Privacy Notice
Last updated October 12, 2026
This privacy notice for Napi Rock and Roll, operated by Szabolcs Menyhárt ("we," "us," or "our"), describes how and why we might collect, store, use, and/or share ("process") your information when you use our services ("Services"), such as when you:
- Visit our website at napirockandroll.hu, or any website of ours that links to this privacy notice
- Engage with us in other related ways
Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at info@napirockandroll.hu.
Summary of Key Points
What personal information do we process? When you visit, use, or navigate our Services, we may process limited personal information such as your IP address and browser information. User registration is not yet available; when it becomes available, we will collect the additional information described in this notice.
Do we process any sensitive personal information? We do not process sensitive personal information.
Do we receive any information from third parties? We embed content from third-party platforms (YouTube, Facebook) which may collect information about your visit according to their own privacy policies.
How do we process your information? We process your information to provide, improve, and administer our Services, for security and fraud prevention, and to comply with applicable law.
How do we keep your information safe? We have technical and organizational processes in place to protect your personal information. However, no electronic transmission over the internet can be guaranteed to be 100% secure.
What are your rights? As a resident of the European Economic Area (EEA), you have certain rights regarding your personal information under the General Data Protection Regulation (GDPR).
How do I exercise my rights? Contact us at info@napirockandroll.hu. We will consider and act upon any request in accordance with applicable data protection laws.
Table of Contents
- What Information Do We Collect?
- How Do We Process Your Information?
- What Legal Bases Do We Rely On to Process Your Personal Information?
- When and With Whom Do We Share Your Personal Information?
- What Is Our Stance on Third-Party Websites?
- Do We Use Cookies and Other Tracking Technologies?
- Is Your Information Transferred Internationally?
- How Long Do We Keep Your Information?
- How Do We Keep Your Information Safe?
- Do We Collect Information from Minors?
- What Are Your Privacy Rights?
- Controls for Do-Not-Track Features
- Do We Make Updates to This Notice?
- How Can You Contact Us About This Notice?
- How Can You Review, Update, or Delete the Data We Collect from You?
1. What Information Do We Collect?
Personal information you disclose to us
We will collect personal information that you provide to us once registration becomes available.
User registration is not yet available on the Services. When registration becomes available in the future, we will collect personal information that you voluntarily provide, which may include:
- Username
- Email address
- Password (stored in hashed form)
- Content you publish (articles, comments)
We will update this notice when registration is introduced.
Sensitive Information. We do not process sensitive personal information.
Payment Data. We do not collect payment data. The Services do not offer paid features.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected
Some information — such as your IP address and browser and device characteristics — is collected automatically when you visit our Services.
We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include:
Log and Usage Data. Our servers automatically collect your IP address, browser type, device information, operating system, language preferences, referring URLs, and information about your activity on the Services (such as pages visited and date/time of access). This information is used to maintain the security and operation of our Services and for internal diagnostic purposes.
Information collected from other sources
We do not collect information from public databases, marketing partners, or other outside sources.
2. How Do We Process Your Information?
In Short: We process your information to provide, improve, and administer our Services, for security and fraud prevention, and to comply with law.
We process your personal information for the following reasons:
- To operate and maintain the Services securely.
- To diagnose and resolve technical issues.
- To identify usage trends and improve the Services.
- To comply with applicable legal obligations.
- When registration becomes available: to facilitate account creation, authentication, and account management, and to allow you to publish and manage content.
3. What Legal Bases Do We Rely On to Process Your Personal Information?
We only process your personal information when we have a valid legal reason to do so under applicable law.
As the Services are operated from Hungary, the General Data Protection Regulation (GDPR) applies.
We rely on the following legal bases:
- Legitimate Interests. We process server log data (IP address, browser information) based on our legitimate interest in maintaining the security and proper operation of the Services. This interest does not override your fundamental rights and freedoms.
- Performance of a Contract. When registration becomes available, we will process your account information as necessary to provide the Services you request.
- Consent. Where required by law, we will ask for your consent before processing your information for specific purposes (e.g., analytics). You can withdraw your consent at any time.
- Legal Obligations. We may process your information where necessary to comply with our legal obligations.
Our legitimate interest is ensuring security, preventing abuse, detecting attacks, and maintaining website functionality.
4. When and With Whom Do We Share Your Personal Information?
We do not sell your personal data. We may share it in limited situations described below.
Website Hosting Service Providers. Our Services are hosted in Hungary. We may use third-party hosting infrastructure providers to operate the Services; these providers process data only on our behalf.
| Hosting provider | YOPA Tanácsadó és Fejlesztő Kft. |
| Location | Hungary |
| Purpose | website hosting and infrastructure services |
Business Transfers. We may share or transfer your information in connection with any merger, sale, or acquisition of all or part of our business.
Other Users. When registration becomes available, content you publish (such as articles) will be publicly visible on the Services.
We do not share your personal information with advertising networks, marketing partners, or data brokers.
5. What Is Our Stance on Third-Party Websites?
We are not responsible for the privacy practices of third parties whose content is embedded in our Services.
The Services embed content from third-party platforms, including YouTube and Facebook, and similar content providers. These embeds may load resources from those third parties' servers and are governed by their respective privacy policies:
- YouTube (Google): https://policies.google.com/privacy
- Facebook (Meta): https://www.facebook.com/privacy/policy/
- Other third-party content providers whose content may be embedded, each governed by their own privacy policies.
We are not responsible for the content or privacy practices of these third parties. We encourage you to review their policies.
Google and Meta may rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission.
6. Do We Use Cookies and Other Tracking Technologies?
We use a session cookie necessary for operating the Services. Embedded third-party content may set additional cookies.
We use a single session cookie to maintain your session state while you use the Services. This cookie is deleted when you close your browser and contains no personal information beyond a session identifier.
Embedded content from YouTube, Facebook, and other third-party platforms may set their own cookies on your device when that content is loaded. We do not control these cookies. Please refer to the respective privacy policies of those platforms for more information.
We do not currently use analytics cookies, advertising cookies, or tracking pixels of our own. If we introduce such technologies in the future, we will update this notice and, where required by law, seek your consent before setting them.
The Services use a strictly necessary session cookie that is required for the website to function. Because it is essential, it is set regardless of whether you accept third-party content, and no consent is required for it under applicable law. This is clearly stated in the cookie consent banner. Consent is only requested for loading embedded third-party content (e.g., YouTube, Facebook), which may set additional cookies. If you do not consent, the embedded content will not load, but the rest of the Services remains fully usable.
7. Is Your Information Transferred Internationally?
Our servers are located in Hungary (EU). Embedded third-party content may involve transfers outside the EEA.
Our servers are located in Hungary, within the European Union. Your personal information is processed and stored within the EU.
Embedded content from YouTube (Google, USA) and Facebook (Meta, USA) may result in your data being transferred to and processed in the United States or other countries outside the EEA. Google and Meta may rely on transfer mechanisms such as the EU-US Data Privacy Framework and/or Standard Contractual Clauses approved by the European Commission for such transfers.
8. How Long Do We Keep Your Information?
We keep your information for as long as necessary to fulfill the purposes outlined in this notice.
Server log data (including IP addresses) is retained for 90 days for security and operational purposes, after which it is deleted or anonymized.
After registration, account information will be retained for as long as you maintain an active account. Upon account deletion, your personal data will be deleted or anonymized within a reasonable period, except where a longer retention period is required by law.
| Data category | Retention period |
|---|---|
| Server logs | 90 days |
| Security logs | 90 days |
| Contact emails | 1 year after resolution |
| User accounts | Until deletion by user |
| Published content | Until removal by user |
9. How Do We Keep Your Information Safe?
We aim to protect your personal information through reasonable technical and organizational security measures.
We have implemented technical security measures including hashed password storage, parameterized database queries to prevent injection attacks, and HTTPS transmission. However, no electronic transmission over the Internet can be guaranteed to be 100% secure. You should only access the Services within a secure environment.
10. Do We Collect Information from Minors?
We do not knowingly collect data from children under 16 years of age.
We do not knowingly solicit data from or market to children under 16 years of age (the minimum age of digital consent under GDPR). If you become aware of any data we may have collected from a minor, please contact us at info@napirockandroll.hu and we will take reasonable steps to delete such data promptly.
11. What Are Your Privacy Rights?
In Short: As an EEA resident, you have rights that give you greater access to and control over your personal information.
Under the GDPR, you have the right to:
- Access your personal information and obtain a copy of it.
- Rectify inaccurate personal information we hold about you.
- Erasure ("right to be forgotten") — request deletion of your personal information where there is no longer a legitimate reason for us to process it.
- Restriction of processing in certain circumstances.
- Object to processing based on legitimate interests.
- Data portability, where applicable.
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@napirockandroll.hu. We will respond in accordance with the GDPR within one month of receiving your request.
If you believe we are processing your personal information in violation of applicable law, you have the right to lodge a complaint with the Hungarian supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)Website: https://www.naih.hu
Email: ugyfelszolgalat@naih.hu
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
You may also lodge a complaint with the supervisory authority in your EU/EEA country of residence.
12. Controls for Do-Not-Track Features
Most web browsers include a Do-Not-Track ("DNT") feature. We do not currently respond to DNT signals, as no uniform technology standard for recognizing DNT signals has been finalized. If such a standard is adopted that we are required to follow, we will inform you about that practice in a revised version of this notice.
13. Do We Make Updates to This Notice?
Yes, we will update this notice as necessary to remain compliant with applicable law and to reflect changes in our Services.
We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last updated" date at the top of this notice. We encourage you to review this notice periodically. If we make material changes, we will post a prominent notice on the Services.
14. How Can You Contact Us About This Notice?
If you have questions or comments about this notice, please contact us at:
Napi Rock and RollData Controller: Szabolcs Menyhárt
Tápiószecső, Hungary
Email: info@napirockandroll.hu
15. How Can You Review, Update, or Delete the Data We Collect from You?
When account registration becomes available, you will be able to review and update your account information through your account settings.
To request access to, correction of, or deletion of your personal data, or to exercise any other right described in this notice, please contact us at info@napirockandroll.hu. We will respond in accordance with applicable data protection law within one month.
