Cookie Policy — ledfalszaki.hu
What we store in your browser, why, and how you can change your decision.
Contents (7 sections)
Data controller: Toma Family Mobil Kft. (2724 Újlengyel, Petőfi Sándor u. 48., Hungary; info@ledfalszaki.hu) — for details see the Privacy Policy.
Effective from: 24 August 2026 · Version: 1.0
1. What is a cookie, and what is local storage?
A cookie is a small text file that the website you visit places in your browser and that the browser sends back with the next request. Local storage (localStorage, sessionStorage) is similar, but the data stays in the browser and does not reach the server by itself. The law applies the same rule to both: storage that is not necessary for the operation of the service may only take place with your prior consent (Section 13/A(4) of Act CVIII of 2001 on electronic commerce services, Ektv. — the Hungarian E-Commerce Act; Article 6(1)(a) GDPR).
2. How do we ask for consent?
On your first visit a cookie banner appears, in which you may choose between "Accept" and "Reject" with the same number of clicks and the same visual prominence. Whichever you choose, every function of the site works. We remember your decision under the ledfalszaki-suti-v1 key so that we do not ask again. In the absence of consent, no statistical cookies are placed on your device and Google Analytics does not load.
You may change your decision at any time: clicking the "Cookie settings" link in the footer erases your choice and the banner appears again, or you may delete the site data in your browser.
3. Which cookies and storage keys do we use?
3.1 Necessary / functional — without consent (Section 13/A(3) Ektv.; Article 6(1)(f) GDPR)
These serve solely what you have asked for on the site (e.g. not to be asked about cookies again, to keep the view you selected). The items created in the visitor's browser send no data to the server and do not identify you — they all stay in your browser. The one exception is the last row of the table below, lf_sess: that is a genuine server-side session cookie, but it is created only for logged-in staff, never for visitors.
| Name | Type | Purpose | Data stored | Expiry | Provider |
|---|---|---|---|---|---|
ledfalszaki-suti-v1 | localStorage | remembering the decision made in the cookie banner | elfogad (accept) / elutasit (reject) | until you delete it | own (ledfalszaki.hu) |
ledfalszaki-termeknezet-v1 | localStorage | remembering the grid/list view of the product list | name of the view | until you delete it | own |
lf-ut | localStorage | "Would you like to continue where you left off?" — the path, title and time of the product pages or the configurator you last viewed (max. 5), so that after a 30-minute break we can offer to take you back | path, page title, timestamp | until you delete it, or switch it off with the "Do not ask again" button | own |
lf-ut-off | localStorage | switching off the above offer at your request | 1 | until you delete it | own |
lf-ut-latta | sessionStorage | so that the offer appears only once per session | 1 | until the browser tab is closed | own |
adam-chat-elozmeny | sessionStorage | the last 20 messages of the conversation with the "Ádám" AI assistant, so that they are not lost when you move to another page | the chat messages | until the browser tab is closed | own |
ledfalszaki-kerek-v1 | localStorage | the time the prize wheel was spun — it does not reappear for 30 days (only if the wheel is active) | timestamp | until you delete it (the feature takes it into account for 30 days) | own |
lf_sess | cookie | logging in to the admin/CRM interface (with a Google account); HttpOnly, SameSite=Lax, and on the live server Secure — it is not created for visitors, only for logged-in staff | session identifier | 30 days or log-out | own |
3.2 Statistical — only with consent (Section 13/A(4) Ektv.; Article 6(1)(a) GDPR)
| Name | Type | Purpose | Data stored | Expiry | Provider |
|---|---|---|---|---|---|
_ga | cookie | Google Analytics 4 — distinguishing visitors (pseudonymised, random identifier) | client identifier | 2 years (some browsers limit this to 400 days at most) | Google Ireland Ltd. |
_ga_K602W94NYX | cookie | Google Analytics 4 — preserving the state of the session for measurement property G-K602W94NYX | session counter, timestamp | 2 years (see above) | Google Ireland Ltd. |
Google Analytics anonymises the IP address, and advertising-related storage and personalisation are switched off (Consent Mode v2: ad_storage, ad_user_data, ad_personalization = denied). On Google's data processing: https://policies.google.com/privacy; the GA opt-out browser add-on: https://tools.google.com/dlpage/gaoptout.
3.3 Marketing / advertising cookies
We do not use advertising, remarketing or social media (Facebook/Meta, Google Ads, LinkedIn, etc.) cookies. Should this change in the future, we will first update this policy and the cookie banner, and we will ask for separate consent for such cookies.
4. Things that are NOT cookies but deserve a mention
- Server-side visit counter: the server counts visits without cookies or local storage, using a pseudonymised browser fingerprint. The fingerprint is a shortened digest derived from the calendar day, the IP address and the browser identifier; we do not store the IP address itself, and because the digest changes from day to day, visits cannot be linked across days. Retention: 400 days, after which the system deletes them automatically. For details see point 4.9/B of the Privacy Policy.
- Cookie-free event measurement: the server also records certain usage events on the site (clicks on the telephone number or the e-mail address, use of the calculator and the wall-size planner, reading depth). This uses neither cookies nor browser storage, and stores no IP address. For details see point 4.9/C of the Privacy Policy.
- Background video: the background video on the home page is our own file, not an embedded YouTube/Vimeo player — it does not place a cookie.
- Images, videos, scripts: these are loaded from our own server. We do not use a content delivery network (CDN).
- Fonts — the one exception: the site loads its fonts from the Google Fonts service (
fonts.googleapis.com,fonts.gstatic.com). This happens on every page, including before the cookie decision, because the font is needed in order to display the page. Google Fonts does not place a cookie, but when the font file is downloaded, your browser's IP address and browser identifier reach Google (Google Ireland Ltd., or the servers of Google LLC). Our legal basis for this is legitimate interest under Article 6(1)(f) GDPR (the consistent display of the site).
This is the only automatic external connection made by the website: according to a sweep of the built pages (2,193 HTML files, 24 August 2026), apart from this, requests go only to our own domain.
5. Managing cookies in the browser
In your browser settings you may delete cookies and local storage at any time, or block their placement — in which case some convenience functions (remembering the view, chat history) will not work, but the site remains usable.
- Chrome: Settings → Privacy and security → Third-party cookies / Site data
- Firefox: Settings → Privacy & Security → Cookies and Site Data
- Safari: Settings → Privacy → Manage Website Data
- Edge: Settings → Cookies and site permissions
6. Your rights, legal remedies
The rights described in Chapters X–XI of the Privacy Policy (access, erasure, objection, withdrawal of consent) and the remedies set out there also apply to data processing connected with cookies (NAIH — Nemzeti Adatvédelmi és Információszabadság Hatóság, the Hungarian data protection authority: 1055 Budapest, Falk Miksa u. 9–11., ugyfelszolgalat@naih.hu, +36 1 391 1400; court proceedings).
7. Amendments
| Version | Date | Change |
|---|---|---|
| 1.0 | 24 August 2026 | first release |
Effective from:
