Effective date: 07 September 2026
Website: www.thaimassagelink.com
The purpose of this Privacy Notice is to describe what personal data we process during the use of the Thai Massage Link website and platform, for what purposes, on what legal basis, for how long, who may access the data, and what rights data subjects have.
Thai Massage Link is a professional online platform that supports the appearance, registration and contact-building of Thai massage therapists, massage salons and professional partners. The website does not operate as a webshop, does not sell massage services and does not carry out payment transactions between users.
1. Data controller details
Name of data controller: Balázsy Béla egyéni vállalkozó
Registered seat: 1064 Budapest, Vörösmarty utca 36. Fsz. / 12.
Registration number: 58633939
Tax number: 48325806-1-42
E-mail:
Website: www.thaimassagelink.com
Hereinafter: Data Controller.
2. Principles of data processing
The Data Controller processes personal data lawfully, fairly and transparently. We request only the data necessary for registration, profile creation, contact, administration or the operation of the platform.
Data is processed for specific purposes and retained only for as long as necessary. We aim to keep data accurate, up to date and processed securely.
3. What data do we process?
During the use of the website, we may process the following data.
In the case of registration: name or display name, email address, technical identifier of the password, selected user role, time of registration, account status, login data and technical log data.
In the case of creating a therapist profile: display name or professional name, country, city, district, age or age category, gender, language skills, professional status, contact details, short introduction, uploaded images, optional social media link, and the date of profile creation and modification.
In the case of creating a salon profile: salon name, country, city, address or district, website, email address, telephone number, short introduction, images, general information about services and profile status.
In the case of contact: name, email address, telephone number, message content and time of sending the message.
In the case of administration and moderation: profile approval status, administrator decisions, time of modifications and, where recorded, the reason for rejection or deletion.
During technical operation: IP address, browser type, device data, time of visit, pages viewed, cookies and other technical identifiers.
4. Purposes and legal bases of data processing
Registration and user account management. Purpose: to enable the user to create an account, log in, manage their own profile or listing and access functions linked to registration. Legal basis: performance of a contract or steps prior to entering into a contract; in certain cases, legitimate interest.
Creation and display of therapist and salon profiles. Purpose: to enable registered users to create professional profiles that may appear on the website after administrator approval. Legal basis: the data subject's consent and the contractual legal basis related to the use of the platform.
Handling contact requests. Purpose: to answer incoming questions, requests and messages. Legal basis: legitimate interest, and where the data subject initiates contact, steps prior to entering into a contract.
Moderation, approval and prevention of abuse. Purpose: to ensure that only real, relevant and lawful content appears on the platform, and to filter out fake, misleading or unlawful profiles. Legal basis: the legitimate interest of the Data Controller.
Compliance with legal obligations. Purpose: to comply with legal, accounting, tax or authority obligations. Legal basis: compliance with a legal obligation.
Website operation, security and statistics. Purpose: to ensure secure website operation, identify errors, prevent abuse and prepare traffic statistics. Legal basis: legitimate interest, and for certain cookies, consent.
5. Special categories of personal data
The Data Controller does not request or process special categories of personal data, such as health data or data relating to religious or political beliefs.
Users must refrain from providing such data in their profile or message.
6. Processing of uploaded images
Users may upload images to their profile at their own responsibility. Uploaded images may only include persons who have consented to this.
The Data Controller may moderate, reject or delete uploaded images if they do not fit the purpose of the platform, are unlawful, misleading, erotic or otherwise unwanted, or infringe the rights of third parties.
7. Public availability of data
Certain data from approved profiles may appear publicly on the website. Such data may include display name, city, district, short introduction, professional status, language skills, uploaded images, salon name, salon website and contact details.
The user acknowledges that certain data submitted as part of a profile may become visible on the website after approval.
8. Data processors
The Data Controller may use data processors for the operation of the website and the provision of the service.
Currently known data processors:
Magyar Telekom Nyrt. Role: provision of website development and related services. Registered seat: 1097 Budapest, Konyves Kalman krt. 36.
Wix.com Ltd. Role: website engine, hosting and technical platform provider.
Google Ireland Ltd. / Google services. Role: analytics, map, search or measurement services, if such functions are integrated.
Email service provider: [to be completed]. Role: contact, system messages and email communication.
Data processors may process personal data only according to the instructions of the Data Controller and only to the extent necessary for providing the service.
9. Data transfers to third countries
During the technical operation of the website, certain data may be transferred to service providers or servers outside the European Economic Area, particularly when using Wix or other international technology service providers.
In such cases, the Data Controller seeks to ensure that data transfers take place with appropriate safeguards, such as standard contractual clauses or other safeguards under the GDPR.
10. Data retention periods
Registration data: until the user account exists or until a deletion request is fulfilled.
Profile data: until the profile exists or until the profile is deleted.
Contact messages: for up to 2 years, unless a legal claim or obligation requires a longer retention period.
Moderation and administration data: for the period necessary for the secure operation of the platform, up to 3 years.
Data related to invoicing or legal obligations: for the period required by applicable laws.
Cookie and analytics data: for the period defined in the Cookie Policy.
11. Cookies and similar technologies
The website may use cookies and similar technologies to ensure operation, security, improve user experience and prepare statistics.
Necessary cookies are essential for the operation of the website. Statistics, marketing or convenience cookies require the user's consent.
The detailed rules on cookies are set out in a separate Cookie Policy.
12. Automated decision-making
The Data Controller does not use automated decision-making or profiling that would have legal effects on the user or similarly significantly affect the user.
The display of profiles is subject to administrator approval.
13. Data subject rights
The data subject has the right to request information about the processing of their personal data, request access to their data, request rectification of inaccurate data, request deletion of their data, request restriction of processing, object to data processing based on legitimate interest, withdraw consent at any time, and request data portability where the legal conditions are met.
The Data Controller responds to data subject requests without undue delay and no later than within 1 month. Where necessary, this period may be extended in accordance with the GDPR. According to the information of the Hungarian National Authority for Data Protection and Freedom of Information, the data subject may lodge a complaint with the Authority if they believe that the processing of their personal data infringes the GDPR.
14. Remedies
In the event of a complaint, the data subject may first contact the Data Controller.
Email: [to be completed]
The data subject has the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.
Hungarian National Authority for Data Protection and Freedom of Information
Registered seat: 1055 Budapest, Falk Miksa utca 9-11.
Postal address: 1363 Budapest, P.O. Box 9.
Email: [insert NAIH email address]
Website: www.naih.hu
The data subject may also apply to a court if they believe that the processing of their personal data is unlawful.
15. Data security
The Data Controller protects personal data with appropriate technical and organizational measures against unauthorized access, modification, transfer, disclosure, deletion or destruction.Technical service providers connected to the website apply security measures including, among others, access restriction, password protection, SSL encryption and system security solutions.
16. User responsibility
The user is responsible for ensuring that the data provided during registration and profile upload is accurate, correct and up to date. The user is also responsible for ensuring that the images, texts, links and other content uploaded by them do not infringe the rights of third parties, especially personality rights, copyright or data protection rights. The Data Controller reserves the right to reject or delete unlawful, misleading, fake or otherwise incompatible content.
17. Amendment of this Notice
The Data Controller reserves the right to amend this Privacy Notice. The amended Privacy Notice enters into force upon publication on the website.