Privacy Policy

I consider it extremely important that you feel your data is safe with us. This is a particularly important matter, and we must comply with EU regulations in this regard. Due to its legal nature, it has been written in formal language.

What is this Privacy Notice about?

In order for you to use our services, send us a message, or contact us by telephone, it is necessary for us to process certain personal data relating to you.

In this Privacy Notice, we provide detailed information about which of your personal data we process, for what purposes and for how long, as well as, where applicable, to whom and on what legal basis such data may be transferred. We also inform you of your rights in relation to the processing of your personal data.

Please read this Privacy Notice carefully. If you have any questions, please contact us at hello@krissmax.hu before accepting this Privacy Notice.

Please note that you have the right to object at any time to the processing of your personal data where such processing is based on our legitimate interests or is carried out for direct marketing purposes.

 

1. Details of the Data Controller

Your personal data is processed by:

Halmosi Krisztián, Sole Trader
Registered seat: 1163 Budapest, Vulkán utca 6., Hungary
Registration number: 56249260

(hereinafter referred to as the “Data Controller” or “Krissmax Event Photography”)

Contact details:
Postal address: 1163 Budapest, Vulkán utca 6., Hungary
Email: hello@krissmax.hu
Telephone: +36 20 584 2000
Website: https://krissmax.hu (hereinafter: the “Website”)

2. Principles of Data Processing

The Data Controller processes personal data:

  • lawfully and fairly,
  • for specified, explicit and legitimate purposes,
  • in accordance with the principle of data minimisation,
  • subject to storage limitation,
  • by applying appropriate technical and organisational security measures,

in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

3. Categories and Purposes of Personal Data Processed

3.1. Request for Quotation and Contact (Website Form)

The contact / quotation request form available on the Website may collect the following data:

  • First name and last name (optional)
  • Telephone number (optional)
  • Email address (mandatory)

Purpose of processing:

  • providing quotations
  • establishing contact
  • coordination of services

Legal basis:

  • performance of steps prior to entering into a contract (Article 6(1)(b) GDPR)
  • consent (Article 6(1)(a) GDPR)

Retention period:

  • in the absence of a contract: 1 month from the last contact
  • in case of a contract: until the expiry of the statutory retention period

3.2. Contract Conclusion and Invoicing

Categories of data processed:

  • name
  • billing address
  • email address
  • telephone number

Legal basis:

  • performance of a contract
  • compliance with legal obligations (accounting and tax legislation)

Retention period:

  • accounting documents: minimum 8 years

Invoicing system:
Billingo Technologies Zrt.

4. Cookies and Online Technologies

The Website’s cookie management is provided by Cookiebot.

Categories of cookies:

  • Strictly necessary cookies
  • Statistical cookies
  • Marketing cookies

Statistical and marketing cookies are activated exclusively on the basis of your prior consent.

Your consent may be modified or withdrawn at any time via the Website.

5. Online Marketing and Measurement Systems

The Website uses the following services:

  • Google Tag Manager
  • Google Ads

Service provider: Google LLC

5.1. Conversion Tracking

We use Google Ads to measure the effectiveness of our advertisements.

Subject to your marketing consent, the following data may be transmitted:

  • conversion event data
  • the email address provided via the form in encrypted (hashed) form (Enhanced Conversions feature)

Data transfer takes place exclusively on the basis of your prior consent.

5.2. Remarketing

Where marketing cookies are accepted, Google’s systems may process data for remarketing purposes.

6. Transfer of Data to Third Countries

When using Google services, personal data may be transferred outside the European Union (e.g. to the United States of America).

Such transfers take place subject to appropriate safeguards, in particular:

  • the Standard Contractual Clauses adopted by the European Commission, and
  • the EU–US data protection adequacy mechanism.

7. Data Processors

Hosting provider:
Emmo Systems Kft.
1148 Budapest, Padlizsán utca 35., Hungary

Invoicing:
Billingo Technologies Zrt.

Online marketing systems:
Google LLC

8. Your Rights

You are entitled to:

  • the right of access
  • the right to rectification
  • the right to erasure
  • the right to restriction of processing
  • the right to object
  • the right to data portability
  • the right to withdraw consent

Requests may be submitted to: hello@krissmax.hu

The Data Controller shall respond within a maximum of one month.

9. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection laws, you may lodge a complaint with:

Nemzeti Adatvédelmi és Információszabadság Hatóság

10. Data Security

The Data Controller:

  • applies encrypted data transmission (SSL),
  • uses password-protected systems,
  • performs regular backups,
  • applies restricted access controls.

11. Amendments to this Privacy Notice

The Data Controller reserves the right to unilaterally amend this Privacy Notice.

The current version is always available on the Website.

 

Effective as of: 26 February 2026