Privacy Policy

Last updated: 21 October 2026

This policy explains what personal data is processed when you visit irccf.org or contact us, why, and what rights you have. It is provided under Articles 13 and 14 of the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller of your personal data is:

IRCCF Licensing Ltd.
Registered seat: Toldi utca 4, 3066 Kutasó, Hungary
Registration number: 12-09-012417 (Company Registry Court of the Balassagyarmat Regional Court)
Tax number: 25469118-1-12
Email: hello@irccf.org

We have not appointed a data protection officer, as our activities do not require one. For any privacy question, write to the email address above.

2. What we process and why

Visiting the website

When you open irccf.org, our hosting provider Cloudflare processes technical data that every website visit involves: your IP address, browser and device type, the page requested, the referring page and the time of the request.

• Purpose: delivering the website to you and protecting it against attacks and abuse.
• Legal basis: our legitimate interest in running a secure, working website (GDPR Article 6(1)(f)).
• Retention: Cloudflare keeps these logs only for as long as needed for security and operation, under its own retention rules. We do not use them to identify visitors.

Website analytics (only with your consent)

If you click Accept in the cookie notice, we use Google Analytics 4 to understand how visitors use the site, for example which pages are viewed and which project links are clicked. Google Analytics then collects a pseudonymous identifier stored in a cookie, the pages you view and links you click, your approximate location (country or city, derived from your IP address, which Google Analytics does not store), your device and browser type, and the page that referred you.

• Purpose: measuring and improving how the website is used.
• Legal basis: your consent (GDPR Article 6(1)(a), and Section 155(4) of Hungarian Act C of 2003 on Electronic Communications for storing cookies on your device).
• Retention: Google Analytics keeps event-level data for 2 months. The analytics cookies expire after up to 2 years.
• Withdrawing consent: click Cookie settings at the bottom of any page and choose Decline at any time. Analytics stops and its cookies are removed. Withdrawal does not affect processing that happened before it.

Nothing is collected by Google Analytics if you decline or ignore the cookie notice. We do not use analytics data for advertising, and advertising storage and personalisation are switched off.

Contacting us by email

If you email us, we process your name, email address and whatever you include in your message.

• Purpose: answering your message and handling your request.
• Legal basis: our legitimate interest in replying to enquiries (GDPR Article 6(1)(f)), or taking steps towards or performing a contract with you where your message relates to one (Article 6(1)(b)).
• Retention: as long as needed to deal with your request, and no longer than 1 year after our correspondence ends, unless a longer period is required by law, for example accounting rules.

3. Cookies and browser storage

The two irccf.org entries stay in your browser and are never sent to us. Cloudflare may also set a strictly necessary security cookie (such as cf_clearance) if it has to check that a visitor is human.

4. Who receives the data

We use the following service providers, who process data on our behalf under data processing agreements:

• Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA: website hosting, content delivery and security.
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, together with Google LLC, USA: website analytics, only with your consent.
• Websupport Magyarország Kft., Fehérvári út 97-99., 1119 Budapest, Hungary (company registration number 01-09-381419, websupport.hu): email hosting, receiving and storing messages sent to hello@irccf.org.

We do not sell personal data or share it with anyone else, except where the law requires us to.

5. Transfers outside the EU

Cloudflare and Google may process data in the United States. Both companies are certified under the EU-US Data Privacy Framework, which the European Commission recognised as providing an adequate level of protection in its decision of 10 July 2023. Where needed, the European Commission's Standard Contractual Clauses also apply.

6. Your rights

Under the GDPR you have the right to:

• get access to the personal data we hold about you (Article 15);
• have inaccurate data corrected (Article 16);
• have your data deleted (Article 17);
• restrict how we process it (Article 18);
• receive your data in a portable format (Article 20);
• object to processing based on our legitimate interest (Article 21);
• withdraw your consent at any time, without affecting earlier processing (Article 7(3)).

To use any of these rights, email hello@irccf.org. We reply within one month.

If you think we have not handled your data lawfully, you can complain to the Hungarian supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9-11, Hungary
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

You can also go to court, or complain to the supervisory authority in the EU country where you live.

7. Other information

We do not use your data for automated decision-making or profiling. This website is not directed at children under 16. We may update this policy when our website or the law changes. The date at the top always shows the latest version.