Privacy notice

What I collect, why, how long I keep it, and what you can ask me to do with it. Briefly, and accurately.

Who processes your data

The data controller is Gábor Tóth, sole trader (registered address: 5244 Tiszaszőlős, Szabadság tér 2., Hungary; tax number: 57371623-1-36; EU VAT: HU57371623; email: gabor7074@gmail.com). The site is at gabor7074.com.

If you want to ask or request anything about your data, that email address reaches me. There is no form to fill in and no reason you have to give.

If you write to me

The contact form asks for your name, your email address and your message — without those I cannot reply. You may also give a phone number, a rough date and a place; none of those are required, they simply let me answer more precisely.

I process this so that I can reply, and if we agree on the work, prepare it. The legal basis is answering your enquiry and taking steps prior to a contract.

I keep enquiries for as long as they are useful: if no work comes of it, for at most a year, then I delete them. If work does come of it, the details move to the job and are kept under the rules for that stage.

If you commission work

To prepare the work I ask for a short form: the name as it should appear on the contract, what the job is, where, when and how long. Those are the same details the first clause of the contract needs — asked once, and carried onward from there.

Invoicing needs a billing name, an address, and for a company a tax number. That is required by law rather than by me: Hungarian accounting rules require invoicing records to be kept for eight years, whether you or I would rather delete them or not.

The legal basis is performing the contract between us, and for invoicing, a legal obligation.

Confirming a quote or contract

When you confirm a quote or a contract, I record the name you typed, the time of the confirmation, and the IP address and browser identifier it came from.

That exists so both of us can establish later what was agreed and when. It is not an electronic signature and does not claim to be — it records the fact of your confirmation.

The legal basis is my legitimate interest in being able to evidence an agreement. It is kept with the job and expires alongside the invoicing records.

The photographs

A photograph with a recognisable person in it is personal data. Pictures made during commissioned work are processed to perform that commission: made, edited, and handed over to you.

The hand-over happens on a private link with a date on it. The page shows an expiry date, and the photographs are deleted from the server on that day — not later, with no grace period. That keeps the material here from growing without limit, and keeps what is no longer needed from sitting around for years.

If I would like to show a picture in my own portfolio, I ask separately. The contract covers this, and your answer can be withdrawn at any time — in which case I take the picture off the site.

Testimonials

The testimonials on the About page carry your name and what the job was. They only go up with your consent, and that consent can be withdrawn at any time — a message is enough and it comes down.

Cookies

This site uses no tracking or advertising cookies. Three cookies can occur, and all three are needed for the site to work.

One is set when you open a private hand-over page with a password — without it the next click would ask for the password again. The second when the site is under maintenance and you have entered the password. The third is my own admin login, which does not affect visitors.

None of them tells a third party anything about you, and none follows you between sites. That is why I do not ask separate consent for them — they enable a service you asked for yourself.

Who else is involved

The site and its database run on a server in Hungary, provided by MikroVPS Kft. The server is backed up daily and those backups are kept for at most two weeks.

Emails — quotes, contracts, hand-over notices — go out through a mail provider. The Instagram pictures on the home page are loaded by a service called Behold; where that section is switched on, your browser also requests data from their server.

Beyond those I do not pass your data to anyone, and I do not sell it. I disclose to authorities only where the law requires it.

What you can ask for

You can ask what data I hold about you. You can ask me to correct it if it is wrong. You can ask me to delete it — except what the law requires me to keep, chiefly invoicing records. You can ask for it in a machine-readable form to take elsewhere, and you can object to the processing.

Write to gabor7074@gmail.com and I will answer within a month at the latest. If you are unhappy with how I handle your data, you can complain to the Hungarian data protection authority (NAIH, 1055 Budapest, Falk Miksa utca 9-11., naih.hu) or go to court.