Content of the privacy statement
Personal data includes users' name, address (home and email), IP address, phone number, date of birth, credit card number, etc. The privacy notice also explains what users can do if a company does not act properly.
Websites in all countries have a legal obligation to publish their privacy statement. These may vary from country to country, but there are some mandatory elements.
Countries in the European Economic Area (EEA) (including Hungary) have to comply with seven main principles. These set out that
only collect data that is necessary for the use of the website
how users can access the data held about them;
how to protect the data stored
how the collecting party can be held liable
In May 2016, the GDPR standardised these requirements in all Member States with the advent of the GDPR. Regardless of which third country (USA, Canada, Australia, etc.) their website is registered in, the GDPR applies to all companies that have a website accessible to European users and collect data on European users.