Transparent data processing
Privacy Notice
We care about treating the information you provide with respect and using only what is necessary to handle your application. This notice applies to the membership application form on the Élhető Boglár Kör website.
1. Who is the controller?
Élhető Boglár Kör is a non-commercial community initiative without separate legal personality. The controller of the personal data submitted through the application form is one of its founders, acting in his personal capacity:
- Name: Hudák Tibor Ferenc
- Contact: hudaktiborferenc@gmail.com
2. What data do we process, why, and for how long?
| Personal data | Purpose | Retention period |
|---|---|---|
| Name, email address and phone number | To contact the applicant and prepare the membership application for consideration. | No longer than 90 days after a decision is made on the application. If the applicant becomes a member, the contact details needed for the membership relationship may be retained for the duration of that relationship; a separate notice will be provided. |
| Reason for applying and introductory message | To understand how the applicant would like to contribute to the work of the Circle. | No longer than 90 days after a decision is made on the application. |
| Record of consent and time of submission | To demonstrate that the applicant consented to the processing of their personal data. | No longer than 90 days after a decision is made on the application, or until consent is withdrawn. |
| IP address, browser and device characteristics, and the result of the security check | To detect and prevent automated spam submissions. | We do not store this data separately; Cloudflare processes it for the period specified in its own privacy terms. |
Providing your data is voluntary. However, we cannot handle an application without the information marked as required.
3. What is the legal basis for processing?
The legal basis for processing the information submitted with an application is the data subject’s freely given, specific, informed and unambiguous consent under Article 6(1)(a) of the GDPR. You may withdraw your consent at any time by writing to the email address above. Withdrawal does not affect the lawfulness of processing carried out before it. Technical data used for spam prevention is processed on the basis of the controller’s legitimate interest in keeping the website and form secure under Article 6(1)(f) of the GDPR.
4. Who may access your data?
The controller and authorised members of the Circle involved in considering applications may access the data, and only to the extent necessary. Tárhely.Eu Kft. may act as a processor for hosting and email services, and Cloudflare, Inc. for spam prevention. We do not send the name, contact details or message entered in the form to Cloudflare. We do not sell personal data or use it for advertising.
5. Spam protection with Cloudflare Turnstile
We use Cloudflare Turnstile to protect the form. It distinguishes genuine visitors from automated software using technical signals such as the IP address and browser and device characteristics, but it does not read the information entered in the form fields. Technical data may also be processed in the United States. Cloudflare relies on the EU–US Data Privacy Framework or, where necessary, the European Commission’s Standard Contractual Clauses. Further information is available in the Cloudflare Turnstile Privacy Addendum.
6. What are your rights?
You may ask the controller for access to your personal data and request its rectification, erasure or restriction of processing. You also have the right to data portability for the information you provided and the right to withdraw your consent at any time.
To exercise your rights, email hudaktiborferenc@gmail.com. If you believe that your data protection rights have been infringed, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) (1055 Budapest, Falk Miksa utca 9–11, Hungary), or seek a judicial remedy.
7. Security
The data is stored in access-protected email and hosting accounts. We take reasonable technical and organisational measures to prevent unauthorised access, loss or unlawful alteration.
8. Changes to this notice
We will update this notice if the purpose or method of processing, or the operation of the website, changes. The current version will always be available on this page.