KeeNet Kft. (“Controller”, “we”, “us”) is committed to protecting personal data. This policy explains what personal data we process in connection with the www.n8nhost.hu website (“Website”) and the n8n Hosting service, for what purpose, on what legal basis and for how long, and what rights you have.
This policy is based on Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information, and Act CVIII of 2001 on Electronic Commerce Services. In case of any discrepancy, the Hungarian version of this policy prevails.
1. Controller details
- Name: KeeNet Kft. (KeeNet Korlátolt Felelősségű Társaság)
- Registered office: Gát utca 21., 1095 Budapest, Hungary
- Company registration no.: 01 09 964586
- Tax number: 23415584-1-43
- Email: info@n8nhost.hu
- Phone: +36 30 219 7851
We are not required to appoint a Data Protection Officer under Article 37 GDPR. Please contact us at the details above with any data protection questions.
2. Definitions
Terms used in this policy (e.g. personal data, processing, controller, processor, data subject, consent) have the meaning given in Article 4 GDPR.
3. Data processed, purposes, legal bases and retention
3.1. Visiting the Website – server logs
| Data | IP address, time of visit, requested URL, HTTP status code, browser type (user agent), referring page. |
|---|---|
| Purpose | Ensuring secure operation of the Website, detecting and preventing abuse (e.g. attack attempts), troubleshooting. |
| Legal basis | Our legitimate interest in the security of the Website and IT systems (Art. 6(1)(f) GDPR). |
| Retention | Up to 30 days, then deleted automatically, unless needed to investigate a security incident. |
3.2. Contact (form, email, phone) and quote requests
| Data | Name, email address, company (optional), phone number (optional), topic, message content, time of submission. |
|---|---|
| Purpose | Responding to your inquiry, communication, preparing a quote, preparing a contract. |
| Legal basis | Your consent given by submitting the form (Art. 6(1)(a) GDPR); for quote requests, steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR). |
| Retention | 1 year after the matter is closed, or until consent is withdrawn. If a contract is concluded, data is processed further under section 3.3. |
You may withdraw your consent at any time by writing to info@n8nhost.hu. Withdrawal does not affect the lawfulness of processing before withdrawal.
3.3. Contracts, subscriptions and invoicing
| Data | Name, email, phone and position of the customer (or its contact person); billing name and address, tax number; ordered plan and contract details; payment data (card data is processed by the payment provider, not by us). |
|---|---|
| Purpose | Performance of the service contract, communication, customer and technical support, invoicing, debt management. |
| Legal basis | Performance of a contract (Art. 6(1)(b) GDPR); for accounting records, compliance with a legal obligation (Art. 6(1)(c) GDPR, Section 169 of Hungarian Act C of 2000 on Accounting); for contact persons of corporate customers, legitimate interest (Art. 6(1)(f) GDPR). |
| Retention | 5 years after termination of the contract (civil law limitation period); accounting records for 8 years from issue. |
3.4. Data stored in customers’ n8n instances
Within the n8n Hosting service, customers may store and process personal data in their own dedicated n8n instance (e.g. customer data handled by workflows, credentials, execution history). For such data the customer is the controller and KeeNet Kft. acts as processor (Art. 28 GDPR), solely on the customer’s instructions and under a data processing agreement (DPA) concluded between the parties. We access this data only to the extent and for the time necessary to provide the service (e.g. troubleshooting, backup, restore) and never use it for other purposes.
Backups are retained for the period defined in the plan (7–90 days). After termination we provide a data export on request, and permanently delete the n8n instance and all its backups within 30 days of termination.
4. Cookies and tracking
The Website does not use cookies and does not use any analytics, advertising or other tracking technology (e.g. Google Analytics, Meta Pixel). Fonts and all other resources are served from our own server, so your browser does not connect to third-party servers when viewing the Website. Therefore we do not ask for cookie consent.
Should we introduce cookies or analytics in the future, we will update this policy and, where required, ask for your prior consent.
5. Processors and recipients
We do not sell your personal data or share it with third parties for marketing purposes. We use the following processors, who process data only on our instructions and under contractual confidentiality and data protection obligations:
| Processor | Activity |
|---|---|
| www.keenet.io | Server and hosting services (running the Website and n8n instances, storing backups) |
| [to be completed: email provider] | Email accounts and correspondence (forwarding contact messages) |
| [to be completed: invoicing software] | Issuing and storing electronic invoices |
| [to be completed: accounting firm] | Bookkeeping, tax returns |
Where required by law (e.g. requests from authorities or courts), we may disclose data to the competent body.
6. Transfers to third countries
Personal data is stored and processed within the European Economic Area (EEA). We do not transfer data to third countries. If a customer’s own n8n workflow connects to services (e.g. APIs) in third countries, the customer as controller is responsible for any resulting transfer.
7. Data security
We protect data with appropriate technical and organisational measures, including:
- encrypted (TLS/HTTPS) connections;
- isolated runtime environments per customer;
- firewall, intrusion and brute-force protection, regular security updates;
- encrypted backups, role-based access restriction and logging;
- confidentiality obligations for staff.
In the event of a personal data breach we act in accordance with Articles 33–34 GDPR: where the breach poses a risk, we notify the supervisory authority within 72 hours, and in case of high risk we also inform affected data subjects.
8. Your rights
- Right of access (Art. 15 GDPR): you may ask whether we process your personal data and request a copy.
- Right to rectification (Art. 16): you may request correction of inaccurate or completion of incomplete data.
- Right to erasure (Art. 17): you may request deletion if there is no (longer a) legal basis for processing.
- Right to restriction of processing (Art. 18).
- Right to data portability (Art. 20): you may receive data processed by automated means on the basis of consent or contract in a structured, machine-readable format.
- Right to object (Art. 21): you may object at any time to processing based on legitimate interest.
- Right to withdraw consent (Art. 7(3)): at any time, without giving reasons.
Send your request to info@n8nhost.hu or by post to our registered office. We respond without undue delay and within one month at the latest (extendable by two further months where necessary, in which case we will inform you). Requests are free of charge. We may ask you to verify your identity.
9. Remedies
If you believe that the processing of your personal data infringes the law, please contact us first so we can resolve the issue together. You also have the right to lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: Falk Miksa utca 9–11., 1055 Budapest, Hungary
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu
You may also lodge a complaint with the supervisory authority of your EU member state of residence, or take legal action before the competent court.
10. Changes to this policy
We may amend this policy, in particular due to changes in legislation or the introduction of new services. The current version is always available on this page; existing customers will be notified of material changes by email.