Privacy notice

Controller

Lipcsei Krisztián József e.v. (sole proprietor), 1203 Budapest, Szent Erzsébet tér 9., Hungary. Registration number: 56366475. Tax number: 57715717-1-43. Email: privacy@lipcsei.com.

What data, and why

Your email address, if you sign up for Family Constellations and Internal Family Systems or for My First AI Colleague. I use it to reply to your sign-up and arrange the details.

If you subscribe to my newsletter (with the checkbox on a form, on the client portal, or by replying “hírlevél” (newsletter) to an email from me), I'll let you know about my writing and my public events. After subscribing on a form, you get a confirmation email, and you only become a subscriber once you click the button in it. To prove your consent, I record the time, the exact wording of the consent, the page where you subscribed, your browser's identifier and a keyed fingerprint of your IP address. If you replied by email, I keep your reply itself. If a newsletter can't be delivered, or you mark it as spam, I put the address on a block list and don't write to it again.

If you enter your email address in the “Send it to yourself” field on a page, I send the text of that page to it once. I don't save your address; Resend, which delivers the email, keeps it in its own log for up to 30 days. That log is also visible in my account, so I can't rule out that I see your address, but I don't use it for any purpose. To filter out abuse, I keep keyed fingerprints of your address and your IP address for 7 days; neither can be reversed. If you ask the system to stop sending to this address, I keep the address's fingerprint on a block list. Cloudflare Turnstile checks each submission to make sure it isn't sent by a bot. Legal basis: providing the service you asked for (GDPR Article 6(1)(b)), and for the fingerprints, my legitimate interest in preventing abuse (Article 6(1)(f)).

If I invite you to the My First AI Colleague program, you fill in a prework on the client.lipcsei.com client portal: your answers about how you work today (tools, computer, working habits, projects, goals), your voice messages if you choose to speak an answer instead of typing it, and the technical setup details (your GitHub username, the email addresses of your GitHub and Cloudflare accounts, and the installed Claude Code version). I use them to prepare the AI assistant built for you and our first session. I never ask for or store passwords, keys or other secrets.

Signing up for a family constellation session

If you sign up for a family constellation session (with a Constellation Witness Ticket or as the focus client), I process the following: your name, your email address, which session you signed up for and in what role, when you signed up, and whether you paid, how much and in which currency. I use this to hold your seat, to send you the confirmation and the reminder, and to see who is coming. I also get an email about your sign-up with your name, email address and role.

The price I show and charge depends on where you open the page from: in euros from Europe, in dollars from anywhere else. Cloudflare works out the country from your connection. I only use it to pick the currency and don't save it.

If you pay online by card, the payment happens on Stripe's payment page. Stripe handles your card details; they never reach me. I pass Stripe your email address, the session's name and price, and an internal ID that links the payment to your sign-up. Stripe tells me whether the payment went through, the amount, the currency and the payment's ID. If the session has no online price, I hold your seat and send you a payment request by email, and I record the payment myself.

If you pay for a Constellation Witness Ticket online, your confirmation email includes a personal referral code. I create the code in Stripe and link it to you with an internal ID; I don't pass Stripe your name or email address for this. If someone buys a ticket with your code, I note on their sign-up that they used your code, and Stripe checks whether it is their first purchase. After every second such purchase I email you a single-use code for a free Constellation Witness Ticket, and I also get an email with your name, your email address and the email address of the friend whose purchase earned the reward. I don't share your friend's details with you.

Online sessions run on Zoom. I send the join link only in the reminder email; it isn't on the session's public page or in the confirmation. I don't pass your sign-up details to Zoom; you give it your name yourself when you join.

To filter out abuse, I record your IP address and email address in a counter when you sign up: at most five sign-ups an hour can come from one email address and from one IP address.

On the session page, Plausible counts two events, without personal data or cookies: a successful sign-up (with the page's language, and whether online payment or a payment request comes next), and the return after a successful payment (with the page's language). Nothing is stored in your browser for this.

Legal basis

For the reply: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)). For the newsletter: your consent (GDPR Article 6(1)(a)), which you can withdraw at any time, using the unsubscribe link in any newsletter or by emailing privacy@lipcsei.com. Withdrawal does not affect the lawfulness of processing before it.

For the My First AI Colleague prework (answers, voice messages, technical details): performance of our contract for working together (GDPR Article 6(1)(b)).

For family constellation sign-ups and payments: performance of the contract made when you buy the ticket (GDPR Article 6(1)(b)). The referral code and the reward rest on the same basis, as they are part of the ticket's terms. For bookkeeping of the payment: compliance with a legal obligation (Article 6(1)(c)). For filtering out abuse: my legitimate interest (Article 6(1)(f)).

Retention

For the sign-up: as long as we correspond about it, then for at most one year. I process newsletter data until you unsubscribe. If you ask for deletion, I delete your address. I keep the proof of consent for 5 years, without your name or address, as a keyed fingerprint, so that I can show the processing was lawful, and I keep your “don't write to me” request on the block list. You can ask for deletion at any time.

The My First AI Colleague prework answers and voice messages are kept until our work together ends, then for at most one year, and then deleted. On request I delete them sooner.

I keep family constellation sign-up data for at most one year after the session, then delete it; sooner if you ask. I keep payment data (amount, currency, time, ID) for as long as accounting and tax rules require. Your referral code stays usable until you ask me to switch it off; I keep the record of its redemptions together with the sign-up data.

Processors

Cloudflare, Inc. (website hosting and form processing) and Resend (email delivery). Both operate in the United States; transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Visits are measured with Plausible Analytics, without cookies and without storing personal data.

The client portal's data (the prework answers and voice messages) is also stored by Cloudflare; the voice messages are not public, and only I can listen to them while signed in. When you submit, a summary of your answers reaches me by email through Resend.

Card payments are handled by Stripe Payments Europe, Ltd. (Ireland), and online sessions run on Zoom (United States). For Zoom, transfers rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You can request access to your data, its rectification or erasure, restriction of processing and data portability, and you can object to the processing. Email privacy@lipcsei.com.

You can lodge a complaint with the Hungarian data protection authority (NAIH, 1055 Budapest, Falk Miksa utca 9–11., naih.hu) or go to court.