Privacy Policy

A contact request stores your name, email address, subject, message, and language. A membership request may additionally include a phone number and profession.

The request is stored in the club database and delivered to the responsible club address through the configured email service. Delivery failures are recorded on the request. Processing is based on steps taken at your request and the club's legitimate interest in communication and secure operation (GDPR Article 6(1)(b) and (f)).

For approved members, the application processes account, role, membership, and MFA status data. Depending on the feature, it also processes meetings, RSVPs, attendance, minutes, votes, and personal financial records.

Access is role-based. Sensitive administrative data is visible only to authorized administrators. Temporary mailbox credentials are encrypted and bound to the account's current authorization generation.

The protected area uses technically necessary session and security cookies. Sign-in and member features cannot operate without them.

The selected language may be stored locally in your browser. This value contains no contact or membership data.

No web analytics or marketing tracking is enabled in the current application. Security rate limits use short-lived hashed network identifiers; form content is not included in those identifiers.

Facebook and Google Maps content is not loaded automatically. Only after you select the relevant button does your browser connect to the external provider; Meta or Google may then receive data such as your IP address, browser data, and access time.

Recipients of personal data are limited to authorized club officers and service providers used for hosting, database, and email operation where required. Personal data is not sold.

Requests are deleted after processing is complete and no legal or organizational retention need remains. Member data is processed for the duration of membership and applicable record-keeping periods. Backups may retain data until their scheduled rotation.

The application uses encrypted connections, role-based access, multi-factor authentication, restricted logging, and technical rate limits. No technical process can guarantee absolute security.

Where the legal requirements are met, you have rights of access, rectification, erasure, restriction, portability, and objection. Use the contact form to make a request. You may also lodge a complaint with the Hungarian data protection authority NAIH or another competent supervisory authority.