Data processing information
Viki Photo art

Effective from: December 30, 2025

Viktória Farkas (hereinafter: Data Controller), as the operator of the website https://www.vikiart.com, is committed to protecting the personal data of the website's visitors and the clients utilizing her services (hereinafter: Data Subject).

The purpose of this Policy is to provide information on data processing practices in accordance with the regulations of the European Parliament and Council Regulation (EU) 2016/679 (GDPR) and Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).

1. Details of the Data Controller

Name: Viktória Farkas Viki Photo Art
Registered Seat: 6521 Vaskút, Szeremlei utca 17., Hungary
Registration Number: 60376642
Tax Number: 91009142-1-23
E-mail address: vikiphotoart@gmail.com
Phone number: +36 30 594 4312

2. Scope of Processed Data, Purpose, and Legal Basis of Processing

2.1. Contact, Request for Quotation, Orders

Processed Data: Name, e-mail address, phone number, details of the order.
Purpose of Processing: Responding to the Data Subject's inquiry, preparing a price quotation, processing the order, preparing and performing the contract.
Legal Basis of Processing: Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract).

2.2. Invoicing

Processed Data: Name, address, tax number (if applicable).
Purpose of Processing: Issuing an invoice in compliance with accounting regulations.
Legal Basis of Processing: Article 6(1)(c) of the GDPR (compliance with a legal obligation).

2.3. Recordings Made During Photography (Likeness, Personal Data)

Processed Data: Photo and video recordings made of the Data Subject and other persons participating in the photography session, which qualify as personal data.
Purpose of Processing: Fulfillment of the ordered photography service, post-production of images, and delivery to the Data Subject.
Legal Basis of Processing: Article 6(1)(b) of the GDPR (processing is necessary for the performance of a contract).

2.4. Use in Portfolio (References)

Processed Data: Selected photographs and video recordings made during the session.
Purpose of Processing: Showcasing the professional work of the Data Controller, marketing activities on the website and social media platforms (e.g., Facebook, Instagram, TikTok).
Legal Basis of Processing: The voluntary, specific, and informed consent of the Data Subject (Article 6(1)(a) of the GDPR).
- The Data Controller requests this consent from the Data Subject separately in a written declaration during or prior to the photography session. The consent may be withdrawn at any time without justification.

3. Duration of Data Processing

Contact Data: Until the purpose is achieved, but no later than 1 year from the contact.
Contractual Data: For 5 years following the termination of the contract (general limitation period).
Invoicing Data: For 8 years from the issuance of the invoice, based on Section 169 (2) of Act C of 2000 on Accounting.
Images Processed for Portfolio Purposes: Until the withdrawal of the Data Subject's consent.

4. Data Processors

The Data Controller may utilize data processors during its activities:

Hosting Provider: [Website: WIX; Invoicing program operator: Számlázz.hu]

5. Rights of the Data Subject

The Data Subject is entitled to:

Right of Access: Request information regarding the processing of their personal data.
Right to Rectification: Request the correction of inaccurate personal data.
Right to Erasure ("Right to be Forgotten"): Request the deletion of their data, except in cases of mandatory data processing.
Right to Restriction of Processing: Request the restriction of data processing in certain cases.
Right to Withdraw Consent: In the case of processing based on consent, withdraw their consent at any time.
Right to Lodge a Complaint: In the event of a violation of their rights, turn to the National Authority for Data Protection and Freedom of Information (NAIH).
- Address: 1055 Budapest, Falk Miksa utca 9-11.
- Web: http://naih.hu