Privacy Policy

Privacy Policy

Privacy Policy

1. DATA Manager

  • Name: Dr. Bagó Marcell
  • Address: 2081 Piliscsaba Kinizsi utca 22
  • E-mail: apneahub@gmail.com
  • Phone: 06306967096
  • Web: www.apneahub.com

2. SCOPE OF DATA PROCESSED AND PURPOSE OF DATA PROCESSING

During event registration on the website, we request the following data from the data subjects:

Name

  • Purpose of data processing: To maintain contact and clearly identify the applicant (participant).
  • Legal basis: Performance of the contract or the legitimate interest of the Data Controller.
  • Retention period: 5 years after the event ends.

Email

  • Purpose of data processing: Maintaining constant contact, sending confirmations, and transmitting detailed information and notices related to the event.
  • Legal basis: Performance of the contract.
  • Retention period: 5 years after the event ends.

Phone

  • Purpose of data processing: Fast and direct coordination in urgent cases (e.g. change of date, on-site logistics).
  • Legal basis: Performance of the contract.
  • Retention period: 1 year after the event ends.

Address

  • Purpose of data processing: Issuing a proper invoice for the paid participation fee.
  • Legal basis: Fulfillment of a legal obligation (Accounting Act).
  • Retention period: 8 years as required by law (retention period for accounting documents).

Health declaration (optional or event-dependent)

  • Purpose of data processing: To check the conditions for safe diving and to inform the instructor about possible health risks.
  • Legal basis: The express, voluntary consent of the data subject (considered to be special data).
  • Retention period: Until the end of the event, after which it will be deleted.

3. MAKING AND USING IMAGE AND AUDIO RECORDINGS (MARKETING PURPOSES)

Photos and videos may be taken at the event (camp, course, tour) to document the event and promote the Data Controller's activities (marketing).

During registration, you can use a separate checkbox to indicate whether you consent to the use of the recordings.

  • Processed data: A recognizable image and voice recording of the data subject.
  • Purpose of data processing: The Data Controller's marketing activities, preparation of reference materials, publication on the website (e.g. gallery, blog) and social media platforms (Instagram, Facebook, YouTube).
  • Legal basis: Voluntary consent of the data subject (Article 6(1)(a) of the GDPR).
  • Retention period: Until consent is withdrawn or as long as the given marketing material is relevant.
  • Right of withdrawal: Consent can be withdrawn at any time in writing to the above e-mail address. The withdrawal does not affect the lawfulness of the data processing carried out before the withdrawal (e.g. already printed flyers do not have to be destroyed, but the image will be removed from the online interface).

If you do not consent to the recording, please inform the instructors/organizers on site so that they can take this into account.

4. DATA TRANSFER

The Data Controller does not transfer personal data to third parties, except:

  • Accounting service provider: To perform accounting and invoicing.
  • Accommodation provider/Local partner: If required for accommodation booking or local permits (e.g. diving permit), we will only transfer the most necessary data.
  • Authorities: In case of legal obligation.

5. DATA SECURITY

The Data Controller takes all necessary technical and organizational measures to protect the personal data provided against unauthorized access, alteration, transmission, disclosure, deletion or destruction.

6. RIGHTS OF THE DATA SUBJECTS

The data subject (you) has the right at any time to:

  • Request information about the processing of your personal data.
  • Request correction of your data if it is inaccurate.
  • Request deletion of your data (except for mandatory data processing, e.g. invoicing).
  • Request restriction of data processing.
  • Object to the processing of your personal data.
  • Exercise your right to data portability.

7. LEGAL REMEDIES

You can file a complaint with the National Data Protection and Freedom of Information Authority (NAIH):

In the event of judicial enforcement, the lawsuit may also be initiated before the court of the person concerned's place of residence or residence.

en_GB
en_GB hu_HU