Privacy Policy of The Place Studio Website (hereinafter: Policy) provides information on how your personal data is processed. This Policy is in accordance with the European Parliament and Council Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the relevant Hungarian laws, particularly Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Infotv.).
Data Controller
Data Controller (operator): The Place Studio, Budapest
Contact (e-mail): theplacestudio.hu@gmail.com
Phone: +36 30 319 6238 (during working hours)
You can contact the Data Controller at the above contact details. The Data Controller has not appointed a Data Protection Officer (due to being a small business) and does not perform automated decision-making or profiling on the website.
Purpose of Data Processing
The Data Controller operates the website to showcase its services and enable communication with visitors. The contact form on the website allows visitors to send messages electronically to the Data Controller. Data provided in the form is used exclusively to respond to inquiries (e.g., appointment scheduling, answering questions). Provided data will not be used for other purposes, such as sending unsolicited newsletters or advertising, nor will it be shared with third parties for marketing purposes.
Additionally, the website uses Google Analytics to collect anonymous traffic statistics to improve website functionality and user experience.
Service provision: If you book an appointment or use The Place Studio services (e.g., in-person treatment), the necessary data (name, contact details, voluntarily shared health information) is processed solely for the purpose of providing the service.
Categories of Processed Data
Contact form data: name, e-mail address, phone number (if provided), message content
Technical/log data: IP address, browser type, visit date/time, visited page URLs
Analytics data (Google Analytics): anonymous statistical data, IP address anonymized
Cookies: session ID, analytics cookies, functional cookies
Other provided data: messages sent by email or phone, name, contact details
Special category data: the website does not collect sensitive personal data; health information should be shared during personal consultation only
Legal Basis for Data Processing
Contact (form, email, phone): your consent (GDPR Article 6(1)(a)) or performance of a contract (e.g., appointment booking – Article 6(1)(b))
Website operation (technical logs): legitimate interest of the Data Controller (GDPR Article 6(1)(f))
Google Analytics (analytics cookies): your consent (GDPR Article 6(1)(a))
Data Retention
Contact data: up to 1 year
Technical log data: average 30 days
Google Analytics data: 14 months in Google systems
Cookie lifespan: session cookies – until browser closure; _ga cookie – 2 years; cookieConsent – 6 months
Business documents: if invoicing is required, 8 years under accounting regulations
Access to Data
Access: primarily the Data Controller (The Place Studio)
Third parties: hosting provider, email provider, Google LLC (Analytics)
Data transfer outside the EU: only for Google Analytics with GDPR-compliant guarantees
Data Security
HTTPS encryption
Password-protected servers and databases
Regular updates, antivirus, intrusion detection
In case of a data breach, notification to the NAIH within 72 hours
Rights of Data Subjects
You have the following rights under the GDPR, which can be exercised at the Data Controller’s contact details:
Right of access
Right to rectification
Right to erasure (“right to be forgotten”)
Right to restriction of processing
Right to data portability
Right to object
Right to withdraw consent
Supervisory authority: NAIH, 1055 Budapest, Falk Miksa u. 9-11., naih.hu, +36 (1) 391-1400, ugyfelszolgalat@naih.hu
Use of Cookies
The website uses cookies to improve user experience, operate the website, and for statistical purposes.
Types of cookies:
Essential cookies: necessary for basic website functions (e.g., form submission)
Performance/analytics cookies: collect statistical data on website usage (e.g., Google Analytics)
Functional cookies: remember user settings and preferences
Targeting/advertising cookies: currently not used, may be used in the future only with consent
Example cookies:
_ga – Google Analytics, 2 years
_gid – Google Analytics, 24 hours
_gat – Google Analytics, 1 minute
cookieConsent – stores cookie preferences, 6 months
Effective date: 16 September 2025