Data controller
- Controller
- Máté Hajdu, private individual
- Location
- Budapest, Hungary
- birdcagemate@gmail.com
- Website
- https://www.birdcagemate.com
This notice applies to website visitors, people who contact BirdcageMate by email, and identifiable individuals appearing in editorial content.
The controller is not required to appoint a data protection officer and, being established in the European Union, does not need an EU representative. Privacy questions and data-subject requests may be sent directly to the email address above.
Data protection principles
We process only data needed for a stated purpose, transparently and for no longer than necessary. We do not sell personal data, use it to build advertising profiles, or make automated decisions about visitors.
The site currently has no user accounts, newsletter, contact form, web analytics or marketing tracking.
Technical operation
To deliver and protect the website, the hosting provider may process IP address, city and country derived from IP, requested URL, request and response time, browser, operating-system and device information, referring page, errors and security events.
Purpose: website delivery, troubleshooting, performance and capacity, abuse prevention and IT security. Legal basis: Article 6(1)(f) GDPR. The specific legitimate interest is maintaining the availability, integrity and security of the website. A balancing assessment has concluded that short-term security logging does not disproportionately restrict visitors’ rights.
Retention: runtime logs available in the Vercel dashboard are currently retained for 3 days as a general rule; infrastructure and security data may be retained for different periods under Vercel’s documented operational and legal needs. BirdcageMate does not use logs for marketing or visitor profiling.
Email correspondence
If you email us, we process your name, email address, message, attachments and technical timestamps.
Purpose: responding and handling professional, press or collaboration enquiries. Legal basis: Article 6(1)(f) GDPR and the legitimate interest in meaningful correspondence, handling the contact initiated by the sender and closing the matter.
Retention: up to 12 months after closure; where a legal claim or dispute arises, for the applicable limitation period, generally 5 years. Correspondence no longer needed is deleted.
Please do not send unnecessary sensitive or confidential personal data by email.
Editorial content and photographs
Articles and event reports may include the name, professional role, organisation, image and event information of industry participants. Data comes from the operator’s own documentation, the individual, or publicly available professional sources.
Purpose: professional, cultural and editorial documentation. GDPR legal basis: Article 6(1)(f), namely legitimate interests in information, expression and documenting professional events; or consent where appropriate.
A GDPR legal basis does not replace any civil-law permission required to use a person’s image. An individually recognisable person’s image is used, as a rule, with appropriate permission; relevant exceptions may include crowd images and public appearances. A third party’s photograph is published only where the necessary licence exists.
Retention: while editorially or archivally relevant. An objection, withdrawal or erasure request is assessed individually against editorial freedom, documentary interest, image rights and the individual’s rights.
Instagram content
The Moments page displays posts from the operator’s public Instagram account. The website server retrieves post data via the Meta Graph API. Images are relayed through BirdcageMate’s own technical endpoint, so merely opening the page does not cause the visitor’s browser to contact Meta’s image servers directly.
If you follow a link to Instagram, Meta’s own privacy terms apply.
Service providers and recipients
- Vercel Inc. – hosting, content delivery, security and technical logging. Vercel acts according to its contractual role for customer data and as an independent controller for its own platform-security, legal and service-development processing.
- Google Ireland Limited and affiliates / consumer Gmail – recipient and technical provider for email correspondence. Google does not offer a data-processing agreement for consumer Gmail and acts as an independent controller under its own privacy terms.
- Public authorities, courts or legal advisers – only where required by law or needed for a legal claim.
Vercel and Google services may involve processing in the United States. Depending on the service, safeguards are the adequacy decision for participants in the EU–US Data Privacy Framework or, where required, European Commission Standard Contractual Clauses and supplementary safeguards. Vercel states that it participates in the EU–US Data Privacy Framework.
Meta does not receive a BirdcageMate visitor’s identifiers merely because the Moments page is opened: public Instagram data and images are retrieved and relayed server-side. If a visitor follows an Instagram link, Meta’s own notice governs the subsequent processing.
Your rights
You may request access, rectification, erasure or restriction; object to processing based on legitimate interests; and, where the GDPR conditions apply, request data portability. Where processing is based on consent, you may withdraw it at any time without affecting prior lawful processing.
Right to object: you may object at any time, on grounds relating to your particular situation, to processing based on legitimate interests. We will then stop processing unless compelling legitimate grounds or the establishment, exercise or defence of legal claims can be demonstrated. Erasure does not apply where data must be retained by law or is needed for a legal claim.
Send requests to birdcagemate@gmail.com. We may request reasonable proof of identity and will normally respond within one month.
Complaint and remedy
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Falk Miksa utca 9–11., 1055 Budapest, Hungary
Postal address: 1363 Budapest, Pf. 9.
www.naih.hu · ugyfelszolgalat@naih.hu
You may also seek a judicial remedy before a competent court, including the court of your residence or habitual residence where Hungarian law permits.
Security, children and changes
Reasonable technical and organisational measures protect data against unauthorised access, alteration, disclosure and loss. These include encrypted HTTPS, restricted access, account protection, software updates and incident documentation. No internet transmission can be guaranteed risk-free.
Where a personal-data breach occurs, the controller documents it, assesses the risk, and where required notifies NAIH without undue delay and, where feasible, within 72 hours; affected individuals are also informed where the risk is high.
The website discusses alcoholic beverages, is not directed at children and does not knowingly collect personal data from children. If such data comes to our attention, appropriate action will be taken without undue delay.
We may update this notice when the site, providers or applicable law changes. Material changes will also be communicated appropriately where individuals can be contacted directly. The current version and effective date will always be published here.