Privacy Policy

Table of Contents

1. Purpose of the Privacy Policy

2. Data Controller’s Details

   2.1 Data Protection Officer

3. Scope of Processed Personal Data

   3.1 Technical Data

   3.2 Cookies

   3.2.1 Purpose of Cookies

   3.2.2 Strictly Necessary, Session Cookies

   3.2.3 Third-Party Cookies (Analytics)

   3.2.4 List of Cookies on the Data Controller’s Websites

4. General Data Processing Guidelines, Name of Processing, Usage, Legal Basis, and Retention Period

   4.1 Data Related to Online Orders

   4.2 Data Related to Online Administration

   4.3 Data Related to Telephone Administration

   4.4 Data Related to Newsletters / eDM

   4.5 Customer Contact Data

   4.6 Data Related to Billing

   4.7 Personal Data Provided During Registration

5. Physical Storage Locations of Data

6. Data Transfer, Data Processing, Scope of Persons Accessing the Data

   6.1 Data Transfer to a Third Country

7. Rights of the Data Subject and Enforcement Options

   7.1 Right to Information

   7.2 Right of Access by the Data Subject

   7.3 Right to Rectification

   7.4 Right to Erasure

   7.5 Right to Restriction of Processing

   7.6 Right to Data Portability

   7.7 Right to Object

   7.8 Automated Individual Decision-Making, Including Profiling

   7.9 Right to Withdrawal

   7.10 Right to an Effective Judicial Remedy

8. Other Provisions

1. PURPOSE OF THE PRIVACY POLICY

Kasza Norbert, sole proprietor (address: 8053 Bodajk, Petőfi Sándor utca 81., hereinafter referred to as service provider, data controller) as data controller, acknowledges the contents of this legal notice as binding upon itself.

It commits to ensuring that all data processing related to its activities complies with the requirements set out in these regulations, the applicable national laws, and the legal acts of the European Union.

Privacy policies related to the data controller’s data processing are continuously available at the wpmaster.hu website.

The data controller reserves the right to change this policy at any time. Naturally, it will notify its audience of any changes in due time.

If you have any questions related to this communication, please write to us, and we will answer your inquiry.

The data controller is committed to protecting the personal data of its clients and partners, and considers it extremely important to respect its clients’ right to informational self-determination. The data controller treats personal data confidentially and takes all security, technical, and organizational measures that guarantee data security.

The data controller describes its data processing practices below.

2. DATA CONTROLLER’S DETAILS

If you would like to contact the business, you can reach the data controller via the email address info@wpmaster.hu and the phone number +36307337871.

Kasza Norbert EV. (Sole Proprietorship)

• Registered office: 8053 Bodajk, Petőfi Sándor utca 81.

• Tax number: 56220335-1-27

• Mobile: +36307337871

• E-mail: info@wpmaster.hu

2.1 DATA PROTECTION OFFICER

The data controller does not carry out any activity that would justify the appointment of a Data Protection Officer.

3. SCOPE OF PROCESSED PERSONAL DATA

3.1 TECHNICAL DATA

The data controller chooses and operates the IT tools used for processing personal data during the provision of the service in such a way that the processed data is:

• accessible to authorized persons (availability);

• its authenticity and authentication are ensured (authenticity of data processing);

• its invariability can be verified (data integrity);

• protected against unauthorized access (data confidentiality).

The data controller protects the data with appropriate measures against unauthorized access, alteration, transmission, disclosure, deletion, or destruction, as well as against accidental destruction.

The data controller ensures the security of data processing with technical, administrative, and organizational measures that provide a level of protection appropriate to the risks associated with data processing.

During data processing, the data controller preserves confidentiality: it protects the information so that only authorized personnel can access it; integrity: it protects the accuracy and completeness of the information and the processing method; availability: it ensures that when the authorized user needs it, they can actually access the desired information, and the related tools are available.

3.2 COOKIES

3.2.1 PURPOSE OF COOKIES

Cookies collect information about visitors and their devices; remember visitors’ individual settings, which may be used, for example, when executing online transactions, so they do not need to be retyped; facilitate the use of the website; and provide a quality user experience.

In order to provide customized service, a small data package, called a cookie, is placed on the user’s computer and read back during a subsequent visit. If the browser returns a previously saved cookie, the service provider handling the cookie has the opportunity to connect the user’s current visit with previous ones, but only regarding its own content.

3.2.2 STRICTLY NECESSARY, SESSION COOKIES

The purpose of these cookies is to allow visitors to fully and smoothly browse the wpmaster.hu website, use its features, and access the services available there. The validity period of this type of cookie lasts until the end of the session (browsing); by closing the browser, this type of cookie is automatically deleted from the computer or other device used for browsing.

3.2.3 THIRD-PARTY COOKIES (ANALYTICS)

The wpmaster.hu website also uses Google Analytics as third-party cookies. By using the Google Analytics service for statistical purposes, wpmaster.hu collects information about how visitors use the websites. The data is used to develop the website and improve the user experience. These cookies also remain on the visitor’s computer or other browsing device, in their browser, until they expire or until the visitor deletes them.

3.2.4 LIST OF COOKIES ON THE DATA CONTROLLER’S WEBSITES

4. GENERAL DATA PROCESSING GUIDELINES, NAME OF PROCESSING, USAGE, LEGAL BASIS, AND RETENTION PERIOD

The data processing of the data controller’s activities is based on voluntary consent or statutory authorization. In the case of data processing based on voluntary consent, the data subjects may withdraw this consent at any stage of data processing.

In certain cases, the processing, storage, and transmission of a specific set of the provided data are made mandatory by law, of which we specifically notify our clients. We draw the attention of data providers communicating with the data controller that if they do not provide their own personal data, it is the data provider’s obligation to obtain the consent of the data subject. Its data processing principles are in accordance with the applicable laws regarding data protection, in particular with the following:

• Act CXII of 2011 – on the Right of Informational Self-Determination and on Freedom of Information (Infotv.);

• Regulation (EU) 2016/679 of the European Parliament and of the Council (April 27, 2016) – on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, GDPR);

• Act V of 2013 – on the Civil Code (Ptk.);

• Act C of 2000 – on Accounting (Számv. tv.);

• Act LIII of 2017 – on the Prevention and Combating of Money Laundering and Terrorist Financing (Pmt.);

• Act CCXXXVII of 2013 – on Credit Institutions and Financial Enterprises (Hpt.).

The data controller has prepared data maps, based on which the scope of the processed data, their usage, legal basis, and retention time have been determined.

4.1 DATA RELATED TO ONLINE ORDERS

It is possible to order services through the website. The personal data requested during the order process:

• Name (mandatory field)

• Email address (mandatory field)

• Phone number (optional field, can be filled in to request a callback)

In the case of certain services, such as website maintenance, additional personal data may also be transferred.

• Purpose of data processing, planned use of processed data: The data is used to fulfill the order.

• Legal basis for data processing: Contractual mandate.

• Retention period: Duration of the business relationship, or request for deletion.

4.2 DATA RELATED TO ONLINE ADMINISTRATION

The personal data requested during contact:

• Name (mandatory field)

• Email address (mandatory field)

• Phone number (optional field, can be filled in to request a callback)

• Purpose of data processing, planned use of processed data: The data is used for establishing contact and fulfilling the order.

• Legal basis for data processing: Voluntary consent.

• Retention period: Duration of the business relationship, or request for deletion.

4.3 DATA RELATED TO TELEPHONE ADMINISTRATION

The personal data requested during contact:

• Name (mandatory field)

• Phone number (optional field, can be filled in to request a callback)

• Planned use of processed data: The data is used for establishing contact and fulfilling the order.

• Purpose of data processing, planned use of processed data: The data is used for establishing contact and fulfilling the order.

   

• Legal basis for data processing: Voluntary consent.

   

• Retention period: Duration of the business relationship, or request for deletion.

   

4.4 DATA RELATED TO NEWSLETTERS / eDM

The personal data requested during newsletter subscription:

• Name (mandatory field)

   

• Email address (mandatory field)

   

Subscribing to the newsletter is possible after reading and accepting the privacy policy. The acceptance of the privacy policy is done by ticking a mandatory, non-pre-filled checkbox.

After subscribing, the subscriber receives an email notification about the subscription, which they must confirm; their subscription becomes effective after this.

Throughout any related process, the client always has the option to unsubscribe; the unsubscribe option is included in every email in the form of a link and is easily accessible with one click.

Since the newsletter contains the name and website address of the business, it qualifies as an advertisement/eDM.

• Purpose of data processing, planned use of processed data: The data is used for sending out newsletters that also contain advertising. The newsletter contains the website address, making it qualify as an advertisement.

• Legal basis for data processing: Voluntary consent.

• Retention period: Until unsubscription.

4.5 CUSTOMER CONTACT DATA

I store the following personal data and contact details of the company executives and contact persons of the clients:

• Name

• Email address

• Phone number

• Purpose of data processing, planned use of processed data: The data is used for establishing and maintaining contact.

• Legal basis for data processing: Legitimate interest.

• Retention period: Duration of the business relationship, or request for deletion.

4.6 DATA RELATED TO BILLING

The data controller concludes a contract with its clients regarding the ordered services, during which it stores the following data:

• Name

• Email address

• Address

• Purpose of data processing, planned use of processed data: Billing.

• Legal basis for data processing: Legal obligation.

• Retention period: Current year + 5 years based on legal obligations.

4.7 PERSONAL DATA PROVIDED DURING REGISTRATION

There is no registration option on the wpmaster.hu pages.

5. PHYSICAL STORAGE LOCATIONS OF DATA

Your personal data (i.e., data that can be associated with your person) may come into our processing in the following ways:

• On the one hand, in connection with maintaining the internet connection, technical data related to the computer, browser program, internet address, and visited pages used by you are automatically generated in our computer system.

• On the other hand, you can also provide your name, contact details, or other data if you wish to contact us personally while using the website. Data technically recorded during the operation of the system: the data of the data subject’s logging-in computer, which the wpmaster.hu systems record as an automatic result of technical processes.

The automatically recorded data is automatically logged by the system upon entry and exit without any separate declaration or action by the data subject.

This data cannot be linked with other personal user data – except in cases made mandatory by law. Only wpmaster.hu has access to the data.

6. DATA TRANSFER, DATA PROCESSING, SCOPE OF PERSONS ACCESSING THE DATA

Within the framework of its business activities, the data controller uses the following data processors:

Hosting service:

• Kasza Norbert sole proprietor

• Registered office: 8053 Bodajk, Petőfi Sándor utca 81.

• Registration number: 54852134

• Tax number: 56220335-1-27

• Scope of accessed data: Content of the wpmaster.hu websites, emails arriving at email addresses based on these domains.

Google Analytics:

• Google Inc., Mountain View, California, USA

• Scope of accessed data: The anonymized, non-personally identifiable IP addresses of the visitors to the wpmaster.hu website.

Facebook page:

• Facebook Inc.

• Menlo Park, California, USA

• Privacy policy: https://www.facebook.com/about/privacy/update

• Scope of accessed data: Username, comments.

6.1 DATA TRANSFER TO A THIRD COUNTRY

Data transfer takes place to the United States of America, for which an adequacy decision was adopted on July 12, 2016 (https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield_en).

The adequacy decision is also valid for the data processors Mailchimp (https://mailchimp.com/legal/privacy/), Google (https://policies.google.com/privacy/frameworks), and Facebook (https://www.facebook.com/about/privacyshield).

7. RIGHTS OF THE DATA SUBJECT AND ENFORCEMENT OPTIONS

The data subject may request information about the processing of their personal data, as well as request the rectification, or – except for mandatory data processing – the erasure or withdrawal of their personal data, and may exercise their right to data portability and their right to object in the manner indicated at the collection of the data, or through the data controller’s contact details above.

7.1 RIGHT TO INFORMATION

The data controller takes appropriate measures to provide any information referred to in Articles 13 and 14 and any communication under Articles 15 to 22 and 34 relating to processing to the data subject in a concise, transparent, intelligible, and easily accessible form, using clear and plain language.

7.2 RIGHT OF ACCESS BY THE DATA SUBJECT

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

• the purposes of the processing;

• the categories of personal data concerned;

• the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations;

• the envisaged period for which the personal data will be stored;

• the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

• the right to lodge a complaint with a supervisory authority;

• where the personal data are not collected from the data subject, any available information as to their source;

• the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

The controller shall provide the information within a maximum of one month from the submission of the request.

7.3 RIGHT TO RECTIFICATION

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed.

7.4 RIGHT TO ERASURE

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay where one of the following grounds applies:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

• the data subject withdraws consent on which the processing is based, and there is no other legal ground for the processing;

• the data subject objects to the processing, and there are no overriding legitimate grounds for the processing;

• the personal data have been unlawfully processed;

• the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;

• the personal data have been collected in relation to the offer of information society services.

   

The erasure of data cannot be initiated if data processing is necessary:

• for exercising the right of freedom of expression and information;

   

• for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

   

• for reasons of public interest in the area of public health;

• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes; or

• for the establishment, exercise, or defense of legal claims.

7.5 RIGHT TO RESTRICTION OF PROCESSING

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

• the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;

   

• the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

   

• the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defense of legal claims; or

• the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject.

Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject’s consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

7.6 RIGHT TO DATA PORTABILITY

The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller.

7.7 RIGHT TO OBJECT

The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of an objection, the controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

7.8 AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING

The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

7.9 RIGHT TO WITHDRAWAL

The data subject shall have the right to withdraw his or her consent at any time.

7.10 RIGHT TO AN EFFECTIVE JUDICIAL REMEDY

In case of infringement of their rights, the data subject may turn to court against the data controller. The court shall proceed out of turn.

8.11 Data protection authority procedure A complaint can be lodged with the National Authority for Data Protection and Freedom of Information:

• Name: National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)

   

• Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

   

• Mailing address: 1530 Budapest, Pf.: 5.

   

• Phone: +36 (1) 391-1400

   

• Fax: +36 (1) 391-1410

   

• E-mail: ugyfelszolgalat@naih.hu

   

• Website: https://www.naih.hu

   

8. OTHER PROVISIONS

We provide information on data processing not listed in this notice when the data is recorded. We inform our clients that the court, the prosecutor, the investigating authority, the contravention authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, or other bodies authorized by law may contact the data controller to request information, to disclose or transfer data, or to make documents available. The data controller shall only disclose personal data to the authorities – provided that the authority has indicated the exact purpose and scope of the data – to the extent and in a measure that is strictly necessary to achieve the purpose of the request.

(This privacy policy was prepared based on the recommendation of the Budapest Chamber of Commerce and Industry.)

Bodajk, June 1, 2025.