Privacy Policy

I. Introduction

This information document is intended to present the data processing practices of "GS Fanatic" and to inform visitors of our site about their rights regarding personal data.
Details of the service provider operating the "GS Fanatic" website 2.1. Company name: StartAdmin Kft. 2.2. Registered office: H-1038 Budapest, Határ út 20. 2.3. Mailing address: H-1031 Budapest Vitorla utca 9. 2.4. Tax number: 12584778-2-41 2.5. Data protection registration number: NAIH-59697/2012 2.6. E-mail: Please use our contact form

II. Definitions

Concepts

"GS Fanatic" website: the website available on the gsfanatic.com main domain
Service Provider: the legal entity owning the site, which provides the technical operation
Visitor: a user without registration who accesses the public parts of the site
Members: Visitors with registration
Clients: those Members who use paid services
Personal data: any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Data processing: the totality of operations performed on any personal data.
Scope of data controllers: 8.1. the Service Provider of "GS Fanatic" 8.2. the operator of the "GS Fanatic" IT system
Data processor: a natural or legal person who performs data processing for the Service Provider at the express request and with the permission of the Service Provider. Examples include external service providers who process the site's statistical data.
Depersonalization: a technological procedure resulting in the personal data involved in the process becoming unidentifiable using a one-way cryptographic algorithm. The essence of such a procedure is unidirectionality, meaning the coded data becomes irreversible and unreadable.
This information document aims to present the Data Processing practice of the "GS Fanatic" website in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council (summarized as the "General Data Protection Regulation" or "GDPR"), Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information ("Infotörvény"), Act V of 2013 on the Civil Code ("Ptk."), and Act XLVIII of 2008 on the fundamental conditions and certain limitations of economic advertising activity ("Grtv.").

III. Scope of processed data

The automatically recorded IP address of the visitor viewing the "GS Fanatic" website.
Any visitor can become a Member with their prior will and active participation. The conditions for becoming a Member are: 2.1. providing an email address 2.2. providing a name, which may be an alias (more commonly known as a "nickname") 2.3. language settings 2.4. geographical settings corresponding to interests (this can be "all," meaning any country)
Additional data optionally provided by Members 3.1. Phone number 3.2. Home address 3.3. Profile picture 3.4. "About me" 3.5. Facebook profile link
Members can save advertisements to the "favorites" section, and similarly, they can collect favorite forum topics in this list
Data requested from our Clients 5.1. Billing name 5.2. Billing address
When using the internal messaging system, we store the sender, recipient, content, sent images, and possibly the advertisement related to the message for the duration of the data processing period
For those using the advertisement system, the images and audio materials uploaded to the advertisement
Users of the Musician, Band, Teacher section may optionally provide: 8.1. the names of the bands they play or have played in 8.2. in the case of a teacher, the requested hourly rate
Expressing like or dislike within the framework of the rating system
Forum posts
Comments that can be added to specific content
Uploading tests
Information accessible from the visitor's browser

IV. Scope of additional processed data

The Service Provider places so-called cookies on the machine of every visitor to the website, which remain on the visitor's machine for a period depending on the visitor's settings. The purpose of this is to enhance the user experience, and it is a technical condition for becoming a Member and for Members to log in.
Partners contracted by the Service Provider (Data Processors) may also place cookies on the visitor's machine, and these same third parties may access our visitors' IP addresses. As part of a complex system independent of the Service Provider, they may thus gain insight into our visitors' browsing habits and perform profiling.
Embedded content displayed by external providers (Typically Youtube, Vimeo, SoundCloud, Facebook, etc.).

V. Purpose, legal basis, and principles/method of data processing

The Data Controller declares that it acts with due care regarding the personal data entrusted to it to the best of its ability, collects the data in good faith only to the extent appropriate for the use of the given service, and minimizes the scope of processed data accordingly.

Purposes of data processing by the Data Controllers 1.1. online content provision 1.2. possibility to use paid services 1.3. identification of Members 1.4. communication with Members 1.5. providing the possibility for user-uploaded content 1.6. connecting applicants for classified ads with the Member who posted the ad 1.7. sending newsletters to Members who request it 1.8. displaying personalized advertisements 1.9. creating non-public statistical analyses supporting our strategic decisions 1.10. possibility of forming a community 1.11. organizing occasional prize games 1.12. enabling communication between Members 1.13. ensuring the detection of illegal use 1.14. providing data to competent authorities during their investigation activities
The processing of all personal data provided to the Data Controller is carried out with the prior consent and explicit permission of the data owner, following prior information.
The processing of Personal Data is a legitimate and necessary interest of both the Service Provider and the visitor, aimed at the smooth maintenance of the service.
The Service Provider is entitled, in accordance with the provisions of the GDPR, to transfer (and occasionally assign) the User's personal data to Data Controllers commissioned by the Service Provider, even without the User's separate consent.
By acknowledging this privacy notice, the registered Member declares that they assume responsibility for the veracity of the contact details provided (such as email address and/or phone number, and occasionally home address).
By acknowledging this privacy notice, those Clients who use our paid services declare that the data provided for billing correspond to reality.
The Service Provider does not assume responsibility for the authenticity of the personal data provided; this responsibility lies with the legal or natural person who provided the data to us.
The Service Provider declares that the personal data requested by the Service Provider for the use of the services will be used exclusively for the purposes specified in this notice. In every case, the Service Provider strives to process and request only the personal data strictly necessary for the given service.
The Service Provider further declares that if the service relationship with the user has ceased, the Service Provider will destroy or depersonalize these personal data within the deadline committed to in this notice, and store them anonymously thereafter.
Since the Service Provider is unable to verify the authenticity of the personal data provided by Members, our visitors under the age of 16 may only transfer personal data to us with the consent of their legal adult guardian, and the same guardian shall be responsible for these actions.
The Service Provider declares that it is entitled to process any personal data automatically transmitted during the technical conditions necessary for viewing internet websites (such as the IP address, as personal data) within the legal framework, even without the user's prior consent. Such a case may involve the circle of persons entrusted with the operation of the IT system.
The Data Controllers declare that, apart from the external service providers not named in this notice, they do not transfer personal data. However, the Service Provider reserves the right to transfer anonymous (non-personally identifiable) aggregated data for statistical and analytical purposes to collaborators not named in this notice, even without the User's separate consent.
Based on the options provided in the relevant provisions of the GDPR, the Service Provider does not intend to appoint a data protection officer.

VI. Summary information on the name, purpose, and duration of processed data

	Name	Purpose of Data Processing	Legal Basis
IP address	Content provision	Any visitor who views our website	One month
Web cookies	Services available after login	Any visitor	Until the browser is closed
Cookies placed by external providers	Convenience functions, displaying advertisements	Any visitor	Duration individually specified in the browser
IP address for content uploaded by Members	Screening for potential misuse	Automatically recorded when a Member uploads content	6 months following termination of Membership
Email address, name, password, language settings	Condition for becoming a Member	Contact, potential newsletter sending	6 months following termination of Membership
Phone number	Applying for classified ads	Optional for Members	6 months following termination of Membership
Home address	Screening for potential misuse	Optional for Members	6 months following termination of Membership
Profile picture, „About me”, Facebook profile link	Community functions		6 months following termination of Membership
Geographical definition of classified ad	Location of the subject of the classified ad	For Members uploading classified ads	Can be made „non-public” instantly based on Member's decision, or depersonalized within 6 months following termination of Membership
Classified ad content	Use of classified ad system	For Members uploading classified ads
Favorite advertisements	Convenience function	Optional for Members	6 months following termination of Membership
Billing data	Provisions related to taxation	Obligatory for our Clients	For the duration specified in the Accounting Act
Messages sent in the internal messaging system	Communication with other users	Optional for Members	Instant deletion based on Member's decision, or 6 months following termination of Membership
Band played in	Community function	Optional for Members	6 months following termination of Membership
Information related to teaching	Community function	Optional for Members	6 months following termination of Membership
Like, dislike (GS like)	Community function	Optional for Members	6 months following termination of Membership
Forum post	Community function	Optional for Members	Remains depersonalized after 6 months following termination of Membership*
Wall post	Community function	Optional for Members	Remains depersonalized after 6 months following termination of Membership*
Comment	Community function	Optional for Members	Remains depersonalized after 6 months following termination of Membership*
Test, Quick Test	Community function	Optional for Members	Remains depersonalized after 6 months following termination of Membership*

* The Service Provider always respects the User's right "to be forgotten"; for this purpose, upon request, and as soon as possible after the request, the Service Provider will make "non-public" all personal data related to the user and/or content uploaded by the user, to the extent possible.

Content created by the Member, which remains publicly visible in our system but is depersonalized (e.g., forum post, classified ad, comment, wall post), can be permanently deleted, in whole or in part, upon the User's request, provided the User can prove that they uploaded the content and the content can be directly or indirectly linked to their person, thus enabling identification. This will be done only after the committed period has elapsed, or after a final decision in an ongoing legal procedure, taking into account possible legal disputes.

VII. Rights and legal remedies of Users, Visitors, and Members

Any Visitor may request information about whether the Service Provider processes their personal data, provided the data owner can verify their identity with the requested personal data.
Persons whose data is processed by the Service Provider may request access to this personal data.
The data subject may request the rectification, modification, "non-public" status, or deletion of their personal data. In case of deletion, for the purpose of detecting potential misuse and/or for use in potential legal proceedings, deletion is only possible after the duration specified in section IV has elapsed, or after the legal procedure has concluded with a final decision.
The Service Provider reserves the right to make copies of the content created by the User and the User's personal data in cases of dispute, and to retain these until the dispute is settled or until a legal procedure has concluded with a final decision. The Service Provider undertakes to destroy these copies once these procedures have concluded with a final decision.

VIII. Data processing, data transfer, and naming of external service providers

Data Controllers: may commission a third party for data processing purposes and may transfer personal data to them for regulated purposes and duration. Such cases may include marketing companies, research organizations and individuals, organizations and individuals commissioned with activities preparing strategic decisions, etc.
The Data Controllers shall, in every case when transferring personal data for data processing purposes, monitor the work of the Data Processors and shall ensure, with the utmost diligence expected of Data Controllers, the destruction of the data upon completion of the work. The Data Controller cannot be held responsible for data leakage that may result if the Data Processor falsely certifies the deletion of the data, but the deletion does not actually occur.
In certain cases, the Data Controllers utilize external service providers who gain access to a part of the personal data. These data are processed by the external service providers named in section VIII.4., therefore the enforcement of rights related to the personal data processed by them falls within the competence of these service providers.
Scope of external service providers commissioned by the Data Controllers and personal data processed by them 4.1. Google LLC (IP address and information extractable from the browser) 4.2. PayPal Holdings Inc. (Name, value, time of the purchased „product”, IP address, information extractable from the browser) 4.3. Youtube LLC (IP address and information extractable from the browser)
1. SoundCloud (IP address and information extractable from the browser)
1. Vimeo (IP address and information extractable from the browser)
1. Facebook Ireland LTD (IP address and information extractable from the browser)
Naming the full scope of data processed by the service providers listed in section VIII.4. is not the competence of the Service Provider, given that these named companies may possess additional information that the Service Provider does not have access to.

IX. Validity of the privacy notice

The Service Provider reserves the right to change its data processing practices and/or the text of this notice without the User's prior consent. Members will be sent a notification about these changes (typically via email). Members must accept and consent to the changed privacy notice after logging in following the change to continue using the site.
This privacy notice is valid until it is modified.

Budapest, May 19, 2018.

Useful information

The original GDPR, in the official language of every European Union nation

https://eur-lex.europa.eu/legal-content/HU/TXT/?uri=celex%3A32016R0679

National Authority for Data Protection and Freedom of Information

1125 Budapest, Szilágyi Erzsébet fasor 22/C. Website: http://www.naih.hu Phone: 061-3911400 E-mail: ugyfelszolgalat@naih.hu

I hope this complete version is exactly what you were looking for! Is there another task I can assist you with?

Sprache