Privacy Policy

Last updated: 2026. 07. 15.

This Privacy Policy describes the processing of personal data connected with the use of the Roland Szabó Photography website, enquiries, requests for quotations and photography services.

1. Details of the data controller

Data controller: Szabó Roland, sole proprietor

Brand name: Roland Szabó Photography

Registered office: 1223 Budapest, Rózsakert utca 19/C., Hungary

Tax number: 90077102-1-43

Registration number: 59217758

Email: hi@rolandszabo.photo

Telephone: +36 20 591 4620

2. Principles of data processing

I process personal data only for specified and lawful purposes and only to the extent necessary. Access is limited to those who require the data for the performance of the service, the operation of the business or compliance with a legal obligation.

I do not request special-category personal data when you contact me. Please provide only information that is genuinely necessary for discussing and organising the photography assignment.

3. Contact through the website

The following data may be submitted through the contact form on the website:

• name;
• telephone number.

The purpose of processing is to allow me to contact you, respond to your enquiry and, where necessary, prepare a quotation.

The legal basis for processing is taking steps at your request before entering into a contract. Submitting the form does not in itself constitute an order or create a payment obligation.

If the enquiry does not result in an order, I retain the data for six months from the date of the last contact. If a contract is concluded, the data is subsequently processed according to the retention period applicable to contractual documentation.

4. Contact by email, telephone or Instagram

When you contact me by email, telephone or Instagram message, I may process your name, username, contact details and any information you voluntarily include in your message.

The purpose of processing is to respond to your enquiry, discuss the photography assignment and prepare a quotation. The legal basis is taking steps before entering into a contract or, where an order is placed, the performance of the contract.

Enquiries that do not result in an assignment are retained for six months from the date of the last contact. Communications connected with a contract are retained for five years following completion of the service.

5. Quotations and performance of photography contracts

When preparing a quotation and fulfilling an order, I may process the following data in particular:

• name or company name;
• name of the contact person;
• telephone number and email address;
• billing details;
• the location and date of the photography assignment;
• requirements and communications connected with the photography assignment;
• other information necessary for the performance of the service.

The purpose of processing is to prepare the quotation, record the order, organise the photography assignment, maintain contact, perform the service and resolve any subsequent claims.

The legal basis for processing is the performance of the contract. Data connected with the contract and its performance is generally retained for five years following completion of the service.

6. Invoicing and accounting

For invoicing purposes, I may process the name or company name, billing address, tax number and other information required on the invoice.

The purpose of processing is to issue invoices and comply with accounting and taxation obligations. The legal basis is compliance with a legal obligation.

Billing data is retained for the period required by the applicable taxation and document-retention rules.

7. Creation, selection and storage of photographs

The identifiable likeness of a person in a photograph may constitute personal data. The primary purpose of creating, selecting, editing, delivering and retaining the photographs for a specified period is to perform the photography service that was ordered.

The processing of data relating to the client or another person who is a party to the photography contract may be based on the performance of the contract where the processing is objectively necessary for the proper delivery of the ordered service.

For other participants, particularly guests at an event, the legal basis must be determined according to the circumstances of the event, the nature of the photographs and their intended use. The legal basis may be the consent of the person concerned or the legitimate interests of the client, event organiser or photographer following an appropriate and documented balancing assessment.

Before processing data on the basis of legitimate interests, the legitimate interest being pursued must be identified, the necessity of the processing must be assessed and consideration must be given to whether the rights and freedoms of the individuals concerned override that interest.

Under the Hungarian Civil Code, the consent of the person concerned is generally required for the creation and use of an identifiable likeness. Photographs of crowds and photographs of public appearances in public life may constitute exceptions.

Before photographing an event, I discuss with the client or organiser how participants will be informed about the photography, how they can indicate that they do not wish to appear recognisably in the photographs and which photographs or uses require separate consent.

I exercise particular care when processing photographs of minors and, where required, involve or obtain consent from their legal representative.

Files created during the assignment and the finished photographs are stored on locally managed computer storage. RAW, unselected and work-in-progress photographs are retained for one year following delivery of the final collection. Final, delivered photographs are retained for five years.

The purpose of retention is to allow the photographs to be delivered again within the retention period in the event of a technical problem, accidental data loss or expiry of the original delivery link.

This retention does not constitute unlimited or permanent archiving. The client is responsible for making their own backup copies of the delivered photographs.

8. Delivery of photographs through Google Drive

Finished photographs are generally delivered through a temporary Google Drive download link.

Google Drive is not the primary or permanent storage location of the photographs. It is used solely as a digital delivery channel for the client. Folders and files may later be deleted depending on the available storage space, so clients should download the photographs promptly and store them securely on their own devices.

If the delivery link is no longer available, the client may request that the photographs be uploaded again. A new download link can be provided only if the photographs remain available in the local archive.

When Google Drive is used, the files, folder names and technical information connected with the delivery may also be processed within Google’s systems. Ownership of the uploaded content remains with the uploader, and access through sharing settings can be controlled.

9. Use of photographs for portfolio and marketing purposes

Photographs showing the client or another identifiable participant are used on my website, social media platforms, in printed promotional material, exhibitions or advertising only on the basis of separate consent.

Consent is voluntary. Refusing consent does not affect the price, process or quality of the photography service.

Consent may be withdrawn at any time by sending a message to hi@rolandszabo.photo. Withdrawal does not affect the lawfulness of any use carried out on the basis of valid consent before the withdrawal.

Following withdrawal, I stop future use of the photographs and remove them from online platforms under my control within a reasonable period. I do not undertake to recall printed materials that have already been produced.

10. Website analytics

I use Ahrefs Web Analytics to understand the traffic and operation of the website.

Under its current default configuration, the service does not place cookies, does not track visitors across different websites and does not store raw IP addresses. It may process, among other things:

• the title of the page visited;
• the referring page;
• technical characteristics of the browser and device;
• the browser language;
• the approximate country and city derived from the IP address;
• page views, clicks and form submissions.

Ahrefs does not retain the raw IP address. The technical identifier used to calculate daily unique visitors is renewed every twenty-four hours and therefore cannot be used for persistent tracking across several days or websites.

The purpose of processing is to analyse the use of the website in aggregate, identify errors and improve the content. The legal basis is the legitimate interest in operating and improving the website.

11. Complaints

When handling a complaint, I may process the complainant’s name, contact details, the content of the complaint, related documents and the response provided.

The purpose of processing is to investigate the complaint and comply with statutory complaint-handling obligations. The complaint and the response are retained for three years.

12. Service providers and data transfers

During the operation of the business, the following service providers may receive access to personal data:

• Netlify, Inc.: website hosting and processing of contact forms;
• Namecheap, Inc. and Private Email: domain and email services;
• Google: temporary uploading and delivery of finished photographs through Google Drive;
• KBOSS.hu Kft.: provision of the Számlázz.hu invoicing system;
• Ahrefs Pte Ltd: cookieless website analytics;
• Meta Platforms Ireland Limited: contact through Instagram;
• accountant: performance of accounting and taxation obligations;
• payment service provider: processing of bank transfers.

Some service providers may also process data outside the European Economic Area. In such cases, the transfer is carried out on the basis of safeguards required by the applicable data-protection rules.

I disclose personal data to an authority, court or other body only when required by law or in response to a lawful request.

13. Your rights

In connection with the processing of your personal data, you may request:

• information about and access to the personal data being processed;
• correction of inaccurate or incomplete data;
• erasure of data where there is no longer an appropriate legal basis or other legal obstacle to deletion;
• restriction of processing where the statutory conditions are met;
• delivery of the data in a portable format where processing is based on consent or a contract and is carried out by automated means;
• the right to object to processing based on legitimate interests;
• withdrawal of previously given consent at any time.

You may send your request to hi@rolandszabo.photo. I generally respond to requests within one month.

Erasure cannot be requested where retention is required by law or where the data remains necessary for the establishment, exercise or defence of legal claims.

14. Remedies

If you have a concern about the processing of your data, you may first contact me directly at hi@rolandszabo.photo.

You are also entitled to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information:

Nemzeti Adatvédelmi és Információszabadság Hatóság
1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Email: ugyfelszolgalat@naih.hu
Telephone: +36 1 391 1400

If your rights are infringed, you may also bring proceedings before a court.

15. Amendments to this Privacy Policy

I may amend this Privacy Policy from time to time, particularly if the operation of the website, the service providers used or the applicable legal environment changes. The current version is always available on this page.