Data Controller Information
This Privacy Policy applies to the following data controller:
- Name: Futó Angyalok Sportegyesület
- Registered office: 1108 Budapest, Újhegyi út 12., 4/5
- Email address: hello (at) futoangyalok.hu
- Phone number: +36 (30) 258-4235
- Website: futoangyalok.hu
Running Angels Sports Club (hereinafter referred to as the Club) is committed to protecting your personal data. The purpose of this Privacy Notice is to provide clear and detailed information about how we handle any personal data you share with us: for what purposes, on what legal basis, and for how long we process such data. This document also outlines the rights you have regarding your personal data.
Purpose of Data Processing
The Club only processes personal data to the extent and for the duration necessary for its operations and for providing services to its members. The purposes of data processing are as follows:
Establishing and maintaining membership records: we use the data provided during the membership application process to keep an internal registry of members and to stay in contact with you.
Sending newsletters to members: we occasionally send updates regarding runs, events, and association-related news. Newsletters are sent exclusively to registered members.
Managing registration for events and races: some of our races and programs are available only to members. Registrations are recorded based on the personal data you provide.
Donation-related notifications (optional): if someone chooses to adopt a run on our website, they may optionally provide an email address to receive updates about the use of their donation. This is entirely optional—donations remain anonymous by default.
Documenting events (photos, videos): during community events — such as runs and races — photos and videos may be taken. These may be used for promotional purposes (e.g., on our website or social media), but we take great care to respect participants’ rights. If you do not wish to appear in such materials, please notify us before or during the event.
In the case of minors: for members under the age of 18, we request the data and consent of a legal guardian (e.g., parent), which is required for membership.
Anonymized training data from Strava club membership: if you join the Futó Angyalok Sportegyesület club on Strava, your training activities will automatically appear among the adoptable runs featured on our website. These data are received via the Strava API. We only store information that does not qualify as personal data and cannot be used to identify anyone. Such data includes distance, duration, pace, and activity type. No name, profile, user ID, or location data is stored.
Personal Data We Process
For the Club to operate effectively, it is necessary to maintain certain personal data about its members. These are processed for the following purposes:
Name: essential for identifying the member and maintaining official membership records. Keeping a record of members’ names is required by law.
Address: required for maintaining the official membership registry, as mandated by legislation. It may be needed in certain cases, such as official correspondence or legal inquiries.
Date of birth: used to verify age (e.g., for minor members) and to clearly identify members, especially in cases where multiple people have the same name.
Email address: serves as the primary channel for communication. We use it to send updates, newsletters, and event-related information.
Phone number: processed for urgent or personal communication. It is especially useful during events or training sessions where real-time contact may be needed.
Member data is not publicly accessible.
We use this data solely for managing the membership relationship and for operational purposes related to the Club. Data will only be shared with third parties if required by law.
Data Retention Period
We retain personal data only for as long as it is necessary to fulfill the purpose of processing, or for as long as required by law.
During the period of active membership, data is actively processed.
After the termination of membership, we retain personal data for 5 years in accordance with the general limitation period under the Hungarian Civil Code, primarily to prevent or resolve potential legal disputes.
If a specific law (e.g., accounting or civil organization regulations) requires a longer retention period, the data will be stored until the end of that mandatory period.
Data provided solely for communication purposes (e.g., a donor's email address) will be deleted or anonymized without delay once the purpose has been fulfilled or consent has been withdrawn.
At the end of the retention period, we securely delete or, where appropriate, anonymize your data in such a way that it can no longer be linked to you.
Data Controllers
Access to members’ personal data is restricted to individuals for whom such access is essential to fulfill the operational needs of the Club and to achieve the specific purposes of data processing.
Membership records are maintained by the Club’s board of directors, in accordance with the Club’s bylaws.
Only those board members who require access to the data for specific purposes (e.g., membership administration, sending newsletters, event communication) are authorized to process personal data.
We do not share personal data with third parties — including other members, supporters, or external parties.
External service providers (e.g., hosting providers, email delivery services) do not have access to personal data.
In cases required by law (e.g., official requests from authorities), we may transfer data to competent bodies as part of our legal obligations.
All data processing is based on the principles of necessity and proportionality — we do not process or share any data that is not strictly required for the intended purpose.
Data Processing Outside the European Union
The Club manages personal data exclusively in an internal registry that is not part of the website’s technical system and is not accessible to external parties or the public. Membership data (such as name, address, and email) is not uploaded, stored, or processed by the website or any of its backend systems.
Some of the external service providers used for the technical operation of our website (e.g., Vercel, Railway, MongoDB Atlas) are headquartered outside the European Union. However, these systems do not process personal data through the website, except in the following case:
- In the donation process, an email address may optionally be provided so that the donor can receive updates regarding the use of their donation. This email address is stored in a database operated by a non-EU data processor (e.g., MongoDB Atlas).
These service providers ensure GDPR-compliant operations and offer appropriate safeguards, including adherence to the EU’s Standard Contractual Clauses (SCCs).
Training data received from the Strava API does not qualify as personal data, as it includes no names, location data, or other identifiers. Only anonymized, statistical information is stored (e.g., distance, duration, pace).
The naming of fundraising campaigns (e.g., “Support for Réka Kiss’s medical care”) serves solely to identify the intended purpose of the donation. If such titles include information that qualifies as personal data (such as a full name), they will only appear on the website with the explicit consent of the individual concerned or their legal representative.
Legal Basis for Data Processing
The Club carries out data processing in accordance with applicable EU and Hungarian laws, particularly Regulation (EU) 2016/679 (GDPR) and Act CLXXV of 2011 on Civil Organizations.
The legal bases for processing your personal data may include:
Compliance with a legal obligation
Recording members’ personal data (e.g., name, address) is a legal requirement under Hungarian law (e.g., Civil Organizations Act, Section 17), and we are obliged to maintain a membership registry accordingly.
Performance of a contract
Data necessary for establishing and maintaining membership — such as contact information (email, phone number) — is processed under the agreement entered into during the membership application (either in writing or by implied conduct).
Consent
Certain data processing activities require your explicit or implied consent. These include:
- providing an email address for donation-related notifications,
- naming of fundraising campaigns if an individual can be identified from the title,
- publishing photographs or videos from events.
During our events (e.g., community runs, public gatherings), photos and videos may be taken in which you may appear. By participating, you give implied consent to the documentation and use of such materials (e.g., on social media, website).
If you do not wish to appear in these materials, please inform us before or during the event — in such cases, we will not use footage of you, and will delete it upon request.
Legitimate interest
In some cases, data processing may be based on the legitimate interest of the Club — such as generating internal statistics from Strava workouts (which do not contain personal data) or efficiently organizing events. In such cases, processing is always proportionate and does not unduly infringe upon your rights.
The exact legal basis for each type of processing is determined by the specific purpose. For more detailed information about the applicable legal basis, feel free to contact us.
Data Collection via the Website
The Club’s website currently provides two forms through which data may be submitted:
1. Contact Form
The following data may be requested via the contact form:
- Name – for identification and appropriate addressing;
- Email address – for replying to your inquiry;
- Message – a free-text field where you can share your question, comment, or request.
Messages received through this form are processed solely for the purpose of responding to your inquiry. Emails are stored for a maximum of 30 days after the response, unless a longer retention is required by law or justified by your explicit request.
2. Membership Application Form
To apply for membership in the Club, the following information is required:
- Name;
- Email address;
- Phone number;
- Date of birth;
- Country, region/state, city, postal code, address – for official residency registration;
- “I have read the bylaws” checkbox – a legal declaration required for membership;
- Motivation statement (free text) – a short personal introduction that helps the board make a decision regarding your application.
These data are processed by the board of the Club during the application process. If membership is granted, the data is recorded in our internal membership register. If the application is rejected, the data is deleted within 30 days after the decision, unless the applicant requests that the decision be retained (e.g., for reapplication purposes).
3. Cookie Management
We currently do not use cookies for marketing, analytics, or user convenience.
In the future, technical (essential) cookies may be required for the operation of the site—for example, for login functionality or form protection. These do not require prior consent but will be clearly disclosed to users.
Detailed information on cookie usage is provided in our separate Cookie Policy, available on our website.
Your Data Protection Rights
The Club is committed to ensuring that personal data is processed transparently, securely, and lawfully. In accordance with Articles 15–22 of the GDPR, you have the following rights concerning the processing of your personal data:
Right of Access
You have the right to receive confirmation of whether we process your personal data, and if so, to access information about the scope, purpose, and method of the processing.
Right to Rectification
You may request the correction or completion of inaccurate or incomplete data.
Right to Erasure (“Right to be Forgotten”)
You may request the deletion of your personal data if:
- the purpose of processing has ceased,
- you withdraw your consent,
- the processing was unlawful.
We also delete your data when legally required to do so.
Right to Restriction of Processing
You may request restriction of processing if you contest the accuracy or lawfulness of the data, or if you need the data for the establishment, exercise, or defense of legal claims.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to request that it be transferred to another controller—provided the processing is based on consent or contract and carried out by automated means.
(Our Club does not perform automated processing, so this right is not applicable in practice.)
Right to Object
You have the right to object to processing based on legitimate interest—such as the public sharing of photographs or videos. In such cases, we will remove the relevant content upon request.
Do We Share Your Data with Others?
The Club does not disclose any personal data to third parties and does not engage in data transfers, processing, or sharing for business or marketing purposes.
Exceptions may include:
- legal obligations (e.g., official requests, court proceedings),
- and technical transmission of the optionally provided email address during the donation process, which may pass through third-party systems (e.g., email forwarding, server hosting).
These data are not used for content or marketing purposes and are processed only as long as necessary for the intended function.
If you wish to exercise your rights or have questions regarding data protection, feel free to contact us at hello (at) futoangyalok.hu.
Complaints and Inquiries
If you have any questions, concerns, or complaints regarding our data processing practices, we encourage you to contact us first:
We aim to respond to all inquiries within a reasonable timeframe and strive to resolve any data protection concerns amicably.
If you believe that our data processing does not comply with legal requirements, or that your personal data has been mishandled, you may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
- Name: Nemzeti Adatvédelmi és Információszabadság Hatóság
- Address: 1055 Budapest, Falk Miksa utca 9-11.
- Mailing address: 1363 Budapest, Pf. 9.
- Email: ugyfelszolgalat (at) naih.hu
- Phone: +36 (1) 391-1400
- Website: www.naih.hu
You also have the right to seek legal remedy in court if you believe your personal data has been unlawfully processed or your rights under the data protection regulations have been violated. Legal proceedings may be initiated at the competent court, including the one in your place of residence or habitual stay.
© 2025 Futó Angyalok Sportegyesület. Minden jog fenntartva.