Legal information / 01
Privacy Policyand Personal Data Processing
Last updated 24 August 2026
1. Data controller and scope
The personal data controller and owner of the EduPath Hungary project is UNIVERSUM PROJECT E.A.C., registered in the Republic of Paraguay: Alberdi esquina Oliva, B° Catedral, Asunción; Registro de Comercio No. 4194; RUC 80130547; email: info@edupathHU.com. Hungary address: Hajós utca 19.
This Policy applies to the site edupathhu.com, its application forms, and any further communication regarding educational consulting, admission support, and mentorship services.
2. What data we may collect
Name and contact details; information about who is reaching out; the prospective student’s name and age; citizenship and country of residence; current education and graduation year; language level and certificate details; the desired intake year, cycle, and fields of study; family goals, an indicative budget, and any other information a user voluntarily provides in the form or in correspondence.
The site does not accept payment and does not collect bank card data. Please do not submit special categories of data or document scans through the initial form unless the EduPath team has specifically requested them over a secured channel.
If the prospective student is a minor, the application is submitted by a parent or other legal representative.
3. Purposes of processing
We use data to receive and review applications; contact the user; assess the availability and format of a consultation; prepare a personal route; agree on and deliver the selected services; support admission and settling-in; respond to enquiries; keep the site secure; and meet requirements under applicable law.
4. Legal bases for processing
Processing is carried out on the basis of the user’s consent; steps necessary prior to entering into a contract; performance of a contract; the Controller’s legitimate interests, provided they do not override the user’s rights; and obligations imposed by applicable law. For users in the European Economic Area, GDPR provisions apply to the extent they govern the specific processing activity.
5. Cookies and technical data
The site uses necessary cookies and browser storage for the form, security, language, UTM attribution, and saved choices. Optional analytics is allowed only after explicit consent. Form contents are never sent to analytics, and advertising cookies are not used.
6. Data sharing
Access may be granted to EduPath staff and contractors, as well as hosting, communications, forms, and CRM providers — only to the extent necessary to operate the site and deliver the services. Data may also be shared with universities, translators, insurers, visa partners, and other partners, but only once the corresponding stage has been agreed with the client, or where disclosure is required by law.
7. Cross-border processing
The project is connected to both Paraguay and Hungary, and technical providers may be located in other countries. Where data is transferred across borders, the Controller applies the contractual, organisational, and technical measures required by applicable law.
8. Retention periods
Data is retained no longer than necessary for the purposes of processing, contract performance, resolving potential disputes, and complying with mandatory retention periods. Data from an initial application that does not proceed further is deleted or anonymised once it is no longer practically needed, unless the law requires otherwise.
9. User rights
Users may request access to their data, correction, deletion, restriction of processing, object to processing, obtain a copy of their data, and withdraw consent. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal and does not override retention that is mandatory by law or contract.
10. Security
The Controller applies reasonable organisational and technical measures: access restrictions, secured channels, oversight of contractors, backups, and deletion of data once retention periods end.
11. Updates to this Policy
The current version is published on the site with an update date. Material changes affecting user rights will be highlighted separately.
12. Contact on personal data
For requests, clarifications, or to withdraw consent: info@edupathHU.com. Please use the subject line "Personal data — EduPath Hungary".