The protection of personal data is extremely important to me. Therefore, in this Privacy Policy, I will explain what personal data I process about you, for what purpose, and on what legal basis. The Privacy Policy also includes your rights related to the processing of your personal data.
Controller: Dr. Marcell Adorján sole proprietor (hereinafter: Controller)
Headquarters: 1182 Budapest, Dráva street 39.
Registration Number: 60108300
Tax Number: 90772838-1-43
EU VAT identification number: HU90772838
Email Contact mutecode@mutecode.co.uk
Personal Data: Any information relating to an identified or identifiable natural person ("Data Subject"); a natural person is considered identifiable if they can be identified, directly or indirectly, particularly by reference to an identifier such as a name, number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person. Typical personal data include: name, address, place and date of birth, mother's maiden name.
Data Processing: Any operation or set of operations performed on personal data or sets of personal data, whether automated or not, such as collection, recording, organization, structuring, storage, transformation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Data Controller: The natural or legal person, public authority, agency, or any other body which, alone or jointly with others, determines the purposes and means of processing personal data; if the purposes and means of processing are determined by Union or Member State law, the Data Controller or the specific criteria for the designation of the Data Controller may also be determined by Union or Member State law.
Data Processor: The natural or legal person, public authority, agency, or any other body which processes personal data on behalf of the Data Controller.
Recipient: The natural or legal person, public authority, agency, or any other body to whom or with whom personal data is disclosed, regardless of whether they are a third party.
In the processing of personal data, the Data Controller adheres to the following principles, ensuring that personal data:
| Data Category | Purpose | Legal Basis | Retention Period |
|---|---|---|---|
| Name, email | Registration, login | Contract performance (GDPR 6.1.b) | As long as the account is active |
| Google email | When logging in with Google | Contract performance (GDPR 6.1.b) | As long as the account is active |
| Billing details (name, address, phone number) | Invoicing via Stripe + Billingo → NAV | Legal obligation (GDPR 6.1.c), Accounting Act § 169 | 8 years according to Accounting Act § 169 (1) and (2) |
| Stripe customer ID, subscription ID | Payment processing | Contract performance (GDPR 6.1.b) | As long as the account is active |
| Transactions (revenue, expense, saving), goal (amount, date, name), plans data recorded by the user | Financial record keeping | Contract performance (GDPR 6.1.b) | As long as the account is active |
If the account is deleted, all data will be deleted except for invoices, which must be kept according to Hungarian regulations.
Az alábbi szolgáltatók adatfeldolgozóként működnek:
The Data Controller has access to personal data to the extent necessary for performing their duties.
The Data Controller ensures the protection of the personal data they process through appropriate IT, technical, and organizational measures, including protecting the data against unauthorized access or unauthorized alteration.
| Data Subject Right Related to Data Processing | Content of the Data Subject's Right Related to Data Processing |
|---|---|
| Right to Information (GDPR Articles 13-14) | You have the right to be informed about the processing of your personal data at the time of its collection. The Data Controller will provide additional information to ensure fair and transparent data processing, considering the specific circumstances and context of the personal data processing. You must also be informed about the fact of profiling and its consequences. |
| Right of Access (GDPR Article 15) |
You have the right to request information regarding whether your personal data is being processed. If such processing is ongoing, you are entitled to know the following:
|
| Right to Rectification /GDPR Article 16/ | You have the right to request the Data Controller to rectify inaccurate personal data concerning you or to complete incomplete personal data. This means that you can ask the Data Controller to modify any of your personal data (for example, you can change your email address or other contact details at any time). |
| Right to Erasure ("Right to be Forgotten") /GDPR Article 17/ |
You have the right to request the Data Controller to delete your personal data if any of the following reasons apply:
|
| Right to Restriction of Processing (Article 18 of the GDPR) |
You are entitled to request that the Data Controller restrict the processing of your personal data if any of the following reasons apply:
|
| Right to Data Portability /GDPR Article 20/ |
You are entitled to receive the personal data concerning you, which you have provided to a Data Controller, in a structured, commonly used, machine-readable format, and you are also entitled to transmit those data to another Data Controller without hindrance from the Data Controller to whom you have provided the personal data, if:
|
| Right to Object /GDPR Article 21/ | You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) or (f) of the GDPR, including profiling based on those provisions. In this case, the Data Controller may no longer process your personal data unless the Data Controller demonstrates that the processing is based on compelling legitimate grounds that override your interests, rights, and freedoms, or is related to the establishment, exercise, or defense of legal claims. If the processing of your personal data is for direct marketing purposes, you are entitled to object at any time to the processing of your personal data for such marketing purposes, including profiling to the extent that it is related to direct marketing. |
| Right to Withdraw Consent /GDPR Article 7(3)/ | You have the right to withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Before granting consent, you must be informed about this right. The withdrawal of consent must be as easy to perform as giving the consent. |
| Remedy | Description of the Remedy |
|---|---|
| Right to lodge a complaint with a Supervisory Authority /GDPR Article 77/ | If you believe your rights related to the protection of personal data have been violated, you may lodge a complaint with the following Authority: National Authority for Data Protection and Freedom of Information Headquarters: 1055 Budapest, Falk Miksa Street 9-11. Mailing address: 1363 Budapest, P.O. Box 9. Phone: +36 (1) 391-1400 Email: ugyfelszolgalat@naih.hu Website: www.naih.hu |
| Right to an effective judicial remedy against the Data Controller or Processor (initiation of judicial proceedings) /GDPR Article 79/ | You have the right to take legal action against the Data Controller or Processor if you experience unlawful processing of your personal data. The court will handle the case as a matter of priority. In this case, you can freely choose whether to submit your claim to the court of your domicile or residence. The contact details of the courts: https://birosag.hu/torvenyszekek |
This privacy notice is governed by the laws of Hungary, and in the event of any legal dispute, Hungarian courts shall have jurisdiction.
The Data Controller reserves the right to amend this Privacy Notice unilaterally. The notice may be amended particularly in the case of changes in legislation, data protection authority practices, business needs, or other circumstances.