The purpose of this privacy policy is to establish the privacy and data management principles applied by https://www.csomaajna.com.
This document does not apply to services and data processing which relate to promotions, prize games, services, or other campaigns by third parties advertising on the website mentioned below or appearing in other ways, or to content published by them. Similarly, unless otherwise stated, this document does not apply to the services and data processing of websites and service providers linked from https://www.csomaajna.com. For such services, the provisions of the privacy policy of the third parties operating the service shall apply, and https://www.csomaajna.com assumes no responsibility for such data processing or content.
The website follows these data protection principles:
— We process personal data lawfully, fairly, and transparently.
— We collect personal data only for specific, clear, and legitimate purposes, and do not process them in a way incompatible with these purposes.
— The personal data we collect and process are adequate and relevant to the purposes of data processing and limited to what is necessary.
— The website takes all reasonable measures to ensure that the data we process is accurate and up to date when necessary, and we immediately delete or correct inaccurate personal data.
— We store personal data in a form that allows identification of data subjects only for the time necessary to achieve the purposes of personal data processing.
— We ensure appropriate security of personal data through technical and organizational measures, protecting against unauthorized or unlawful processing, accidental loss, destruction, or damage. We protect the security of the website to a reasonable extent but do not accept liability for damage resulting from cyber-attacks.
Data Protection Definitions
Data Subject: any identified or identifiable natural person – directly or indirectly – based on personal data;
Personal Data: any data that can be associated with the data subject – in particular the data subject’s name, identification number, and one or more factors specific to their physical, physiological, mental, economic, cultural, or social identity – as well as conclusions drawn from the data relating to the data subject;
Special Data: a) personal data revealing racial or ethnic origin, political opinions or party affiliation, religious or philosophical beliefs, trade union membership, sexual life, b) personal data concerning health status, addictions, and criminal personal data;
Consent: voluntary and definite expression of the data subject’s will based on appropriate information, by which they give unambiguous consent to the processing of their personal data – either in full or for specific operations;
Objection: a statement by the data subject objecting to the processing of their personal data and requesting the termination of data processing and/or the deletion of the processed data;
Data Controller: a natural or legal person, or organization without legal personality, who or which alone or jointly with others determines the purposes of data processing, makes and executes decisions concerning data processing (including the means used), or has them executed by a data processor engaged by them;
Data Processing: any operation or set of operations performed on data, regardless of the procedure used, such as collection, recording, organization, storage, modification, use, retrieval, transmission, disclosure, coordination or combination, blocking, deletion and destruction, as well as preventing further use of the data, taking photographs, sound or video recordings, and recording physical characteristics suitable for identifying a person (e.g., fingerprint or palm print, DNA sample, iris image);
Data Transfer: making data accessible to a specific third party;
Disclosure: making data accessible to anyone;
Data Processing: performing technical tasks related to data processing operations, regardless of the method and means used and the location of the application, provided that the technical task is performed on the data.
Data Processing Principles
Personal data may only be processed for a specific purpose, to exercise rights and fulfil obligations. Data processing must comply with the purpose of data processing at all stages, and the collection and processing of data must be fair and lawful.
Personal data may be processed if:
1. a) the data subject consents to it, or
b) it is ordered by law or – based on legal authorization, within the scope specified therein – by local government decree for purposes of public interest (hereinafter: mandatory data processing).
Special data may be processed in cases specified in the Info Act Section 6 and if the data subject gives written consent to the processing, and in the case of health data, if ordered by law for purposes of public interest.
Only personal data essential for achieving the purpose of data processing and suitable for achieving the goal may be processed. Personal data may only be processed to the extent and for the duration necessary to achieve the purpose. The data subject must be informed before the start of data processing whether the data processing is based on consent or is mandatory. Before the start of data processing, the data subject must be clearly and in detail informed about all facts related to the processing of their data, in particular about the purpose and legal basis of data processing, the person authorized for data processing and data processing, the duration of data processing, and who can access the data. The information must also cover the data subject’s rights related to data processing and remedies. The data subject may give consent to the processing of data relating to them. Courts, prosecutors, investigating authorities, and other bodies authorized by law may contact the Data Controller for information or data disclosure. The request may only relate to personal data and to the extent that is essential for achieving the purpose of the request. Subscribers, buyers, and course participants acknowledge the above.

Purpose and Legal Basis of Personal Data Processing
You may visit the Website without providing any personal information and familiarize yourself with the services. Data processing related to the website’s services is based on voluntary consent, and personal data comes directly from the data subjects. The scope of data processing includes registered users of www.https://www.csomaajna.com, those requesting quotes, newsletter subscribers, those wishing to download e-books, those applying for online or personal services, as well as cookie users, purchasers of downloadable products, or course students. The user can give their data processing consent by deliberately checking the empty checkbox specifically designed for this purpose on the website. The purpose of data processing is to provide additional services, contact and send confirmation emails, billing, course registration, and service provision. Providing personal data is essential for identification in databases and contact purposes. Accurate company name, tax number or tax ID, and address are necessary for billing, which is a legal obligation. The purpose of data processing is the contractual performance of services specified in the contract, facilitation of performance, informing customers, and sending newsletters.
Newsletter
By choosing the “Subscribe” option on the Website, https://www.csomaajna.com is entitled to process and record the data subject’s name and email address for direct contact and business acquisition, market research, and business communication, as well as sending electronic advertisements and offers, subject to the data subject’s acceptance of this privacy policy. The data subject can unsubscribe from the newsletter using the “Unsubscribe” function at the bottom of the newsletter email, after which https://www.csomaajna.com will not send inquiries under this section.
Sending Messages, Sending Emails
If you contact https://www.csomaajna.com using the mailing address, email address, phone number displayed on the Website, or using the information box (newsletter subscription, development idea), you consent to the data controller of https://www.csomaajna.com processing any personal data provided in the message for the purpose specified in the message content (complaint handling, observation, suggestion, inquiry, etc.).
If you contact https://www.csomaajna.com by choosing the information box option on the Website, you consent to https://www.csomaajna.com as data controller processing any personal data provided in the message, as well as your name, email address, and phone number for the purpose specified in the message content and contacting you with a response (by email or phone). Providing data is voluntary, and https://www.csomaajna.com considers consent for data processing for the above purposes to be given by sending messages, complaints, observations, etc.
https://www.csomaajna.com treats Customer data received for service provision confidentially. Personal data is not transferred to third parties outside https://www.csomaajna.com. This does not apply to statutory, official data transfers, however, https://www.csomaajna.com examines the legal basis for data transfer for each data request. The User, Customer undertakes to provide only their own, true data.
The legal basis for data processing is the Users’ voluntary consent.
In general, the legal basis for data processing is the data subject’s consent, with particular regard to the provisions of the Info Act and Act CVIII of 2001 on certain issues of electronic commerce services and information society services.
Scope of Processed Data
Name, email address provided during registration, and other data voluntarily provided by customers. In the case of legal entities, the contact person’s name, legal entity’s name, tax number, and other data voluntarily provided during registration.
Rights of Data Subjects, Rights Related to Data Processing
Right to Rectification
You may request in writing through the provided contact details that we modify any of your data. We will act on your request immediately, but no later than within 30 days, and send notification to your provided email address.
Right to Request Information
You may request information in writing through the provided contact details about what data of yours our company processes, on what legal basis, for what data processing purpose, from what source, and for how long. We will send information to your provided email address immediately, but no later than within 30 days of your request.
Right to Erasure
You may request in writing through the provided contact details that your data be deleted. We will do this immediately, but no later than within 30 days of your request, and send notification to your provided email address. The data subject may object to unlawful data processing at the Data Controller of https://www.csomaajna.com at csomaajna@gmail.com, and is entitled to go to court or the National Authority for Data Protection and Freedom of Information to enforce their rights.
Duration of Data Processing
Data processing continues until consent is withdrawn. You may withdraw your consent to data processing at any time by sending a letter to the contact email address.
Data Transfer: The data controller does not perform data transfer.
Deletion of Data
This occurs when consent to data processing is withdrawn. You may withdraw your consent to data processing at any time by sending a letter to the contact email address. Modification or deletion of personal data can be initiated by email, phone, or letter using the contact options provided above.
Right to Restriction
You may request in writing through the provided contact details that we restrict your data. The restriction lasts as long as the reason you specify makes it necessary to store the data. We will do this immediately, but no later than within 30 days of your request, and send notification to your provided email address.
Right to Object
You may object in writing to data processing through the provided contact details. We will examine the objection within the shortest possible time from submission of the request, but no later than within 30 days, make a decision regarding its validity, and inform you of our decision by email.
Legal Remedy Options Related to Data Processing
In case of unlawful data processing you experience, please notify the Data Controller of https://www.csomaajna.com: Csoma Ajna Margaréta sole proprietor Registration number: 55202680 Tax number: 56545827-143 at csomaajna@gmail.com and/or hello@csomaajna.com, secondarily by phone at +3630 4782606, thus providing an opportunity to peacefully restore lawful status within a short time. We will do everything in your interest to resolve the outlined obstacle. If in your judgment the lawful status cannot be restored, the next legal remedy option is to notify the National Authority for Data Protection and Freedom of Information. Authority contact: 1530 Budapest, Pf.: 5; 1125 Budapest, Szilágyi Erzsébet fasor 22/c; Phone: +36 (1) 391-400. Service provider, data controller name and contact: https://www.csomaajna.com — Csoma Ajna Margaréta tax number 56545827-1-43 csomaajna@gmail.com +3630 4782606. The data controller, who is the site administrator, is authorized to access the data.
Data Security, Data Processing
Method of data storage: Electronic. Data storage and processing take place securely at the Data Controller’s headquarters. The Data Controller takes all administrative, computational, and physical security measures to protect personal data from unauthorized access, loss, and all possible threats. If you have any concerns regarding the Data Controller’s data processing, please indicate it to the Data Controller of https://www.csomaajna.com at csomaajna@gmail.com.
Website Information
By registering on the website and submitting their data, the data subject consents to the data controller processing and handling their submitted data according to laws and this notice, and also consents to automated individual decision-making data processing as described below.
Personal data that comes to the data controller’s knowledge during registration will not be made accessible to others under any circumstances – without the data subject’s explicit consent – except in cases of legal obligation or official proceedings.
The privacy policy may be modified at any time. The revised version will be uploaded to the website. The User is obliged to check the website from time to time to be aware of any changes. If you do not agree with the changes, please indicate your intention to delete your personal data.
By clicking the “Accept” button, you declare that you have read, understood, acknowledged, and accepted the contents of the Privacy Policy and consent to its contents. The fact of acknowledgment is stored.
Comments
When submitting a comment, in addition to the information provided in the comment form, the commenter’s IP address and browser identifier string are collected to filter out unwanted content.
A personalized character string (usually called a hash) generated from the email address is transmitted to the Gravatar service if it is used on the site. The Gravatar service terms can be viewed at: https://automattic.com/privacy/. After accepting the comment, your comment content and profile picture will appear publicly. Comments submitted by visitors may be checked by an automatic spam filter service.
Media
If images are uploaded to the website by registered users, one should avoid EXIF data that contains GPS position data. Website visitors can download and extract location data from images on the website.
Cookies
If we write a comment on the website, we store the provided name, email, and website address in cookies. Storage serves convenience purposes so that these field data do not need to be filled in for the next comment. Cookie expiration time is one year.
When visiting the login page, we set temporary cookies to determine if the browser accepts cookies. These cookies contain no personal information and are deleted when closing the browser.
When logging into the website, we create several cookies that save login information and editor interface display options. Login cookies are valid for two days, and editor interface screen option cookies for one year. If we check the “Remember me” option, the login continues for two weeks. When logging out, login cookies are removed.
When editing a post or page, our browser stores another cookie. This cookie contains no personal data, it simply stores the ID number of the post we edited. It expires after one day.
Embedded Content from Other Websites
Posts available on the website may use embedded content from external sources (e.g., videos, images, articles, etc.). Embedded content from external sources behaves exactly as if we had visited another website. The owner of https://www.csomaajna.com disclaims all responsibility in this regard but provides all reasonable assistance in case of complaint.
These websites may collect data about visitors, use cookies or third-party tracking codes, monitor user behaviour related to embedded content if we have a user account and are logged into the site.
With Whom We Share User Data
If you request a password reset, the IP address will be included in the reset email.
How Long We Keep Personal Data
If we comment, the comment and its metadata remain in the system indefinitely. This is so that any subsequent comments become known and approved by us, i.e., do not appear on the moderation list.
Personal data of registered users on the website (if any) is also stored in their user profile. All users can view, edit, or delete their personal data at any time (except they cannot change their username). Website administrators can also view and edit this information.
What Rights Users Have Regarding Their Data
In case of a registered account or comment writing on the website, you can request the export of personal data in a file that contains any data previously provided to us. You can also request that we delete any personal data previously provided. This does not apply to data that we are required to keep for administrative, legal, or security reasons.