Privacy Policy

Effective from: 1 January 2025

1. Introduction

MatchdayBook (operated by Fördősné Dr. Kardos Erzsébet, hereinafter "Company", "we", "us") respects your privacy and is committed to protecting it. This Privacy Policy (this "Policy") describes what data we collect when you visit matchdaybook.com, make a purchase, register with us, or otherwise interact with us (e.g. customer service email, social media).

This Policy applies solely to the website identified above and to communications conducted through it. The Company does not operate any physical store — we sell exclusively online.

Processing of personal data is carried out in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and applicable Hungarian data protection law (Act CXII of 2011).

2. Data Controller

3. What Data Do We Collect?

3.1 Visitor data (no registration required)

If you browse the website as a guest, we do not request personal data from you, but we automatically collect certain technical data: IP address, browser type, device type, and referring page. This data is not used to identify individuals — its purpose is to improve the functionality and experience of the website (e.g. deciding which browsers to optimise for).

3.2 Order and personalisation data

When you place an order and personalise your book, we request:

• Name, billing and shipping address
• Email address and phone number (if provided)
• Payment details (processed via our payment provider — we do not store card details ourselves)
• Data submitted for the content of the book: uploaded photos, the name of the child or main subject of the book, club, and season information

3.3 Children's data — please read carefully

Due to the nature of the MatchdayBook product, we often process photos and personal data of a minor child, uploaded by a parent or legal guardian to create the book. In this case:

• The adult placing the order (the Customer) is responsible for confirming they are entitled to submit the uploaded photos and the child's data, and that they hold — where required — parental responsibility or the consent of the other parent/guardian.
• The child's photos and data are used solely to produce the product (the book) and are not used for marketing purposes.
• The child's data is deleted following completion of the order, within the retention period set out in Section 6.

The website itself is not intended for independent use by children under 16, and to our knowledge we do not knowingly collect data directly from a child under 16 through registration. If you believe your child has provided us with data without your knowledge, please contact us at info@matchdaybook.com and we will delete it.

3.4 Contact data

If you contact us by email or through the website's contact form, we use the data you provide (name, email, message content) solely to respond to your enquiry.

4. How Do We Use Your Data?

We use your data strictly for the purposes listed above — we do not sell it to third parties and do not use it for undisclosed purposes beyond those stated.

5. Marketing Communications — Consent (Opt-In)

Under Hungarian and EU law, we may send you newsletters or marketing emails only on the basis of your prior, explicit consent (an opt-in model — not a default-on system from which you must unsubscribe).

• You can subscribe to our newsletter during checkout or via a subscription form on the website, by actively checking a consent box.
• You can withdraw your consent at any time, free of charge, via the unsubscribe link in any marketing email, or by emailing info@matchdaybook.com.
• Unsubscribing does not affect order-related notifications (confirmation, shipping updates) — these are sent regardless, as they are necessary for the performance of the contract.

We do not currently operate any SMS or other mobile messaging marketing service. Should we introduce one in future, we will request separate, explicit consent and update this Policy with the relevant terms.

6. Data Retention

7. Who Do We Share Your Data With?

We share your data with the following data processors, strictly limited to what is necessary for them to perform their function:

These partners have access only to the data necessary to perform their function and may not use it for their own purposes.

International data transfers: certain Shopify, Google, and printing-partner services may involve transferring data to the United Kingdom and the USA. All such transfers are carried out subject to appropriate safeguards under GDPR Article 46 (e.g. standard contractual clauses, the EU–US Data Privacy Framework).

We do not sell your data to third parties, and we do not share it for the purpose of building marketing lists used independently by another party.

In response to a lawful request from public authorities (e.g. a court order or statutory obligation), we may disclose data to the extent required.

8. Cookies and Tracking

The website uses cookies for functionality, statistical analysis, and advertising purposes. A detailed list of the cookies used, their purpose, and how to manage them is provided in our separate Cookie Policy.

9. Security of Processing

We maintain administrative, technical, and physical safeguards designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised access, or disclosure. Data transmitted through the website is encrypted via SSL/TLS. While we take reasonable measures, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

If you suspect unauthorised access to your account or data, please contact us immediately at info@matchdaybook.com.

10. Links to Other Websites

Our website may contain links to third-party websites (e.g. payment providers, social media) that we do not operate. These sites have their own privacy practices, for which we are not responsible. We encourage you to review their privacy policies.

11. Your Rights

Under the GDPR, you have the following rights:

• Right of access — request information about the data we hold about you.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data where the legal basis no longer applies.
• Right to restriction of processing — request temporary suspension of processing.
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to processing based on legitimate interest (e.g. certain advertising purposes).
• Right to withdraw consent — withdraw your consent at any time, without giving a reason (e.g. newsletter).

You may exercise any of these rights by emailing info@matchdaybook.com. We will respond within 30 days.

12. Complaints and Supervisory Authority

If you believe our processing of your data is unlawful, you may lodge a complaint with:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH) Falk Miksa utca 9–11., 1055 Budapest, Hungary Phone: +36 1 391 1400 Email: ugyfelszolgalat@naih.hu Website: naih.hu

You may also contact the data protection authority in your own EU country of residence, or seek judicial remedy before a court.

13. Changes to This Policy

We reserve the right to periodically review and update this Policy. Changes will be published on the website and take effect from the date of publication. Where a change materially affects your marketing consent, we will notify you separately.

Last updated: 1 January 2025