Privacy Policy

1. Data controller

Controller: Dajka Anita Mária, sole trader (Anita Dajka Wedding Photography).

Registered office: Tündér utca 22, 6724 Szeged, Hungary.

Email: info.anitadajka@gmail.com. Phone: +36 30 507 0722. Website: https://www.anitephotography.com.

Hungarian tax number: 48352116-1-26. Registration authority: National Tax and Customs Administration of Hungary, Register of Sole Traders.

This notice describes the processing of personal data connected with use of the website, the contact form and photography services under Regulation (EU) 2016/679 (GDPR) and applicable Hungarian data-protection law.

2. Contact form

Required form fields are name, email address and message. Phone number, event date, location, referral source and referral details are optional. The submission timestamp is also recorded.

The purposes are to answer the enquiry, prepare a quotation, communicate with you and take steps at your request before entering into a contract. Legal basis: Article 6(1)(b) GDPR.

If no contract is concluded, enquiry data is retained for no longer than 12 months after the last substantive communication. If a contract is concluded, contractual and contact records are retained for 5 years in line with the general limitation period for civil claims, while accounting documents are retained for 8 years.

No special-category data is required; please do not include health, identity-document or other sensitive information in the message. No automated decision-making or profiling takes place.

3. Photography services and images

Data processed to perform photography services may include the client’s and contact persons’ names, contact and billing details, event information, contractual communications, and the photographs or video recordings created. Legal basis: Article 6(1)(b) GDPR; Article 6(1)(c) GDPR for invoicing and accounting.

Public use of images in a portfolio, social media or marketing materials takes place only under a separate agreement or consent. Consent may be withdrawn at any time without affecting the lawfulness of processing before withdrawal.

Public use of images of minors requires appropriate authorisation from their legal representative. Retention of raw and delivered image files is governed by the photography agreement; publicly used images may be processed until consent is withdrawn or the purpose of use ends.

4. Technical data and cookies

When the website operates, hosting and security systems may process technical log data such as IP address, browser and device information, requested URL, timestamp and error diagnostics. Purposes: secure and stable operation, abuse prevention and troubleshooting. Legal basis: legitimate interests under Article 6(1)(f) GDPR.

Technical logs are retained only for as long as necessary, normally no more than 90 days, unless a security incident investigation or legal claim requires longer retention.

The website uses the necessary NEXT_LOCALE cookie to remember the selected language; it is a session cookie and expires when the browser is closed. The website currently uses no marketing or advertising cookies. When you follow a link to a social-media service, that provider’s own privacy rules apply.

5. Processors and data transfers

The following processors may be involved in operating the website and contact form:

• Vercel Inc. (United States) – website hosting, application runtime and technical logs.
• Sanity AS (Norway) and its subprocessors – content management, image storage and storage of contact-form submissions.
• Plus Five Five, Inc. / Resend (United States) – delivery of form notification and confirmation emails.
• Google Ireland Limited / Gmail – the controller’s electronic correspondence.
• Functional Software, Inc. / Sentry (United States) – error diagnostics and information security.

Transfers outside the European Economic Area rely on appropriate safeguards, in particular EU Standard Contractual Clauses or an applicable adequacy decision. Personal data is disclosed to authorities or other recipients only where required by law, necessary for a contract or needed for legal claims.

6. Your rights and remedies

You may request access to, rectification or erasure of your personal data, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests and may withdraw consent at any time.

Submit requests to info.anitadajka@gmail.com. Requests are answered without undue delay and normally within one month; only information necessary to verify identity may be requested.

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11, Hungary; postal address: 1363 Budapest, P.O. Box 9; email: ugyfelszolgalat@naih.hu; website: https://www.naih.hu. You also have the right to seek a judicial remedy.

The controller protects data through appropriate technical and organisational measures and may update this notice when services or laws change. Effective date: 28 July 2026.