Privacy Policy
Legal document, summary
Last updated: 1 January 2024 · Platform: ÁllatiMenhelyek.hu
This is a translated summary of the most important points. The full, legally binding Privacy Policy is written in Hungarian. View the full Hungarian version →
1.Data controller
- Data controller: ÁllatiMenhelyek.hu
- Contact: info@allatimenhelyek.hu
- Registered in Hungary: Hungarian law applies.
2.Data we collect
- Account data: email address, display name, profile picture (optional), account creation date.
- Google OAuth tokens if you sign in with Google (no password stored in that case).
- Adoption application answers: collected on behalf of the shelter, which acts as data controller for this data.
- Payment transaction IDs, amounts, and statuses; we never store card details (Stripe handles that).
3.Payment data & Stripe
- All card data is handled exclusively by Stripe, Inc., which is certified to PCI DSS Level 1.
- We only store the transaction IDs returned by Stripe; never your card number, CVV, or expiry date.
- Stripe's privacy policy: stripe.com/privacy
4.Your rights (GDPR)
- Access (Art. 15): request information about what data we hold on you.
- Rectification (Art. 16): ask us to correct inaccurate data.
- Erasure (Art. 17): delete your account directly in Profile → Delete account.
- Data portability (Art. 20): download your data from Profile.
- Object to processing (Art. 21): contact us at info@allatimenhelyek.hu
- You can also contact your local data protection authority in your EU member state.
5.Data retention
- Account data: until deletion + 30 days grace period.
- Financial records: 8 years (Hungarian accounting law requirement).
- Session tokens: up to 30 days of inactivity.
6.Data processors
- Stripe, Inc.: payment processing (USA, EU–US Data Privacy Framework, PCI DSS L1).
- Google LLC: OAuth sign-in (USA, EU–US Data Privacy Framework).
- Vercel Inc.: application hosting (USA, EU–US Data Privacy Framework).
- Shelters: adoption application data (EU, Hungary); shelters act as independent data controllers.
7.Supervisory authority
- Hungarian authority: NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság): naih.hu / ugyfelszolgalat@naih.hu
- EU residents may also lodge a complaint with the data protection authority in their own member state.
8.Contact for privacy questions
- info@allatimenhelyek.hu
Last updated: 1 January 2024 · Terms of Service · Contact