Privacy notice
Effective: 25 October 2026 · Applies to the public website www.md1q.hu / www.md1q.com and to online ordering
This notice explains what happens to the data you provide through the website's contact form and during online ordering. The sections on the data we request, the legal basis, retention and access concern the contact form; the section Online ordering concerns orders. Data processed in the club interface (club.md1q.hu) are covered by a separate notice that forms an annex to the contract.
Who controls your data
| Controller | Dataobjects Consulting Kft. |
|---|---|
| Registered office | Árnyas utca 14/a, 2310 Szigetszentmiklós, Hungary |
| Contact | info@md1q.hu |
What data we request, and why
| Name | so that we know whom we are replying to |
|---|---|
| E-mail address | to send our reply; this is the only field without which we cannot respond |
| Club or organisation | so that our reply can be tailored to your organisation (optional) |
| Telephone number | if you would like to discuss the matter by telephone (optional) |
| Text of the enquiry | so that we can reply in substance |
In addition, we record the time of submission and the technical data needed to filter out abuse. If you arrived at the website from an advertisement, we also record the name of the advertising campaign (taken from the utm parameters of the address opened); for this we use neither cookies nor any other data stored in the browser. Please do not enter special categories of data (for example, health data) in the form; we neither request nor process such data.
Legal basis
Your consent (point (a) of Article 6(1) GDPR), which you give by ticking the checkbox before submitting the form. You may withdraw your consent at any time without giving reasons; withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.
How long we keep your data
- If no cooperation results: for 12 months from the enquiry, so that, should you contact us again later, we know what was discussed previously.
- If a contract is concluded: in accordance with the rules on contracts and accounting.
- If you request erasure: without undue delay, and within 30 days at the latest.
Who has access
Those staff members of Dataobjects Consulting Kft. who are involved in replying to the enquiry. We do not sell the data, we do not disclose them to third parties for marketing purposes, and we do not transfer them outside the European Economic Area.
Our hosting and e-mail provider acts as processor:
| Hosting | Tárhely.eu Szolgáltató Kft. (Hungary) |
|---|
Cookies and tracking
The website does not use cookies for tracking. Fonts are loaded from our own hosting; the website does not load any external scripts, fonts or images. Your choice of language is remembered in the browser's own storage (localStorage), solely so that the website opens in the same language next time; this data does not reach us.
Videos. On the home page and in the video library, the preview images and details of the videos are loaded from our own hosting. A video is loaded only when you click the play button or the video itself. Your browser then connects to the servers of YouTube (Google Ireland Ltd.) in YouTube's privacy-enhanced mode (youtube-nocookie.com). The resulting processing is governed by Google's privacy rules. Until you click, no data whatsoever reach YouTube.
Online ordering
The controller
The controller for data processing related to online orders is Dataobjects Consulting Kft. (registered office: Árnyas utca 14/a, 2310 Szigetszentmiklós, Hungary; company registration number: 13-09-141656; tax number: 23006605-2-13; e-mail: info@md1q.hu). An order starts on www.md1q.hu or www.md1q.com and continues on club.md1q.hu.
This section covers the data of the ordering organisation's representative, contact person and first user. After the contract is concluded, for data processed in the System (club.md1q.hu), such as accounts, player data, videos and logs, the ordering organisation is the controller and Dataobjects Consulting Kft. is the processor; this is governed by the data processing agreement.
Purposes, legal bases and data processed
| Purpose | Data processed | Legal basis |
|---|---|---|
| 1. Verifying the e-mail address | e-mail address; the selected package, plan and language; the activation code (stored only in non-reversible form), the time it was sent and entered, the number of attempts; IP address | point (f) of Article 6(1) GDPR (preparing a contract with the ordering organisation and preventing abuse) |
| 2. Taking the order and preparing the contract | Data sheet data: organisation name, type, own team, registered office, registration and tax number; name, position, e-mail address and telephone number of the contracting person; billing data; discount claim and justification; name, e-mail address and password of the first user (password only in non-reversible form); source of the order; price at the time of the order | where the contracting party is a natural person (e.g. a sole trader): point (b) of Article 6(1) GDPR; for an organisation's representative and contact person: point (f) of Article 6(1) GDPR |
| 3. Proving acceptance of documents | type of document accepted (Terms, privacy notice, data processing agreement), version, language, time of acceptance, IP address | point (f) of Article 6(1) GDPR (proving the conclusion and content of the contract) |
| 4. Recording payment and approving or refusing the order | date, amount, currency and reference of the payment received, the period covered; reason for refusal | point (b) or (f) of Article 6(1) GDPR (see row 2) |
| 5. Creating the Organisation and the first user, welcome e-mail | name, e-mail address, password (only in non-reversible form) and role of the first user | point (b) or (f) of Article 6(1) GDPR (see row 2) |
| 6. Invoicing and accounting | billing name, address, tax number, EU VAT number, invoice data | point (c) of Article 6(1) GDPR (Hungarian Act CXXVII of 2007 on Value Added Tax and Act C of 2000 on Accounting) |
Accepting the privacy notice during the order is an acknowledgement, not consent under point (a) of Article 6(1) GDPR.
The System records the IP address for the order and for the acceptances. The Provider does not request or store card or other payment data during the order; payment is made by bank transfer, outside the website and outside club.md1q.hu.
Retention periods
| Data | Retention |
|---|---|
| Unverified e-mail address (activation code not entered) | 30 days, then erasure |
| Verified e-mail address with an unfinished Data sheet | 90 days, then erasure |
| Submitted but unpaid (lapsed) or refused order | 3 years from lapse or refusal, then erased |
| Data of a concluded contract and the log of acceptances | 5 years from the end of the contract (general limitation period under Section 6:22 of Hungarian Act V of 2013 on the Civil Code) |
| Accounting records (pro-forma invoice, invoice, bank statement data) | 8 years (Section 169 of Hungarian Act C of 2000 on Accounting) |
| Data of the first user and further accounts in the System | under the data processing agreement; after termination, until the deletion date at the latest |
Recipients and processors
| Recipient | Activity | Data concerned | Location |
|---|---|---|---|
| Rackforest Zrt. (Victor Hugo utca 11. 5. em. B05001, 1132 Budapest, Hungary) | operating the server of club.md1q.hu (hosting) and storing backups | all order data | Hungary |
| Tárhely.Eu Szolgáltató Kft. (Könyves Kálmán körút 12–14., 1097 Budapest, Hungary) | delivering the activation code, the confirmation, the documents and the welcome e-mail | recipient's name, e-mail address, message content and attachments | Hungary |
| KBOSS.hu Kft. (Számlázz.hu; Záhony utca 7., 1031 Budapest, Hungary) | issuing invoices | billing data | Hungary |
| Hungarian Tax and Customs Administration (NAV) | invoice data reporting | invoice data | Hungary |
| contracted accountant | bookkeeping | data in accounting records | Hungary |
| MBH Bank Nyrt. | incoming transfer | payer's name, account number, payment reference | Hungary |
The websites www.md1q.hu and www.md1q.com do not process order data: the Pricing page sends the e-mail address directly from the visitor's browser to club.md1q.hu.
All of the above recipients process the data in Hungary; order data are not transferred to third countries.
Whether providing data is required
The order cannot be submitted without the e-mail address, the Data sheet fields marked as mandatory and acceptance of the documents. Providing the discount claim and its justification is optional.
Data subject rights
The data subject's rights (access, rectification, erasure, restriction, objection, data portability), remedies and the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) are governed by the sections Your rights and Remedies of this notice. Requests related to an order can be sent to info@md1q.hu.
Your rights
- request information on which of your data we process;
- request the rectification or erasure of your data;
- request the restriction of processing, or object to processing;
- request that your data be provided to you in a portable format;
- where processing is based on your consent, withdraw it at any time.
To exercise any of these rights, an e-mail to info@md1q.hu is sufficient. We will respond to your request in substance within 30 days.
Remedies
If you consider that the processing of your data is unlawful, you may lodge a complaint with NAIH (Falk Miksa utca 9-11., 1055 Budapest, Hungary, naih.hu) or bring proceedings before a court.
If this notice changes, we will update it and indicate the effective date at the top of the page.