and LinkedIn Ireland Unlimited Co.) qualify as Joint Controllers pursuant to Article 26 of the GDPR. The terms of the joint controllership are set out in the providers' own privacy policies.

​

11. Third-Country Data Transfers

​

Data associated with certain cookies and related technologies is transferred to or becomes accessible in countries outside the European Economic Area (EEA). Based on the technical solutions applied on the website, this specifically affects the United States and Israel.

​

During data transfers, the appropriate level of data protection and lawfulness is ensured by the following safeguards:

  • Adequacy Decision:

    • Israel: In the case of Wix.com Ltd., which provides the hosting, basic operation, and Consent Management Platform (CMP) of the website, the European Commission's adequacy decision regarding Israel is applicable.

    • United States of America: In the case of Google LLC (Google Analytics 4), Meta Platforms, Inc. (Meta Pixel), and LinkedIn Corporation (LinkedIn Insight Tag), the data transfer is based on the adequacy decision issued under the EU-U.S. Data Privacy Framework (DPF), as the service providers concerned are certified participants of the framework.

  • Standard Contractual Clauses (SCC): If a specific data transfer is not covered by an adequacy decision, the data processing agreements concluded with the providers are based on the Standard Contractual Clauses (SCC) approved by the European Commission.

 

12. Retention Periods

​

The retention period of cookies may vary depending on the type and purpose of the technology:

  • Session cookies: these cookies are temporary, existing only while the visitor remains on the website, and are automatically deleted from the terminal equipment when the browser is closed.

  • Persistent cookies: these cookies remain on the terminal equipment for a predetermined period of time, or until the visitor manually deletes them in their browser settings.

  • Third-party cookies: third-party providers (such as Google, Meta, or LinkedIn) may also determine retention periods for the technologies they operate, based on their own privacy policies.

 

The specific, up-to-date retention periods for individual cookies and similar technologies used on the website are contained in the detailed table in Section 8 of this policy.

​

13. Browser Settings

​

Most modern browsers allow for the detailed management, deletion, or disabling of cookies. The automatic acceptance of cookies can be changed in the browser settings, allowing visitors to control the operation of data-recording technologies themselves.

​

In their browser settings, visitors can generally: view stored cookies, delete them, block the acceptance of new cookies, and apply different settings at the device or website level. Please note that blocking or deleting cookies globally (especially those strictly necessary for the website's operation) may result in malfunctions of certain website features or significantly degrade the user experience.

​

14. Rights of Data Subjects

​

In connection with the processing of personal data related to cookies, data subjects are entitled to the following rights under the applicable data protection regulations (in particular, the GDPR):

​

  • right to be informed;

  • right of access;

  • right to rectification;

  • right to erasure (to be forgotten);

  • right to restriction of processing;

  • right to data portability;

  • right to object;

  • right to withdraw consent at any time.

 

The data subject may send any questions regarding the processing of their personal data or requests to exercise the above rights to the following official electronic contact address of the data controller: s4a@s4a.hu. The data controller will examine and respond to requests without undue delay, but at the latest within one month of receipt.

 

15. Legal Remedies

​

If a visitor believes that the processing of data related to cookies infringes their rights, they may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH) or seek judicial remedy. Under the relevant provisions of the GDPR, visitors are entitled to lodge a complaint with a supervisory authority and have the right to an effective judicial remedy. In Hungary, the supervisory authority tasks are performed by the NAIH in accordance with the Hungarian Info Act (Infotv.).

 

Contact details of the supervisory authority:

  • Name: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

  • Registered Office: 1055 Budapest, Falk Miksa utca 9-11., Hungary

  • Postal Address: 1363 Budapest, Pf. 9., Hungary

  • Phone: +36 (1) 391-1400

  • E-mail: ugyfelszolgalat@naih.hu

  • Website: https://www.naih.hu

 

In addition to the right to lodge a complaint, the data subject is entitled to bring proceedings before a court in the event of an infringement of their rights. The court hears the case in an expedited procedure. The lawsuit may also be brought, at the data subject’s choice, before the tribunal competent according to their place of residence or stay.

 

16. Summary of Legal Bases for Cookie Management

Cookie category

Absolutely necessary

Preference

Statistical

Marketing

Third-party embedded elements

Typical legal basis

Legitimate interest of the data controller (GDPR Article 6 (1) (f))

often contribute

contribution

contribution

depending on the solution, mostly contribution

Comment

It can be legally used even in the absence of consent, but appropriate information is required.

depends on the specific function

unless strictly necessary

prior, active consent is required

separate technical inspection required

The legal basis for processing should always be determined by the actual operation. According to the GDPR, the processing of personal data is only lawful if there is an appropriate legal basis, and in the case of consent, specificity, voluntariness and revocation are particularly important.

17. Contact Information Regarding Cookie Management

​

If the visitor has any questions regarding cookie management, their consent, or exercising their rights, they can contact the data controller using the details below:

​

  • Contact Person: Safety For All Kft.

  • E-mail: s4a@s4a.hu

  • Postal Address: 2100 Gödöllő, Szent János utca 12. Bldg. A, Entrance 1, 4th floor, Apt. 12, Hungary

  • Phone Number: +36 30 382 9849

 

18. Amendments and Entry into Force of the Policy

​

Safety For All Kft. reserves the right to unilaterally amend this Cookie Policy in the event of changes to the regulatory environment, supervisory authority practices, or the technical operation of the website. The amended policy enters into force upon its publication on the website.

 

Document details:

  • Version: 1.0

  • Date of Entry into Force: July 27, 2026.

  • Last Modification: July 27, 2026.

bottom of page