Legal information
Privacy notice
Effective from: 24 September 2026 · Version: 1.0
This notice describes what personal data the Titán Kick-box és Szabadidő Sportegyesület (Titán Kickboxing and Leisure Sports Association) processes in connection with its kids' kickboxing programme, for what purpose, for how long, and what rights you have. The Hungarian version is the authoritative one; this English version is provided for convenience.
Because the children joining our programme are minors, we process their parents' data and some of the children's data too. We take this seriously and have tried to explain clearly what we do.
1. Who processes your data
- Data controller:
- Titán Kick-box és Szabadidő Sportegyesület
- Registered office:
- Eötvös utca 51, 1067 Budapest
- Registration number:
- 13-02-0005870
- Tax number:
- 18137453-1-42
- Represented by:
- Gábor Juhász, President
- Email:
- info@titankidz.hu
- Phone:
- +36 70 294 0435
- Website:
- https://titankidz.hu
The association is not required to appoint a data protection officer and has not appointed one. For data protection questions, please contact us using the details above.
2. What data we process and why
2.1 Signing up for a free trial session
- Data processed: the parent's name, email address and phone number; the child's first name and age; the child's nickname (optional); the chosen training time; any notes written by the parent
- Purpose: receiving the sign-up, informing the parent by email, and placing the child in the right age group
- Legal basis: GDPR Article 6(1)(b) — steps taken at the request of the data subject prior to entering into a contract
- Retention period: if the child does not become a member of the club, 1 year from the sign-up, after which the data is deleted. If they become a member, the data is transferred to the membership register (section 2.2).
Please do not enter any health information (illness, allergy, previous injury) in the notes field. We ask about these on paper when your child enrols, because stricter rules apply to them.
2.2 Membership register
- Data processed: the child's name, year of birth, the group they attend, attendance data; the parent's name and contact details; payment details (amount, period, method and date of payment)
- Purpose: managing membership, organising training, and keeping records of membership fees and passes
- Legal basis: GDPR Article 6(1)(b) — performance of a contract; for accounting records, Article 6(1)(c) — legal obligation
- Retention period: 5 years from the end of membership. Accounting records are kept for 8 years under section 169 of Hungarian Act C of 2000 on Accounting.
2.3 Newsletter
- Data processed: name, email address
- Purpose: information about breaks, camps, competitions and club events
- Legal basis: GDPR Article 6(1)(a) — consent, in line with section 6 of Hungarian Act XLVIII of 2008 on commercial advertising
- Retention period: until consent is withdrawn
You have to subscribe to the newsletter separately — signing up for a trial session does not in itself mean we will send you a newsletter. Every newsletter has an unsubscribe link at the bottom, and you can unsubscribe at any time without giving a reason.
2.4 Photos and videos
- Data processed: photos and videos taken at training sessions and competitions in which the child can be recognised
- Purpose: presenting the club on the website and on social media
- Legal basis: GDPR Article 6(1)(a) — consent; under section 2:48 of the Hungarian Civil Code, using a person's image requires the consent of the person concerned, or of the legal guardian in the case of a minor
- Retention period: until consent is withdrawn
Consent is voluntary, and refusing or withdrawing it has no negative consequences: your child can still attend training in exactly the same way. If you withdraw it, we will remove the image from the website and the club's social media pages. For images that others have already shared, we can only act on our own channels.
2.5 Running the website
- Data processed: IP address, browser and device data, time of visit — in the hosting provider's logs
- Purpose: operating the website securely, preventing abuse and denial-of-service attacks
- Legal basis: GDPR Article 6(1)(f) — legitimate interest in operating the website securely
- Retention period: TO BE COMPLETED: the hosting provider's log retention period
3. Children's data
Our programme is for children aged 6–14, so some of the people concerned are minors.
- The sign-up form is filled in by the parent or another legal guardian, in their own name and on the child's behalf.
- We ask for as little data about the child as possible: at sign-up, only their first name and age, because we need these to place them in the right group.
- For processing based on consent (newsletter, photos), the consent of the legal guardian is required for children under 16.
- We do not collect health data (illness, allergy, injury, medication) online. If such information is needed for safety in training, we ask for it on paper when the child enrols and keep it locked away.
4. Who we share data with
We do not sell data, and we do not share it with third parties for marketing purposes. To operate, however, we use service providers (data processors) who act on our instructions:
| Provider | What it does | Location |
|---|---|---|
| TO BE COMPLETED: hosting provider | running the website | Sweden |
| Supabase, Inc. | database service (storing sign-ups) | Amazon Web Services, us-west-2 (Oregon, USA) |
| Resend (Plus Five Five, Inc.) | sending emails (confirmations, notifications) | United States of America |
In addition, we may disclose data to an authority or court if the law requires us to.
Transfers outside the European Union
Some of our providers are based in the United States. Such transfers are based on the European Commission's adequacy decision on the EU–US Data Privacy Framework or — where this does not apply — on the Standard Contractual Clauses (SCC) adopted by the Commission. We have concluded a data processing agreement with each provider.
5. Cookies
The site does not use any analytics or advertising tools.
The website currently does not use tracking cookies, only storage that is strictly necessary for it to work (for example, keeping you signed in on the admin area). Under the law, we do not need to ask for consent for these, and they cannot be used to identify individual visitors.
6. How we protect your data
- The website runs over an encrypted connection (HTTPS).
- The database holding sign-up data is set up so that nobody can view submitted sign-ups without signing in — the form can only submit data, not read it.
- Only those who need the data for their work have access to it: the coach and the association's authorised representative.
- We have concluded data processing agreements with our providers.
7. Your rights
Under the GDPR, you have the following rights:
- Information and access — you can ask whether we process data about you and, if so, what data, for what purpose and for how long; you can request a copy.
- Rectification — if any data is inaccurate or incomplete, you can ask us to correct it.
- Erasure — you can ask us to delete your data if it is no longer needed or if you have withdrawn your consent. We cannot delete data that the law requires us to keep.
- Restriction of processing — in certain cases, you can ask us only to store the data but not use it.
- Data portability — you can receive the data you provided, processed electronically on the basis of consent or a contract, in a machine-readable format.
- Objection — you can object to processing based on legitimate interest.
- Withdrawing consent — you can withdraw your consent to the newsletter and to photos at any time, without giving a reason. Withdrawal does not affect the lawfulness of processing before it.
How to exercise these rights: write to the email address above. We will reply within one month at the latest. If the request is complex, this deadline may be extended by two months, and we will let you know in good time. Replying is free of charge.
8. Complaints and remedies
If you feel that our data processing is unlawful, please contact us first — most things can be cleared up with a single email.
You can also lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
- Address:
- Falk Miksa utca 9–11, 1055 Budapest
- Postal address:
- 1363 Budapest, Pf.: 9.
- Phone:
- +36 (1) 391 1400
- Email:
- ugyfelszolgalat@naih.hu
- Web:
- naih.hu
You can also go to court: you may bring proceedings before the regional court of your place of residence or stay.
9. Changes to this notice
If our services or the tools we use change, we will update this notice. The current version is always available on this page. We will also notify newsletter subscribers of any significant change by email.
Effective from: 24 September 2026 · Version: 1.0 · Back to the home page