Controller (Data Controller):
Seven Digits Media Zrt. (“Service Provider,” “we,” “us”)
Registered office / mailing address: 1064 Budapest, Podmaniczky utca 57. 2. em. 14., Hungary
Company registration court: Fővárosi Törvényszék Cégbírósága (Budapest-Capital Regional Court as Court of Registration)
Company registration number: 01-10-140139
Tax number: 26616708-2-42
Contact: [email protected] or via the contact interface on our Website.

Website covered by this Notice: https://7blog.hu (the “Website”).

1. Legal bases, purposes, categories of personal data, and retention periods

We process personal data of Website users, service recipients, and newsletter subscribers (collectively, “Users”) in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (GDPR). Below we set out the applicable purposes, legal bases (GDPR Art. 6), categories of data, and retention.

(I) Use of our services (performance of a contract)

Categories of data: name; address; contact details; email address; telephone number; billing data (tax number, bank account number and bank name; invoice/receipt number).
Purpose: provision of and access to the requested service; fulfillment of the applicable agreement.
Legal basis: GDPR Art. 6(1)(b) (processing necessary for the performance of a contract).
Retention: for the time necessary to perform the contract and, at the latest, until the contractual relationship is closed/terminated (subject to statutory archiving duties that may require longer retention, see “Billing data” below).

(II) Newsletter subscription (marketing communications)

Categories of data: name (family name, given name); email address.
Purpose: sending marketing communications and informational materials regarding new conferences and services; maintaining service quality.
Legal basis: GDPR Art. 6(1)(a) (your consent).
Retention: until consent is withdrawn (i.e., until you unsubscribe). You may unsubscribe at any time using the unsubscribe link in our emails or by emailing [email protected]; upon unsubscribe, we delete newsletter-related personal data and you will no longer receive emails from us.

(III) Billing / invoicing

Categories of data: tax number; bank account number; bank name; invoice/receipt identifiers.
Purpose: issuance and retention of accounting records (invoices, receipts).
Legal basis: GDPR Art. 6(1)(c) (compliance with a legal obligation).
Retention: as required by Act C of 2000 on Accounting (Hungary) Sections 166(1) and 169(1), typically 8–10 years from issuance.

2. Processors and data disclosures

We do not disclose Users’ personal data to third parties, except (i) as required by law or a lawful request from a court or authority; or (ii) where you have been informed in advance and have consented to the disclosure.

Email marketing provider (processor):
ActiveCampaign, Inc.
1 N Dearborn St, 5th Floor, Chicago, IL 60602, United States.
When you subscribe on the Website, you consent to receiving marketing communications. You may withdraw your consent at any time using the unsubscribe link in our emails or by emailing [email protected]; upon unsubscribe, we delete newsletter-related personal data.

Note on international transfers: If personal data is transferred to a country outside the European Economic Area (such as the United States in connection with ActiveCampaign), such transfer occurs in accordance with GDPR Chapter V (e.g., under the European Commission’s standard contractual clauses or other appropriate safeguards). Please contact us for details.

3. Hosting provider

We host the Website with the following provider:

Cloudways Ltd.
52 Springvale, Pope Pius XII Street, Mosta, MST2653, Malta.
The Website operates on this provider’s servers, with backups made for security.
Physical data storage location: Germany, Nuremberg, DataCenter.

4. Use of cookies

We use small data files (cookies) on the Website for User identification and related functionality. Certain cookies are provided by Google and used via Google Analytics. By visiting and using features of the Website, you consent to the storage of such cookies on your device and our access to them.

Cookie duration: typically 30 days. You may configure your browser to block or delete cookies. Please note that disabling cookies may prevent you from using all features of the Website. As a technical participant, we may permit cooperating third parties—particularly Google Inc.—to store cookies when you have previously visited our site in order to display advertisements to you based on that visit. You can delete cookies from your device or configure your browser to block cookies.

5. Your rights with respect to personal data

You may exercise the rights below by submitting the form published on the Website or by contacting us via email. We will provide information on the processing and this Notice without undue delay and in any event within 5 days on where to access the governing rules; and we respond to your access request within 20 days in writing (paper or electronic, depending on how you contacted us). If you object to processing or request restriction, we will implement the restriction within 20 days and notify you electronically of our decision.

Right to rectification

You may request the correction of inaccurate personal data concerning you, and the completion of incomplete personal data, which we will carry out without undue delay.

Right to erasure (“right to be forgotten”)

You may request deletion of your personal data where (for example) you withdraw consent or our contractual relationship has ended and the data are no longer required—provided that erasure does not extend to records we must retain under applicable law (such records cannot be deleted while the legal retention duty applies).

Right to restriction of processing

Upon your request, we will restrict processing where appropriate. If deletion would prejudice your legitimate interests based on the information available to us, we will restrict the relevant data instead. Data marked as “restricted” will be processed only for the purpose or legitimate interest that prevented erasure and for as long as that purpose or interest exists.

Right to data portability

You may request to review the personal data we process about you on a data carrier or in paper form (and, where applicable, to receive such data in a structured, commonly used and machine-readable format and/or transmit those data to another controller under GDPR Art. 20).

Right to withdraw consent

You may withdraw your consent at any time; in that case, we delete the data processed on the basis of consent from our systems. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

We examine user complaints related to data processing and decide on their merits; we will inform you in writing within 30 days. If we decline your request, we will state the factual and legal reasons for refusal.

6. Remedies

If you believe we have violated any legal provision governing data processing or have not fulfilled a request, you may initiate proceedings before the National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság – NAIH):
Head office: 1055 Budapest, Falk Miksa utca 9–11.
Mailing address: 1374 Budapest, Pf. 603.
You may also enforce your rights before a court pursuant to Act V of 2013 (Hungarian Civil Code).

7. Miscellaneous

We reserve the right to unilaterally amend this Notice other than with respect to the legal basis, purpose, or scope of personal data processed. Amendments take effect on the date of publication on https://7digits.net or https://7blog.hu (the earlier of the two publication dates controls).

Effective date of this Notice: June 14, 2018.

U.S.-style interpretive notes (non-substantive)

• Terms used herein such as “controller,” “processor,” “processing,” and “personal data” bear the meanings ascribed in GDPR Art. 4. Where helpful for U.S. readers, “controller” is roughly analogous to a “business” and “processor” to a “service provider” under certain U.S. state privacy laws; however, this Notice is governed by EU and Hungarian law, not U.S. state privacy statutes.
• Nothing in this translation creates rights or obligations beyond those set out in the Hungarian original; references to GDPR and the Hungarian Accounting Act are preserved for accuracy.