← Home

Privacy Policy

Effective from: 2026. augusztus 7.. This notice was prepared under the EU General Data Protection Regulation (GDPR, 2016/679/EU) and the Hungarian Privacy Act (Act CXII of 2011). This is a courtesy English translation; the Hungarian version is the legally governing text.

1. Data controller

Kriszta Németh, sole-proprietor yoga instructor
Tax number: 59508287-1-33
Registered / mailing address: 2112 Veresegyház, Vizimolnár u. 1., Hungary
Registering authority: Budapest Environs Regional Court
Email: kriszta@kriyoga.hu

2. Data processed and purpose

Name, email address, phone number — for creating the account, logging in, managing bookings and passes, and staying in contact.

Booking and purchase history (which class you signed up for, which pass you bought, when) — for providing the service and showing your pass status.

Payment-related data (transaction ID, last 4 digits of the card, a secure card reference for recurring charges) — this is handled by SimplePay (OTP Mobil Kft.) as an independent controller/processor; the Provider never receives the full card number.

3. Legal basis for processing

Performance of a contract (GDPR Art. 6(1)(b)) — for data needed to purchase and deliver a pass/class.
Compliance with a legal obligation (GDPR Art. 6(1)(c)) — for accounting and invoicing obligations.
Legitimate interest (GDPR Art. 6(1)(f)) — for the secure operation of the service (e.g. login logging, fraud prevention).

4. Processors the data is shared with

GoHighLevel (HighLevel Inc., USA) — customer relationship management (CRM) system, for storing contact data and pass status.
SimplePay / OTP Mobil Kft. — online payment provider.
Cloudflare, Inc. — technical operator of the website and account system (hosting, database).

Some of these providers may process data outside the European Union (e.g. USA) — in such cases the safeguards required by the GDPR (e.g. Standard Contractual Clauses) apply.

5. Retention period

Data related to the account and the provision of the service is retained for the duration of the relationship; accounting records are retained for the period required by law (typically 8 years).

6. Cookies

The website uses only strictly necessary session cookies (to keep you logged in), which are not suitable for advertising or behavioural tracking and are not shared with third parties.

7. Your rights

You may at any time request: information about the data processed, its correction or erasure, restriction of processing, objection to processing, and data portability. Requests can be made at kriszta@kriyoga.hu.

You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu).

8. Data security

The website uses an encrypted (HTTPS) connection, provides passwordless single-use-code login, and collects payment data not on its own systems but on SimplePay's secure, certified payment page.

9. Contact

For any question or request: kriszta@kriyoga.hu