Privacy Policy
Hatályos / Effective: 2026-04-30
This Privacy Policy ("Policy") describes how OM Education & Consulting Kft. (registered office: 3300 Eger, Koháry István u. 19.; company registration: 10-09-038258; tax ID: 28775704-2-10; the "Controller") processes personal data on the KönyvKlub Bounty platform (the "Platform"). This Policy is consistent with Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information.
1. Controller details and contact
Controller: OM Education & Consulting Kft. Registered office: 3300 Eger, Koháry István u. 19. Email: kristof@onlinemarketinges.com Contact person: Szabó Kristóf For any data-protection question please write to kristof@onlinemarketinges.com. You may also lodge a complaint with the Hungarian Data Protection Authority (NAIH, 1055 Budapest, Falk Miksa utca 9-11., email: ugyfelszolgalat@naih.hu).
2. Categories of personal data we process
2.1. Account data (provided through Clerk Inc.): email address, password hash, authentication metadata. 2.2. Onboarding data you provide: last name, first name, date of birth, gender (optional), English fluency (optional), handle. 2.3. TikTok integration data: TikTok username, display name, avatar, bio, profile deep link. With your consent, we periodically read the view counts of videos you submit to our campaigns. 2.4. Instagram integration data: Instagram username, business/creator account ID, view and reach metrics for posts you submit. 2.5. Earnings and payout data: amounts you've earned on the Platform, payout history, transaction IDs from the payout provider. For payouts, your tax ID and business address (only after your annual income exceeds the gift-tier threshold). 2.6. Log data: IP address, device type, browser, request timestamp — for security and abuse prevention.
3. Purposes and legal bases
3.1. Operating the Platform and managing your account — basis: contract performance (Art. 6(1)(b) GDPR). 3.2. Calculating earnings and processing payouts including tax compliance — basis: contract performance and legal obligation (Art. 6(1)(b) and (c) GDPR). 3.3. Storing and processing TikTok/Instagram metrics — basis: your explicit, withdrawable consent (Art. 6(1)(a) GDPR), given during the social-account connection flow. 3.4. Fraud prevention and Platform security — basis: legitimate interest (Art. 6(1)(f) GDPR).
4. Processors (recipients)
Your personal data may be processed by the following processors: • Clerk Inc. (USA) — authentication. Privacy: https://clerk.com/privacy • Supabase Inc. (USA, EU region) — database. Privacy: https://supabase.com/privacy • Vercel Inc. (USA) — hosting. Privacy: https://vercel.com/legal/privacy-policy • TikTok Pte. Ltd. (Singapore) — video metrics. Privacy: https://www.tiktok.com/legal/privacy-policy • Meta Platforms Ireland Ltd. (Ireland) — Instagram metrics. Privacy: https://www.facebook.com/privacy/policy • Payouts.com / Tolt Inc. (USA) — payouts (depending on selected provider). • Számlázz.hu (KBOSS.hu Kft., Hungary) — invoicing. Processors in third countries (USA, Singapore) operate under European Commission-approved Standard Contractual Clauses.
5. Retention
5.1. Account data: retained for 30 days after account deletion (to allow recovery), then anonymized or deleted. 5.2. Accounting records (payout-related data): retained for 8 years per Hungarian Accounting Act 2000 § 169(2). 5.3. Log data: retained for 90 days.
6. Your rights
You have the right to: • access the personal data we hold about you; • request correction of inaccurate data; • request deletion ("right to be forgotten"); • request restriction of processing; • data portability (machine-readable export); • object to processing based on legitimate interest; • withdraw consent (you can disconnect TikTok/Instagram at any time); • lodge a complaint with NAIH. Send requests to kristof@onlinemarketinges.com. We respond without undue delay and within one month at the latest.
7. Cookies
The Platform uses only essential cookies: Clerk's session cookie for authentication and a NEXT_LOCALE cookie to remember your language preference. We do not use advertising cookies.
8. Age limit
The Platform is available only to persons aged 18 and over. We do not knowingly collect data from anyone under 18.
9. Changes
We will notify you on the Platform of any changes to this Policy. This Policy takes effect on 2026-04-30.