Privacy Policy

How Your Data Is Handled

The purpose of this Policy is to ensure the protection of natural persons' data as required by law, to set out the rules relating to the processing of personal data and to lay down the standards of data protection and data security.

This privacy statement governs the processing of personal data by the website fullpotential.academy and summarises the data processing principles and practices of the controller of this website. The operator of the fullpotential.academy website, Kalmár András e.v., is entitled to obtain and process the personal data of clients in order to provide the services provided for in the contract and to fulfil obligations undertaken, in accordance with the provisions of the GDPR Regulation and other applicable legislation.

In drafting this Policy, account has been taken of the relevant legislation in force, in particular: REGULATION (EU) 2016/679 (GDPR), Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.), Act V of 2013 on the Civil Code, Act CLV of 1997 on Consumer Protection, Act C of 2000 on Accounting, and Act CVIII of 2001 on electronic commerce services.

Data Controller

Identity of the data controller

Company name: Kalmár András e.v.
Address: Kőporos utca 1. 1/2., Miskolc, 3531, Hungary
Tax number (VAT): HU69445394
Electronic contact: info@fullpotential.academy
Represented by: Kalmár András

Hosting provider

Name: HostVerge
Website: hostverge.com
Server location: United States
Email: support@hostverge.com

Data processed

Scope of processed data and stakeholders

In order for you to receive appropriate service or information, you may be required to consent to the processing of your personal data. In the absence of this, it may happen that the requested information or service cannot be provided.

We process sensitive personal data only with your express consent. Sensitive data can include: religion, political opinions, union membership, sexual orientation, health information, biometric data, and genetic data.

The general purposes of processing personal data include: identification of the Customer, exercising rights and fulfilling obligations contained in the contract, information and marketing related to transactions or Company activities, settlement according to the legal relationship, and contact.

Personal data is information that enables the identification of individuals, such as:

• Name and contact information (home address, e-mail address, phone number)
• Profile information (username, profile picture, social media account information)
• Date and place of birth
• Certain technical data (IP address, browser and device information, cookies)
• Credit and debit card number (in case of bank card payment, only the payer's ID, transaction amount, date and time are forwarded to the Bank)

We also collect data about the use of our services through a browser, including tracking your activity on our websites and collecting data about your IP address, screen resolution, operating system, browser type and version.

Online contact

Online enquiries via the Contact form

Scope of processed data: name, address, phone number, email address.

Purpose of data management: later contact for information about products and services via email and phone.

Duration of data management: 5 years.

Ordering a product and issuing an invoice

Legal basis: Act CXII of 2011 (Infotv.) and Act C of 2000 on Accounting. Purpose: issuing an invoice in accordance with legislation and fulfilling accounting obligations.

Scope of processed data: name, address, e-mail address, phone number, date of birth, and in case of purchase by a legal entity, tax number.

Duration of data management: invoices must be kept for 8 years from the date of issue in accordance with the Accounting Act. Even if you withdraw your consent to the issuance of the invoice, the Data Controller is entitled to keep your personal data obtained during the issuance of the invoice for 8 years.

Community sites and messaging applications

We may receive your personal data from social media sites (Facebook, Instagram, Pinterest, YouTube, LinkedIn, TikTok) or from other messaging applications (Messenger, WhatsApp, Viber, Signal, Telegram). When you connect to one of these services with your social media account, the data you provided during registration may be shared with us.

When using social networking sites, data management takes place on the social networking sites themselves, so the regulation of the given social networking site applies to the duration and method of data management.

The scope of data collected from social media: registered name, address, phone number, email address and public profile picture. For messaging applications: phone number, public profile picture, email address.

Use of data

How we use your personal data

The purpose of processing your personal data is to fulfil orders, including the use of the ordered services. This includes all customer service and administrative services that enable the fulfilment of your contract.

The scope of use of your personal data enables:

• The possibility of contacting you and fulfilling our contract, to the extent necessary for this.
• The provision of services in which information and other materials become accessible to you.
• Analysing your previous activity in order to provide you with even better offers through customised campaigns. You can unsubscribe from these campaigns at any time via info@fullpotential.academy or via the unsubscribe link in marketing materials.

User data can only be accessed by employees of the data controller and cannot be disclosed to third parties, with the exception of bank card payments. Apart from this, the data controller transmits user data to requesting authorities solely out of legal obligation, if the referred authority has the appropriate legal basis.

Your rights

Rights of data subjects

The data is processed on the basis of the user's approval. The data subject has the following rights:

• Right of access – you can request information about your personal data and how it is handled.
• Right to rectification – you can request the correction of your data or the addition of incomplete data, which will be carried out immediately, within 3 working days at the latest.
• Right to erasure ("right to be forgotten") – the Company will delete your personal data immediately, within 3 working days, for the reasons specified in the Data Protection Decree, unless the data is necessary for fulfilling contractual or legal obligations.
• Right to restrict data processing – data management may be restricted based on your request.
• Right to data portability – you have the right to request the transmission of your personal data in a widely used, machine-readable format.
• Right to withdraw consent – you can withdraw your consent at any time. The revocation does not affect the legality of data processing based on consent prior to the revocation.

Requests for additional information or data deletion can be sent to info@fullpotential.academy. The data provided by the user will be deleted within 25 working days upon written initiative.

The consent of the legal representative exercising parental supervision is required for the consent-based management of the personal data of minors.

Data sharing

When we share your personal data

We may share your personal data in the following cases:

• In accordance with applicable laws.
• In possible legal proceedings.
• When contacting state and government bodies.
• In order to enforce contractual conditions or protect our rights.
• With partners who carry out the purchased service (employees, subcontractors) for the purpose of providing the service.

Under no circumstances can the Data Controller be held responsible for the actions, websites or links of third parties. The presence of a link on the website does not mean endorsement of the site to which the link leads.

Remedies

Remedies and applicable laws

If you consider that the Company has violated applicable data protection requirements when handling your personal data, you can:

• Submit a complaint to the National Data Protection and Freedom of Information Authority:
  1055 Budapest, Falk Miksa utca 9-11. | Postal address: 1363 Budapest, Pf. 9.
  ugyfelszolgalat@naih.hu | naih.hu
• Go to court in order to protect your data, which will act out of turn. You are free to decide whether to file your claim with the court according to your place of residence or the seat of the Company (Court of Miskolc).

The Data Controller reserves the right to unilaterally change this Policy at any time. Customers will be notified of any changes in due time via the website.