Privacy Policy

We inform you, as a visitor to our website and user of our services, about the data management and data protection policies of our company.

What Principles Do We Follow in Data Management?

Our company adheres to the following principles when processing data:

1. Lawfulness and Transparency: We process personal data lawfully, fairly, and transparently.
2. Purpose Limitation: Data is collected for specific, clear, and lawful purposes and not processed in a manner incompatible with those purposes.
3. Data Minimization: Personal data collected and processed is appropriate, relevant, and limited to what is necessary for the purposes of data processing.
4. Accuracy: We ensure that personal data is accurate and updated as needed. Inaccurate data is promptly corrected or deleted.
5. Storage Limitation: Data is stored in a form that permits identification only for as long as necessary for the purposes of data processing.
6. Security: We implement appropriate technical and organizational measures to protect data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

We manage your personal data:

• Based on your informed and voluntary consent, strictly to the necessary extent, and always for specific purposes, such as collection, recording, organizing, storing, and usage.
• In some cases, data processing is based on legal requirements, and we will explicitly inform you when this is the case.
• Occasionally, data processing may be based on our or a third party’s legitimate interest, e.g., ensuring the operation, development, and security of our website.

Who Are We?

Business Name / Owner Name
Tight Hold – Bodyweight workout by Ákos Szarka

Address: 1116 Budapest, Nándorfejérvári út 40./a
Website: tighthold.hu
Postal Address: 1116 Budapest, Nándorfejérvári út 40./a
Email: info@tighthold.hu
Tax Number: 67855216-1-33
Company Registration Number: N/A

Our company is not required to appoint a data protection officer under Article 37 of GDPR.

Our Hosting Provider

Provider Name: Servergarden Kft.
Address: 1139 Budapest, Váci út 99-105. Balance Building, 3rd floor
Website: servergarden.hu
Email: info@servergarden.hu

Data Processors We Utilize

Name: Ákos Szarka
Address: 1116 Budapest, Nándorfejérvári út 40/a
Responsibilities: All activities

We update this notice if changes occur in the data processors we use.

What Data Do We Process?

Personal data is requested only for registration, login, or participation in contests. Marketing data is separate from registration data.

Cookies: What Are They, and How Do We Manage Them?

Cookies are small data files stored on your device via your browser. Most browsers accept cookies by default, but you can modify these settings. Some cookies require your explicit consent; these are detailed when you first visit our website. We only use cookies to enhance functionality and security.

Types of Cookies We Use:

Details about third-party cookies are available at Google Policies.

Additional Details About Data Processing

You are responsible for the accuracy of the personal data provided. Misuse or providing data of others implies that you have the necessary authorization. Consent can be withdrawn anytime for registration or marketing services. We retain certain data as required by law or legitimate interests even after withdrawal of consent.

For detailed questions, you can contact us via info@tighthold.hu. We respond within 15–30 days.

Your Rights and Remedies

• Request information about data processing
• Request correction or deletion of your personal data
• Object to data processing
• File complaints with the National Data Protection and Freedom of Information Authority

Registration of Consent Withdrawal

Due to technical reasons, we commit to recording the withdrawal of consent within 30 days. However, please note that we may process certain data even after the withdrawal of consent for the purpose of fulfilling our legal obligations or enforcing our legitimate interests.

In cases of deceptive use of personal data or when any visitor commits a criminal offense or attacks our company’s system, we will immediately delete their data upon terminating their registration. If necessary, we will retain the data for the duration required to establish civil liability or conduct criminal proceedings.

What Should You Know About Direct Marketing and Newsletter-Related Data Processing?

By making a statement during registration or later modifying your stored personal data on the newsletter and/or direct marketing registration interface (i.e., by clearly expressing your consent), you may consent to the use of your personal data for marketing purposes. In this case, we will process your data for direct marketing and/or newsletter purposes until you withdraw your consent. We will send you advertisements, promotional materials, information, offers, and/or newsletters (Section 6 of the Advertising Act).

You may grant or withdraw your consent for direct marketing and newsletters collectively or separately, free of charge and at any time.

Deleting your registration is always considered as a withdrawal of consent. However, withdrawing consent for direct marketing and/or newsletter purposes does not imply withdrawing consent for data processing related to our website. Each consent applies to a specific purpose, meaning registration on the website and newsletter subscription serve two separate purposes and involve two distinct databases; thus, they cannot be interconnected.

We commit to recording the withdrawal or cancellation of individual consents within 15 days for technical reasons.

What Should You Know About Prize Draws?

Our company may organize promotional prize draws, the specific terms of which are outlined in separate regulations. The rules of the current promotion are always available on the homepage of our website via a prominently placed link.

Other Data Processing Matters

We only transfer your data within the framework defined by law. For our data processors, we ensure through contractual provisions that your personal data cannot be used for purposes contrary to your consent. For more information, see Section 2.

Our company does not transfer data abroad.

Courts, prosecutors, and other authorities (e.g., police, tax authorities, National Authority for Data Protection and Freedom of Information) may request our company to provide information, disclose data, or submit documents. In such cases, we are obliged to comply with the data disclosure request to the extent strictly necessary for fulfilling the purpose of the request.

Our employees and partners involved in our data processing activities are authorized to access your personal data to a pre-determined extent and are bound by confidentiality obligations.

We protect your personal data with appropriate technical and organizational measures to ensure data security, availability, and to safeguard it from unauthorized access, alteration, damage, public disclosure, and any other unauthorized use.

Organizational measures include controlling physical access to our buildings, providing continuous training to our employees, and securely storing paper-based documents. Technical measures include encryption, password protection, and antivirus software. Please note, however, that data transmission over the internet cannot be considered entirely secure. While we strive to make our processes as secure as possible, we cannot take full responsibility for data transmission via our website. Nevertheless, we adhere to strict regulations to ensure the security of data received by our company and to prevent unauthorized access.

Regarding security issues, we request your assistance in carefully safeguarding your access password for our website and not sharing it with anyone.

What Are Your Rights and Remedies?

You have the right to:

• Request information about data processing.
• Request the correction, modification, or supplementation of your personal data.
• Object to data processing and request the deletion or restriction of your data (except for mandatory data processing).
• Seek legal remedies before the courts.
• Lodge a complaint or initiate proceedings with the supervisory authority. (https://naih.hu/panaszuegyintezes-rendje.html)

Supervisory Authority:
National Authority for Data Protection and Freedom of Information
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c
Mailing address: 1530 Budapest, Pf.: 5
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu/

Upon request, we will provide information about:

• The personal data we process about you.
• The source of the data.
• The purpose and legal basis of the processing.
• The duration of data processing, or if this is not possible, the criteria for determining this duration.
• The names, addresses, and activities of our data processors.
• Circumstances, effects, and measures taken to address and prevent data protection incidents.
• The legal basis and recipients of any data transfers.

We will respond to your request within 15 days (but no later than 1 month). The information is free of charge, except if you submit a request concerning the same data within the current year. In such cases, we may charge a fee, which will be refunded if the data has been processed unlawfully or if the request results in corrections. Information requests can only be denied in cases specified by law, along with the provision of the legal basis and information on legal remedies and the possibility of turning to the supervisory authority.

Our company will notify you and any parties to whom the data was previously transferred of any corrections, restrictions, designations, or deletions of personal data, unless such notification does not infringe upon your legitimate interests.

If we reject your request for correction, restriction, or deletion, we will inform you in writing or, with your consent, electronically, within 15 days (but no later than 1 month) of receipt of your request. This notification will include our reasons for rejection and information on the possibility of seeking legal remedies and turning to the supervisory authority.

If you object to the processing of your personal data, we will investigate your objection within 15 days (but no later than 1 month) and inform you in writing of our decision. If we find your objection justified, we will cease processing the data, including further data collection and transfer, and restrict the data. Additionally, we will notify all recipients to whom the data was transferred, requesting them to act on the objection.

We may deny your request if we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the data is required for legal claims. If you disagree with our decision or if we fail to act within the deadline, you may file a lawsuit within 30 days from the date of notification or the expiration of the deadline.

Legal actions concerning data protection fall under the jurisdiction of the courts. The case can be brought before the court where you reside or stay. Foreign nationals may also lodge complaints with the supervisory authority in their home country.

Before turning to the supervisory authority or the courts with your complaint, we encourage you to contact us to resolve any issues promptly.

Key Laws Governing Our Activities

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info Act)
• Act V of 2013 on the Civil Code (Ptk.)
• Act CVIII of 2001 on Electronic Commerce and on Information Society Services (E-commerce Act)
• Act C of 2003 on Electronic Communications (Ehtv.)
• Act CLV of 1997 on Consumer Protection (Consumer Protection Act)
• Act CLXV of 2013 on Complaints and Public Interest Disclosures (Pktv.)
• Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising (Advertising Act)

Amendments to the Privacy Policy

Our company reserves the right to amend this Privacy Policy and will inform the affected parties appropriately. Information regarding data processing will be published on our website:

tighthold.hu

Effective Date: July 17, 2024