Version: 2026-10-24-operations
Draft adapted to the website’s current operation. Retention and legal details are still being finalised.
1. Controller and scope
This notice covers personal data processed when using the NyárFa Dent Academy website, applying for courses and contacting organisers. The website records applications and billing details; payment and invoice issuance take place outside the website.
| Detail | Value |
|---|---|
| Service provider / controller | NyárFa Dent Korlátolt Felelősségű Társaság |
| Registered office and postal address | 7621 Pécs, Hunyadi út 73., Hungary |
| Company registration number | 02-09-078367 |
| Tax number | 23751288-2-02 |
| [email protected] | |
| Telephone | +36 30 595 5942 |
| Training venue | 9023 Győr, Katód utca 1. udvar, Hungary |
Send privacy questions and requests to [email protected] or the postal address above.
2. Course applications and communications
Applications may be submitted without an existing account. On successful recording, we create an account for the contact email or link the application to the existing account. Data is used to process applications, check places and professional eligibility, communicate, generate payment requests and administer invoicing outside the website.
| Category | Data processed |
|---|---|
| Participants | Name, email, optional telephone, profession, professional registration number and country, optional professional goals. |
| Contact person | Name, email, telephone. |
| Payer and billing | Private/company selection, name or company name, company tax number, itemised billing address, optional email and notes. |
| Application | Course, attendance mode, count, fee, currency, deadline, reference, status and course details at application. |
| Declarations | Acceptance of terms, acknowledgement of the notice, optional consents, document versions and timestamp. |
Application data is processed for steps before and performance of a contract (Article 6(1)(b) GDPR); legally required invoicing and accreditation data is processed under Article 6(1)(c). Company contact details are processed under legitimate interests in course organisation (Article 6(1)(f)). Acknowledging this notice is not general consent to processing.
Without required details we cannot record an application. Anyone providing another person’s details must inform them. Request corrections or changes at [email protected].
Account data includes email, name, password hash, verification and sign-in details. New accounts receive an expiring single-use password setup link by email; only a hash of the token is stored. Linking the account and application supports pre-contract steps and communication under Article 6(1)(b) GDPR, or Article 6(1)(f) for company contacts. Account deletion may be requested from the controller, subject to mandatory retention of application and accounting data.
3. Offline payment and invoicing
The form stores payer and billing details with the application. Administrators can generate a payment request PDF and record dispatch, payments and refunds. Each generated request is retained as a separate document version. The system issues no tax invoices and has no online card payment. The provider issues invoices outside the website.
We do not request or store card numbers, CVC codes or online banking credentials. Retaining offline invoices and accounting records is the provider’s accounting obligation and differs from retention of website applications.
4. Optional information and consent
The newsletter checkbox records consent to notifications about future courses. The website currently sends no automated newsletters and has no connected newsletter delivery service. Withdraw consent at any time at [email protected]; this does not affect the lawfulness of earlier processing.
Photo/video consent is available only for courses enabling it. The website records the choice; organisers handle recording at the event. Public use requires information and appropriate consent covering its purpose and place; the checkbox is not unlimited publication permission.
Dietary preferences may be entered only for courses offering meals. Provide only the preference needed for catering; do not send diagnoses, patient information or other health data. Discuss special health needs separately with organisers. Leaving optional fields and checkboxes empty does not prevent applying.
5. Cookies and external maps
Cookie settings offer necessary, preference, analytics and marketing categories. Optional categories are denied by default. Change your choice at any time using the cookie settings button in the footer.
| Item | Behaviour and lifetime |
|---|---|
| starter_consent | Remembers cookie choices and policy version for 180 days. |
| Language selection | Language is encoded in the page address; no separate language cookie is enabled. |
| Sign-in cookie | Used only when signing in; not required for applications. Expires in line with the issued access. |
| Analytics | No analytics tracking code is currently connected. Enabling the category alone starts no tracking. |
| Google Maps | The external map loads only after it is explicitly opened and marketing consent is granted. |
Necessary technical storage supports operation and remembering choices; optional external content is based on consent. Loading Google Maps connects directly to Google and may transmit IP address and browser details. External map links take you to Google’s own website under Google’s privacy terms; its processing may involve transfers outside the EU.
6. Processors, access and security
Hosting and email provider: RackForest Informatikai Kereskedelmi Szolgáltató és Tanácsadó Zrt.; address: 1132 Budapest, Victor Hugo utca 11., 5. em. B05001., Hungary; telephone: +36 1 211 0044; website: https://rackforest.com.
RackForest may process website, database and email data necessary for operation as a processor. Authorised organisers may access applications, record administration, payments, participant replacements and follow-ups, and export participant data with permission. Changes and exports are audited. Billing details may enter the provider’s offline invoicing and accounting processes; no external invoicing or payment provider is directly integrated.
For accredited courses, necessary participant details may be used for certificates and credit administration. Authorities may receive data on a legal basis or substantiated official request. We do not sell data or carry out advertising profiling; place and eligibility checks examine technical application conditions and can be queried with organisers.
The system protects administrative actions with authorisation checks and stores passwords in a non-readable form. Course, price and declaration details are recorded with applications for subsequent reconciliation.
7. Retention periods
| Category | Retention |
|---|---|
| Application, declarations, correspondence | 5 years after the course to resolve contractual claims; data needed for a dispute may be kept until it ends. |
| Offline accounting records | 8 years under accounting rules, in invoicing records kept outside the website. |
| Standalone enquiries | 1 year after closure, unless a contract or legal obligation justifies longer retention. |
| Optional notification consent | Until withdrawal; evidence may be kept as necessary for legal claims. |
| Cookie choices | 180 days, or until deleted from the browser earlier. |
At the end of retention, data without a further legal basis must be deleted or anonymised. The website offers no self-service deletion; organisers handle requests. Exact retention rules for accreditation records and operational logs must be finalised before launch.
8. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests and withdraw consent. Erasure does not affect legally required retention.
Send requests to [email protected]. We respond without undue delay, normally within one month; where necessary, we inform you within that period of any extension and reasons permitted by the GDPR. We may verify your identity to the extent necessary to fulfil the request.
9. Complaints and remedies
You may raise concerns with the controller, complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), or bring court proceedings.
| NAIH | Contact |
|---|---|
| Address | 1055 Budapest, Falk Miksa utca 9–11., Hungary |
| Postal address | 1363 Budapest, Pf. 9., Hungary |
| Telephone | +36 1 391 1400 |
| [email protected] | |
| Website | https://www.naih.hu |
10. Changes to this notice
We update this notice when operation changes. New online payment, invoicing, newsletter or analytics services require the corresponding information and settings before introduction. We retain the version acknowledged at application. The English version is informative; the Hungarian text prevails in the event of discrepancies.