Privacy Policy

in which I inform you, as a visitor to my website and a user of my services, about my data management and privacy policies.

1. What principles do I follow in data management?

During data management, I follow the following principles:

• I handle personal data lawfully, fairly, and transparently for you.
• I collect personal data only for specific, clear, and lawful purposes and do not process it in a manner incompatible with these purposes.
• The personal data I collect and manage is adequate, relevant, and limited to what is necessary in relation to the purposes for which it is processed.
• I take all reasonable steps to ensure that the data I manage is accurate and, where necessary, up to date. I promptly delete or correct inaccurate personal data.
• I store personal data in a way that ensures you are only identifiable for as long as necessary to achieve the purposes of the data processing.
• I ensure the appropriate security of personal data by applying appropriate technical and organizational measures to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.
• I process your personal data based on your prior informed and voluntary consent, only to the necessary extent, and always for a specific purpose—that is, I collect, record, organize, store, and use it accordingly.
• In some cases, the processing of your data is based on legal obligations and is mandatory. In such cases, I will specifically draw your attention to this fact.
• In certain cases, the processing of your personal data is based on legitimate interests of mine or third parties—for example, the operation, development, and security of my website.

2. Who am I?

• Owner: Kravcsenko Evelina
• Registered Office: 6000, Kecskemét, Bagi László utca 5. 5th floor, door 13.
• Tax number: 41924710-1-23
• Email: info@linatimelessphoto.hu

According to Article 37 of the GDPR, I am not obliged to appoint a Data Protection Officer.

My website hosting provider:

• Hosting provider name: Rackhost Zrt.
• Hosting provider address: 6722 Szeged, Tisza Lajos körút 41.
• Website: www.rackhost.hu
• Email: info@rackhost.hu

In order to provide high-quality service to my clients, I use the following data processors:

• Data Controller: Kravcsenko Evelina
• Address: 6000, Kecskemét, Bagi László utca 5. 5th floor, door 13.
• Scope of responsibility: All activities

If I change my data processors, I will update this information notice accordingly.

The data I manage:

I only ask for personal data from visitors to my website if they wish to register, log in, or participate in a giveaway.

The personal data provided during registration or when using my marketing services is not linked, and identifying visitors is not my primary goal.

If you have any questions related to data management, you may request further information at info@linatimelessphoto.hu or at my registered address. I will send you a reply within 15 days (no later than 1 month) to the contact information you provided.

3. What are cookies and how do I manage them?

Cookies are small data files (hereinafter referred to as cookies) that are placed on your computer through the use of the website, and are saved and stored by your internet browser. The most commonly used internet browsers (such as Chrome, Firefox, etc.) by default accept and allow the download and use of cookies, but it is up to you to modify your browser settings to reject or disable cookies. You can also delete previously stored cookies from your computer. More information about the use of cookies can be found in the "Help" menu of each browser.

There are certain cookies that do not require your prior consent. My website provides brief information about these when you first visit the site. Such cookies include authentication, multimedia player, load balancer, user interface customization session cookies, and user-centric security cookies.

For cookies that require consent—if data processing begins when you visit the site—I will inform you at the start of your first visit and ask for your consent.

I do not use or permit cookies that allow third parties to collect data without your consent.

Accepting cookies is not mandatory; however, I do not take responsibility if the website does not function as expected due to the lack of enabled cookies.

You can modify your cookie settings by clicking the black icon in the bottom left corner of the website.

4. Data management related to the website

You provide your personal data to me voluntarily during registration or when contacting me, so I kindly ask you to ensure the accuracy, correctness, and precision of your data, as you are responsible for them. Incorrect, inaccurate, or incomplete data may prevent you from using my services.

If you provide personal data of another person instead of your own, I will assume that you are authorized to do so.

You may withdraw your consent to data processing at any time, free of charge:

• by deleting your registration,
• by withdrawing your consent to data processing, or
• by withdrawing or requesting the blocking of your consent to the processing or use of any mandatory data provided during registration.

I commit to registering the withdrawal of your consent within 30 days for technical reasons. However, please note that due to legal obligations or in order to enforce our legitimate interests, I may continue to process certain data even after the withdrawal of your consent.

In the case of misleading personal data or if any visitor commits a criminal act or attacks my system, I will immediately delete the visitor’s data simultaneously with the termination of their registration, or—if necessary—retain the data for the duration of establishing civil liability or conducting criminal proceedings.

5. Data processing for direct marketing and newsletter purposes

During registration or later by modifying the personal data stored in the newsletter and/or direct marketing registration interface (i.e., by clearly expressing your intention to consent), you may give your consent for me to use your personal data for marketing purposes. In this case—until the withdrawal of your consent—I will process your data for direct marketing and/or newsletter purposes and send you promotional and other materials, as well as informational content and offers and/or newsletters (based on Act XLVIII of 2008, Section 6).

You may give your consent to direct marketing and newsletters jointly or separately, and you may withdraw such consent(s) at any time, free of charge.

In all cases, deletion of your registration will be considered a withdrawal of consent. However, the withdrawal of consent for direct marketing and/or newsletters does not imply the withdrawal of consent for other data processing related to my website. Why is this? What and on what basis do I retain if the newsletter consent is withdrawn? Each consent is tied to a specific purpose—website registration and newsletter subscription are two separate purposes, stored in two separate databases, and cannot be linked.

The registration of consent withdrawals or cancellations will be completed within 15 days due to technical reasons.

6. Prize games

I may organize prize games as part of promotional campaigns. The specific conditions of these are governed by a separate set of rules. The current campaign rules will always be available via a prominently placed link on the homepage of my website.

7. Other data processing issues

I may only transmit your data within the limits defined by law. In the case of data processors, I ensure through contractual terms that your personal data will not be used for purposes contrary to your consent.

I do not transfer data abroad.

Courts, prosecutors, and other authorities (e.g., police, tax office, National Authority for Data Protection and Freedom of Information) may contact me for information, data disclosure, or document provision. In such cases, I am obligated to fulfill my data provision duties, but only to the extent necessary for the realization of the purpose of the request.

My collaborators and employees who participate in the processing and/or handling of your data may access your personal data only to a predefined extent and under strict confidentiality obligations.

I protect your personal data with appropriate technical and other measures and ensure the security, availability, and protection of the data from unauthorized access, alteration, damage, disclosure, or any other unlawful use.

As part of organizational measures, I monitor physical access in my premises, regularly educate myself, and securely store paper-based documents. Technical measures include encryption, password protection, and antivirus software. However, please note that data transmission over the internet cannot be considered fully secure. I make every effort to ensure the security of the processes, but I cannot assume full responsibility for data transmission via my website. However, I follow strict regulations regarding the protection of your data and preventing unauthorized access to data I receive.

Regarding security matters, I ask for your cooperation: please keep your password for accessing my website safe and do not share it with anyone!

8. Your rights and legal remedies

Regarding data processing, you have the right to:

• request information,
• request the correction, modification, or supplementation of your personal data processed by me,
• object to data processing and request the deletion or blocking of your data (except for mandatory data processing),
• seek legal remedy before a court,
• lodge a complaint or initiate proceedings with the supervisory authority (https://naih.hu/panaszuegyintezes-rendje.html).

Supervisory Authority: Hungarian National Authority for Data Protection and Freedom of Information

• Address: 1055 Budapest, Falk Miksa utca 9-11.
• Mailing address: 1363 Budapest, P.O. Box 9
• Phone: +36 (1) 391-1400
• Fax: +36 (1) 391-1410
• E-mail: ugyfelszolgalat@naih.hu
• Website: https://naih.hu/

At your request, I will provide information about:

• your data processed by me or by my contracted data processors,
• the source of the data,
• the purpose and legal basis of the data processing,
• the duration of the data processing, or if not possible, the criteria for determining the duration,
• the name, address, and activities related to data processing of any data processors,
• the circumstances, effects, and measures taken in response to any data protection incidents,
• and, in the case of data transfers, the legal basis and recipient of the transfer.

I will provide this information within 15 days of your request (no later than 1 month). The information is free of charge unless you have already submitted a request regarding the same set of data during the current year. If I have processed your data unlawfully or the request leads to correction, I will refund any previously paid fee. I may only deny providing information in legally regulated cases, stating the legal basis and informing you of your options for legal remedy or contacting the Authority.

You and anyone to whom the data was previously disclosed for processing will be informed of any correction, blocking, marking, or deletion of personal data, unless such notification does not violate your legitimate interests.

If I do not fulfill your request for correction, blocking, or deletion, I will inform you in writing or electronically (with your consent) of the reasons for the refusal within 15 days of receiving your request (no later than 1 month), and inform you about the possibility of legal remedy or contacting the Authority.

If you object to the processing of your personal data, I will review the objection within 15 days of the submission (no later than 1 month) and notify you in writing of my decision. If I find your objection justified, I will terminate the data processing—including further data collection and transfer—block the data, and notify all parties to whom the data had been previously transferred and who are obliged to act to enforce the right to object.

I will refuse your request if I can prove that the data processing is justified by compelling legitimate grounds that override your interests, rights, and freedoms, or relate to the submission, enforcement, or defense of legal claims. If you do not agree with my decision or I miss the deadline, you may file a lawsuit within 30 days from the date of the decision or the last day of the deadline.

Data protection lawsuits fall under the jurisdiction of the regional court. The lawsuit may also be initiated—at your choice—before the regional court of your residence or place of stay. Foreign nationals may also lodge a complaint with the supervisory authority in their country of residence.

Before contacting the supervisory authority or court, I kindly ask you to contact me first so we can resolve your concern as quickly as possible.

9. Key legal regulations applicable to my activities

• Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR)
• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Info Act)
• Act V of 2013 on the Civil Code (Civil Code)
• Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (E-commerce Act)
• Act C of 2003 on Electronic Communications (ECA)
• Act CLV of 1997 on Consumer Protection (Consumer Protection Act)
• Act CLXV of 2013 on Complaints and Whistleblower Reports (Complaints Act)
• Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities (Advertising Act)

10. Modification of this Privacy Policy

I reserve the right to modify this Privacy Policy, and I will inform affected individuals accordingly. Information related to data processing is published on the website: www.linatimelessphoto.hu.