Privacy notice

What information does the site process?

The contact form stores your name, email address, subject and message. Project enquiries additionally store the phone number you provide, business and project details, website address, language requirements, deadline and request for a copy. Do not submit sensitive information or personal data unnecessary for your enquiry.

Purpose and operation

Submissions remain in the Soner database and are accessible to authorised administrators to respond and discuss the project. Submission is not a marketing subscription. Email notifications for project enquiries are supported but currently disabled; the provider and transfer must be documented before enabling them.

Cookies and local storage

The necessary session cookie supports sign-in and CSRF protection for forms. Your choice is stored under sonerPortfolioConsent.v1 in this browser’s local storage until you change or delete it. Images, fonts and the animated background video are local files. No analytics or advertising measurement is active.

External content

External videos load only with separate permission. The Vimeo and YouTube videos in the portfolio are described separately below. Social links lead to an external provider only when opened.

Rights and contact

Under applicable rules you may request access, correction, deletion or restriction and, where applicable, object or request data portability. Consent can be withdrawn in cookie settings. You can send privacy questions through the contact form. The controller’s official identity and competent supervisory authority remain to be confirmed.

Information still needed

The content and retention of hosting logs, providers, legal bases and enquiry retention periods have not yet been reliably identified. The system currently has no automatic time-based deletion of messages.

Language choice

On the first homepage visit, the browser’s language preference is used to choose Hungarian, German or English. The portfolio_language session cookie remembers your manual choice. The site does not separately identify your operating system or build a language profile.

The website remembers your choice of light, dark or automatic appearance locally in your browser. This setting is not sent to the server. You can change it with the switch at any time or remove it by clearing the stored website data.

External video

My own Hungarian-language promotional film is available through an embedded Vimeo player. The player loads only after consent to external media; before that, the browser requests no Vimeo content. Once enabled, Vimeo receives a network connection including the IP address and browser information needed for playback. DNT limits player analytics, although necessary cookies may remain active. Consent can be withdrawn in cookie settings, which removes the player from this page. Further information is available in Vimeo’s privacy notice.

Password-protected references

The system verifies the submitted reference password. A successful unlock grants access in the current session for one hour. Changing the password invalidates earlier grants. To limit failed attempts, a hash of the reference identifier and network address is associated with an attempt counter for a 15-minute window. Reference passwords are not stored in readable form.

The client portal uses separate accounts created personally. It stores the client’s name, email address, a one-way password hash, and the titles, descriptions, statuses and due dates of assigned projects. Sessions expire after 2 hours of inactivity. Failed logins use hashes of email and IP addresses to limit attempts; records older than 24 hours are deleted on the next login request. These are necessary security functions, not marketing tracking. Clients can access only their own projects. The controller still needs to specify the final retention rules and legal basis for account and project data.

Form spam protection

The server checks a hidden honeypot field, a signed, session-bound form token and the time taken to complete the form. To limit submissions, it stores a hash of the IP address and timestamps. Counters older than 24 hours are removed on the next valid submission attempt. No external captcha service is loaded for this purpose. Messages are saved in the Soner inbox; the configured email provider may also notify the operator.