Privacy Notice
instaprice.ai
| Version | 1.0 |
| Effective | 11 June 2026 |
| Controller | Tewelon GmbH |
1. Introduction
The following describes the processing of personal data in connection with the instaprice.ai website (the "Website"). This policy is available in five languages; in the event of any discrepancy in content, the Hungarian version prevails. We process your data in accordance with the GDPR, the Austrian Data Protection Act (Datenschutzgesetz, DSG) and the Austrian Telecommunications Act (Telekommunikationsgesetz 2021, TKG 2021).
2. The controller and contact details
| Controller | Tewelon GmbH |
| Registered office | Humboldtgasse 28/14, 1100 Wien, Austria |
| Company register number | FN 420303 v, registry court: Handelsgericht Wien |
| info@hexalion.ai | |
| Phone | +36 70 218 6633 |
InstaPrice and Hexalion are brand names of Tewelon GmbH's AI business division. Wherever the Website or this policy uses the name InstaPrice or Hexalion, the controller is in all cases Tewelon GmbH.
3. Individual processing activities
3.1 Visiting the Website — server logs
When you visit the Website, the hosting server creates technical log entries. We operate the Website on servers of Hetzner Online GmbH (see Section 4).
| Data processed | IP address, timestamp, requested URL, browser identifier (user agent), referring page |
| Purpose | Secure and stable operation of the Website, troubleshooting, prevention of abuse |
| Legal basis | Legitimate interest — Article 6(1)(f) GDPR (interest in operational security) |
| Retention period | 14 days |
| Recipient | Hetzner Online GmbH as processor (hosting services) |
3.2 Storing the cookie consent decision and language preference (local storage)
The Website stores your cookie decision and language preference in your browser's local storage — these do not leave your device, and their purpose is to prevent the banner from appearing on every visit. Legal basis: Article 6(1)(f) GDPR; under § 165(3) TKG 2021 this storage is strictly necessary and therefore does not require consent. Details in the Cookie Policy.
3.3 Web analytics — Google Tag Manager and Google Analytics 4
To measure traffic to the Website, we use Google Tag Manager (GTM) and Google Analytics 4 (GA4).
Important: these services load only after your explicit, prior consent, which you can give in the cookie banner. Before you consent, no tracking code is loaded and no request is sent to Google.
| Data processed | Analytics cookies (_ga — 2 years; _ga_* — 2 years), pseudonymized visit statistics (containing no name or email address): pages viewed, visit duration, approximate geographic region, device and browser data |
| Purpose | Aggregate measurement of Website traffic, improvement of content and user experience |
| Legal basis | Your consent — Article 6(1)(a) GDPR, and § 165(3) TKG 2021 |
| Retention period | Cookie lifetime: 2 years; measurement data stored in GA4 is retained for a maximum of 14 months |
| Recipients | Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) as Google's EU contracting party; the GTM/GA4 container is operated as processor by our marketing partner, Netmarketing Online Reklámügynökség Kft. (2373 Dabas, Dob utca 10., Hungary; company register number: Cg. 13-09-144428) |
| Transfer to a third country | Possible transfer to Google LLC (USA) — see Section 5 |
You may withdraw your consent at any time, without giving reasons, by clicking the "Cookie settings" link in the footer. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
3.4 Contact form
On the Website's Contact form, you can provide your name, email address, message and — optionally — company name and phone number.
The data you provide in the form is received and logged by the Website's own server operated by the controller (Hetzner Online GmbH, see Section 4). An email notification of the incoming message is sent to the controller's info@hexalion.ai mailbox (Google Workspace).
| Data processed | Name, email address, message; optionally company name and phone number |
| Purpose | Receiving and responding to your enquiry and, in the case of a quote request, preparing a quote |
| Legal basis | If you are the prospective contracting party: steps prior to entering into a contract (Article 6(1)(b) GDPR). If you contact us as the representative of a business or with a general enquiry: legitimate interest — receiving and responding to the enquiry (Article 6(1)(f) GDPR). The checkbox next to the form confirms acknowledgement of the privacy policy. |
| Retention period | Until the discussion concludes; if no cooperation comes about — or no discussion takes place — we delete the data within 30 days of the last substantive contact, unless further retention is necessary to assert a legal claim or to comply with a statutory retention obligation; if cooperation comes about, processing continues on the basis of a separate agreement |
| Recipients | Hetzner Online GmbH as processor (hosting services); Google Ireland Limited as processor (Google Workspace, email notification) |
| Transfer to a third country | Possible transfer to Google LLC (USA) — see Section 5 |
Providing the data is voluntary; without the mandatory fields we cannot receive your enquiry. If you contact us directly by email, we process your data in the same way as described above.
3.5 Appointment booking (consultation appointment)
In the Website's appointment booking module, you provide your name, phone number, company name and email address, and select the desired time slot; the consultation appointment is recorded in the controller's calendar (Google Calendar, a Google Workspace service), and you receive a calendar invitation by email.
| Data processed | Name, phone number, company name, email address, the selected time slot |
| Purpose | Recording the consultation appointment, organizing and conducting the consultation, sending a calendar invitation |
| Legal basis | If you are the prospective contracting party: steps prior to entering into a contract (Article 6(1)(b) GDPR). If you book an appointment as the representative of a business: legitimate interest — receiving and responding to the enquiry (Article 6(1)(f) GDPR). The checkbox next to the form confirms acknowledgement of the privacy policy. |
| Retention period | As per Section 3.4 |
| Recipients | Google Ireland Limited as processor (Google Workspace / Google Calendar); Hetzner Online GmbH as processor (technical log) |
| Transfer to a third country | Possible transfer to Google LLC (USA) — see Section 5 |
Providing the data is voluntary; without the mandatory fields we cannot receive your enquiry.
4. Processors
The controller uses the following processors (under a data processing agreement pursuant to Article 28 GDPR):
| Processor | Registered office | Activity |
|---|---|---|
| Hetzner Online GmbH (data center: Hetzner Finland Oy, Helsinki, EU) | Gunzenhausen, Germany | Hosting services, server operation |
| Google Ireland Limited | Gordon House, Barrow Street, Dublin 4, Ireland (EU) | Google Workspace (calendar, calendar invitations, email), web analytics (GTM, GA4) |
| Netmarketing Online Reklámügynökség Kft. (company register number: Cg. 13-09-144428) | 2373 Dabas, Dob utca 10., Hungary | Operation of the GTM/GA4 tracking container |
5. Transfer to a third country
Google LLC (USA) is a certified participant in the EU–U.S. Data Privacy Framework; any transfer to the USA is based on this adequacy decision (Article 45 GDPR).
We do not carry out decision-making based solely on automated processing that produces legal effects, nor profiling for such purposes, within the meaning of Article 22 GDPR.
6. Your rights
Right to object: you may object at any time to processing based on legitimate interest (Article 21 GDPR).
You may exercise the following rights in connection with the processing at any time, free of charge:
| Right | Content |
|---|---|
| Access (Article 15 GDPR) | You can request information on whether we process your personal data and, if so, request a copy of it |
| Rectification (Article 16) | You can request the correction of inaccurate data and the completion of incomplete data |
| Erasure (Article 17) | You can request the erasure of your data ("right to be forgotten") if there is no further legal basis for the processing |
| Restriction (Article 18) | You can request the restriction of processing in the cases specified in the Regulation |
| Data portability (Article 20) | You can request the data you have provided in a machine-readable file, or request that we transmit it directly to another provider |
| Objection (Article 21) | You can object at any time, on grounds relating to your particular situation, to processing based on legitimate interest |
| Withdrawal of consent (Article 7(3)) | You can withdraw your consent at any time, without giving reasons; the withdrawal does not affect the lawfulness of processing carried out before the withdrawal |
You can submit your request using the contact details provided in Section 2. We will respond substantively to your request within one month at the latest.
7. Legal remedies
If you believe that the processing of your data infringes the GDPR, you can lodge a complaint with a supervisory authority. The authority for the controller's registered office is the Österreichische Datenschutzbehörde (DSB) (Austrian Data Protection Authority), Barichgasse 40–42, 1030 Wien, Austria — www.dsb.gv.at.
8. Amendments to this policy
We update this policy as necessary; the version in force at any given time is available at /en/privacy/.