in which I inform you, as a visitor to my website and a user of my services, about my data processing and data protection practices.
When processing personal data, I follow the principles below:
According to Article 37 of the GDPR, I am not required to appoint a Data Protection Officer.
To ensure high-quality service for my clients, I use the following data processors in the course of data processing:
If I make any changes to the list of data processors, I will update this notice accordingly.
Data I Process:
I only request personal data from visitors to my website if they wish to register, log in, or participate in a giveaway.
A regisztráció illetve marketing szolgáltatásaim igénybevétele kapcsán megadott személyes adatokat nem kapcsolhatom össze és a látogatóim beazonosítása alapvetően nem célom.
For any questions related to data processing, you may request further information via the following email: info@nrphotofilm.com or at my registered address. I will send my response within 15 days (but no later than 1 month) to the contact details you provided.
Cookies are small data files (hereinafter referred to as “cookies”) that are placed on your computer through the use of the website and are saved and stored by your internet browser. Most commonly used internet browsers (such as Chrome, Firefox, etc.) accept and allow the use of cookies by default; however, it is up to you to modify your browser settings to reject or disable cookies. You can also delete previously stored cookies from your computer. For more information about managing cookies, refer to the "Help" section of your browser.
There are certain cookies that do not require your prior consent. These are briefly described when you first visit my website and include, for example, authentication cookies, multimedia player cookies, load-balancing cookies, session cookies used to customize the user interface, and user-centric security cookies.
For cookies that require consent — and if data processing begins when the site is visited — you will be informed at the start of your first visit and asked for your consent.
I do not use or allow any cookies that would enable third parties to collect data without your consent.
Accepting cookies is not mandatory; however, I am not responsible if my website does not function as expected due to cookies being disabled.
You can modify your cookie settings by clicking the black icon located in the bottom left corner of the website.
You provide your personal data voluntarily during registration or when contacting me. Therefore, I kindly ask you to pay close attention to the authenticity, accuracy, and correctness of your data, as you are responsible for them. Incorrect, inaccurate, or incomplete data may prevent you from using my services.
If you provide someone else’s personal data instead of your own, I will assume that you have the necessary authorization to do so.
You may withdraw your consent to data processing at any time, free of charge, by:
Due to technical reasons, I commit to registering the withdrawal of your consent within 30 days. However, please note that for the purpose of fulfilling legal obligations or protecting legitimate interests, I may continue to process certain data even after your consent has been withdrawn.
If misleading personal data is used or a visitor commits a criminal offense or attacks my system, I will immediately delete the data upon terminating the visitor’s registration, or — if necessary — retain them for the duration required to establish civil liability or conduct criminal proceedings.
By making a statement during registration, or later by modifying your personal data stored through the newsletter and/or direct marketing registration interface (i.e., by clearly expressing your intent to consent), you may grant your consent for me to use your personal data for marketing purposes. In this case, until the withdrawal of your consent, your data will be processed for direct marketing and/or newsletter purposes, and I may send you promotional and other materials, information, offers, and/or newsletters (as per Section 6 of the Grtv.).
You may provide or withdraw your consent for direct marketing and newsletters either jointly or separately, free of charge and at any time.
I consider the deletion of your registration as a withdrawal of consent in every case. However, withdrawal of consent for direct marketing and/or newsletter purposes does not automatically imply the withdrawal of your consent for other data processing activities related to my website. Why is this? What and on what basis do I retain if the newsletter consent is withdrawn? Each consent applies to a specific purpose, meaning registration on the website and signing up for the newsletter are two separate purposes, managed in two different databases — the two are not linked.
For technical reasons, I commit to registering the withdrawal or cancellation of any consent within 15 days.
I may organize giveaways as part of promotional campaigns, the specific terms and conditions of which are outlined in a separate set of rules. The current campaign rules are always available on the homepage of my website, accessible via a prominently placed link.
Your data may only be transferred within the limits set by law. In the case of data processors, I ensure through contractual terms that they are not permitted to use your personal data for purposes contrary to your consent. Further information is available in section 2.
I do not transfer data abroad.
Courts, prosecutors, and other authorities (e.g., police, tax authorities, the Hungarian National Authority for Data Protection and Freedom of Information) may contact me for the purpose of providing information, disclosing data, or making documents available. In such cases, I am legally obliged to provide the requested data, but only to the extent strictly necessary for fulfilling the purpose of the request.
Contributors and employees involved in the data management and/or data processing are authorized to access your personal data only to a predetermined extent and are bound by confidentiality obligations.
I protect your personal data with appropriate technical and other measures and ensure the security, availability, and protection of your data against unauthorized access, alteration, damage, disclosure, or any other unauthorized use.
As part of organizational measures, I control physical access to my premises, continuously educate myself, and store paper-based documents securely. Technical measures include encryption, password protection, and antivirus software. However, please note that data transmission over the internet cannot be considered fully secure. I do everything in my power to make these processes as secure as possible, but I cannot take full responsibility for data transmission via my website. Nevertheless, I strictly adhere to regulations regarding the security of the data I receive and take steps to prevent unlawful access.
Regarding security matters, I kindly ask for your cooperation in keeping your password to my website safe and not sharing it with anyone.
Regarding data processing, you have the right to:
Supervisory Authority: Nemzeti Adatvédelmi és Információszabadság Hatóság
Upon your request, I will provide information regarding the data I manage and/or processed by my appointed data processor,
I will provide this information within 15 days from the receipt of the request (but no later than 1 month). The information is free of charge unless you have submitted a request for the same data category within the current year. Any fees already paid will be refunded if the data was unlawfully processed or the request resulted in a correction. I may only refuse to provide information in cases defined by law, citing the legal provision and informing you of your right to legal remedy or to contact the Authority.
You will be informed of any corrections, blocking, marking, or deletion of personal data, as well as all recipients to whom the data was previously disclosed, except when such notification would not violate your legitimate interests.
If I do not fulfill your request for correction, blocking, or deletion, I will inform you in writing (or electronically, with your consent) of the reasons for the refusal within 15 days from receipt of your request (but no later than 1 month), and inform you about your right to seek judicial remedy and/or contact the Authority.
If you object to the processing of your personal data, I will investigate the objection within 15 days from receipt of your request (but no later than 1 month), and notify you in writing of the decision. If I find your objection justified, I will terminate the data processing — including further data collection and data transfer — and block the data. I will also inform everyone to whom I previously transferred the data affected by the objection and who are required to act in order to enforce the right to object.
I will refuse your request only if I can prove that the data processing is justified by compelling legitimate grounds that override your interests, rights, and freedoms, or that relate to the establishment, exercise, or defense of legal claims. If you disagree with my decision, or if I miss the deadline, you may file a lawsuit within 30 days from the notification of the decision or the last day of the deadline.
Data protection lawsuits fall under the jurisdiction of the regional court. The lawsuit can also be initiated — at your discretion — before the court with jurisdiction over your place of residence or stay. Foreign nationals may file a complaint with the supervisory authority competent in their place of residence.
Before contacting the supervisory authority or a court with your complaint, I kindly ask you to contact me directly first so we can resolve the issue as quickly and smoothly as possible.
I reserve the right to modify this Privacy Policy, and I will inform the affected individuals in an appropriate manner about any changes. All information related to data processing will be published on the website: www.nrphotofilm.com.
