Privacy Policy

Effective from: 17 January 2026

Version: 1.0

1. Data Controller (Service Provider) Details

  • Company Name: ZöldSport’27 Nonprofit Kft.

  • Registered Office: 8200 Veszprém, Wartha Vince utca 3., Hungary

  • Tax Number: 32531356-2-19

  • Phone: +36 70 320 1155

  • E-mail: zoldsport@zoldsport27.com

  • Websites: woc2027.hu, woc2027.com

  • (Data Protection Officer: None appointed.)

2. Purpose of this Policy

This policy describes how ZöldSport’27 Nonprofit Kft. processes personal data during the use of the woc2027.hu and woc2027.com websites, including the purposes, legal bases, duration of processing, and the rights of the data subjects.

3. Principles

The Data Controller processes personal data in accordance with current data protection laws (specifically the GDPR), following the principles of purpose limitation and data minimization, and protects them with appropriate technical and organizational measures.

4. Detailed Data Processing Activities

4.1. Contact (Form / E-mail)

  • Data processed: Name (if provided), e-mail address, phone number (if provided), message content, time of contact.

  • Purpose: Handling inquiries, providing responses, maintaining contact.

  • Legal basis: GDPR Article 6(1)(b) (performance of a request, steps prior to entering into a contract) and/or GDPR Article 6(1)(f) (legitimate interest: managing communication).

  • Retention: Maximum 12 months from the resolution of the inquiry, or until the conclusion of a legal dispute.

4.2. Newsletter Subscription (MailerLite)

  • Data processed: E-mail address, name (optional), time of subscription, fact of consent, and technical metadata.

  • Purpose: Sending informative newsletters about WOC 2027, related events (e.g., Hungária Cup), and important updates.

  • Legal basis: GDPR Article 6(1)(a) – Consent of the data subject.

  • Data Processor: MailerLite (newsletter system).

  • Retention: Until unsubscription or withdrawal of consent.

  • Unsubscription: Via the link at the bottom of every newsletter or by contacting zoldsport27@zoldsport27.com.

4.3. Web Analytics (Google Analytics – GA4)

  • Data processed: Online identifiers (cookie IDs), device and browser data, visit events, approximate location (city level).

  • Purpose: Statistical analysis, improvement of website performance and content.

  • Legal basis: GDPR Article 6(1)(a) – Consent (statistical cookies).

  • Retention: According to Google Analytics settings.

  • Consent management: Managed by CookieYes; statistical cookies are only activated upon consent.

4.4. Website Security and Technical Logging

  • Data processed: IP address, timestamp, technical log data.

  • Purpose: IT security, troubleshooting, prevention of misuse.

  • Legal basis: GDPR Article 6(1)(f) – Legitimate interest.

  • Retention: Generally up to 30 days, except in cases of incidents or legal disputes.

4.5. WhatsApp-based Information (Upcoming Service)

  • Data processed: Phone number.

  • Purpose: Fast, direct, and relevant information (e.g., program changes, practical info).

  • Legal basis: GDPR Article 6(1)(a) – Voluntary, explicit consent.

  • Retention: Until withdrawal of consent.

4.6. Webshop (WooCommerce) – For later implementation A WooCommerce-based webshop may be launched in the future. This policy will be updated with detailed processing information upon the launch of the shop.

5. Data Processors and Recipients

  • Hosting Provider: Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4., www.tarhely.eu)

  • Newsletter System: MailerLite

  • Web Analytics: Google (GA4)

  • Cookie Consent Management: CookieYes

6. Data Transfer to Third Countries

For certain providers (e.g., Google, MailerLite, WhatsApp), data may be transferred outside the European Economic Area (EEA). In such cases, the Data Controller ensures the legality of the transfer through appropriate legal guarantees.

7. Rights of Data Subjects

Data subjects have the right to request access, rectification, erasure, or restriction of processing of their personal data, to object to processing based on legitimate interest, and to withdraw consent at any time. Requests can be submitted to zoldsport27@zoldsport27.com.

8. Complaints and Remedies

Data subjects may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH) or seek a judicial remedy in court.

9. Amendments to this Policy

The Data Controller reserves the right to amend this policy. The current version is always available on the website.