Privacy Policy
This notice explains what personal data we process, for what purpose, for how long, and what rights you have in connection with it.
1. The data controller
| Item | Details |
|---|---|
| Service provider | Vitáris Iván Egyéni Vállalkozó |
| Registered address | 1125 Budapest, Városkúti út 30, C 1 2 |
| Tax number | 90493128-1-43 |
| Registration number | 59694432 |
| Represented by | Vitáris Iván |
| studio23@ivanandtheparazol.com | |
| Website | https://s23studio.eu/ |
We are not required to appoint a data protection officer, and have not appointed one.
2. Data processed and purposes
| Processing | Data processed | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Contact | name, e-mail address, message | Answering the enquiry | Consent – GDPR Art. 6(1)(a) | 1 year from closing the enquiry |
| Cookie consent | the choice made, its time, salted hash of IP and browser identifier | Demonstrating consent | Legal obligation – GDPR Art. 6(1)(c) | 13 months |
| Studio booking request (BOOK form) | name, e-mail address, requested date, any other information provided | Replying to the booking request, agreeing on the date and the service | Steps prior to entering into a contract – GDPR Art. 6(1)(b) | 1 year after the booking request is closed |
| Visitor statistics | pseudonymised browser and visit data | Measuring how the website is used (Google Analytics) | Consent – GDPR Art. 6(1)(a) | Up to 14 months |
3. Data processors
We use the following providers to process the data:
| Provider | Role |
|---|---|
| Sybell Informatika Kft. (1158 Budapest, Késmárk utca 7/B 2. em. 206.) | Hosting |
| Google Ireland Limited (Google Workspace and Gmail) – e-mail for studio23@ivanandtheparazol.com and ivanandtheparazol@gmail.com | Handling e-mail |
| Invoices are issued by the Provider outside the website; the website does not pass any data to invoicing software | Issuing invoices |
| Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) | Visitor statistics (Google Analytics) |
| Berg Talents (Berg Talent Management, Budapest) | Management and booking of the band; receives the booking request by e-mail and takes part in the arrangements |
4. Transfers outside the EEA
We do not transfer personal data outside the European Economic Area, except through the providers of embedded third-party content described in the Cookie Policy. Google (e-mail, visitor statistics) may also transfer data to the United States; this is based on the EU–US Data Privacy Framework and the European Commission’s standard contractual clauses.
5. Your rights
Under the GDPR you may request access to your data, its rectification, erasure or restriction, object to the processing, and request data portability. Where processing is based on consent, you may withdraw it at any time — this does not affect the lawfulness of processing before the withdrawal.
We will respond to your request within one month at the latest, at the e-mail address above.
6. Remedies
If you believe your rights have been infringed, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., naih.hu), or bring the matter before a court.
7. Changes to this notice
We may amend this notice at any time. The version in force is always available on this page.
Effective from: 27 October 2026