Privacy notice - Global Kyokushin Budokai (GKB)

Last updated: 29 October 2026

1. Controller

The controller of this website is Global Kyokushin Budokai Kft. (registered office: 1027 Budapest, Bem József utca 9. fszt. 10., Hungary; company registration number: 01-09-397709; tax number: 27783571-2-41). For questions about data protection, write to us at contact@globalkyokushin.com. This notice is based on the General Data Protection Regulation (Regulation (EU) 2016/679, GDPR).

2. In brief

This website uses no cookies, does not follow individual visitors, shows no advertising and loads nothing from other companies' servers. We only count how many visits arrive through the links we share (section 6), without recording who made them.
We process personal data only when you send us a message, sign up for our newsletter or for a notice when a book comes out, or buy an e-book.
We do not sell your data. Apart from us, only the hosting provider named in section 7, which runs the website and the e-mail, the Telegram messaging service, also named there, through which the volunteers who answer messages learn of new ones, and, when you buy an e-book, Link (a Stripe service), which handles the payment as the seller, have access to it.

3. Messages sent with the forms on this website

This covers messages sent with the contact, join and representative forms.

What data: the name, e-mail address, phone number, country, town and message you give us; on the contact form also the subject you choose, on the join form your dojo, your grade and your years of training, and on the representative form your organisation, your role and the country. In addition, the address of the page the message was sent from, the language of the message, and your IP address and browser type.
Why: to answer and deal with your enquiry and, if you want to join or to represent GKB, to prepare the membership or the cooperation. The IP address and browser data are used to filter out unsolicited and abusive messages.
Legal basis: for a contact enquiry, our legitimate interest in answering people who write to us (GDPR Article 6(1)(f)); if you want to join or to represent GKB, because you ask us to prepare the membership or the cooperation (Article 6(1)(b)); for filtering abuse, our legitimate interest (Article 6(1)(f)).
Who sees it: the message is sent by e-mail to GKB's president and to the volunteer who runs the website on GKB's behalf. Together with your name and contact details, it is also posted through the Telegram messaging service to a closed GKB group whose members are volunteers living in the European Union who answer the messages, so that someone who speaks your language can reply. We always reply by e-mail.
How long: we keep the message for 12 months after your enquiry is closed and then delete it automatically; if the enquiry is never closed, 12 months after it arrived. We delete the IP address and browser data after 90 days. Messages in the Telegram group are deleted automatically after one month.

What data: your e-mail address, the language you chose, what you signed up for (the newsletter or a particular book), the time and IP address of your sign-up and of your confirmation, your browser type, the address of the page where you signed up, and the text of the consent statement you saw when you signed up.
Why: to send you the newsletter, or to let you know when the book you chose comes out, and to be able to prove your consent.
Legal basis: your consent (GDPR Article 6(1)(a)). A sign-up only takes effect when you click the confirmation link in the e-mail we send you. You can withdraw your consent at any time with the unsubscribe link in our e-mails or by writing to us; this does not affect the lawfulness of the processing before the withdrawal.
How long: until you unsubscribe. A sign-up that is never confirmed is deleted 30 days after its confirmation link expires. After you unsubscribe, we keep the data for 24 months so that we can prove your consent and your unsubscription, and then delete it; after that, the record of consents holds only an entry without e-mail address or IP address. The IP address recorded at sign-up is deleted from the sign-up data after 90 days; the record of consents keeps it as proof of your consent for as long as we keep the sign-up data.
We send the notice about a book's release once.

5. Buying e-books

What data: your name (the billing name you give at checkout), your e-mail address, the country of your billing address, the edition you bought, the price and currency, the order number, time and status, Link's (Stripe's) payment references, the two statements you ticked when ordering (with their wording, time and IP address), the IP address and browser type used when buying, the time, IP address and browser type of each download, and when your library links expire. We do not store the library link itself, only a check code made from it. If you came to the website through one of the links we share (section 6), we also store that link's tag with the order, for example the name of the club whose post you followed.
Why: to make and deliver the copy in your name, to run your library and the downloads, to help with questions about the order, to handle refunds, to be able to prove your consent to immediate delivery, and to detect misuse (for example when one order's files are downloaded from many different places within a week). The link's tag tells us which club's or post's link led to the order.
Legal basis: performing the contract (GDPR Article 6(1)(b)); keeping proof of the order and of your consent, and keeping records as accounting law requires, are a legal obligation (point (c)) and our legitimate interest (point (f)); detecting misuse and knowing which link led to the order are our legitimate interest (point (f)).
Your name in the book: we print your name and the order number into your copy (terms of sale, section 3). If you pass the file on, your name goes with it.
Who sees it: the payment is handled by Link, Stripe's consumer payment service, as the seller. Link processes the data you give on the checkout page, including your card details, as a controller in its own right, under its own privacy policy (stripe.com/privacy); the checkout page is on Stripe's website, not ours. After the payment, Link passes your name, e-mail address and country to us so that we can make your book. The Telegram group named in section 3 receives a short notice of each step of an order, with only the order number, the book and the amount, never a name or an e-mail address.
How long: we keep the order data for 8 years from the end of the year of purchase (the retention period of accounting records); we delete IP addresses and browser data after 90 days; unpaid orders after 30 days; the files made in your name after 30 days (they are made again when you download); and the data of expired library links after 30 days. If you ask us to delete your data, we remove your name, e-mail address and IP addresses from your orders; the order number, amount, date and country remain until the end of the retention period.

6. Technical data

Serving the website. Like every web server, the server that delivers this website logs the visitor's IP address, the time of the request, the address of the page requested and the browser type, to deliver the pages and for security. These logs are handled by the hosting provider for operation and security only, and deleted after 30 days (GDPR Article 6(1)(f)).
Counting visits from our links. The links we share, for example on a club's Facebook page, may carry a short tag at the end of the address, such as ?ref=skk-montana. The tag names where the link was posted, not who clicks it. When you arrive through such a link, your browser passes the tag and the address of the page to our server, which adds one to a daily count for that tag; nothing else is recorded: no IP address, no cookie, nothing in your browser. While you move around the website, the tag stays in the address of the pages, and if you buy an e-book it is stored with your order (section 5). If your browser sends a "Do Not Track" or "Global Privacy Control" signal, no tag is counted or passed on. Legal basis: our legitimate interest in knowing which of our links bring visitors (GDPR Article 6(1)(f)). The daily counts contain no personal data.
The logs of the system behind the forms and the shop (error logs and the logs that limit too many requests) are kept for at most 90 days and then deleted automatically.
A setting stored in your browser. If you close the language suggestion bar, we remember this choice in your browser's local storage (localStorage) so that the bar does not appear again. This is not a cookie, it is never sent to us, and you can delete it at any time in your browser's settings.

7. Hosting provider, messaging and payment services

DotCOM Services LTD. (5, Han Asparuh Str., Montana 3400, Bulgaria; support@maiahost.com) runs the website, the database and the e-mail mailboxes as our processor.

Telegram (Telegram Messenger Inc.) delivers new messages and the short notices about orders to our volunteers' closed group (sections 3 and 5). Telegram stores the data of users who signed up in the European Economic Area in data centres in the Netherlands; Telegram is established outside the European Union and transfers data on the basis of the standard data protection clauses adopted by the European Commission. Telegram's own privacy policy also applies: telegram.org/privacy.

Link, Stripe's consumer payment service, is the seller of the e-books (section 5) and processes the payment data as a controller in its own right: stripe.com/privacy.

8. Your rights

You may ask us to:

tell you what data about you we process (access);
correct inaccurate data;
delete your data, or restrict its processing;
give you the data you provided in a machine-readable form (portability).

You may object to processing based on legitimate interest, and you may withdraw your consent at any time. Send your request to contact@globalkyokushin.com; we will reply within one month at the latest.

9. Remedies

If you believe that the processing of your data breaks the law, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; naih.hu), or go to court; you can also bring the case before the regional court where you live or are staying.

10. Children

Children under 16 may sign up for the newsletter and release notices only with a parent's consent.