Privacy Policy

system
2020. április 6.

This notice describes how Vaperina collects and uses personal data, and provides information about individuals’ legal rights regarding their personal data and how those rights may be exercised.

Table of Contents

  1. Operator details and contact information
  2. Data controller details and contact information
    2.1 Data Protection Officer
  3. Definitions
  4. What data do we collect?
    4.1 User account data
    4.2 Published posts and other activities
    4.3 Sensitive personal data
    4.4 How can you make decisions about data collection?
  5. How do we use the information we receive from you?
  6. Automated decision-making and profiling
  7. How do we protect your data?
  8. How do we store data?
  9. Do we send any data to third parties?
  10. Third parties
  11. Service providers
    11.1 Data transfers to third countries
  12. Protection of children
  13. Legal basis for data processing
  14. Does Vaperina comply with the EU General Data Protection Regulation?
  15. Your rights as a data subject
    15.1 Where can you access your data?
    15.2 How can you modify or delete your data?
    15.3 Additional provisions
    15.4 Data protection authority proceedings
  16. Copyright
  17. Hate speech and hate-motivated conduct
  18. Do we use cookies?
  19. Modifying and deleting cookies
  20. Your consent
  21. Changes to the Privacy Policy

Note: The binding version of this Privacy Policy is the Hungarian original.

1. Operator details and contact information

Name: Dobri Donát Ferenc (hereinafter: Operator)
Email: donat@vaperina.com

2. Data controller details and contact information

Name: Dobri Donát Ferenc
Email: donat@vaperina.com

2.1 Data Protection Officer

The data controller does not process special categories of personal data, does not engage in profiling, and does not carry out large-scale, regular and systematic monitoring. The scale and nature of the data processing does not reach the threshold of large-scale processing, and therefore the conditions set out in Article 37(1) of the GDPR are not met. Accordingly, the designation of a Data Protection Officer is not mandatory.

3. Definitions

4. What data do we collect?

When you visit our Website, regardless of whether you have an account, we use cookies, server logs and other methods to collect data about which pages you visit and when.

4.1 User account data

Many features of the Website require a user account — for example, writing comments and replying to topics.

To register a user account, the Website asks for your username and email address. You may also optionally provide your name, which does not have to be your real name — it can be a nickname or any other form of address.

During registration or profile setup, you may also provide your country of residence. This information is currently optional, but may become mandatory in the future. Providing your country enables filtering of community content by country and helps display relevant content. Your country is publicly visible on your profile page, profile card, and posts you create.

Country data is processed on the basis of the legitimate interest of operating the service and facilitating community interactions ([GDPR Article 6(1)(f)]). If the provision of country data becomes mandatory, the legal basis for processing may also include the performance of a contract necessary to provide the service ([GDPR Article 6(1)(b)]).

The Operator uses your account data to identify you on the Website and to create specific pages, such as your profile page.

The Operator uses your email address for the following purposes:

On your account’s profile settings page, you may provide additional information, such as a short biography, your location, or your birthday (month/day). The Operator makes this information available to others who have access to the Website. This additional information is not required and can be deleted at any time. You may also hide your public profile and the account data it contains from other Users in your account settings.

The Operator stores your account data for as long as you remain a User on the Website and your account has not been deleted or anonymised, or as otherwise required by applicable law. Anonymised data that can no longer be linked to you may be retained for a longer period for statistical and analytical purposes in order to improve the service. You may request the closure of your account at any time as described in the Account section of the Terms of Service.

4.2 Published posts and other activities

The Operator collects the content of your posts, as well as data about bookmarks, likes and links you have interacted with, in order to share these with other Users through the Website. Some parts of the Website are publicly accessible and indexed by search engines such as Google, meaning that certain activities may be visible without registration. However, some areas of the Website are restricted, or individual posts may have access restrictions applied to them. The Operator only makes your activity available through the Website to Users who are authorised to view it.

The Operator may also collect data about private messages sent through the Website. Private messages are made available through the Website to their senders and recipients, as well as to Website administrators.

Audio and video recordings: The Website allows audio and video recordings to be made and shared. When a recording is made, audio and/or video is captured on your device and stored for the purpose of operating the service. In all cases, you must grant permission in your browser for the microphone and camera to be used before a recording can be made. You may request the deletion of any recording at any time. Recordings are treated confidentially, are not used for marketing purposes, and are not shared with third parties. However, before uploading any audio or video recording, please be aware of the risks involved. As with everything on the internet, it is virtually impossible to prevent the spread of such content once shared. Please consider this carefully before sharing recordings with others.

Vaperina Call (voice and video calls): When using the Vaperina Call feature, the call is established directly between the two participants’ devices (peer-to-peer connection). As a technical consequence of this, the IP addresses of both parties become visible to each other during the call — this is an inherent characteristic of WebRTC technology. We do not store, log or process any audio or video content. We do not store any metadata about who called whom and when. Everything that is said during a call remains exclusively between the two parties.

The Operator stores content associated with your account for as long as you remain a User on the Website and your account has not been deleted, or as otherwise required by applicable law. You may request the closure of your account at any time as described in the Account section of the Terms of Service.

4.3 Sensitive personal data

The Operator does not intentionally collect or process sensitive personal data, such as government identification numbers, information relating to racial or ethnic origin, political opinions, genetic data, biometric data, health data, or special categories of personal data as defined by the GDPR.

4.4 How can you make decisions about data collection?

On your account settings page, you can make decisions about how we use your data. Our categories use different access restrictions — by selecting the appropriate category, you can choose who can see a post.

Most web browsers allow you to decide whether to accept cookies, either for specific websites or more generally. More information is available in the Do we use cookies? section.

The Website does not respond to the Do Not Track HTTP header.

5. How do we use the information we receive from you?

We may use the information we collect in one or more of the following ways:

6. Automated decision-making and profiling

The data controller does not carry out automated decision-making or profiling based on the personal data of data subjects.

7. How do we protect your data?

We implement a range of security measures to maintain the safety of your personal data. We continually strive to apply the most up-to-date technology available, in which the security of Users’ data is always of paramount importance.

User profiles can only be viewed when logged in.

To protect your account, your public profile is only visible to logged-in Users. Users may choose to hide their public presence and profile from other Users in their profile settings.

To further enhance the security of your account, we recommend using a strong password along with one of the following options:

8. How do we store data?

All log files and data are encrypted on our servers, which are located within the European Union — in Frankfurt, Germany — at the data centres of the service providers specified in the Service providers section.

The Operator generally retains server log data for a maximum of four weeks, using a regular automated deletion mechanism (log rotation). In exceptional circumstances — for example, during extended investigations into technical attacks — the Operator may retain log data for longer for analysis purposes. The Operator stores aggregated statistics about Website usage, and these statistics do not contain any information that could identify you personally.

Data type Retention period
Active user account data Until the account is deleted or anonymised
Unactivated (unconfirmed) user account Automatic deletion after 14 days
Inactive (unused) user account Automatic deletion or anonymisation 2 years after the last login
Email addresses Until the account is deleted or anonymised
Cookie identifiers As described in the Do we use cookies? section

9. Do we send any data to third parties?

Vaperina does not engage in marketing activities and under no circumstances transfers personal data to third parties, except where required by law. Data transfers may only take place where required by law (e.g. court order, regulatory request), and only to the extent and in the manner prescribed by that law. Where a data transfer is required by law, data subjects will be informed to the extent permitted by applicable legislation. We ensure that your personal data remains protected throughout processing and that all data processing complies with applicable data protection legislation, in particular the General Data Protection Regulation (GDPR) of the European Union.

10. Third parties

From time to time, at our discretion, we may include third-party products or services on our Website. These third-party websites are governed by separate and independent privacy policies, which can be found in the Service providers section. We therefore accept no responsibility for the content or activities of those linked websites. That said, we strive to maintain the integrity of our Website and welcome any feedback regarding these websites.

11. Service providers

When selecting service providers, we take great care to ensure they are committed to compliance with the EU General Data Protection Regulation (GDPR). We use the following service providers, which operate within the EU/EEA and therefore do not involve data transfers to third countries:

The privacy policies of our service providers inform you about the types of data collected by the provider, how that data is used, your rights in relation to that data, and how to contact the provider with privacy-related questions.

11.1 Data transfers to third countries

The data controller transfers personal data to third countries outside the EEA — for example, to the United States — in connection with certain data processing operations carried out by the following service providers.

Note on transfers outside the EU:
Some service providers are headquartered outside the European Union, or their parent companies are located in third countries (e.g. the United States). In such cases, data transfers take place exclusively on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission, in accordance with the Schrems II judgment, supplemented by additional safeguards and risk assessments where necessary.

Please note that transfers of data to third countries — in particular to the United States — may carry data protection risks, as the country concerned may not provide a level of data protection equivalent to that of the European Union. Data transfers therefore take place exclusively under contractual conditions approved by the European Commission, along with additional technical and organisational measures where required.

12. Protection of children

Electronic cigarettes are becoming increasingly popular, but it is important to note that children’s exposure to nicotine can be harmful to a developing body. Electronic cigarettes are an alternative solution for quitting smoking. We therefore recommend them only to adults who wish to switch from smoking to a less harmful alternative.

Vaperina is committed to protecting children.

We take the following steps:

1. Age verification:

2. Child protection filters:

3. Deletion of children’s data:

4. Cooperation:

Privacy policy principles:

Our privacy policies are consistent with the protection of children. They include the following commitments:

Vaperina is committed to the protection of children. We take numerous steps to prevent children from using electronic cigarettes.

It is important that parents and educators are also aware of the dangers that electronic cigarettes pose to children. Please talk to children about the risks of using electronic cigarettes.

If you have any questions about the protection of children or our privacy policies, please contact us.

13. Legal basis for data processing

User data is stored until withdrawn and is not disclosed to third parties.

The legal basis for data processing in respect of processing carried out through the online platforms we operate (including contact interactions) is governed by the following legislation:

Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information.

Pursuant to Article 20(1) of the Information Act, “the data subject must be informed before the commencement of data processing whether the processing is based on consent or is mandatory.”

Under Article 3(7) of the Information Act, consent means “a voluntary and unambiguous expression of the data subject’s will, based on adequate information, by which the data subject gives their unmistakable agreement to the processing of their personal data.”

The current text of the legislation is available at the following link: Info tv. - 2011. évi CXII. törvény az információs önrendelkezési jogról és az információszabadságról - Hatályos Jogszabályok Gyűjteménye

14. Does Vaperina comply with the EU General Data Protection Regulation?

The Operator respects the data protection rights under Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR) of the European Union. The information required from the Operator under the GDPR is set out in this privacy notice, including information on data subject rights.

15. Your rights as a data subject

The GDPR grants you the following rights in relation to personal data collected or processed about you:

Information on exercising these rights is provided in this notice and referenced by the links above. While the Operator strives to make it easy to exercise these rights through account settings, for more complex matters it is best to contact us directly.

15.1 Where can you access your data?

You can view your account data at any time by visiting your account on the Website. Your account page also lists your posts and other activities published on the Website.

The account activity page also contains a link to download all your activity in standard comma-separated values format.

Right to data portability under Article 20 of the GDPR
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller without hindrance from us, where:

When exercising your right to data portability, you have the right to request — where technically feasible — that personal data be transferred directly between controllers.

The current text of the relevant legislation is available at the following link:

15.2 How can you modify or delete your data?

You can modify your account data at any time by visiting your account’s profile settings. Closing your account initiates the process of deleting or anonymising the data associated with your account.

You can edit or delete your posts. When you edit posts, the Website retains all versions of your posts, which can be viewed by other visitors.

You can close your account at any time by sending a request to info@vaperina.com or by contacting us.

Right to rectification under Article 16 of the GDPR
You have the right to obtain from us without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

Right to erasure under Article 17 of the GDPR
You have the right to obtain from us the erasure of personal data concerning you without undue delay where one of the following grounds applies:

Where we have made personal data public and are obliged to erase it, we shall, taking into account available technology and the cost of implementation, take reasonable steps to inform controllers which are processing the personal data that you have requested the erasure of any links to, or copy or replication of, that personal data (right to be forgotten).

15.3 Additional provisions

Right of access under Article 15 of the GDPR
Pursuant to Article 15(1) of the GDPR, you have the right to obtain from us, upon request and free of charge, information about the personal data we hold about you. This includes, in particular:

Right to restriction of processing under Article 18 of the GDPR
You have the right to obtain from us restriction of processing where one of the following applies:

Right to object under Article 21 of the GDPR
Pursuant to Article 21(1) of the GDPR, you may object to the processing of your personal data at any time.

This general right to object applies to all processing purposes described in this privacy notice that are based on Article 6(1)(f) of the GDPR. Unlike the specific right to object to processing for direct marketing purposes, we are only obliged under the GDPR to comply with such a general objection if you provide overriding grounds for the objection, such as a potential threat to life or health. You also have the right to lodge a complaint with the competent supervisory authority.

15.4 Data protection authority proceedings

Complaints may be lodged with the National Authority for Data Protection and Freedom of Information:

Name: Nemzeti Adatvédelmi és Információszabadság Hatóság
      (National Authority for Data Protection and Freedom of Information)
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C., Hungary
Postal address: 1530 Budapest, Pf.: 5, Hungary
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
Email: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu

16. Copyright

The content on the Website, including texts, images, videos and audio recordings, is protected by copyright. This means that use of the content without the permission of the author is prohibited. Users in the Roles defined in the Terms of Service — namely Administrators, Moderators and Category Moderators — have the right to modify or reorganise user posts and content for moderation purposes in the interest of the community. This does not require your permission and you should expect this to occur from time to time. Please keep this in mind when posting on the Website.

The following uses are permitted on the Website:

The following uses are prohibited on the Website:

In the event of copyright infringement, the author may seek legal remedy from the courts. Remedies may include damages, an injunction against the infringing conduct, and removal of the infringing content.

The Operator encourages respect for copyright. Users are obliged to comply with copyright law.

Further information:

17. Hate speech and hate-motivated conduct

Hate speech and hate-motivated conduct are prohibited on the Website.

Hate speech is expression that demeans, degrades or threatens a person on the basis of their membership of a national, ethnic, religious, sexual minority or other group.

Hate-motivated conduct refers to actions that incite violence or discrimination against a person on the basis of their membership of such a group.

Hate speech and hate-motivated conduct can have serious consequences, including:

Combating hate speech and hate-motivated conduct is everyone’s responsibility. We must all take the necessary steps to prevent such conduct.

The following content is prohibited on the Website:

Content containing hate speech or hate-motivated conduct will be removed from the Website. Accounts of Users who engage in hate speech or hate-motivated conduct will be suspended or removed from the Website.

The Website strives to create an atmosphere of tolerance and inclusion for all Users. Users are obliged to refrain from hate speech and hate-motivated conduct.

18. Do we use cookies?

Yes. Cookies are small packages of information sent by a visited website to the user’s browser, which the browser then sends back with every subsequent request to the server. These pieces of data are stored on the user’s computer and browser. Cookies allow the Website to recognise your browser and, for example, if you have a registered account, associate it with your registered account.

Through the use of cookies, we understand and save your preferences for future visits and gather aggregated data about Website traffic and interactions, so that we can offer better experiences and tools in the future.

Description of cookies used by Vaperina

The cookies used on the Website are, by function, essential cookies — that is, cookies that are indispensable for the proper operation of Vaperina. These cookies are therefore automatically accepted by browsing the Website. Based on their storage duration, we distinguish between session cookies, which are deleted when the visitor closes their browser, and persistent cookies, which are retained on the visitor’s device and browser until their expiry date or until the visitor removes them.

Essential (Necessary) cookies

These cookies ensure the proper functioning of the Website and make it easier to use. Without them, the Website may be difficult or impossible to use properly. Essential cookies collect information about the use of the Website without identifying visitors.

Cookies we use:

Name Essential Expiry Description Contains personal data
email Yes Session Used to pre-fill forms during account creation, sign-in or password reset. Created when an email address is provided as a query parameter in the URL. Yes
destination_url Yes Session Used to redirect to the requested page during sign-in. Created when a user visits a URL that requires authentication. They are redirected to the sign-in page, and after authentication the value from the cookie redirects them back to the originally requested URL. Deleted after authentication. No
theme_ids Yes 1 year Remembers interface personalisation. Created when personal settings are changed. No
color_scheme_id Yes 1 year Remembers colour scheme personalisation if the “Make this my default colour scheme on all devices” checkbox is not selected. Created when personal settings are changed. Deleted when personal settings are reset to default. No
dark_scheme_id Yes 1 year Remembers dark colour scheme personalisation if the “Make this my default colour scheme on all devices” checkbox is not selected. Created when personal settings are changed. Deleted when personal settings are reset to default. No
text_size Yes 1 year Remembers user text size personalisation if the “Make this my default text size on all devices” checkbox is not selected. Created when personal settings are changed. Deleted when personal settings are reset to default. No
cn Yes Session User notifications. Created when a notification is clicked. Deleted when the Website is loaded. No
_t Yes 1440 hours Created after authentication. Deleted after signing out. No
_forum_session Yes Session Session cookie. Created when the Website is loaded. No
dosp Yes Next page view Temporary cookie that informs the user of a denial of service. Created when the Website is loaded. No
cookietest Yes Session Checks whether cookies are enabled. Created when authentication does not confirm that cookies are enabled (disabled cookies may be the cause of failures). No
policy_consent Yes 1 year Remembers acceptance of the age (18+) and cookie notice. No
app_modal_closed Yes 1 month When Vaperina is accessed from a browser on Android, a pop-up banner appears offering the option to install/open the Vaperina App or continue in the browser. This cookie is activated when the user selects to continue in the browser by clicking the “Continue” button. No
banner_closed Yes 1 day Remembers the closure of the support banner at the top of the Website by clicking the “maybe later” button. No
banner_collapsed Yes 1 day Remembers the expansion of the support banner at the top of the Website by clicking the “support options” button. No
banner_donated Yes 1 month Remembers the closure of the support banner at the top of the Website by clicking the “I have already supported this month” button. No

Other service providers may also place cookies on the Website. However, these providers place cookies independently of Vaperina, for their own operational purposes. One such provider is YouTube. YouTube places temporary cookies in the browser each time a user watches a YouTube-shared embedded video. These cookies are deleted from the browser once playback ends or when the user navigates away from the topic.

19. Modifying and deleting cookies

How can cookie settings be reviewed and changed?

Most browsers automatically accept cookies by default, but this setting can generally be changed. Some cookies stored in your browser while using the Website are stored in a form that, for technical reasons, we are unable to delete or modify from your browser.

20. Your consent

By registering on the Website, you accept this Privacy Policy.

21. Changes to the Privacy Policy

The Operator reserves the right to update or modify these policies at any time without prior notice. By continuing to use Vaperina following any changes, you agree to be bound by the revised policies. We therefore recommend that you review these policies periodically for as long as you use this Website.

Last updated: 23 March 2026
Created: 6 April 2020