In this Privacy Notice we inform you, as a visitor to the kozpontegyesulet.hu website, someone interested in the Association's services, an applicant, subscriber, supporter or participant in our programmes, about the processing of your personal data and your rights in relation to data processing.
In processing personal data, KÖZ-Pont Youth Association follows in particular the principles below:
The principles of the GDPR are set out in its Article 5, and the applicable legal bases in its Article 6.
Controller's name
KÖZ-Pont Youth Association
Legal status
public-benefit association
Registered office and postal address
4026 Debrecen, Darabos utca 14. 6/33.
Registration number
09-02-0002363
Tax number
18562783-2-09
Phone
Website
You can send your questions, requests or comments about data processing to the info@kozpontegyesulet.hu to the email address or to the Association's postal address above.
The Association also uses external service providers to operate the website and ensure electronic communication.
Name
Rackhost Zrt.
Registered office
6722 Szeged, Tisza Lajos körút 41.
Task
providing the hosting of the website and the related IT infrastructure.
Provider
Google Workspace
Task
technically ensuring the Association's electronic mail and the handling of messages received and forwarded by email.
Provider
Elementor Ltd.
Task
the technical forwarding and delivery of electronic messages generated through the website.
Through Site Mailer, Elementor acts as a data processor with respect to the personal data of the website's end users.
Data processors may process personal data only to the extent necessary to perform the service they provide.
If the circle of the Association's data processors changes, this Notice will be updated accordingly.
When visiting the website, the IT systems serving the website may record technical data.
Purpose of data processing: ensuring the proper and secure operation of the website, detecting technical faults, and recognising and preventing abuse and IT attacks.
Data processed may include:
Data subjects: website visitors.
Legal basis: Article 6(1)(f) GDPR – the Association's legitimate interest in operating its website securely and properly.
Retention period: the period necessary to ensure the security and proper functioning of the website.
Processor: Rackhost Zrt.
The Association can be reached through the contact details given on the website and through some website forms.
Purpose of data processing: receiving and answering the enquiry, keeping in touch with the data subject and resolving the matter.
Data processed depending on the inquiry:
Data subjects: persons who contact the Association.
Legal basis:
Retention period: until the enquiry is closed. If a further legal relationship arises from the enquiry or a legal claim may arise, the data may be processed for as long as necessary for the related legal relationship and possible enforcement of claims.
Consequence of failing to provide the data: without the data needed for contact, the Association may be unable to answer the enquiry.
On the website, contact options regarding services are available for, among others, companies, civil organisations, schools, municipalities, parents and private individuals.
Purpose of data processing:
Data processed:
Data subjects: natural persons interested in the service, and natural-person contacts of organisations.
Legal basis: If the data subject wishes to enter a contractual relationship themselves regarding the Association's service: Article 6(1)(b) GDPR – steps prior to entering into a contract at the request of the data subject. If the data subject acts as a contact person of a company, school, municipality, civil organisation or other organisation: Article 6(1)(f) GDPR – the Association's legitimate interest in professional contact with the partner.
Retention period: until the quote request and related discussions are closed. If a contract is concluded, data necessary for performing the contract, for the relevant legal obligations and for possible legal claims may be processed further.
Through the website it is possible to apply for the volunteer programmes of KÖZ-Pont Youth Association.
Purpose of data processing:
Data processed:
Data subjects: persons applying to the Association as volunteers.
Legal basis: Article 6(1)(b) GDPR – at the request of the data subject, taking steps prior to entering into a volunteer relationship.
Retention period:
The data subject should provide only such personal data in the free-text field of the message as is truly necessary for the application.
The Association offers several application opportunities linked to student council and youth communities.
Purpose of data processing:
Data processed depending on the application:
Data subjects: persons interested in student council and youth programmes, including minors.
Legal basis: Article 6(1)(f) GDPR – the Association's legitimate interest in running youth and student council communities, receiving applications and keeping in touch with the data subjects.
When relying on legitimate interest, the Association takes into account the rights and interests of data subjects – especially children.
Retention period: until the application is closed or for as long as the community relationship exists. After the relationship ends the personal data will be deleted, unless another legal basis justifies their further retention.
The Association handles the personal data of minors with particular care.
Privacy information addressed to children must be provided in a clear, simple way that they can understand.
If a declaration or the creation of a legal relationship requires the involvement of a legal representative, considering the child's age and legal capacity, the Association obtains the necessary parental or legal representative's declaration.
The Association may run an alumni network for its former volunteers, programme participants and others previously connected to its community.
Purpose of data processing:
Data processed depending on the application:
Legal basis: Article 6(1)(a) GDPR – the data subject's voluntary consent.
Retention period: until the consent is withdrawn or the alumni relationship ends.
Consent to the info@kozpontegyesulet.hu may be withdrawn at any time by a message sent to the address.
Withdrawal of consent does not affect the lawfulness of the data processing carried out before the withdrawal.
The Association may enable interested persons to receive information electronically about the Association's news, programmes, events and other activities.
The Ektv. also treats electronic information related to the achievement of a social goal as an electronic advertisement.
Purpose of data processing: sending newsletters and electronic information related to the Association's activities.
Data processed:
Data subjects: persons voluntarily subscribing to the newsletter.
Legal basis: Article 6(1)(a) GDPR – voluntary consent.
Retention period: until the consent is withdrawn or the newsletter is discontinued.
Giving consent is voluntary and is not a condition for using any other service.
The data subject may withdraw their consent at any time, free of charge and without giving reasons, using the unsubscribe option in the email or the info@kozpontegyesulet.hu a message sent to the address.
The Association can also be supported by bank transfer.
Purpose of data processing:
Data processed may include:
Legal basis:
Retention period: for data belonging to accounting documents, a retention period of at least 8 years under accounting legislation.
Recipients: the Association's bank and the person or organisation performing bookkeeping and accounting tasks, to the extent necessary for performing the task.
Offering 1% of personal income tax is done through the NAV system; the website serves an informational role in this regard.
Photo or video recordings may be made at the Association's events, programmes and other occasions.
Purpose of data processing:
Data processed:
If the data subject appears individually and recognisably at the centre of the recording, and no statutory exception applies to the recording: legal basis: Article 6(1)(a) GDPR – the data subject's consent.
Consent may be withdrawn at any time.
For recordings showing the whole event, its atmosphere or the multitude of participants, under the Civil Code no individual consent is needed to make and use a crowd shot. Section 2:48 of the Civil Code expressly names crowd shots and recordings of public appearances as exceptions to the general rule of consent to likeness.
The legal basis for processing personal data in this case is Article 6(1)(f) GDPR – the Association's legitimate interest in documenting its own events and presenting its activities.
The data subject has the right to object, on grounds relating to their particular situation, to processing based on legitimate interests.
When minors are depicted in a unique and identifiable way, the Association exercises increased care.
If, considering the data subject's age and legal capacity, the involvement of a legal representative is required, the Association obtains the appropriate declaration before using the recording.
Retention period:
Cookies are small data files that a website may store in the visitor's browser or other terminal device.
To support multilingual operation, kozpontegyesulet.hu uses a cookie that remembers the language preference.
Name
trp_language
Purpose
remembering the language selected on the website
Lifetime
30 days
Category
functional / preference
Detailed rules on the use, legal basis and management of cookies and on changing user choices are contained in the website's separate Cookie Notice.
Some IT service providers used by the Association may, in providing their service, carry out data processing outside the European Economic Area or use a sub-processor operating in such a country.
In the case of international data transfers, the transfer may take place only under the conditions set out in Chapter V of the GDPR. This may happen in particular:
Data processing related to Elementor's services may take place in the European Union, Israel and the United States; the provider's DPA requires an adequacy decision or, where necessary, the application of SCCs.
The data subject may request further information from the Association about the safeguards applied.
In cases defined by law, a court, prosecutor's office, investigating authority, tax authority, data protection authority or another authority with an appropriate legal basis may request that personal data or documents be made available.
In such a case, the Association will only:
provides the data.
The Association's staff, officers, volunteers or other contributors may access personal data only to the extent necessary to perform their given task.
Persons with access to the data are obliged to treat personal data confidentially.
The Association strives to ensure that in each data processing procedure only the necessary persons have access.
The Association applies appropriate technical and organisational measures to protect personal data, in particular:
The Association designs its data security measures taking into account the risks involved in data processing.
The Association limits access of persons involved in data processing to the extent necessary for their tasks.
In relation to data processing you have the following rights, under the conditions set out in the GDPR.
You are entitled to request information on whether we process your personal data and, if so, to request access to it and to information about the processing.
You may request the rectification of inaccurate personal data or the completion of incomplete data.
In the cases defined in the GDPR, you may request the erasure of your personal data.
The right to erasure is not unlimited: for example, the data may still be processed where necessary for compliance with a legal obligation or for the establishment, exercise or defence of legal claims.
Where the circumstances defined in the GDPR apply, you may request the restriction of the processing of your personal data.
In the case of automated processing based on consent or contract, you may be entitled to receive the personal data you provided to us in a structured, commonly used, machine-readable format and – where technically feasible – to have it transmitted to another controller.
If the data processing is based on the legitimate interest of the Association or a third party, you may object to the processing at any time on grounds relating to your particular situation.
In this case we will cease the processing, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims.
If the data processing is based on your consent, you may withdraw it at any time.
Withdrawal does not affect the lawfulness of the data processing carried out before the withdrawal.
A request concerning data processing can be submitted using the contact details below:
Postal address
KÖZ-Pont Youth Association, 4026 Debrecen, Darabos utca 14. 6/33.
After receiving the request, the Association will inform you of the measures taken without undue delay, but at the latest within one month.
The GDPR allows the deadline to be extended by a further two months in the case of complex requests or a large number of requests; in such a case the Association will inform you of the reason for the extension within the first month.
Exercising your rights is, as a general rule, free of charge.
In the case of manifestly unfounded or – particularly because of their repetitive nature – excessive requests, a reasonable fee may be charged under the GDPR, or the request may be refused.
If you consider that the processing of your personal data violates the applicable data protection laws, you may lodge a complaint with the National Authority for Data Protection and Freedom of Information:
Name
National Authority for Data Protection and Freedom of Information (NAIH)
Address
1055 Budapest, Falk Miksa utca 9–11.
Mailing address
1363 Budapest, P.O. Box 9.
Phone
Website
You are also entitled to go to court if you believe your rights under the GDPR have been infringed in the processing of your personal data.
At your choice, you may bring the action before the court competent according to the Controller's registered seat or the tribunal competent according to your place of residence or stay.
Competent court
Debrecen Regional Court, 4025 Debrecen, Széchenyi utca 9.
The Association's data processing is governed in particular by the following laws:
The Association is entitled to amend this Privacy Notice, in particular if:
The Privacy Notice in force at any time is available on the kozpontegyesulet.hu website.
Dated: Debrecen, 11 September 2026
Hungarian Hungarian 
English
