Privacy Policy

TISZA Space is the internal workspace of the Respect and Freedom Party (Tisztelet és Szabadság Párt): a web interface and its phone app (for Android and iPhone), used by the Party's staff and collaborators. This notice describes which personal data we process while it is used, for what purpose and for how long, who may see it, and what rights you have.

This notice is in force from 6 October 2026; its current version is always available from the TISZA Space sign-in page and from the phone app. It is based on Regulation (EU) 2016/679 of the European Parliament and of the Council (the General Data Protection Regulation, GDPR) and on Hungarian Act CXII of 2011 on the right to informational self-determination and on the freedom of information (Infotv.); its terms have the meanings given in Article 4 of the GDPR. The Hungarian version of this notice is the authoritative one.

The controller

Whose data we process

The data of those to whom the Party has given an account in TISZA Space, and of those with whom a user shares content in TISZA Space or whom a user adds to their address book.

What data we process

• Your account: your name, your e-mail address, your role and your permissions.
• Sign-ins and devices: the time of each sign-in, the IP address and the country derived from it, the type of browser and operating system; your phone's manufacturer, model and operating system, the app's version, and the identifier needed to deliver notifications.
• Your content: what you store or share in TISZA Space, and its basic details (name, size, time, with whom you shared it).
• The log of your activity: the time, place and outcome of the actions taken in TISZA Space (for example sign-ins, approvals and actions on content).
• Data arising from the phone's capabilities: see the next section.

The phone app's permissions

The app uses the following capabilities of the phone only when an action you started needs them, and only after you have granted permission when the phone asked. You can withdraw these permissions at any time in the phone's settings; the actions that depend on them will then be unavailable, but everything else keeps working.

• Camera: to scan QR codes, and to take a photo when an action asks for one. The image of a QR code never reaches the server; a photo taken for an action is kept encrypted.
• Microphone: for voice calls between users. The content of calls is not recorded.
• Location: only at the moment of an action, when the action needs it; the location so determined is kept together with the action's log. There is no continuous tracking.
• Notifications: so that we can tell you when something awaits your attention.
• Fingerprint, face or screen lock: checked by the phone's operating system; the app only learns whether the check succeeded — neither the app nor the server receives any biometric data.

The app does not access your contacts, your photos or other apps' data, does not track your activity in other apps or on websites, uses no advertising identifier, and collects no usage statistics.

What we use the data for, and on what legal basis

• To run TISZA Space: to maintain your account, to sign you in, to store and share content, and to send notifications and e-mails. Legal basis: your consent (GDPR Article 6(1)(a)).
• To protect the system and the content entrusted to it: to prevent and investigate unauthorised access and misuse; for this, the activity in TISZA Space is logged and, in some cases, recorded. Legal basis: the Party's legitimate interest (GDPR Article 6(1)(f)).
• To handle your requests to exercise your rights. Legal basis: legal obligation (GDPR Article 6(1)(c)).

TISZA Space sends no newsletters and no advertising; we use the data for no other purpose and sell it to no one. Using the data for private purposes is strictly forbidden.

How we protect your data

Your content is stored encrypted on the server as well. The encryption key is created on your own phone and stays there; the phone keeps it in its secure storage, and it can be opened only with your fingerprint, your face or your screen lock. The servers run in Budapest, in the data centre of Rackforest Zrt.; only authorised staff can access the data, and every access is logged.

Should a personal data breach occur, we report it to the Hungarian National Authority for Data Protection and Freedom of Information within 72 hours of becoming aware of it, unless it is unlikely to result in a risk; if it is likely to result in a high risk, we inform you as well.

How long we keep the data

We keep the data while your account exists and for a further 3 years after it ends; logs are kept for 3 years from their creation. After that, they are deleted.

Who may see the data

Only you and those you share it with can see your content. Users you deal with in TISZA Space also see your name and e-mail address. All other data may be seen only by the Party's authorised staff, to the extent their duties require.

We use the following service providers; as processors, they may process only the data their task requires, and only on the Party's instructions:

Cloudflare, Inc. may process the devices' IP addresses outside the European Union, on the basis of the EU–US Data Privacy Framework and the European Commission's standard contractual clauses. The United Kingdom ensures an adequate level of protection under a decision of the European Commission. The app reaches your phone through Google Play and the Apple App Store (during testing, TestFlight); their own privacy notices apply to them.

We carry out no profiling, and we take no decision based solely on automated processing that has legal effects on you.

Your rights

• Access: you may ask us which of your data we process, and ask for a copy of it.
• Rectification: you may ask us to correct inaccurate data and to complete incomplete data.
• Erasure: you may ask us to erase your data if it is no longer needed, if you have withdrawn your consent, or if it was processed unlawfully — unless keeping it is required by a legal obligation or for legal claims.
• Restriction: you may ask us to temporarily stop using your data and only store it.
• Objection: you may object to processing based on the Party's legitimate interest.
• Portability: you may ask for the data you provided in a machine-readable format.
• Withdrawing consent: you may withdraw your consent at any time; this does not affect the lawfulness of earlier processing.

You can send your request to adatvedelem@magyartisza.hu. We reply free of charge within one month at the latest; where justified, this period may be extended by a further two months, and we will tell you if it is. We fulfil a request once we are satisfied that it really came from you.

Remedies

You may first turn to us or to our data protection officer with a complaint: adatvedelem@magyartisza.hu. If you feel that our processing infringes your rights, you may turn to the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH):

You may also go to court; at your choice, you may bring the action before the regional court of your place of residence or of your place of stay. You can find the competent court on birosag.hu.

Changes to this notice

We may change this notice. If a change affects the processing of your personal data, we will notify you in TISZA Space or by e-mail.

© 2026 Tisztelet és Szabadság Párt