+36/70-459-1160

PRIVACY POLICY

1. INTRODUCTION

It is of utmost importance for us to comply with all current data protection laws and regulations. Therefore, this Privacy Policy details the data protection measures and data-collection processes applied on the sandorfoto.hu website and by Sándor Szabó sole proprietor.

Personal data is processed by Sándor Szabó sole proprietor, who is responsible for all aspects of personal data management.

Contact details:

Full legal name: Sándor Szabó – sole proprietor

Tax number: 90209552-1-36

Registration number: 59363189

Email address: sandor@sandorfoto.hu

2. WHAT PERSONAL DATA WE PROCESS AND FOR WHAT PURPOSES

Personal data refers to any information that allows the precise identification of an individual.

On the sandorfoto.hu website, we process the following types of personal data, along with their corresponding legal bases:

COMMUNICATION DATA

This includes any message you send to us through the website, by email, via social media, or through any other communication channel.

We process and store this data so that we can fulfil orders, and to provide a legal basis in the event of any potential claims.

The legal basis for processing this information is the user’s legitimate interest in our activities, as demonstrated by their communication with us.

CUSTOMER DATA

This includes all information related to the purchase of products or services, such as the customer’s name, shipping and billing address, email address, phone number, and details of the purchased items.

We process this data to successfully fulfil orders and to maintain legally compliant records of purchases.

The legal basis for storing this data is the performance of the contract established between the customer and Sándor Szabó sole proprietor upon placing an order.

USER DATA

This includes data generated during the use of the website, which enables the technical operation of the site, helps us maintain its security, allows us to keep logs of user activity, and ensures that you always have access to the most relevant content.

The legal basis for processing this data is the user’s legitimate interest in our activities, which requires storing this information to ensure the technical operation and security of the website.

TECHNICAL DATA

This includes data generated during the use of the website, such as IP address, login information, browser data, page visit duration, page views and navigation paths, the number and time of visits, time zone settings, and device information used to access the website.

The source of this data is our analytics software.

We process this data to analyse user behaviour on the website, maintain the security and stability of our site, and evaluate the effectiveness of our marketing decisions.

The legal basis for processing this data is the user’s legitimate interest in our activities, which allows us to process this information in compliance with security requirements and use it to improve the efficiency and performance of our business.

MARKETING DATA

This includes visitor preferences regarding the type of marketing content they wish to receive. We process this data to enable participation in giveaways and to send promotional content related to products or services the user has expressed interest in.

The legal basis for processing this data is the user’s legitimate interest in our activities, which allows us to process this information in compliance with security requirements and use it to improve the efficiency and performance of our business.

The collected data may occasionally be used to provide targeted, relevant advertisements on the Facebook™ platform or other dynamic advertising networks, and to measure the effectiveness of these advertisements.

The legal basis for processing this data is the user’s legitimate interest in our activities, which allows us to process this information in compliance with security requirements and use it to improve the efficiency and performance of our business.

We do not collect sensitive data such as ethnicity, religious beliefs, sexual life or orientation, political opinions or trade union membership, health-related information, or genetic or biometric data.

3. HOW DO WE COLLECT DATA?

We may collect personal data when the user provides it to us directly (for example, by placing an order or sending a message).

Certain data is also collected automatically during the use of the website, such as through “cookies” and similar technologies. These only become active once the user has provided their consent.

For more information, please refer to our Cookie Policy.

We receive certain data from external partners, such as analytics providers like Google (non-EU partner), advertising networks such as Facebook™ (non-EU partner), and payment service providers such as PayPal (non-EU partner), Barion, or Stripe.

4. OUR PRACTICAL DATA PROTECTION MEASURES

Protecting users’ data and complying with applicable regulations is of utmost importance for sandorfoto.hu and Sándor Szabó sole proprietor. Therefore, after conducting a data protection impact assessment, we prepared a detailed record of the types of data collected, their necessity, their legal basis, and their compliance with relevant laws.

  • To protect data submitted through forms and data generated on the website, we apply SSL encryption across the entire site.
  • To protect the site against attacks, we use premium security software (Solid Security Pro), which safeguards stored data against brute-force attempts and malware attacks.
  • Purchase and user data stored in our databases are encrypted (pseudonymised), making them unreadable to any external party.
  • This Privacy Policy ensures that users can request information about the processing of their personal data, as well as request modification or deletion of their personal information via our online forms.

At times, it is necessary for our business operations to share data with certain service providers (such as hosting providers, courier services, or newsletter software providers).

In such cases, we only select partners who comply with GDPR requirements. For partners based in the USA, we ensure they participate in an appropriate EU–US data protection framework and sign a data processing agreement with us, guaranteeing the responsible handling of personal data.

5. MARKETING COMMUNICATION

Marketing communication is an essential part of our business activities. The legal basis for processing data related to this communication is the user’s demonstrated interest in our services or their explicit consent.

In accordance with the European Union Privacy and Electronic Communications Regulations (PECR), we may send marketing messages to users who have purchased from us or have explicitly consented to receiving marketing communications.

A hozzájárulás felfüggesztését, és az üzenetekről való leiratkozást minden esetben jól látható módon lehetővé tesszük. Minden egyes e-mail alján megtalálható a leiratkozáshoz szükséges link, vagy az adatbázisból való eltávolítás kérhető a sandor@sandorfoto.hu e-mail címen.

Even after unsubscribing from marketing communication, we may still send messages related strictly to the fulfilment of orders.

6. NOTES REGARDING PERSONAL DATA

At times, it is necessary to share certain personal data with specific partners to ensure normal business operations:

– IT service providers and technical maintenance partners who perform troubleshooting and system upkeep

– Professional partners such as lawyers, accountants, bankers, and insurance providers

– Government authorities that require reports on our activities

– Payment service providers who securely process card payment information

– Courier services that deliver incoming orders to the specified shipping address

International Data Transfers

At times, it may be necessary to share user data with service providers located outside the European Economic Area (EEA) to maintain normal business operations.

Countries outside the EEA may not always provide the same level of data protection, and therefore European law restricts the transfer of data unless appropriate safeguards are in place.

Whenever personal data is transferred outside the EEA, in addition to the measures described in section 4, we also take the following steps to ensure secure data handling:

– We only transfer data to countries deemed adequate by the European Commission in terms of data protection.

We only use US-based service providers that comply with the current EU–US Data Privacy Framework or apply other EU-approved data transfer safeguards, such as Standard Contractual Clauses issued by the European Commission.

If the above conditions are not met, we will request the user’s explicit consent for the data transfer. Consent may be withdrawn at any time.

Links to External Websites

This website may occasionally contain links to external sites or embedded code snippets that enable the functionality of external services.

Clicking these links or using embedded features may allow external partners to collect data about users.

While we do our best to review our partners, we have no control over their privacy practices and cannot be held responsible for how they handle data.

7. DATA RETENTION PERIOD

We retain user data only for as long as required by legal, accounting, or reporting obligations, or as long as it is necessary for operating our services.

When determining how long data should be stored, we consider the amount, nature, and sensitivity of the data, as well as the potential impact of any data breach.

For taxation purposes, we are required to retain billing and purchase data for at least 8 years to meet our legal obligations.

Under certain circumstances, we may use anonymised data for statistical purposes, in which case such data may be stored indefinitely without further notification.

8. VISITOR RIGHTS

As a citizen of the European Union, the General Data Protection Regulation (GDPR) grants users of this website the following rights:

a. Right of Access to Personal Data

Users of the website have the right to request a copy of the personal data stored by sandorfoto.hu. In general, such requests are fulfilled free of charge within 14 days of submission.

In cases of repeated, excessive, or unfounded data requests, Sándor Szabó (sole proprietor) may charge a reasonable fee for providing the data, and additional time may be required to process the request.

To prevent misuse, Sándor Szabó (sole proprietor) may require proof of identity before releasing any personal data. To request your personal data, please contact us at sandor@sandorfoto.hu.

b. Right to Rectification of Personal Data

If personal data has changed or was provided incorrectly, users have the right to request its correction. To request the modification of personal data, please contact us at sandor@sandorfoto.hu.

c. Right to Erasure (Deletion)

Users of the website have the right to request a copy of the personal data stored by sandorfoto.hu. In general, such requests are fulfilled free of charge within 14 days of submission. After the deletion of personal data, the user account will no longer be accessible, and any previously purchased materials may also become unavailable, as the personal data associated with the user account are essential for accessing the service.

Sandor Szabo – self-employed photographer may request proof of identity before deleting personal data, in order to prevent misuse. To request the deletion of personal data, please contact us at sandor@sandorfoto.hu

d. Right to Restrict Processing

Users have the right to request that their data not be made available to third parties (service partners) When submitting the request, users may specify which service partners they wish to restrict.

It is important to note that cooperation with certain service providers is essential for the operation of the website (e.g., Stripe as a payment processor). If their services are restricted, certain functionalities of the website may become unavailable for the user.

Sándor Szabó, sole proprietor, may request proof of identity before restricting the transfer of personal data, in order to prevent misuse. To request the restriction of personal data transfer, please contact us at sandor@sandorfoto.hu

In Hungary, the official authority responsible for data protection is the National Authority for Data Protection and Freedom of Information (NAIH). Users can find more information about their data protection rights on the website of the NAIH.

National Authority for Data Protection and Freedom of Information
1125 Budapest, Szilágyi Erzsébet fasor 22/C
Mailing address: H-1530 Budapest, P.O. Box 5
Phone: +36 1 391 1400
Fax: +36 1 391 1410
Email: ugyfelszolgalat@naih.hu
Website: http://www.naih.hu

9. ANONYMIZED DATA AND COOKIES

The sandorfoto.hu website, as well as our emails and advertisements, use cookies and similar technologies such as tracking codes, remarketing tags and pixels, which become active only after the user has given consent.

These technologies help us better understand user behaviour and interests, supporting the improvement of our service quality and efficiency.

Our goal is to make the use of sandorfoto.hu as user-friendly and personalized as possible. If users wish to prevent these technologies from recording non-personal data, they can do so in the following ways:

– by disabling their loading through the cookie notifications displayed on the website

– by disabling cookies in the browser settings

Regarding the additional cookies and tracking codes found on sandorfoto.hu, further information can be found in our Cookie Policy.