Privacy Policy

Privacy Notice

Effective: October 2026

1. Our data protection principles

We collect data only from our users (data subjects). Apart from a few technical exceptions, we process at most the data that our users have provided. Users can always decide which data they make visible to others. The Service is available only to persons aged 18 or over; we do not process data of minors.

2. Scope of the data processed, legal basis and purpose of processing

2.1 When browsing the website

When you browse the website, the web server records the IP address of the visitor's computer, the domain name used for access, the screen resolution, the pages visited, the start and end time of the visit, the browser language and, depending on the settings of the user's computer, the type of browser and operating system.

Legal basis: Section 13/A (3) of Act CVIII of 2001 on certain issues of electronic commerce services and information society services, and the legitimate interest of the Service Provider (Article 6(1)(f) GDPR).
Purpose and duration: technical information necessary to provide the service, security and prevention of abuse. This data is logged automatically and kept for no more than 12 months. The website cannot be visited without recording this data.

2.2 Registered users

For registered users we record and process the following data: username, e-mail address, password (stored in encrypted form only), account type, time of registration and logins, log files of the use of the functions provided by the System, and correspondence with the Service Provider.

Legal basis: performance of a contract (Article 6(1)(b) GDPR); for log files, the legitimate interest of the Service Provider.
Purpose and duration: providing the service under the Terms and Conditions, managing the account, providing customer support. We process a registered user's data until the account is deleted, but no longer than 24 months from the last activity, after which it is deleted. Identification data (username, e-mail address, password) is not visible to other users.

2.3 Advertisers (publishing a profile)

In addition to the data listed for registered users, we process the following data about advertisers: data given in the profile (name or nickname, age, physical characteristics, languages, introduction, services, city, district, postcode, address), contact details (phone number, messaging apps linked to the phone number), uploaded photos and videos, availability (times of appearance) and, for paid packages, payment data (billing name, address, the fact and amount of payment).

Legal basis: performance of a contract (Article 6(1)(b) GDPR); for publicly displayed data and photos, the consent of the data subject (Article 6(1)(a) GDPR), which can be withdrawn at any time by deleting the profile; for payment and billing data, compliance with a legal obligation (Article 6(1)(c) GDPR).
Purpose and duration: providing the advertising service and enabling users to choose a partner. The public data of the profile (photo, text, availability, phone number) is visible to others to the extent set by the advertiser, until the profile is deleted or expires. Billing data is kept for the period required by accounting and tax law (8 years). An advertiser's data is deleted after 24 months of inactivity from the last activity.

2.4 Special categories of data

Some profile fields (for example data indicating sexuality) may qualify as special categories of personal data under Article 9 GDPR. Providing them is entirely voluntary: by filling in the field and publishing the profile, the advertiser expressly consents to the public display of the data (Article 9(2)(a) GDPR). Consent can be withdrawn at any time by deleting the field or the profile; withdrawal does not affect the lawfulness of processing carried out before it. The advertiser declares that the profile contains only their own data, and publishes another person's data (photo, phone number) only with that person's consent.

2.5 Automated decision-making

The Controller does not carry out automated decision-making or profiling.

3. Cookies

The website uses cookies necessary for its basic operation. The table below shows the most common cookies; the exact list may vary depending on the features used.

You can change or disable cookies in your browser settings; however, this may limit the functioning of the website.

4. The Controller

The controller is the operator of napipartner.hu. Contact: info@napipartner.hu.

5. Data transfers

Absent an express legal provision or a court or authority decision, we transfer personal data only if the user specifically initiates it. Public data given in an advertisement (photo, text, phone number) is visible to everyone in the System.

6. Processors

The following providers take part in providing the Service and process data to the extent necessary for their tasks: hosting and system operation provider (the website database, server logs); Google LLC (serving the website's fonts, during which the visitor's IP address may reach Google's servers); payment and billing providers (for paid packages); e-mail delivery provider (the system's notification e-mails).

7. Where data is stored

Data may be processed within the European Union and, in the case of the providers mentioned above (e.g. Google), also outside the European Union, subject to the safeguards required by the GDPR.

8. Security measures

The Service Provider uses password protection, an encrypted connection (HTTPS), a firewall and backups. Passwords are stored in encrypted form only. Only persons who need it for their tasks have access to the data.

8/A. Personal data breach

In the event of a personal data breach, we will notify the Hungarian National Authority for Data Protection and Freedom of Information within the legal deadline and, if the breach is likely to result in a high risk to the rights and freedoms of data subjects, the data subjects as well.

8/B. Use by third parties, liability

Data publicly displayed in advertisements (photo, text, phone number) can be viewed by anyone. The Controller is not liable if third parties copy or use this data in breach of the Terms and Conditions; the advertiser may inform the Controller of such use at info@napipartner.hu, and the Controller will take the measures that can reasonably be expected. The advertiser is responsible for the lawful publication of the data with the necessary consents.

9. Deletion of personal data

Deletion requests must be sent to info@napipartner.hu. Within 3 working days of receiving a deletion request, the Service Provider deletes the data that must be deleted under the Terms and Conditions and this Privacy Notice. Data that must be retained under a legal obligation (e.g. billing data) is kept until the end of the statutory period.

10. Amendment of this Privacy Notice

The Service Provider reserves the right to amend this notice unilaterally, with prior notice to users. By using the service after the amendment is published, the user accepts the amended notice.

11. Users' rights regarding the processing of their personal data

If a data subject wishes to exercise their rights under the GDPR, they may contact the Controller at any time at the contact details above. The data subject has the following rights:

• the right to information about the processing and access to the processed data (right of access, Article 15 GDPR);
• the right to have inaccurate data rectified or incomplete data completed (right to rectification, Article 16 GDPR);
• the right to request erasure of personal data (right to erasure, Article 17 GDPR);
• the right to request restriction of processing (Article 18 GDPR);
• the right to receive the personal data concerning them in a machine-readable format and to have it transmitted to another controller (right to data portability, Article 20 GDPR);
• the right to object to processing (Article 21 GDPR);
• the right to withdraw consent (Article 7 GDPR). Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Within one month of receiving the data subject's request we inform them of the action taken; where necessary this period may be extended by a further two months, in which case we inform them of the reasons for the delay. We may also provide the information in writing, electronically.

12. Legal remedies

In case of infringement of their rights, the data subject may bring proceedings against the controller before a court; at their choice, the action may also be brought before the regional court of their place of residence or stay. They may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., postal address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, www.naih.hu).

13. Protection of other persons' data

Photos and phone numbers in advertisements qualify as personal data. Copying, storing, republishing elsewhere or any other use of them without the advertiser's consent is unlawful and may result in civil, administrative or criminal liability. You may refer to the advertisements only by using the corresponding link of the Site.