GENERAL DATA PROCESSING REGULATION
Valid from: June 10, 2025 until revoked

DO Style Management Kft. (registered office: 1141 Budapest, Paskál utca 44. II.5. hereinafter referred to as service provider, data controller), as data controller, acknowledges the content of this legal notice as binding on itself. It undertakes to ensure that all data processing related to its activities complies with the requirements set out in this regulation and in the applicable national regulations and legal acts of the European Union.

The data protection guidelines related to the data processing of DO Style Management Kft. are continuously available www.experiencephotographybyboat.hu at
DO Style Management Ltd. reserves the right to change this information at any time. It will notify the data subjects in due time. If you have any questions related to this announcement, please write to us and our colleague will answer your question.

DO Style Management Ltd. treats personal data confidentially and takes all security, technical and organizational measures to guarantee the security of the data.
1. Scope of personal data, purpose, legal title and duration of data processing
The data processing activities of DO Style Management Kft. are based on voluntary consent or legal authorization. In the case of data processing based on voluntary consent, the data subjects may withdraw their consent at any stage of data processing. In certain cases, the processing, storage and transmission of a range of provided data is mandatory by law.

We would like to draw the attention of those who provide data to DO Style Management Kft. that if they do not provide their own personal data, the data provider is obliged to obtain the consent of the data subject. DO Style Management Ltd. does not process sensitive data. Its data management principles are in line with the applicable data protection legislation, in particular the
Act CXII of 2011 (Info Act)
EU Regulation 2016/679 (GDPR)
Act V of 2013 (Civil Code)
Act C of 2000 (Accounting.tv)
Act LIII of 2017 (Pmt.)

1.1. The www.experiencephotographybyboat.hu When visiting a website, the web server does not
record user data.

1.1.2. The website contains so-called Facebook pixels, which allow Facebook to collect or receive data from the site using cookies, data collection signals and similar data storage technologies and to use this data to provide measurement services and display targeted ads to those who have previously visited the website. You can decide at any time not to collect and use this data for the purpose of targeting ads. In this regard, thehttps://www.facebook.com/about/privacy Information in Hungarian can be read on the website.

1.1.3. Online shopping
Data management

We use your personal data to process your online purchases, manage your orders and cancellations within our online service, and send you notifications in case of problems. We use your personal data to process payments. We use your personal data to handle complaints and warranty matters related to products. We use your personal data for identification, to verify that you are of legal age to purchase online, and to verify your address to third parties. We would like to offer you different payment options and we perform analyses to determine what payment alternatives are available to you, including your payment history.

Scope of data processed
We process the following categories of personal data:
– contact information, such as name, address, email address and phone number
– payment information and payment history
– order information

Data transmission
Payment service providers use it to process your payment. Please note that many receiving companies have independent rights or obligations to process your personal data.

Purpose of data processing
The processing of your personal data is necessary for our company to be able to handle your order.

Duration of data processing
We will keep your data as long as you are an active customer.

1.1.4. Online partner application

The website offers the opportunity to apply for business partners.

Stakeholders: applicants for business cooperation
Purpose of data processing: establishing economic cooperation, expanding the number of partners
Legal basis for data processing: voluntary consent of the data subject
Scope of processed data: name, email, phone number, area of operationDuration of data processing : from the date of online application to the date of application review

1.1.5. Order

The service provider provides the opportunity to place an order on the website.
Stakeholders : persons wishing to use the service
Purpose of data processing : sending the order to the data controller, its clarification, completion, acceptance and rejection by the data controller, and the necessary contact for this Legal basis for data processing : voluntary consent of the data subject Scope of processed data : name, e-mail, telephone number, chosen service and its location, product number and product range, delivery deadline, data necessary for proof of delivery and issuing an invoice Duration of data processing : the validity period of the offer, from the request for the offer until the order is placed, and until the certificate of performance and invoice are issued and fulfilled

1.2. Website cookie management

In order to provide a customized service, the service provider places a small data package, called a cookie, on the user’s computer and reads it back during a subsequent visit. If the browser sends back a previously saved cookie, the service provider managing the cookie has the opportunity to connect the user’s current visit with previous ones, but only with regard to its own content.

Purpose of data processing: identifying and distinguishing users from each other, identifying the current session of users, storing the data provided during it, preventing data loss, identifying and tracking users, web analytics measurements Legal basis for data processing : the consent of the data subject

Scope of processed data: identification number, date, time, and the previously visited page

Duration of data processing: thirty minutes

The user can delete the cookie from their own computer or disable the use of cookies in their browser. Possible consequences of not processing data : incomplete availability of the website’s services, inaccuracy of analytical measurements.

1.3. Customer data processing

The service provider carries out photography activities on a small motorboat. Purpose of data processing : provision of services, monitoring of services, performance and execution of contracts, provision of services undertaken under the contract, verification of rights and obligations related to the contract, enforcement of any claims that may arise, contact. Legal basis for data processing : voluntary consent of the data subject, GDPR Article 6 (1) (b) and legal obligationScope of processed data : name, name, place, date of birth, address, registered office, citizenship, native language, mailing address, telephone number, tax identification number;

Deadline for data deletion: in accordance with the Accounting Act with respect to all data, and until the purpose of data management is achieved, or until another date specified by law.

Contact:
If you would like to contact our company, you can contact the data controller at the contact details provided in this information. DO Style Management Kft. deletes all emails received by it, including the sender’s name, email address, date, time and other personal data provided in the message, no later than five years after the data was disclosed.

Other data processing
We will provide information about data processing not listed in this information when the data is collected. We inform our clients that the court, the prosecutor, the investigating authority, the administrative authority, the NAIH, or other bodies authorized by law may contact the data controller to provide information, communicate, transfer data, or make documents available. The data controller will only provide the authorities with personal data to the extent and insofar as the authority has specified the precise purpose and scope of the data, which is absolutely necessary to achieve the purpose of the request.

3. Method of storing personal data, security of data processing

DO Style Management Ltd.’s IT system and other data storage locations are located at its headquarters and data processor.
The data controller selects and operates the IT tools used to process personal data during the provision of the service in such a way that the processed data
– accessible to those authorized to do so (availability)
– its authenticity is assured
– its immutability can be verified (data integrity)
– be protected against unauthorized access.

The data controller takes appropriate measures to protect the data, in particular against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as accidental destruction, damage, and inaccessibility resulting from changes in the technology
used.

In order to protect the data files managed electronically in its various registers, the Data Controller ensures with the appropriate technical solution that the stored data cannot be directly linked and assigned to the data subject, unless permitted by law.
In view of the current state of technology, the Data Controller ensures the protection of the security of data processing by means of technical, organizational and organisational measures that provide a level of protection appropriate to the risks associated with data processing.

DO Style Management Ltd. retains the following during data processing:- Confidentiality: protects information so that only those who are authorized to access it can access it.

– Integrity: protects the accuracy and completeness of the information and the processing method
– Availability: ensures that the authorized user can actually access the desired information when they need it.

The IT system and network of DO Style Management Ltd. are protected against computer-aided fraud, espionage, vandalism, fire and flood, as well as computer viruses
and computer intrusions.
We inform users that electronic messages transmitted over the Internet, regardless of protocol, are vulnerable to network threats that lead to dishonest activity, disclosure, or modification of information. The data controller takes all reasonable precautions to protect against such threats.

Data transmission, data processing
The company will not pass on the personal data provided during registration to a third party in any way without the user’s prior consent, except in cases where the company is obliged to forward the data by legal requirement.
The company may use a data processor to process the personal data it processes. The data processor must comply with the provisions of this policy, the applicable laws in force, and the contract governing its legal relationship with the company.
The company uses the data processing services of the following company:
to use:

Company name: DO Style Management Ltd.
Title:1141 Budapest, Paskal Street 44. II.5.
No further data transfer takes place regarding personal data processed by the company.

4. Data controller’s details and contact
information: Name: DO Style Management Ltd.
registered office: 1141 Budapest, Paskál Street 44. II.5.
company registration number: 01-09-180887
name of the registering court: Commercial Court of the Metropolitan Court
tax number: 24760681-2-42
phone number: +36 20 928 5190
e-mail:info@experiencephotographybyboat.hu

5. Rights of data subjects, legal remedies
The data subject may request information about the processing of his/her personal data, as well as request the correction of his/her personal data, or – with the exception of data processing prescribed by law – their deletion or withdrawal.info@experiencephotographybyboat.hu by electronic mail sent to the e-mail address, or by a statement addressed to the data controller and delivered to its registered office by post.

Right to information:
At the request of the data subject, the data controller shall provide information about the data processed by it or by any data processor it may have commissioned, the purpose, legal basis, duration of the data processing, the name, address (registered office) of the data processor and its activities related to the data processing, as well as who receives or has received the data and for what purpose. The data controller shall provide the information in writing and in a plain language as soon as possible after
receiving the request, but no later than within 30 calendar days.

Right of access:
The data subject has the right to receive feedback from the data controller as to whether his or her personal data is being processed and, if such processing is in progress, to access the personal data, the purpose of the processing, the categories of personal data concerned and the categories of recipients. The data controller shall provide the information in writing and in a plain language as soon as possible after receipt of the request, but no later than 30 calendar days.

Right to rectification:
The data subject may request the correction of inaccurate personal data concerning him or her and the completion of incomplete data.

Right to erasure:
The data controller will delete personal data immediately if the data subject notifies the data controller in writing. info@experiencephotographybyboat.hu by electronic mail sent to the e-mail address, or by a statement addressed to the data controller and delivered to its registered office by post; if the processing is unlawful, the purpose of the data processing has ceased, or the statutory deadline for storing the data has expired, it has been ordered by the court or the NAIH.

Deletion of data cannot be initiated if data processing is necessary: to fulfill an obligation under Member State or EU law, in the public interest, for the establishment, exercise or defense of legal claims. The data controller notifies the data subject of the correction and deletion by e-mail, stating that if the legitimate interests of
the data subject are not violated in view of the purpose of the data processing, the data controller may omit the notification. The data subject may object to the processing of his or her personal data if

– the processing of personal data is necessary solely for the exercise of the rights or legitimate interests of the data controller, unless the processing is required by law;
– the personal data is used for direct marketing, public opinion polling or scientific research purposes;
– The exercise of the right to protest is otherwise permitted by law.

The data controller shall examine the objection immediately, but no later than within 15 calendar days, and shall inform the data subject of the result in writing, while simultaneously suspending the data processing. If the objection is justified, the data controller shall terminate the data processing.Right of withdrawal:
The data subject has the right to withdraw his/her consent at any time. The withdrawal of consent does not affect the lawfulness of data processing based on consent prior to its withdrawal.

Rules of procedure

The controller shall inform the data subject without undue delay, and in any event within one month of receipt of the request, of the action taken in response to the request pursuant to Articles 15 to 22 of the GDPR. If necessary, taking into account the complexity of the request and the number of requests, this deadline may be extended by a further two months.

The data controller shall inform the data subject of the extension of the deadline, indicating the reasons for the delay, within one month of receipt of the request. If the data subject submitted his/her request electronically, the information shall be provided electronically, unless the data subject requests otherwise. If the data controller does not take action following the data subject’s request, it shall inform the data subject without delay, but at the latest within one month of receipt of the request, of the reasons for the failure to take action and that the data subject may lodge a complaint with a supervisory authority and exercise his or her rights to judicial remedy.

Right to go to court
In the event of a violation of their rights, the data subject may take legal action against the data controller. The court will proceed with the case without delay.

Data protection authority procedure
Complaints can be filed with the National Data Protection and Freedom of Information Authority (headquarters:
1125 Budapest, Szilágyi Erzsébet fasor 22/C., Website: http://www.naih.hu)