Privacy Policy

Last updated: 20 September 2026

1. Data Controller

Controller: Reménység Catholic Primary School and Kindergarten, registered address: 1196 Budapest, Petőfi utca 56., Hungary, national school registry ID (OM): 035147, contact: titkarsag@rekaisk.hu, +36-1/282-9633.

The school is maintained by: Budapesti Katolikus Intézményfenntartó Központ (EKIF), 1071 Budapest, Damjanich utca 48., Hungary, tax number: 18611674-1-42.

No DPO is required for this organization; please use the contact details above.

2. What data we process

Account data: name, email address, password (stored encrypted), preferred language, school branch (where relevant).

Booking data: reservations made on booking boards (which slot, who booked it, the assigned resource person).

Uploaded content: images and documents uploaded through the page editor, and their descriptive metadata.

Technical data: login session and language-preference cookies — see the Cookie Policy.

3. Legal basis and purpose

Account creation and login: performance of a contract (GDPR Art. 6(1)(b)).

Use of the booking system: performance of a contract / legitimate interest (GDPR Art. 6(1)(b), (f)).

Notifications (email, browser push): consent, freely withdrawable at any time (GDPR Art. 6(1)(a)).

4. Data transfers and processors

Email delivery: via the mail server operated by Tárhely.Eu Szolgáltató Kft., and via Google (Gmail) for certain system messages.

Machine translation, where enabled by the school: Google Cloud Translation (Google Ireland Ltd.), and mdnd-it's (the developer's) own language model (LLM), hosted in Hungary — the latter involves no transfer outside Hungary.

Google sign-in and Google Calendar integration, where enabled by the school: Google Ireland Ltd.

Transfers linked to Google's services are safeguarded under Google's data processing terms, which incorporate the EU Standard Contractual Clauses.

5. Retention periods

Account data: until account deletion, or promptly on request (see Section 6).

Booking data: until the booking board or the individual booking is deleted — the system does not currently run an automatic purge process for this data; it is removed by an administrator.

Trashed items: permanently deleted only by a manual action from a SUPERADMIN — no automatic, scheduled purge is currently configured.

6. Your rights

Access, rectification, erasure, data portability, objection, and withdrawal of consent under GDPR Articles 15–21.

You can self-service export your data or delete your account from the profile menu's "My Data" tab.

You may lodge a complaint with your national data protection authority, or the courts.