Privacy Policy

This Privacy Policy explains how Kincsestérkép (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website and services (the “Service”).

1. Data Controller

Data Controller: Kincsestérkép
Contact email: info@kincsesterkep.com
Jurisdiction: Hungary (see Section 11).

Note: If you operate under a registered Hungarian entity (EV/Kft.), you can later replace this section with your official company details and address.

2. What Data We Collect

  • Account data: email address, and optional username (if you register an account).
  • Purchase/registration data: selected competition, team size, purchase status and related identifiers.
  • Payment data: payments are processed by Stripe. We do not store your full card details.
  • Technical data: basic logs/events needed to operate the Service (e.g., errors, security events).

3. How We Use Your Data

  • To create and manage your user account.
  • To register you for competitions and deliver confirmations and service communications.
  • To process payments and confirm successful transactions.
  • To ensure security, prevent fraud/abuse, and maintain platform integrity.
  • To comply with legal obligations where applicable.

4. Legal Basis (GDPR)

  • Contract performance (GDPR Art. 6(1)(b)) — to provide the Service you request.
  • Legal obligation (GDPR Art. 6(1)(c)) — where required by applicable law.
  • Legitimate interests (GDPR Art. 6(1)(f)) — security, fraud prevention, and service reliability.
  • Consent (GDPR Art. 6(1)(a)) — where explicitly requested (e.g., optional marketing where applicable).

5. Payments (Stripe)

We use Stripe to process payments. Stripe may process personal data such as your email, billing details, and payment method data in order to complete the transaction, prevent fraud, and comply with legal requirements.

We receive confirmation of payment status and identifiers needed to fulfil your purchase/registration. We do not receive or store your full card number.

6. Storage & Processing (Supabase)

We use Supabase for authentication and database storage. Your account and registration information may be stored in Supabase. Access is restricted and used only for operating the Service.

7. Cookies

Cookies and similar technologies may be used to keep you signed in, remember preferences, and support basic website functionality. Where required by law, we request consent before placing non-essential cookies.

A separate Cookie Notice may be added, and a cookie banner can be enabled for EU compliance (we’ll do that in Step 3).

8. Data Sharing

We share data only as necessary to operate the Service, including:

  • Stripe — payment processing and fraud prevention.
  • Supabase — user authentication and database services.
  • Service providers used strictly for hosting/operations, if applicable.

We do not sell your personal data.

9. Retention

We keep personal data only as long as needed for the purposes described above, unless a longer retention period is required by law (e.g., accounting or dispute resolution).

10. Your Rights (EU/EEA)

You may have the right to:

  • Access your personal data.
  • Correct inaccurate or incomplete data.
  • Request deletion (where applicable).
  • Restrict or object to processing (where applicable).
  • Data portability (where applicable).
  • Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at info@kincsesterkep.com.

11. Governing Law & Jurisdiction (Hungary)

This Privacy Policy and any related disputes shall be governed by the laws of Hungary. The competent courts of Hungary shall have exclusive jurisdiction, unless mandatory consumer protection laws provide otherwise.

12. Changes

We may update this Privacy Policy from time to time. The “last updated” date will be revised when changes are made.

Last updated: