Data protection
Privacy policy
Effective from 3 October 2026
1. Introduction
This policy explains how I process your personal data when you use the takacsbori.hu website, contact me, book a session or take part in a photoshoot. Processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information.
I treat your personal data confidentially and in line with the law, and I take all necessary technical and organisational measures to keep it secure.
2. Data controller
- Name: Bori Takács (Takács Bori Glamour & Boudoir Photography)
- Email: info@takacsbori.hu
- Phone: +36 70 357 2991
- Website: takacsbori.hu
You can contact me with any data protection questions or requests using the details above.
3. What data I process, for what purpose and on what legal basis
3.1. Getting in touch (contact form, email, phone)
- Data: name, email address, phone number, subject of your enquiry (preferred style), content of your message.
- Purpose: answering your enquiry, making an offer, arranging the photoshoot.
- Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
- Retention: up to 1 year from your enquiry if no booking is made; if you book, as described in section 3.2.
3.2. Online booking and organising the photoshoot
- Data: first and last name, email address, phone number, chosen date, preferred style, content of your message, and any information you share while we plan the shoot (e.g. style, wardrobe, wishes).
- Purpose: reserving and confirming your date, requesting the booking fee, planning and carrying out the photoshoot, keeping in touch.
- Legal basis: performance of a contract and pre-contractual steps (Art. 6(1)(b) GDPR).
- Retention: 5 years after the contract has been performed (the general limitation period for civil-law claims, Section 6:22 of the Hungarian Civil Code).
3.3. Photographs taken during the shoot
- Data: photographs of you (your image), which – especially in the case of boudoir photography – may be intimate and confidential in nature.
- Purpose: delivering the ordered service: selection, retouching and delivery of the images and products (photo book, album, wall art, digital gallery).
- Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
- Retention: until the images are delivered, and then archived for up to 1 year after delivery – so that I can fulfil any later order or replacement – after which they are deleted. At your request I will delete them earlier.
Important: I will publish images of you in my portfolio, on the website, on social media or in any other way only with your explicit, separate written consent (Art. 6(1)(a) GDPR). Consent is voluntary, is not a condition of the service, and can be withdrawn at any time without giving reasons – in that case I will remove the images as soon as possible from all channels under my control.
3.4. Invoicing and payments
- Data: name, billing address, tax number (where applicable), description and amount of the service, payment details.
- Purpose: issuing advance payment requests and invoices, complying with accounting obligations.
- Legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR; Section 169 of Hungarian Act C of 2000 on Accounting; Act CXXVII of 2007 on VAT).
- Retention: 8 years (Section 169(2) of the Accounting Act).
3.5. Technical operation of the website and cookies
The website uses only cookies that are strictly necessary for it to work (for example, to remember your chosen language). I do not use analytics, statistics, marketing or social-media tracking cookies (for the embedded YouTube video, see section 3.6), and I do not display third-party advertising. Fonts are loaded from my own hosting, so no data is sent to external font providers when you open the website.
- Legal basis: legitimate interest in operating the website (Art. 6(1)(f) GDPR) and Section 155(4) of Hungarian Act C of 2003 on Electronic Communications (strictly necessary cookies).
- Retention: the language cookie is stored for up to 1 year; session cookies until you close your browser.
- For security purposes the hosting provider’s server logs technical data about visits (e.g. IP address, time, browser type); the hosting provider stores this for a short period under its own data protection rules.
3.6. Embedded video (YouTube)
The About page contains a YouTube video embedded in YouTube’s “privacy-enhanced” mode (youtube-nocookie.com). In this mode YouTube only stores information about you if you play the video. When you play it, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) – as an independent controller – may receive data (e.g. IP address, device and browser data) and set cookies; this is governed by Google’s privacy policy, and data may be transferred to the United States (under the EU–US Data Privacy Framework).
- Legal basis: your consent, given by starting playback (Art. 6(1)(a) GDPR).
- If you do not want YouTube to receive data about you, simply do not play the video.
4. Who can access your data? (processors)
I do not sell your personal data or pass it on to third parties for marketing. Only I and the following service providers – strictly to the extent needed to provide their service – have access to it:
| Provider | Activity |
|---|---|
| Rackhost Zrt. (6722 Szeged, Tisza Lajos körút 41., Hungary; company reg. no.: 06-10-000489; rackhost.hu) | Web hosting: storing the website and data submitted via the forms |
| Invoicing software provider and accountant | Issuing advance payment requests and invoices, bookkeeping (section 3.4) |
| Make-up and hair artist, stylist, studio (if used for your shoot) | Only the data needed to organise the shoot (e.g. name, date), as agreed with you in advance |
If required by law, I may disclose data to an authority upon its official request. I do not transfer your personal data outside the European Economic Area.
5. Data security
Data is stored in password-protected systems, access is limited to the necessary minimum, and photographs – especially boudoir images – are handled with particular care and kept inaccessible to unauthorised persons. Digital galleries are available only to the client.
6. Your rights
You have the following rights regarding the processing of your data:
- Access: you may ask whether and what data of yours I process (Art. 15 GDPR).
- Rectification: you may ask me to correct or complete inaccurate data (Art. 16).
- Erasure (“right to be forgotten”): you may ask me to delete your data if there is no (longer a) legal basis for processing (Art. 17).
- Restriction: you may ask me to restrict processing (Art. 18).
- Data portability: you may ask to receive the data you provided in a structured, machine-readable format (Art. 20).
- Objection: you may object to processing based on legitimate interest (Art. 21).
- Withdrawal of consent: where processing is based on consent (e.g. publishing images), you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal (Art. 7(3)).
You can submit your request using the contact details in section 2. I will respond without undue delay and at the latest within one month (Art. 12(3) GDPR).
7. Remedies
If you feel your personal data has not been handled properly, please contact me first – I will do my best to resolve any concern quickly. You also have the right to lodge a complaint with the supervisory authority:
- Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
- Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
- Postal address: 1363 Budapest, Pf. 9.
- Phone: +36 1 391 1400
- Website: naih.hu
If you live in another EU member state, you may also lodge a complaint with the data protection authority of your country of residence. You may also go to court if your rights are infringed.
8. Other provisions
My services are provided exclusively to persons aged 18 or over; I do not knowingly process the data of anyone under 18.
I reserve the right to update this policy in line with changes in the law or in my services. The current version is always available on this page.