Privacy Notice

1. The controller

Name

SoundCam Productions Kft.

Registered office

2364 Ócsa, Üllői utca 48., Hungary

Company registration no.

13-09-211186

Tax number

13580100-2-13

Representative

Józsa István Örs (managing director)

E-mail

info@soundcam.hu

2. What data we process

• When you request a quote: name, e-mail, company name (optional), project description, budget, deadline, and — if you provide one — a link to your materials (Drive, WeTransfer, YouTube, etc.).
• Business quote requests, for invoicing (optional): tax number, billing address (postal code, city, street, country).
• Online payment: card details are handled exclusively by Stripe and never reach us. We receive the fact and amount of the payment, the order ID, the name and the e-mail address in order to issue the invoice.
• When you use the AI chat: the content of the messages you type and the responses belonging to the session.
• Bot / spam protection: IP address, browser fingerprint, timestamp, challenge token (Cloudflare Turnstile).
• Analytics (optional, consent-based): anonymised IP, page-view events, UTM parameters, device type, language, screen resolution.
• Embedded media: for YouTube and TikTok embeds, the third-party provider may collect cookies / data under its own policy.
• Automatically on visit: technical logs (IP, browser, timestamp) for security and diagnostics.

3. Purposes and legal bases

• Quote request – steps prior to entering into a contract (GDPR Art. 6(1)(b)).
• Payment and invoicing – performance of the contract (Art. 6(1)(b)) and a legal obligation: issuing and retaining the invoice (Art. 6(1)(c), Hungarian Accounting Act § 169).
• AI chat – your express, voluntary use, in order to provide a response (Art. 6(1)(b) and (f)).
• Bot and spam protection (Cloudflare Turnstile) – legitimate interest: preventing abuse and automated spam (Art. 6(1)(f)).
• Analytics and marketing measurement – your voluntary, unambiguous consent (Art. 6(1)(a)); consent may be withdrawn at any time.
• Technical logs – legitimate interest: system security (Art. 6(1)(f)).

4. Processors and third-party providers

We use the partners below under GDPR-compliant data processing agreements (DPA) and — for transfers outside the EU — the EU Standard Contractual Clauses.

Infrastructure

• Amazon Web Services EMEA SARL — hosting (AWS Amplify Hosting), e-mail delivery (Amazon SES), serverless execution (AWS Lambda), database (Amazon DynamoDB, EU region). Region: eu-central-1 (Frankfurt).
• Cloudflare, Inc. — bot and spam protection (Turnstile), CDN, DDoS protection. Transfers to the USA under the EU–US Data Privacy Framework and SCCs.

AI service

• Google LLC / Google Ireland Ltd. — Gemini AI API for the chat feature. Messages typed into the chat are forwarded to Google to generate the response.

Payment and invoicing

• Stripe Payments Europe, Ltd. (Ireland) — online card payment. Card data is handled by Stripe's PCI DSS certified systems; Stripe's privacy policy: stripe.com/privacy.
• KBOSS.hu Kft. (Számlázz.hu, Hungary) — issuing and delivering electronic invoices and reporting to the Hungarian tax authority's Online Invoice system.

Analytics and marketing (active only with consent)

• Google Ireland Ltd. — Google Analytics 4 (with anonymised IP), and Google Ads conversion measurement (quote requests, contact) and ad attribution.
• TikTok Technology Limited (Ireland) — TikTok Pixel conversion measurement for TikTok ad performance.
• Plausible Insights OÜ and/or Umami Software, Inc. — optional, cookie-free traffic measurement.

Embedded media

• YouTube (Google Ireland Ltd.) — embedded video player. YouTube may use its own cookies / tracking under Google's privacy policy.
• TikTok Technology Limited — embedded TikTok videos and channel previews.
• Meta Platforms Ireland Ltd. — links to Facebook pages (no embedded player). After navigating to Facebook, data is handled under Facebook's own policy.

5. Retention

• Quote requests: 24 months from contact, unless a contract is concluded (then 8 years under the Accounting Act).
• Invoices and payment-related data: 8 years under the Accounting Act.
• Chat messages: at most 90 days, then anonymised or deleted.
• Technical logs: at most 30 days.
• Turnstile challenge data: a few hours, at most 24 hours according to Cloudflare.
• Analytics cookies: at most 14 months (GA4 default, with anonymised IP).
• Rate-limit cache (bot protection): 15 minutes.

6. Your rights

You have the right to:

• access the data we hold about you;
• request rectification, erasure or restriction of processing;
• object to processing;
• request data portability;
• lodge a complaint with the Hungarian supervisory authority, the NAIH (Nemzeti Adatvédelmi és Információszabadság Hatóság, 1055 Budapest, Falk Miksa utca 9–11., Hungary), or with the supervisory authority of your own EU member state.

You may send your request to info@soundcam.hu; we respond within 30 days.

7. Data security

Data is transmitted over encrypted channels (HTTPS) and protected with access control and logging. The system runs on AWS, which holds ISO 27001 / SOC 2 certifications.

8. Language

This English text is a translation provided for convenience. In case of any discrepancy, the Hungarian version prevails.