Privacy Policy
Last updated: 17 October 2026
We work in two roles
Foto2Me Kft. ("we") deals with personal data in two roles, and legally they mean different things:
- As a controller, we handle the data of visitors to the foto2.me website, of people who request a demo, and of the photographers who contract with us. This policy is about that.
- As a processor, we run photographers' webshops. The data of a webshop's buyers, and of the children photographed and their parents, is controlled by the photographer who runs that webshop; we work on their behalf and on their instructions. See "Data in the webshops" below.
The controller
Foto2Me Kft.
Address: 525 tér 2., 1173 Budapest, Hungary
Company registration number: 01-09-969036 · Tax number: 23511037-2-42
Email: privacy@foto2.me
What data, for what, on what basis, and for how long
| When | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| You request a demo on the website | name, email address, phone number (if given), number of schools, message, chosen language | Getting in touch and arranging the demo, as a step prior to entering a contract (GDPR Art. 6(1)(b)) | If no contract follows, at most 1 year from the last contact |
| You contact us by email or phone | name, contact details, the content of the correspondence | Answering your enquiry, based on our legitimate interest (GDPR Art. 6(1)(f)) | At most 1 year after the matter is closed |
| You contract with us as a photographer | the contact person's name and contact details, billing details, contract and invoice data | Performing the contract (GDPR Art. 6(1)(b)) and meeting our accounting obligations (Art. 6(1)(c)) | Until the contract ends; invoices for 8 years, as Hungarian accounting law requires |
| You visit the website | IP address, browser type, page opened, time (server log) | Running the website securely and filtering out abuse, based on our legitimate interest (GDPR Art. 6(1)(f)) | Only as long as its technical purpose needs, briefly |
To protect the demo request form from abuse, we keep the IP address in memory for a short time and do not store it. Cookies are covered by our Cookie Policy.
We do not send newsletters, and we do not use your data for any purpose not described here. We do not sell personal data.
Who has access to the data
The data is handled by our staff and by the following processors:
- ATW Internet Kft. (Budapest): our servers and network
- Slack Technologies: demo requests reach us in an internal Slack channel
- Our accounting provider: for bookkeeping of invoices
- Google: visitor statistics (Google Analytics), only if you accept cookies; the data is deleted after 2 months
Beyond these, we disclose data only where the law or an authority requires it.
Transfers outside the European Union
Slack and Google may store data in the United States. Such transfers rely on certification under the EU–US Data Privacy Framework or on the Standard Contractual Clauses adopted by the European Commission.
Data in the webshops
The webshops on our system run under the photographer's own name and domain. The controller of the data of buyers, children and parents is the photographer who runs the webshop, and that webshop's own privacy policy applies. We store and process this data as a processor, under a data processing agreement with the photographer, and never use it for our own purposes.
If you are a buyer in a webshop and want to exercise your rights, contact the webshop's operator. If you write to us, we will forward your request to them and help them fulfil it.
Data security
Photos, orders and databases run in Hungary, on servers we rent. Only staff who need the data for their work can access it. We protect the data with appropriate technical and organisational measures, but no one can guarantee absolute security over the internet.
Your rights
Under the GDPR you have the right to:
- Be informed and access your personal data
- Rectify inaccurate data
- Have your data erased ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing based on legitimate interest
To exercise these rights, write to privacy@foto2.me. We answer within one month at the latest.
If you believe we have infringed your rights, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9–11., naih.hu, ugyfelszolgalat@naih.hu), or go to court.
Children
This website is for photographers; we do not collect data from children here. Children's data in the webshops is covered by "Data in the webshops" above.
Changes to this policy
If this policy changes, we publish the new version on this page with its date.