Privacy Policy

Information on data protection

1. Paragraph

Györök András EV (hereinafter: Data Controller), the operator of the website onlysex.hu, processes the personal data of registered users (hereinafter: User) in connection with its online sales activities, solely for the purpose of providing the service www.onlysex.hu (hereinafter: Service) and fulfilling its obligation (billing) related to the provision of the service. It will only process personal data that is necessary for the purpose of the processing and is suitable for the achievement of that purpose. Process personal data only to the extent necessary to achieve the purpose. The Data Controller will take all reasonable steps to protect the personal data of registered users processed on the website (www.onlysex.hu). The site does not provide services to persons under the age of 18 and does not collect or process personal data of persons under the age of 18.

2. Contact details of the data controller

Name: Györök András E.V.    
Address: Pilinszky tér 8,8000 Székesfehérvár
Registration number: 58540615
Tax number: 48249784227
KSH number: 48249784821123107
Email: info@onlysex.hu
Phone number: +36-20/418-0424

3. Legal basis for data processing

The User's consent, in accordance with the Infotv. Article 5 (1) (b), Article 6 (1) (a), and Article 13/A (3) of Act CVIII of 2001 on certain aspects of electronic commerce services and information society services.

4. Consent to data processing

By registering, the user expressly consents to the processing of personal data that he/she has voluntarily provided. If the user voluntarily discloses some or all of his/her personal data, such information is not covered by this privacy statement.

5. Scope of data subjects                             

Registered users and persons using the website.

6. Scope of the data processed                                

The data provided by registered users during the registration process necessary for the performance of the Service: 
User name (fictitious name), gender, date of birth, place of residence, email address

7. Purpose of data collection

Name, surname, birth date, birth address, birth date, name of the registered user

8. Publication of information on the website

8.1 Reviews, ratings 
With this Privacy Policy, the User agrees to the publication by the Data Controller of his/her opinion for the purpose of reference on the website, which can be viewed by all visitors.
8.2. External links, references 
The Data Controller may publish information, news, nodes (links, references) from external sources (other websites) on the website. The Data Controller is not responsible for the data and information protection practices and other activities of these providers.

9. Duration of data processing

The electronic invoices and the data contained therein will be kept for 5 years after the provision of the Service, i.e. the general limitation period, in accordance with the applicable legislation.

10. Registration on the website

10.1. Personal data processed: email address, gender, date of birth, place of residence, username (fictitious name)
10.2 Purpose of processing: creation of a profile, use of the service
10.3 Legal basis for processing: voluntary consent of the Data Subject
Withdrawal of the Data Subject's consent does not affect the existence of lawful processing prior to the withdrawal.

b.) Article 6(1)(a) of Regulation 2016/679 of the European Parliament and of the Council "the data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes"
10.4 Duration of processing: 6 months after the termination of registration.
10.5. Method of processing: electronically

11. Use of the service

11.1. Scope of personal data processed: email address 
11.2. Purpose of processing: to provide the service, to process payment
11.3. Legal basis for processing:
(a) Article 6(1)(b) of Regulation 2016/679 of the European Parliament and of the Council, which states that "processing is necessary for the performance of a contract to which the data subject is a party or for the purposes of taking steps at the request of the data subject prior to entering into that contract;".
b) The legal basis for processing after the performance of the contract is Article 6(f) of Regulation 2016/679 of the European Parliament and of the Council, which provides that "processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party."
c) Article 5 (1) a) of Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information, which states that "it shall be ordered by law or, on the basis of a decree of a local government, on the basis of a law, within the scope specified therein, in the case of data that are not considered special data or personal data in the criminal field, for a purpose in the public interest"
11.4 Duration of processing: 5 years from the date of provision of the service + 1 year

12. Processing of credit card payments

12.1. Scope of personal data processed: email address
12.2 Purpose of processing: payment processing
12.3 Legal basis for processing:
a) Article 6(1)(b) of Regulation 2016/679 of the European Parliament and of the Council, which states that "processing is necessary for the performance of a contract to which the data subject is a party or for the purposes of taking steps at the request of the data subject prior to entering into that contract;".
b) The legal basis for processing after the performance of the contract is Article 6(f) of Regulation 2016/679 of the European Parliament and of the Council, which provides that "processing is necessary for the purposes of the legitimate interests pursued by the controller or a third party."
12.4. Duration of data processing: 5 years + 1 year from the date of provision of the service 
OTP Bank Ltd. provides the website with the possibility of card acceptance/bank transfer through its secure payment system using SSL protocol.
The terms and conditions for online card acceptance/transfer can be found here: http://simplepay.hu/vasarlo-aff/
By using the card, the Data Subject acknowledges that his/her personal data stored in the user database of the Data Controller operating the onlysex.hu website will be transferred to OTP Mobil Kft (1093 Budapest, Közraktár u. 30-32.) for the purpose of crediting the membership.
The scope of the data transmitted: email address.
In case of payment/transfer by bank card, the payment is made directly on the site operated by the Bank, which operates according to the rules and security standards of international card companies, and not on the site of onlysex.hu.
The website does not have any form of access to the details, number or expiry date of the credit card concerned or the account behind it.
The nature and purpose of the data processing activities carried out by OTP Mobil Kft. as data processor can be found in the SimplePay Privacy Policy, at the link below: simplepartner.hu/PaymentService/Fizetesi_tajekoztato.pdf

13. Invoicing

13.1: The scope of personal data processed:
In order to fulfil the obligations under Act CXXVII of 2007 and Act C of 2000 on Accounting, the payment service provider issues a receipt - without indicating personal data . In the case of payment by bank card/bank transfer, the receipt is sent by Simplepay by email.
13.2 Purpose of data processing: to fulfil the obligations under Act CXXVII of 2007 and Act C of 2000 on Accounting.
13.3 Legal basis for processing:
a.) Article 6 (1) c) of Regulation 2016/679 of the European Parliament and of the Council, which states that "processing is necessary for compliance with a legal obligation"
b.) Act CXII of 2011, Article 5(1)(a) of the Act on Informational Self-Determination and Freedom of Information.)
13.4 Duration of processing:
In order to fulfil accounting obligations pursuant to Article 169 of Act C of 2000
13.5. Method of processing: in electronic form
13.6 The Data Controller does not transfer the Data Subject's data to third parties

14. Contact

14.1. Data processed: email address
14.2. Purpose of data management: reporting problems, information, evaluation
14.3 Legal basis for processing:
Voluntary consent of the interested Data Subject.
a.) Act CXII of 2011, Article 5(1) of the Act on Informational Self-Determination and Freedom of Information b.) "absolutely necessary for the performance of the tasks of the controller as defined by law and the data subject has given his or her explicit consent to the processing of personal data"
b.) Article 6(1)(a) of Regulation 2016/679 of the European Parliament and of the Council "the data subject has given his or her consent to the processing of his or her personal data for one or more specific purposes"
14.4 Duration of processing: until the date of termination of registration.

15. Deletion, modification or blocking of data

Can be requested by the User to the Data Controller:
- to be informed of the processing of his/her personal data, 
- The Controller may inform the Data Controller of the right to be informed about the processing of his/her personal data, 
- erasure or blocking of his/her personal data. 
If the User has sent his/her application for registration, the registration will be accompanied by the data valid at the time of sending. You can request information about your personal data attached to the registration, their modification or deletion at any time by contacting the Data Controller in person, by telephone or by e-mail. 

The Data Controller shall provide the information in writing, in an intelligible form, within the shortest possible time from the date of the request, but not later than 30 days, upon the registered User's request. If the registered User's request is found to be justified, the Data Controller shall promptly take measures to correct or delete his/her personal data.

16. Information about the processing of your personal data

Upon the User's request, the Data Controller shall provide information about the data processed by the Data Controller, the purpose, legal basis and duration of the processing, the name, address (registered office) and activity of the data processor in relation to the processing, as well as the purpose and recipient of the data transfer. The Data Controller shall provide the information free of charge in writing and in an intelligible form within 30 days of the User's request. In the event of refusal to provide the information, the data subject may apply to the court or the National Authority for Data Protection and Freedom of Information. 

17. Objection to the processing of personal data

The User may object to the processing of his/her personal data in accordance with the provisions of the Info.tv. if
1. the processing or transfer of the personal data is solely a legal obligation of the controller 
fulfil a legal obligation of the controller or the data subject or the data subject or a third party, or for the purposes of the exercise of a right or legitimate interest of the controller or of the recipient or of a third party 
legitimate interest of the data subject or of a data subject, 
2. the use or disclosure of the personal data is for direct marketing, public interest or commercial purposes 
scientific research, 
The exercise of the right to object is permitted by law. The Data Controller must object within a maximum of 30 days
and to inform the data subject in writing of the outcome. 

18. About the use of cookies 

Some of our services place a unique identifier, called a cookie, on our users' computers. A cookie is a packet of variable information sent by a web server, which is stored on the user's computer and allows the user to retrieve certain data. Cookies are used solely to facilitate the authentication of users (e.g. login, pages viewed). For technological reasons, it is only possible to view content that is subject to registration from a computer that receives a cookie. The maximum validity of the cookie is the closing of the browser program. The user can delete his own cookie at any time using his browser program.

19. Data security

In the course of providing the Service, the Data Controller shall ensure the security of the data, the protection of the data collected, stored and processed, and shall take all necessary measures to prevent their destruction, unauthorized use and unauthorized alteration.

20. Remedies available

If the User submits a request but is not satisfied with the response of the data controller or considers that he/she has suffered a breach of rights in relation to the processing of his/her personal data, he/she may assert his/her right to the protection of his/her personal data before a civil court on the basis of the Info.tv. and the Civil Code (Act V of 2013), and may also turn to the National Authority for Data Protection and Freedom of Information ( www.naih.hu/kapcsolat.html ).

The Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information can be found at the National Legislation Repository (www.njt.hu)
The Data Controller reserves the right to change its privacy notice if required by law. The processing of personal data remains unchanged by the change of processing. 

This Privacy Notice is valid from 20.04.20.2022.

Cookies

To make this site work properly, we sometimes place small data files called cookies on your device. Most big websites do this too.

A cookie is a small text file that a website saves on your computer or mobile device when you visit the site. It enables the website to remember your actions and preferences (such as login, language, font size and other display preferences) over a period of time, so you don’t have to keep re-entering them whenever you come back to the site or browse from one page to another.

You can control and/or delete cookies as you wish – for details, see ec.europa.eu/info/cookies. You can delete all cookies that are already on your computer and you can set most browsers to prevent them from being placed. If you do this, however, you may have to manually adjust some preferences every time you visit a site and some services and functionalities may not work.