Effective date: May 24, 2024

1. The Data Controller

Regarding the data processing on the punkfilms.hu website (hereinafter: "Website"), the data controller is:

• Name: Dávid Márk (founder)
• Website: https://punkfilms.hu
• Contact e-mail: info@punkfilms.hu

Hereinafter: "Data Controller".
The Data Controller is committed to protecting the personal data of the Website's users and considers it of utmost importance to respect their right to informational self-determination. The Data Controller handles personal data confidentially and takes all security, technical, and organizational measures to guarantee the security of the data.

2. Scope of data processed, purpose, legal basis, and duration of data processing

During the operation of the Website, the following personal data is processed:

2.1. Registration and user account management

Data processed	Purpose of data processing	Legal basis for data processing	Duration of data processing
Username, email address, password, registration date, IP address.	User identification, creating and securely operating the account, contact.	The data subject's consent (GDPR Article 6(1)(a)).	Until the user account is deleted.

2.2. User profile data

Data processed	Purpose of data processing	Legal basis for data processing	Duration of data processing
Avatar (profile picture), full name, bio text, website address, public email address, Facebook/Twitter/Google+ profile URL.	Personalizing the user profile, enhancing the community experience.	The data subject's voluntary consent (GDPR Article 6(1)(a)).	Until the user account is deleted, or until the data is modified/deleted by the user.

2.3. Comments

(For News, Movies, Books, Bands, Blog posts, Forum)

Data processed	Purpose of data processing	Legal basis for data processing	Duration of data processing
Identifier of the user posting the comment, comment text, timestamp, IP address, possibly uploaded image.	Providing a platform for expressing opinions and community interaction related to the content on the Website.	The data subject's consent (GDPR Article 6(1)(a)).	Until the user account is deleted, or until the comment is deleted by the Data Controller or the user.

2.4. Private messaging

Data processed	Purpose of data processing	Legal basis for data processing	Duration of data processing
Sender and receiver user ID, message subject, text, timestamp, read status, possibly attached image.	Enabling private communication between registered users.	The data subject's consent (GDPR Article 6(1)(a)).	Until the message is deleted by either the sender or the receiver.

2.5. Password reminder function

Data processed	Purpose of data processing	Legal basis for data processing	Duration of data processing
Email address.	Sending a reminder to the registered email address in case of a forgotten password.	The Data Controller's legitimate interest (GDPR Article 6(1)(f)) in providing the service.	Until the password reminder is sent.

2.6. Technical data and cookies

Data processed	Purpose of data processing	Legal basis for data processing	Duration of data processing
Visitor's IP address, browser type, time of visit, pages viewed, cookie identifiers.	Ensuring the proper functioning of the website, security measures, analyzing usage, improving user experience (e.g., keeping users logged in, remembering search history).	The data subject's consent (for cookies) and the Data Controller's legitimate interest (for the secure provision of the service).	Depends on the cookie type (see point 4).

3. Data processors used

The Data Controller uses the following data processors in its activities:

• Hosting provider:
  • Name: Rackhost Zrt.
  • Headquarters: 6722 Szeged, Tisza Lajos körút 41.
  • Activity: Physical storage of the website and its underlying database.
• Analytics service provider:
  • Name: Google LLC
  • Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Activity: Anonymous analysis of website traffic statistics using the Google Analytics service.
• Spam protection:
  • Name: Google LLC
  • Address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
  • Activity: The Google reCAPTCHA service protects the registration form and filters out bots.
• Social media integration:
  • Name: Meta Platforms, Inc.
  • Address: 1601 Willow Road, Menlo Park, CA 94025, USA
  • Activity: Embedding Facebook social modules (e.g., Like button).

4. Cookie management

The Website uses cookies to provide customized service and improve the user experience.

Cookie name	Purpose	Type	Expiration time
USER	Identifies the logged-in user, maintains the session.	Session maintenance	2 years
SEARCH_TAG, SEARCH_CH* etc.	Remembers search criteria for easier browsing.	Functional	30 days
_ga, _gid	Cookies used by Google Analytics to anonymously distinguish visitors.	Analytics	Variable (max. 2 years)

You can disable or delete cookies in your browser, but this may result in limited functionality of some features of the Website.

5. Rights of the data subjects

As a data subject, you have the following rights regarding the processing of your personal data:

• Right to information and access: You can request information about the personal data we process and receive a copy of it.
• Right to rectification: You can request the correction of inaccurate or incomplete personal data. As a registered user, you can mostly do this yourself under the "Settings" menu.
• Right to erasure ("right to be forgotten"): You can request the deletion of your personal data. Deleting your user account will delete most of the associated data. Comments may remain due to their community nature but will be anonymized.
• Right to restriction of processing: In certain cases, you can request that we restrict the processing of your personal data.
• Right to data portability: You can request to receive the data you have provided to us in a structured, commonly used, machine-readable format.
• Right to object: You can object to the processing of your personal data if the processing is based on a legitimate interest.
• Right to withdraw consent: If the data processing is based on your consent, you can withdraw it at any time, which does not affect the lawfulness of the processing before the withdrawal.

To exercise your rights, please contact us at the email address provided above.

6. Legal remedies

If you believe that the processing of your personal data violates the relevant legislation, you can file a complaint with the National Authority for Data Protection and Freedom of Information (NAIH).

• Name: National Authority for Data Protection and Freedom of Information
• Headquarters: 1055 Budapest, Falk Miksa utca 9-11.
• Postal address: 1363 Budapest, Pf. 9.
• Website: http://www.naih.hu

7. Data security

The Data Controller takes appropriate technical and organizational measures to protect personal data, particularly against unauthorized access, alteration, transmission, disclosure, deletion or destruction, and against accidental destruction and damage. This includes storing passwords in a secure, encrypted (hashed) format.

8. Amendment of the policy

The Data Controller reserves the right to unilaterally amend this Privacy Policy. The amendments will take effect upon their publication on the Website.