{"id":1271,"date":"2026-08-31T15:19:50","date_gmt":"2026-08-31T14:19:50","guid":{"rendered":"https:\/\/kontentfor.me\/?page_id=1271"},"modified":"2026-09-07T16:14:30","modified_gmt":"2026-09-07T15:14:30","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/kontentfor.me\/hu\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<div data-elementor-type=\"wp-page\" data-elementor-id=\"1271\" class=\"elementor elementor-1271\" data-elementor-post-type=\"page\">\n\t\t\t\t<div class=\"elementor-element elementor-element-4eecf99 e-con e-atomic-element e-flexbox-base e-default-div e-63f4d42\" data-id=\"4eecf99\" data-element_type=\"e-flexbox\" data-e-type=\"e-flexbox\" data-interaction-id=\"4eecf99\">\n    \t\t<div class=\"elementor-element elementor-element-51c75fd elementor-widget elementor-widget-heading\" data-id=\"51c75fd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Privacy Policy<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8343486 elementor-widget elementor-widget-text-editor\" data-id=\"8343486\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<style>\n.elementor-widget-text-editor h2.privacy-subtitle {\n    font-size: 17px !important;\n    line-height: 1.35 !important;\n    font-weight: 600 !important;\n    margin-top: 26px !important;\n    margin-bottom: 10px !important;\n}\n\n.elementor-widget-text-editor h3.privacy-smalltitle {\n    font-size: 15px !important;\n    line-height: 1.4 !important;\n    font-weight: 600 !important;\n    margin-top: 18px !important;\n    margin-bottom: 7px !important;\n}\n\n@media (max-width: 767px) {\n    .elementor-widget-text-editor h2.privacy-subtitle {\n        font-size: 16px !important;\n        margin-top: 23px !important;\n        margin-bottom: 9px !important;\n    }\n\n    .elementor-widget-text-editor h3.privacy-smalltitle {\n        font-size: 14px !important;\n        margin-top: 16px !important;\n        margin-bottom: 6px !important;\n    }\n}\n<\/style>\n\n<strong>Effective date: 31 August 2026<\/strong>\n\n<h2 class=\"privacy-subtitle\">1. Details of the Data Controller<\/h2>\n\nIn accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council (General Data Protection Regulation \u2013 GDPR) and Act CXII of 2011 on Informational Self-Determination and Freedom of Information, the Data Controller provides the following information regarding the processing of personal data.\n\n<strong>Data Controller:<\/strong> DUONG THI QUYNH TRAM, sole proprietor\n<strong>Registered office:<\/strong> 1191 Budapest, Vak Botty\u00e1n utca 72., Hungary\n<strong>Registration number:<\/strong> 62044088\n<strong>Tax number:<\/strong> 91877936-1-43\n<strong>Main activity:<\/strong> Motion picture, video and television programme production (\u00d6VTJ 591101)\n<strong>Other activities:<\/strong> Photography n.e.c. (\u00d6VTJ 742001), Video recording (\u00d6VTJ 742002)\n<strong>Email:<\/strong> <a href=\"mailto:create@kontentfor.me\">create@kontentfor.me<\/a>\n<strong>Phone:<\/strong> <a href=\"tel:+36303081793\">+36 30 308 1793<\/a>\n<strong>Website:<\/strong> <a href=\"https:\/\/kontentfor.me\/hu\/\">kontentfor.me<\/a>\n\n<h2 class=\"privacy-subtitle\">2. Purpose of this Privacy Notice<\/h2>\n\nThe purpose of this Privacy Notice is to provide detailed information about what personal data the Data Controller processes, the purposes and legal bases of such processing, how long personal data is retained, who may have access to it, and what rights data subjects have in connection with the processing of their personal data.\n\nThe Data Controller places particular emphasis on ensuring that personal data is processed lawfully, fairly and transparently and in accordance with the applicable data protection legislation.\n\n<h2 class=\"privacy-subtitle\">3. Applicable legislation<\/h2>\n\nThe processing of personal data is governed in particular by the following legislation:\n\n<ul>\n    <li>Regulation (EU) 2016\/679 of the European Parliament and of the Council (GDPR);<\/li>\n    <li>Act CXII of 2011 on Informational Self-Determination and Freedom of Information;<\/li>\n    <li>Act C of 2000 on Accounting;<\/li>\n    <li>Act CXXVII of 2007 on Value Added Tax;<\/li>\n    <li>Act V of 2013 on the Civil Code of Hungary.<\/li>\n<\/ul>\n\n<h2 class=\"privacy-subtitle\">4. Principles relating to processing of personal data<\/h2>\n\n<h3 class=\"privacy-smalltitle\">Lawfulness, fairness and transparency<\/h3>\n\nThe Data Controller processes personal data lawfully, fairly and in a transparent manner in relation to the data subject.\n\n<h3 class=\"privacy-smalltitle\">Purpose limitation<\/h3>\n\nPersonal data is collected and processed only for specified, explicit and legitimate purposes and is not further processed in a manner incompatible with those purposes.\n\n<h3 class=\"privacy-smalltitle\">Data minimisation<\/h3>\n\nThe Data Controller processes only personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.\n\n<h3 class=\"privacy-smalltitle\">Accuracy<\/h3>\n\nThe Data Controller takes reasonable steps to ensure that personal data is accurate and, where necessary, kept up to date. Inaccurate personal data will be corrected or deleted where appropriate.\n\n<h3 class=\"privacy-smalltitle\">Storage limitation<\/h3>\n\nPersonal data is retained only for as long as necessary for the relevant processing purpose, or for as long as retention is required by applicable law or justified by another appropriate legal basis.\n\nSpecific retention periods are set out in Section 8 of this Privacy Notice.\n\n<h3 class=\"privacy-smalltitle\">Integrity and confidentiality<\/h3>\n\nThe Data Controller applies appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration or unauthorised access.\n\n<h3 class=\"privacy-smalltitle\">Accountability<\/h3>\n\nThe Data Controller is responsible for compliance with the above principles and organises its processing activities in a manner that enables such compliance to be demonstrated where required.\n\n<h2 class=\"privacy-subtitle\">5. Categories of personal data processed<\/h2>\n\nDuring the use of the website, enquiries, booking, communication and provision of wedding content creation and related services, the following personal data may be processed.\n\n<h3 class=\"privacy-smalltitle\">When contacting the Data Controller<\/h3>\n\n<ul>\n    <li>name;<\/li>\n    <li>email address;<\/li>\n    <li>telephone number;<\/li>\n    <li>content of the message;<\/li>\n    <li>IP address;<\/li>\n    <li>browser type;<\/li>\n    <li>device-related information;<\/li>\n    <li>other technical information relating to the use of the website.<\/li>\n<\/ul>\n\n<h3 class=\"privacy-smalltitle\">During enquiries and booking<\/h3>\n\n<ul>\n    <li>name;<\/li>\n    <li>email address;<\/li>\n    <li>telephone number;<\/li>\n    <li>wedding or event date;<\/li>\n    <li>wedding or event location;<\/li>\n    <li>selected service package;<\/li>\n    <li>agreed service duration;<\/li>\n    <li>event schedule;<\/li>\n    <li>other information voluntarily provided by the client in connection with the wedding or event.<\/li>\n<\/ul>\n\n<h3 class=\"privacy-smalltitle\">During the provision of the service<\/h3>\n\nThe Data Controller may process information required to organise and perform the content creation service, including information relating to:\n\n<ul>\n    <li>the wedding or event schedule;<\/li>\n    <li>venues;<\/li>\n    <li>ceremony and programme times;<\/li>\n    <li>contact persons;<\/li>\n    <li>other service providers;<\/li>\n    <li>special requests communicated by the client.<\/li>\n<\/ul>\n\n<h3 class=\"privacy-smalltitle\">Billing<\/h3>\n\n<ul>\n    <li>name;<\/li>\n    <li>billing address;<\/li>\n    <li>tax number, where required by law.<\/li>\n<\/ul>\n\n<h3 class=\"privacy-smalltitle\">Payment<\/h3>\n\nThe Data Controller does not store payment card details. Where payment is made by bank transfer, the Data Controller may become aware of the following transaction-related information:\n\n<ul>\n    <li>name of the payer;<\/li>\n    <li>bank account number;<\/li>\n    <li>amount transferred;<\/li>\n    <li>date and time of transaction;<\/li>\n    <li>payment reference or message.<\/li>\n<\/ul>\n\n<h3 class=\"privacy-smalltitle\">Photos and video recordings created during weddings and events<\/h3>\n\nPhotographs and video recordings on which a person can be identified constitute personal data.\n\nThese may include in particular:\n\n<ul>\n    <li>video recordings of the client;<\/li>\n    <li>video recordings of the spouse or partner;<\/li>\n    <li>video recordings of wedding guests;<\/li>\n    <li>photographs;<\/li>\n    <li>raw video footage;<\/li>\n    <li>edited highlight videos;<\/li>\n    <li>vertical social-media videos;<\/li>\n    <li>other audiovisual recordings produced as part of the service.<\/li>\n<\/ul>\n\nThe primary purpose of processing such recordings is the performance of the contracted wedding content creation service, including recording, selection, editing, post-production and delivery of the completed content to the client.\n\nSeparate rules apply to the use of content for portfolio, reference, promotional and marketing purposes.\n\n<h2 class=\"privacy-subtitle\">6. Purposes of processing<\/h2>\n\nPersonal data may be processed for the following purposes:\n\n<ul>\n    <li>responding to enquiries;<\/li>\n    <li>providing quotations;<\/li>\n    <li>communication with prospective clients;<\/li>\n    <li>booking and scheduling;<\/li>\n    <li>concluding and performing contracts;<\/li>\n    <li>organising wedding content creation services;<\/li>\n    <li>creating photographs and video recordings;<\/li>\n    <li>editing and post-production;<\/li>\n    <li>delivery of raw and edited digital content;<\/li>\n    <li>billing and accounting;<\/li>\n    <li>compliance with legal obligations;<\/li>\n    <li>customer relationship management;<\/li>\n    <li>ensuring the technical operation of the website;<\/li>\n    <li>statistical analysis;<\/li>\n    <li>marketing activities where appropriate consent has been provided.<\/li>\n<\/ul>\n\n<h2 class=\"privacy-subtitle\">7. Legal bases for processing<\/h2>\n\n<h3 class=\"privacy-smalltitle\">Consent<\/h3>\n\nWhere processing is based on the freely given, specific, informed and unambiguous consent of the data subject, the legal basis is Article 6(1)(a) GDPR.\n\nThis may include, in particular, the use of photographs and videos for portfolio, reference and marketing purposes and the use of marketing or measurement technologies on the website where consent is required.\n\nConsent may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.\n\n<h3 class=\"privacy-smalltitle\">Performance of a contract and pre-contractual steps<\/h3>\n\nProcessing is based on Article 6(1)(b) GDPR where it is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject before entering into a contract.\n\nThis includes, in particular, responding to service enquiries, communication, quotations, booking, scheduling, organising and performing wedding content creation services, recording content, editing and delivering the completed materials.\n\n<h3 class=\"privacy-smalltitle\">Compliance with a legal obligation<\/h3>\n\nProcessing is based on Article 6(1)(c) GDPR where processing is necessary to comply with a legal obligation applicable to the Data Controller.\n\nThis includes, in particular, billing, accounting, taxation and statutory record-keeping obligations.\n\n<h3 class=\"privacy-smalltitle\">Legitimate interests<\/h3>\n\nProcessing may be based on Article 6(1)(f) GDPR where it is necessary for the purposes of the legitimate interests pursued by the Data Controller or a third party, except where those interests are overridden by the interests or fundamental rights and freedoms of the data subject.\n\nLegitimate interests may include ensuring the secure and proper operation of the website, preventing fraud and technical issues, establishing, exercising or defending legal claims and conducting limited business statistics necessary for the operation of the business.\n\nThe Data Controller may retain limited information relating to enquiries for up to 3 years for analysing demand for services, numbers and types of enquiries and changes in business activity.\n\nWhere legitimate interest is relied upon, the Data Controller assesses the necessity and proportionality of the processing and its possible impact on the rights and freedoms of data subjects.\n\nThe data subject has the right to object at any time, on grounds relating to their particular situation, to processing based on legitimate interests.\n\n<h2 class=\"privacy-subtitle\">8. Retention periods<\/h2>\n\n<h3 class=\"privacy-smalltitle\">Enquiries and business statistics<\/h3>\n\nEnquiries and related communications are retained for as long as reasonably necessary to respond to the enquiry, maintain a record of previous communication and manage potential legal claims.\n\nLimited information derived from enquiries may be retained for a maximum of 3 years for analysing service demand and business trends.\n\nInformation used for statistical purposes is limited to what is reasonably necessary and may include the date of the enquiry, requested service, source of the enquiry and limited identifying information.\n\nFollowing expiry of the retention period, the data will be deleted or anonymised unless further retention is justified by law or another lawful basis.\n\n<h3 class=\"privacy-smalltitle\">Documents relating to service performance<\/h3>\n\nDocuments or declarations relating to participation in or performance of the wedding or event service may be retained electronically for a maximum period of 3 years.\n\nThe purpose of this retention is to demonstrate the terms and performance of the service and to establish, exercise or defend potential legal claims.\n\n<h3 class=\"privacy-smalltitle\">Invoices and accounting records<\/h3>\n\nPersonal data contained in invoices and other accounting documents is retained for the statutory period required under Hungarian accounting and taxation legislation.\n\nAccounting documents are retained for at least 8 years in accordance with Act C of 2000 on Accounting.\n\n<h3 class=\"privacy-smalltitle\">Raw photographs and raw video footage<\/h3>\n\nRaw photographs, raw video recordings and related production files may be retained for up to 3 months following the wedding or event.\n\nThe purpose of the retention is to complete the contracted service, perform editing and post-production and deal with potential technical, amendment or delivery-related issues.\n\nRaw or unedited material is not used for portfolio, reference or marketing purposes.\n\n<h3 class=\"privacy-smalltitle\">Final edited content<\/h3>\n\nFinal photographs, edited videos and other completed digital content delivered to the client may be retained for up to 1 year after the wedding or event.\n\nThe purpose of this limited retention is to enable the Data Controller, where the files remain available, to resend completed content in the event of data loss, download problems, file corruption or another justified request.\n\nAfter the 1-year retention period, the content will be deleted unless there is another lawful basis and defined purpose for continued processing.\n\n<h3 class=\"privacy-smalltitle\">Electronic file delivery and cloud storage<\/h3>\n\nWhere content is delivered through an external file-transfer platform, cloud storage service or online gallery, the files may also be stored in the systems of the relevant external provider for a limited period depending on the service and its settings.\n\nSuch temporary external storage does not extend the Data Controller&#8217;s own retention periods described in this Privacy Notice.\n\n<h3 class=\"privacy-smalltitle\">Portfolio, reference and marketing content<\/h3>\n\nThe Data Controller may use final edited photographs or videos for portfolio, reference or marketing purposes only where an appropriate legal basis exists and, where required, the data subject has provided separate, voluntary and explicit consent.\n\nRaw or unedited material is not used for portfolio or marketing purposes.\n\nContent lawfully selected for portfolio, reference or marketing purposes may continue to be processed beyond the general one-year retention period for as long as the relevant purpose and lawful basis remain valid.\n\nWhere processing is based on consent, the data subject may withdraw that consent at any time.\n\n<h2 class=\"privacy-subtitle\">9. Cookies and similar technologies<\/h2>\n\n<h3 class=\"privacy-smalltitle\">9.1 What is a cookie?<\/h3>\n\nA cookie is a small data file stored in the visitor&#8217;s browser by a website. Cookies and similar technologies may be used to ensure the proper operation of the website, improve user experience and collect statistical or marketing-related information.\n\nCookies do not necessarily identify an individual directly, but information processed through cookies or combined with other information may in certain circumstances constitute personal data.\n\n<h3 class=\"privacy-smalltitle\">9.2 Purposes of cookies<\/h3>\n\nCookies used on the website may serve in particular to:\n\n<ul>\n    <li>ensure proper operation of the website;<\/li>\n    <li>improve user experience;<\/li>\n    <li>analyse website performance;<\/li>\n    <li>identify technical errors;<\/li>\n    <li>measure the performance of marketing campaigns;<\/li>\n    <li>support personalised advertising where applicable.<\/li>\n<\/ul>\n\n<h3 class=\"privacy-smalltitle\">9.3 Categories of cookies<\/h3>\n\n<strong>Strictly necessary cookies<\/strong>\n\nThese cookies are necessary for the proper functioning and security of the website and may include technologies required for session management, security features, forms and technical optimisation.\n\nConsent is generally not required for cookies that are strictly necessary to provide a service explicitly requested by the visitor.\n\n<strong>Analytics cookies<\/strong>\n\nWhere analytics technologies are used, these may collect information about the use of the website, including page views, session duration, device type, browser and similar technical information.\n\nWhere consent is legally required for such technologies, they will only be activated following the visitor&#8217;s prior consent.\n\n<strong>Marketing cookies<\/strong>\n\nMarketing cookies and similar technologies may be used to measure advertising campaign performance, track conversions and create remarketing audiences.\n\nWhere consent is required, marketing technologies will only be activated following the visitor&#8217;s prior consent.\n\n<h2 class=\"privacy-subtitle\">10. Meta Pixel<\/h2>\n\nThe website uses Meta Pixel.\n\nMeta Pixel is a measurement and marketing technology provided by Meta Platforms which may be used to:\n\n<ul>\n    <li>measure the performance of advertisements displayed on Meta platforms;<\/li>\n    <li>track website events and conversions associated with advertising;<\/li>\n    <li>create remarketing audiences;<\/li>\n    <li>optimise advertising campaigns.<\/li>\n<\/ul>\n\nWhen Meta Pixel is used, certain technical, device and website activity information may be transmitted to Meta.\n\nThe legal basis for marketing-related processing carried out through Meta Pixel and related technologies is the data subject&#8217;s prior consent pursuant to Article 6(1)(a) GDPR.\n\nMarketing-related Meta technologies requiring consent are activated only after the visitor has provided the required consent through the website&#8217;s cookie settings. Refusal of marketing cookies does not prevent use of the essential functions of the website.\n\nFurther information about Meta&#8217;s processing practices is available in Meta&#8217;s Privacy Policy.\n\n<h2 class=\"privacy-subtitle\">11. Google Analytics<\/h2>\n\nGoogle Analytics is not currently used on the website unless otherwise indicated in the website&#8217;s current cookie settings.\n\nIf Google Analytics is introduced in the future, it may process statistical and technical information relating to website usage, including:\n\n<ul>\n    <li>visits and sessions;<\/li>\n    <li>page views;<\/li>\n    <li>website interactions;<\/li>\n    <li>traffic sources;<\/li>\n    <li>approximate geographical information;<\/li>\n    <li>device type;<\/li>\n    <li>operating system;<\/li>\n    <li>browser type;<\/li>\n    <li>time spent on the website;<\/li>\n    <li>other technical and statistical information.<\/li>\n<\/ul>\n\nBefore Google Analytics is introduced, this Privacy Notice and the website&#8217;s cookie settings will be updated where necessary.\n\n<h2 class=\"privacy-subtitle\">12. Cloudflare<\/h2>\n\nThe website uses Cloudflare services to improve performance, availability and security.\n\nCloudflare may provide, among other functions:\n\n<ul>\n    <li>DDoS protection;<\/li>\n    <li>caching;<\/li>\n    <li>SSL-related security;<\/li>\n    <li>network optimisation;<\/li>\n    <li>filtering of malicious traffic.<\/li>\n<\/ul>\n\nTechnical information, including IP addresses, may be processed in connection with these services.\n\nThe legal basis for processing required to maintain the security and proper operation of the website may be Article 6(1)(f) GDPR, legitimate interests.\n\n<h2 class=\"privacy-subtitle\">13. Elementor Hosting<\/h2>\n\nThe website is hosted using Elementor Hosting.\n\nThe hosting service may provide:\n\n<ul>\n    <li>website hosting and availability;<\/li>\n    <li>server infrastructure;<\/li>\n    <li>backups;<\/li>\n    <li>technical maintenance;<\/li>\n    <li>security-related services.<\/li>\n<\/ul>\n\nIn the course of operating the website, the hosting provider may technically have access to certain information processed through the website and technical data such as IP addresses and server logs.\n\n<h2 class=\"privacy-subtitle\">14. Contact form<\/h2>\n\nVisitors may contact the Data Controller through forms made available on the website for service enquiries, quotations, availability checks or other enquiries relating to wedding content creation.\n\nThe purpose of processing is to respond to the enquiry, maintain communication with the prospective client, provide a quotation and discuss the details of the service.\n\nWhere an enquiry concerns the potential purchase of a service, the legal basis is Article 6(1)(b) GDPR, taking steps at the request of the data subject prior to entering into a contract.\n\n<h2 class=\"privacy-subtitle\">15. Telephone communication<\/h2>\n\nProspective and existing clients may contact the Data Controller by telephone regarding wedding content creation services, quotations, scheduling and service details.\n\nWhere the communication relates to a potential or existing contract, processing is based on Article 6(1)(b) GDPR.\n\nTelephone calls are not recorded by the Data Controller.\n\n<h2 class=\"privacy-subtitle\">16. Email communication<\/h2>\n\nProspective and existing clients may contact the Data Controller by email regarding enquiries, quotations, booking, scheduling and communication relating to the service.\n\nWhere the communication concerns a potential or existing service contract, the legal basis is Article 6(1)(b) GDPR.\n\n<h2 class=\"privacy-subtitle\">17. Booking and scheduling<\/h2>\n\nWhere a client books or discusses a wedding or event date, the Data Controller processes the personal data necessary to organise and perform the service.\n\nThe purpose of processing is to agree and record the event date, organise the service, communicate with the client and perform the contracted wedding content creation service.\n\nThe legal basis is Article 6(1)(b) GDPR.\n\n<h2 class=\"privacy-subtitle\">18. Deposit and payment administration<\/h2>\n\nThe Data Controller may require payment of a deposit in order to confirm a booking.\n\nThe purpose of processing is to identify the payment and booking, confirm the event date, prepare performance of the service and comply with related financial and accounting obligations.\n\nProcessing necessary for entering into and performing the contract is based on Article 6(1)(b) GDPR, while processing required for statutory financial and accounting obligations is based on Article 6(1)(c) GDPR.\n\n<h2 class=\"privacy-subtitle\">19. Billing<\/h2>\n\nThe Data Controller issues invoices and, where necessary, other accounting documents in accordance with applicable legislation.\n\nThe purpose of processing is to issue invoices, comply with accounting and tax obligations and perform related bookkeeping activities.\n\nThe legal basis is Article 6(1)(c) GDPR.\n\nAccounting documents are retained for at least 8 years in accordance with applicable Hungarian accounting legislation.\n\n<h2 class=\"privacy-subtitle\">20. Processors and external service providers<\/h2>\n\nThe Data Controller may use external service providers in connection with website operation, billing, accounting, video and image editing, storage and electronic delivery of digital content.\n\n<h3 class=\"privacy-smalltitle\">Website hosting<\/h3>\n\n<strong>Provider:<\/strong> Elementor Hosting\n\n<strong>Purpose:<\/strong> hosting and technical infrastructure, server capacity, backups and technical and security services.\n\n<h3 class=\"privacy-smalltitle\">Website security and performance<\/h3>\n\n<strong>Provider:<\/strong> Cloudflare\n\n<strong>Purpose:<\/strong> website security, availability, content delivery, caching and protection against malicious traffic and denial-of-service attacks.\n\n<h3 class=\"privacy-smalltitle\">Billing service<\/h3>\n\n<strong>Provider:<\/strong> KBOSS.hu Kft. (Sz\u00e1ml\u00e1zz.hu)\n<strong>Registered office:<\/strong> 1031 Budapest, Z\u00e1hony utca 7., Hungary\n\n<strong>Purpose:<\/strong> issuing, transmitting, managing and retaining invoices and other accounting documents.\n\n<h3 class=\"privacy-smalltitle\">Accounting services<\/h3>\n\nThe Data Controller may use an external accountant for the performance of accounting, tax and statutory reporting obligations.\n\n<h3 class=\"privacy-smalltitle\">Video and image editing<\/h3>\n\nThe Data Controller may use professional software and cloud-based services for organising, editing, processing and exporting photographs and video recordings.\n\nDepending on the software and settings used, service providers may technically process or have access to audiovisual files and related technical information.\n\n<h3 class=\"privacy-smalltitle\">Cloud storage and electronic file delivery<\/h3>\n\nThe Data Controller may use cloud storage and file-transfer services, including Google Drive or other comparable services, to store and deliver raw footage, edited videos, photographs and other digital materials to clients.\n\nFiles may be temporarily stored within the systems of the relevant provider according to the service&#8217;s applicable settings and terms.\n\n<h3 class=\"privacy-smalltitle\">Local storage<\/h3>\n\nPhotographs and video recordings may also be stored on computers, mobile devices and external physical storage devices controlled by the Data Controller.\n\nThe same retention and deletion periods described in this Privacy Notice apply to locally stored content.\n\n<h2 class=\"privacy-subtitle\">21. Disclosure and international transfers<\/h2>\n\nThe Data Controller discloses or makes personal data available to third parties only for specified purposes, on an appropriate legal basis and only to the extent necessary.\n\nPersonal data may be disclosed in particular for the performance of the service, website operation, billing and accounting, compliance with legal obligations, responding to authorities or courts or where the data subject has provided appropriate consent.\n\nThe Data Controller does not sell or rent personal data.\n\n<h3 class=\"privacy-smalltitle\">Marketing and measurement providers<\/h3>\n\nWhere marketing or measurement services are used, technical information that constitutes or relates to personal data may be transmitted only where an appropriate legal basis exists.\n\nWhere the relevant technology requires consent, such processing and transmission will occur only following the required prior consent.\n\n<h3 class=\"privacy-smalltitle\">Transfers outside the European Economic Area<\/h3>\n\nSome external service providers used by the Data Controller operate international infrastructure. Personal data may therefore in certain circumstances be processed outside the European Economic Area or made accessible to service providers or subprocessors located outside the EEA.\n\nAny transfer of personal data outside the EEA will take place only where the requirements of Chapter V of the GDPR are satisfied.\n\nDepending on the provider and destination country, appropriate safeguards may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses approved by the European Commission or another transfer mechanism recognised under the GDPR.\n\nFurther information regarding the applicable safeguards and, where relevant, information about obtaining a copy of such safeguards may be requested from the Data Controller using the contact details provided in this Privacy Notice.\n\n<h2 class=\"privacy-subtitle\">22. Processing and storage of photographs and video content<\/h2>\n\nPhotographs and video recordings on which individuals are identifiable constitute personal data.\n\n<h3 class=\"privacy-smalltitle\">Raw content<\/h3>\n\nRaw and unedited photographs and video footage are processed temporarily for the purpose of performing the service, selecting content, editing and resolving technical or delivery-related issues.\n\nRaw and unedited material is not used for portfolio, reference or marketing purposes.\n\n<h3 class=\"privacy-smalltitle\">Edited content<\/h3>\n\nFinal edited photographs, videos and other audiovisual content may be archived for a limited period in order to enable completed materials to be made available again where necessary.\n\nPortfolio, reference or marketing use of final content is subject to the rules described in Section 23.\n\n<h3 class=\"privacy-smalltitle\">Storage and editing<\/h3>\n\nAudiovisual content may be stored on information technology devices and physical storage media controlled by the Data Controller.\n\nExternal editing, cloud-storage and file-delivery services may also be used where necessary for performance of the service.\n\n<h3 class=\"privacy-smalltitle\">Retention period<\/h3>\n\nRaw and unedited content is retained for no longer than 3 months and final edited content for no longer than 1 year unless another lawful basis justifies further processing.\n\nFinal edited content selected for portfolio, reference or marketing purposes may be processed for longer where separate, voluntary and explicit consent has been provided and remains valid.\n\n<h2 class=\"privacy-subtitle\">23. Portfolio, reference and marketing use<\/h2>\n\nThe Data Controller uses photographs or video recordings featuring a client for portfolio, reference or marketing purposes only where there is an appropriate legal basis and, where required, the data subject has provided prior, voluntary and explicit consent.\n\nOnly final edited content is used for such purposes. Raw or unedited footage is not used for portfolio or marketing purposes.\n\nDepending on the consent provided, content may appear on:\n\n<ul>\n    <li>the Data Controller&#8217;s website;<\/li>\n    <li>Facebook;<\/li>\n    <li>Instagram;<\/li>\n    <li>TikTok;<\/li>\n    <li>online portfolios;<\/li>\n    <li>online advertisements;<\/li>\n    <li>other online or printed promotional materials.<\/li>\n<\/ul>\n\nWhere the processing is based on consent, the legal basis is Article 6(1)(a) GDPR.\n\nConsent for portfolio or marketing use is voluntary and is not a condition of purchasing or receiving the wedding content creation service.\n\nConsent may be withdrawn at any time by contacting the Data Controller.\n\nWithdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.\n\nFollowing withdrawal, the Data Controller will discontinue future use based on the withdrawn consent and remove the relevant content from online platforms controlled by the Data Controller without undue delay, unless another lawful basis permits continued processing.\n\nThe Data Controller notes that photographs or videos previously lawfully published online or on social media may have been saved, shared or otherwise reproduced by third parties, which may not always be technically possible for the Data Controller to control or remove.\n\n<h2 class=\"privacy-subtitle\">24. Rights of data subjects<\/h2>\n\nData subjects have the following rights under the GDPR, subject to the conditions applicable to the relevant processing activity:\n\n<h3 class=\"privacy-smalltitle\">Right to information<\/h3>\n\nThe data subject has the right to receive transparent, understandable and easily accessible information concerning the processing of their personal data.\n\n<h3 class=\"privacy-smalltitle\">Right of access<\/h3>\n\nThe data subject has the right to obtain confirmation as to whether their personal data is being processed and, where that is the case, to obtain access to the personal data and a copy of it.\n\n<h3 class=\"privacy-smalltitle\">Right to rectification<\/h3>\n\nThe data subject may request correction of inaccurate personal data and completion of incomplete personal data.\n\n<h3 class=\"privacy-smalltitle\">Right to erasure<\/h3>\n\nThe data subject may request deletion of their personal data in the circumstances set out in the GDPR. Erasure may be refused where continued retention is required by law or necessary for the establishment, exercise or defence of legal claims.\n\n<h3 class=\"privacy-smalltitle\">Right to restriction of processing<\/h3>\n\nThe data subject may request restriction of processing in the circumstances specified by the GDPR.\n\n<h3 class=\"privacy-smalltitle\">Right to data portability<\/h3>\n\nWhere processing is based on consent or contract and carried out by automated means, the data subject may have the right to receive personal data they have provided in a structured, commonly used and machine-readable format and, where technically feasible, to transmit it to another controller.\n\n<h3 class=\"privacy-smalltitle\">Right to object<\/h3>\n\nWhere processing is based on legitimate interests, the data subject has the right to object, on grounds relating to their particular situation, to the processing of their personal data.\n\n<h3 class=\"privacy-smalltitle\">Withdrawal of consent<\/h3>\n\nWhere processing is based on consent, consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.\n\n<h3 class=\"privacy-smalltitle\">Right to lodge a complaint<\/h3>\n\nWhere the data subject considers that the processing of their personal data infringes applicable data protection legislation, they have the right to lodge a complaint with the competent supervisory authority and to seek judicial remedy.\n\n<h2 class=\"privacy-subtitle\">25. Data security<\/h2>\n\nThe Data Controller implements appropriate technical and organisational measures appropriate to the nature of the processing and the associated risks.\n\nThese measures may include:\n\n<ul>\n    <li>encrypted website connections;<\/li>\n    <li>password-protected devices and systems;<\/li>\n    <li>access controls;<\/li>\n    <li>backups where appropriate;<\/li>\n    <li>software and device security updates;<\/li>\n    <li>secure storage of photographs and video recordings;<\/li>\n    <li>limiting access to personal data to persons who require such access.<\/li>\n<\/ul>\n\nThe Data Controller takes reasonable measures to prevent unauthorised or unlawful processing, accidental loss, destruction, alteration, damage or unauthorised disclosure of personal data.\n\n<h2 class=\"privacy-subtitle\">26. Personal data breaches<\/h2>\n\nIf the Data Controller becomes aware of a personal data breach, appropriate steps will be taken without undue delay to investigate the incident, mitigate its consequences and comply with applicable legal requirements.\n\nWhere a personal data breach is likely to result in a risk to the rights and freedoms of individuals, the Data Controller will notify the competent supervisory authority in accordance with Article 33 GDPR, where feasible within 72 hours after becoming aware of the breach.\n\nWhere the breach is likely to result in a high risk to the rights and freedoms of individuals, affected data subjects will also be informed without undue delay unless an exception under the GDPR applies.\n\n<h2 class=\"privacy-subtitle\">27. Complaints and legal remedies<\/h2>\n\nIf a data subject believes that their personal data has been processed unlawfully, they may first contact the Data Controller using the contact details set out in this Privacy Notice.\n\nThe data subject also has the right to lodge a complaint with the Hungarian supervisory authority:\n\n<strong>Hungarian National Authority for Data Protection and Freedom of Information (NAIH)<\/strong>\nRegistered office: 1055 Budapest, Falk Miksa utca 9\u201311., Hungary\nPostal address: 1363 Budapest, P.O. Box 9, Hungary\nTelephone: +36 (1) 391 1400\nEmail: <a href=\"mailto:ugyfelszolgalat@naih.hu\">ugyfelszolgalat@naih.hu<\/a>\nWebsite: <a href=\"https:\/\/www.naih.hu\/\" target=\"_blank\" rel=\"noopener noreferrer\">www.naih.hu<\/a>\n\nThe data subject may also seek judicial remedy where they consider that their rights under applicable data protection legislation have been infringed.\n\n<h2 class=\"privacy-subtitle\">28. Amendments to this Privacy Notice<\/h2>\n\nThe Data Controller reserves the right to amend this Privacy Notice where necessary, in particular following changes to processing activities, services, technologies or applicable legislation.\n\nThe amended Privacy Notice becomes available when published on the website. The current effective date will be indicated in the document.\n\n<h2 class=\"privacy-subtitle\">29. Final provisions<\/h2>\n\nThis Privacy Notice applies from the effective date stated above.\n\nThe Data Controller processes personal data in accordance with the applicable Hungarian and European Union data protection legislation.\n\nMatters not expressly addressed in this Privacy Notice are governed in particular by Regulation (EU) 2016\/679 (GDPR) and Act CXII of 2011 on Informational Self-Determination and Freedom of Information.\n\n<strong>Effective date: 31 August 2026<\/strong>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\n<\/div>\n\t\t<\/div>","protected":false},"excerpt":{"rendered":"<p>Privacy Policy Effective date: 31 August 2026 1. Details of the Data Controller In accordance with Regulation (EU) 2016\/679 of the European Parliament and of the Council (General Data Protection Regulation \u2013 GDPR) and Act CXII of 2011 on Informational Self-Determination and Freedom of Information, the Data Controller provides the following information regarding the processing [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1271","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/pages\/1271","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/comments?post=1271"}],"version-history":[{"count":19,"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/pages\/1271\/revisions"}],"predecessor-version":[{"id":1306,"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/pages\/1271\/revisions\/1306"}],"wp:attachment":[{"href":"https:\/\/kontentfor.me\/hu\/wp-json\/wp\/v2\/media?parent=1271"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}