Kvan Um Zen Hungary
|
Effective date |
Version |
Website |
|---|---|---|
|
19 September 2026 |
2.0 |
This notice provides information about the processing of personal data and the use of cookies in connection with the https://kvanumzen.hu website operated by the informal community Kvan Um Zen Hungary, as well as in connection with the community's newsletter.
Its purpose is to explain in clear language what data we process, for what purposes and on what legal bases, how long the processing lasts, which parties are involved, and how data subjects may exercise their rights.
1. Details of the Data Controller
|
Item |
Details |
|---|---|
|
Data Controller |
Kvan Um Zen Hungary, an informal community |
|
Contact person |
Fruzsina Jékey, administrator of the community newsletter |
|
|
|
|
Postal address |
1145 Budapest, Gyarmat utca 5/B, Hungary (Budapest Zen Center) |
|
Website |
The contact person may be contacted regarding data protection questions, data subject requests and the withdrawal of consent.
2. Technical Data Processing Related to Website Operation
When the website is visited, the server may process technically necessary log data. This may include, in particular, the IP address, the time of the request, the address of the page visited, the type of browser and operating system, the referring page, and technical data concerning the server response.
The purposes of this processing are to ensure the secure and stable operation of the website, identify faults, prevent misuse and maintain IT security. The legal basis is the legitimate interest of the Data Controller under Article 6(1)(f) GDPR. Log data are processed only for as long as necessary for operation, troubleshooting and security.
Hosting provider and processor: Tárhely.Eu Szolgáltató Kft. (registered office: 1144 Budapest, Ormánság utca 4, 10th floor, unit 241, Hungary; company registration number: 01-09-909968; tax number: 14571332-2-42; email: support@tarhely.eu). Privacy notice: tarhely.eu/dokumentumok/adatvedelmi_szabalyzat.pdf.
3. Cookies and Similar Technologies
A cookie is a small data file that a website may place on or read from a visitor's device. Some cookies are necessary for the operation of the website, while others are associated with analytics or external services.
3.1. Necessary Cookies
Technically necessary cookies support core functionality, session management, security and the storage of the visitor's cookie choice. We do not request separate consent for their use.
|
Cookie / identifier |
Purpose |
Duration |
|---|---|---|
|
cookie-agreed |
Stores whether cookies were accepted or declined. |
100 days |
|
adaptive_image |
Technical data required to serve responsive images correctly. |
Session |
|
SESS… / SSESS… |
Manages the logged-in user session and security, where applicable. |
Session or as configured by the website |
3.2. Analytics Cookies and Google Analytics
The website uses Google Analytics 4 only after the visitor has given prior consent. Its purpose is to produce aggregated website traffic and usage statistics so that the content and operation of the website can be improved.
Provider: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Measurement ID: G-LZ5Y74ETFE. Depending on the settings, the service may process online identifiers, approximate location data, device and browser information, pages visited, events and timestamps.
Legal basis: consent under Article 6(1)(a) GDPR. Declining consent does not restrict the essential use of the website. Consent may be withdrawn later; withdrawal does not affect the lawfulness of processing carried out before withdrawal.
|
Cookie |
Purpose |
Typical duration |
|---|---|---|
|
_ga |
Distinguishes visitors for statistical purposes. |
Up to 2 years; the browser may impose a shorter period |
|
_ga_LZ5Y74ETFE |
Maintains the Google Analytics session state. |
Up to 2 years; the browser may impose a shorter period |
The Google Analytics event-data retention period is 2 months, and the user-data retention setting is 14 months. New user activity may reset the user-data retention period. Aggregated annual reports are not lost as a result of these settings.
Google privacy information: policies.google.com/privacy; policies.google.com/technologies/partner-sites.
3.3. Acceptance, Decline and Withdrawal
On the first visit, the cookie banner allows the visitor to accept or decline non-essential cookies. Declining is as readily available as accepting. Non-essential technologies are loaded only after acceptance. The choice may later be changed in the cookie settings or removed by deleting it from the browser.
4. External Content and Social Media Services
The website may display Facebook/Meta-related elements and YouTube videos. When such content is loaded, the external service provider may receive technical data, such as the IP address and device and browser information, and may use cookies or other identifiers in accordance with its own policies.
Before the visitor gives consent, Facebook and YouTube embeds are replaced by a locally generated notice. If consent is declined, they are not loaded. After consent is granted, they may be enabled without reloading the page. If the browser's tracking protection continues to block the Facebook box after consent, a direct Facebook link is displayed.
- Meta Platforms Ireland Limited: facebook.com/privacy/policy
- Google/YouTube: policies.google.com/privacy
5. Newsletter and Mailchimp
The newsletter provides news and information about Zen practice events, community programmes, initiatives and Dharma talks delivered at past events.
The purpose of processing is to send the newsletter to the voluntarily provided email address. The legal basis is consent under Article 6(1)(a) GDPR. Consent is voluntary and may be withdrawn at any time, free of charge.
Categories of Personal Data Processed
- name, if provided by the subscriber;
- email address;
- the time and IP address of subscription, which may be logged by Mailchimp;
- the fact of consent and unsubscription, and technical data related to delivery.
The subscription form is displayed using local styles. When the page is opened, it does not load Mailchimp CSS or validation JavaScript files and does not initiate a request to Mailchimp. Data are transferred only when the visitor knowingly submits the form. Consent to receive the newsletter is separate from consent to analytics cookies.
The newsletter is distributed through Mailchimp, a service belonging to the Intuit group. Privacy statement: intuit.com/privacy/statement. International transfers may take place subject to appropriate safeguards under Chapter V GDPR.
The data are processed until consent is withdrawn or the subscriber unsubscribes, unless a legal obligation or the establishment, exercise or defence of legal claims justifies further retention for a limited period. Subscribers may unsubscribe using the link in the footer of any newsletter or by sending a request to kvanumzen@gmail.com.
6. Contact Requests
If a visitor contacts the community by email or through the contact form, the name, email address and any other data provided in the message are processed for the purpose of responding to the enquiry. Depending on the nature of the enquiry, the legal basis may be consent, steps taken at the request of the data subject prior to entering into a contract, or legitimate interest. The data are retained for 1 year after the enquiry is closed, unless a legal claim or applicable law requires a longer retention period.
7. Processors and Data Transfers
|
Service provider |
Function |
Further information |
|---|---|---|
|
Tárhely.Eu Szolgáltató Kft. |
Web hosting, server operation and technical logging |
|
|
Mailchimp / Intuit |
Newsletter distribution and management of the subscriber list |
|
|
Google Ireland Limited |
Google Analytics after consent; YouTube as external content |
|
|
Meta Platforms Ireland Limited |
Facebook embed after consent |
If a service provider also processes data outside the European Economic Area, the transfer may take place only subject to appropriate safeguards under Chapter V GDPR, such as an adequacy decision or standard contractual clauses.
8. Data Security
The Data Controller applies technical and organisational measures appropriate to the risks of processing to protect personal data against unauthorised access, alteration, transmission, disclosure, deletion, damage or loss. Access is restricted to authorised persons, the website and its extensions are kept up to date, and backups are used where justified.
9. Rights of Data Subjects
Where the applicable legal requirements are met, the data subject may:
- request information about the processing and obtain access to their personal data;
- request the rectification or completion of inaccurate personal data;
- request the erasure of personal data or restriction of processing;
- exercise the right to data portability where automated processing is based on consent or a contract;
- object to processing based on legitimate interests;
- withdraw consent at any time;
- lodge a complaint with the supervisory authority or seek a judicial remedy.
Requests may be sent to kvanumzen@gmail.com. The Data Controller will respond without undue delay and, as a rule, within one month. Where necessary, this period may be extended by a further two months; the data subject must be informed of any such extension.
10. Remedies
If a data subject considers that the processing of their personal data infringes applicable law, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
- Registered office: 1055 Budapest, Falk Miksa utca 9-11, Hungary;
- Website: https://www.naih.hu;
- Postal address and further contact details: as published on the NAIH website from time to time.
The data subject may also seek a judicial remedy. At the data subject's choice, proceedings may also be brought before the competent court for the place of their residence or habitual residence.
11. Amendments to This Notice
The Data Controller may amend this notice to reflect changes in the operation of the website, its service providers or the legal environment. The current version will be published on the website together with its effective date. In the event of a material change, visitors will be appropriately informed and, where necessary, fresh consent will be requested.