Privacy Policy

Data Controller

Picturepool Studios Kft. Száva utca 9, Budapest 1107, Building A, 3rd floor Email: studio@picturepoolstudios.com Phone: +36 30 325 0165

What Data We Collect

This website uses Cloudflare Web Analytics to measure aggregate website usage and performance. Cloudflare Web Analytics is a cookieless analytics tool — no cookies are set, and IP addresses are hashed at the Cloudflare edge so that individuals are not identified. The data collected is purely statistical and aggregated. We also process IP addresses transmitted to our hosting provider (Cloudflare) and, on the contact page, to OpenStreetMap tile servers.

Booking Inquiries

When you contact us via email (studio@picturepoolstudios.com) or SMS (+36 30 325 0165) to make a booking or inquiry, we process the personal data you provide (name, contact details, and message content). The legal basis for this processing is Article 6(1)(b) of the GDPR (performance of a contract or pre-contractual measures), Article 6(1)(c) (legal obligation, e.g. invoicing), and Article 6(1)(f) (legitimate interest in responding to inquiries and enforcing claims). Data retention periods: - Invoiced booking data (accounting documents): 8 years, as required by the Hungarian Accounting Act (Számviteli törvény, Szt. 169. §). - Contract correspondence for claim enforcement: 5 years, in accordance with the limitation period under the Hungarian Civil Code (Polgári Törvénykönyv, Ptk. 6:22. §). - Non-converted inquiries: 12 months, after which the data is deleted.

Cookies

This website does not set cookies. Cloudflare security features may set strictly-necessary cookies only if a security challenge is triggered.

Third-Party Services

Our contact page includes an interactive map powered by OpenStreetMap, which loads map tiles from OpenStreetMap tile servers. This may transmit your IP address to the tile server for the duration of the page load. OpenStreetMap does not use cookies for this purpose. Our hosting provider is Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Website traffic is routed through Cloudflare's global edge network. Cloudflare Web Analytics is provided by Cloudflare, Inc. as part of our hosting arrangement. It collects aggregate, cookieless usage statistics (such as page views and referral sources). IP addresses are hashed at the Cloudflare edge so that individuals are not identified. No personal data is shared with third parties through this analytics service. Our email service is provided by Google LLC (Google Workspace). Email correspondence sent to studio@picturepoolstudios.com is processed by Google LLC as a data processor under a data processing agreement. Our SMS service is provided by a mobile network operator. The operator processes SMS messages only in transit and does not have access to message content beyond what is necessary for delivery. The operator is not a data processor under Article 28 GDPR; it acts as an independent controller for connectivity-related processing in accordance with its own legal and technical obligations. Where personal data is transferred outside the European Economic Area, both Cloudflare and Google LLC rely on EU Standard Contractual Clauses and participation in the EU-US Data Privacy Framework as safeguards. Social media links in the footer direct to external platforms; clicking them is subject to their own privacy policies.

Legal Basis for Processing

We process your personal data on the following legal bases under Article 6(1) of the GDPR: - Article 6(1)(b) — Processing is necessary for the performance of a contract (studio booking) or for pre-contractual measures taken at your request. - Article 6(1)(c) — Processing is necessary to comply with a legal obligation (e.g. invoicing and accounting under Hungarian law). - Article 6(1)(f) — Processing is necessary for our legitimate interests, such as ensuring website security, analysing website usage and performance, responding to inquiries, and enforcing legal claims. Recipients and processors: Your data may be processed by our hosting provider, Cloudflare, Inc. (website hosting), and Google LLC (email via Google Workspace), as described in the Third-Party Services section above. International data transfers are safeguarded by EU Standard Contractual Clauses and participation in the EU-US Data Privacy Framework.

Data Retention Periods

We retain your personal data only as long as necessary for the purposes described in this policy: - Invoiced booking data (accounting documents): 8 years, as required by the Hungarian Accounting Act (Számviteli törvény, Szt. 169. §). - Contract correspondence for claim enforcement: 5 years, in accordance with the limitation period under the Hungarian Civil Code (Polgári Törvénykönyv, Ptk. 6:22. §). - Non-converted inquiries: 12 months, after which the data is securely deleted.

Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Right of access — to request a copy of the personal data we hold about you.
• Right to rectification — to request correction of inaccurate personal data.
• Right to erasure — to request deletion of your personal data.
• Right to restrict processing — to request limiting how we use your data.
• Right to data portability — to receive your data in a structured, machine-readable format.
• Right to object — to object to the processing of your personal data.
• Right to withdraw consent — to withdraw consent at any time where processing is based on consent.

Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to lodge a complaint with the Hungarian Data Protection Authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) 1055 Budapest, Falk Miksa utca 9-11 +36 (1) 391-1400 ugyfelszolgalat@naih.hu https://www.naih.hu

Changes to This Policy

We may update this privacy policy from time to time. The latest version is always available on this page.

Contact Us

If you have any questions about this privacy policy or how we handle your data, please contact us at studio@picturepoolstudios.com.