en

General Terms and Conditions and Data Protection (GDPR)

General Terms and Conditions (GTC)

Effective: From January 1, 2026, until revoked 

Website: www.kehi-karikatura.hu

1. Service Provider Details 

The service provider's details are the same as those set out in the Privacy and Data Management Policy published on the website

2. Scope of the General Terms and Conditions 

These General Terms and Conditions apply to services ordered via the website www.kehi-karikatura.hu or through direct contact..

3. Nature of the Service 

The service provider offers caricatures created based on individual orders, as well as related graphic design services. The service does not constitute sales via an online store; there is no automated ordering system on the website.

4. Ordering Process 

Orders may be placed in the following ways: in person, by phone, via e-mail, or through other direct communication channels. 

The ordering process is as follows: 

1. The client contacts the service provider. 2. The service provider clarifies the details of the order as necessary. 3. The service provider submits an offer and/or sends a contract to the client. 4. The order is established upon the client's acceptance of the offer or contract. 5. The service provider performs the service in accordance with the agreement.

5. Fees and Payment 

The fee for the service is subject to individual agreement. Payment shall be made via bank transfer, based on an invoice or payment request issued by the service provider. 

The payment process is as follows: 1. The service provider sends an invoice or payment request to the client. 2. The client settles the amount specified in the document via bank transfer. 3. The service provider verifies receipt of the transfer. 4. Billing-related data is entered into the accounting system, which is accessible exclusively to the service provider.

6. Performance and Deadlines 

The deadline for performance is determined in each case based on an individual agreement. The service provider shall inform the client of any material circumstances affecting performance.

7. Withdrawal and Cancellation 

Due to the nature of the service—which is tailored to specific, individual requirements—the client does not have a right of withdrawal under the provisions of the Civil Code once performance has commenced. Cancellation of an order is possible only upon a specific agreement between the parties. The terms and conditions for cancelling live drawing services for weddings or events—where a contract has been concluded and a deposit paid—are set out in the signed agreement.

8. Copyright 

The copyright for the created works belongs to the service provider. The use of these works may take place exclusively in the manner agreed upon by the parties.

9. Liability 

The service provider assumes no liability for damages resulting from incorrect or incomplete data provided by the client.

10. Data Processing 

The Privacy and Data Processing Policy published on the website applies to data processing in connection with orders and communication.

11. Final Provisions 

The Service Provider is entitled to unilaterally amend these General Terms and Conditions. The amendment shall enter into force upon its publication on the website.

Privacy and Data Management Policy 

GDPR

Basic Principles, Concepts, and Definitio

1) This "Data Protection and Data Processing Policy" (hereinafter: the "Policy") provides information—prior to the commencement of any data processing activities—regarding the handling of personal data in connection with the operation of the website www.kehi-karikatura.hu, the provision of services offered through it, and the professional activities of Éva Kehi (address: 37 Pécsi út, 7751 Szederkény). Specifically, it outlines the facts pertaining to data processing, including the purpose and legal basis for such processing, as well as the date(s) on which processing takes place. This Policy also covers the rights of data subjects in relation to data processing, as well as the legal remedies available to them.

2) The temporal scope of this Policy extends from January 1, 2026, until its revocation. The Data Controller reserves the right to amend this Policy at any time, and the new Policy shall enter into force upon its publication on the website. .

3) Concepts, definitions

Data subject: any natural person who is identified or—directly or indirectly—identifiable on the basis of specific personal data; 

Personal data: data that can be linked to a data subject—in particular the data subject's name, an identification number, or information characteristic of one or more aspects of their physical, physiological, mental, economic, cultural, or social identity—as well as any conclusion drawn from such data that relates to the data subject. 

Special data: 

  1. a) personal data concerning racial origin, nationality, political opinion or party affiliation, religious or other philosophical beliefs, membership in interest representation organizations, or sexual life ,
  2. b) personal data concerning health status, pathological addictions, and criminal-related personal data

Data controller: a party that, either independently or jointly with others, determines the purpose of data processing, makes and implements decisions regarding data processing (including the means of use), or carries out such processing through a data processor. 

Data processing: any operation or set of operations performed upon data, regardless of the procedure employed—including, in particular, the collection, recording, entry, organization, storage, alteration, use, retrieval, provision, disclosure, alignment or combination, blocking, erasure, and destruction of data, as well as the examination of the further use of data, the making of photographic, audio, or visual recordings, and the recording of physical characteristics suitable for identifying a person (e.g., fingerprints or palm prints, DNA samples, iris scans); 

Data processing: the performance of technical tasks related to data management operations, regardless of the tools used or the location where the operation is carried out, provided that the technical task is performed on the data; 

Data processor: a natural or legal person, or an entity without legal personality, that carries out the processing of data—including on the basis of a contract (which may be a contract concluded pursuant to a legal requirement). 

Data protection incident: the unlawful handling or processing of personal data—including, in particular, unauthorized access, modification, disclosure, erasure, or destruction, as well as accidental destruction or damage. 

Fgytv.: Act CLV of 1997 on Consumer Protection. 

The Data Controller does not request or process special categories of personal data. The Data Controller shall immediately delete from its system any special category of personal data that comes to its attention or is brought to its attention in any manner. 

The data controller under this Policy: 

The data processor:

Name: Kehi Éva

Registration number : 518334668

tax number : 54080559-1-22

registered office : 7751 Szederkény, Pécsi út 37.

e-mail: kehikarikatura@gmail.com

website: https://kehi-karikatura.hu

Data processor under these Regulations: 

As a hosting provider: 

Name: Webnode

company registration number: Cg. 01-09-322570

registered office: 1132 Budapest, Victor Hugo u. 18.-22.

e-mail: support@websupport.hu

website: https://websupport.hu

The operation performed by it: Storage of personal data. 

As a delivery person: 

name: Magyar Posta Zrt.

tax number: 10901232-2-44

registered office: 1138 Budapest, Dunavirág utca 2-6.

The data processing related to viewing www.kehi-karikatura.hu

1) Content on the website www.kehi-karikatura.hu that is accessible to the public can be viewed without providing any personal data. The website records the following information about visitors: the visitor's IP address, the time of the visit, and the subpages and content viewed on the website. The data controller uses this information exclusively for analysis related to the website and for monitoring its secure operation.

2) The website uses "cookies," which store content related to the site. These enable the use of Google Analytics services. The purpose of processing the data stored in these cookies is to enhance the user experience and improve the website's online services. The cookies used on the website do not store information that could be used to personally identify an individual.

3) You may remove cookies placed on your computer during your visit to the website, or disable the use of cookies in your browser, at any time.

4) The data controller may receive data—such as inquiries, requests for price quotes, or expressions of interest regarding products and services—via the website, typically through the "Contact" section, sent by email. Providing such data is voluntary; the act of sending an email is considered by the data controller as consent to the processing of the data for the aforementioned purposes. The data controller retains these emails for a maximum of 5 years; if the purpose for data processing ceases to exist, the email will be deleted.

  1. Details regarding data processing for specific activities
  1. Request for Information

1) Legal basis for data processing: The request for information is based on voluntary consent.

2) Purpose of data processing: Providing appropriate information to the data subject and maintaining contact.

Scope and purpose of the processed data: 

Data/purpose 

name/identification e-mail 

address/communication, clarification of requirements, providing information 

phone number/communication, clarification of requirements, providing information 

content of question/request/input data for the response

3) Scope of data subjects: Any natural person who contacts the Data Controller and requests information from the Data Controller by providing their personal data.

4) Duration of data processing: Until the purpose is achieved.

5) The data processing procedure:

  1. a) the data subject contacts the Data Controller for the purpose of obtaining information, using a method of their own choosing (in person, by phone, via e-mail, or in another form).
  2. b) The Data Controller clarifies the request or demand with the data subject, as necessary.
  3. c) The Data Controller shall provide the requested information in the manner in which the request was received, or as otherwise agreed upon with the data subject.
  1. Presence and marketing on social media platforms

1) Legal basis for data processing: Data processing by the Data Controller in connection with profiles on social media platforms is based on consent.

2) Purpose of data processing: Sharing the Data Controller's website content on social media platforms, drawing attention to this, and marketing.

Data/Purpose 

name/identification 

photo used for identification 

comment/opinion, expression of a comment 

rating/opinion, expression of sentiment 

content of a question/request, input data for a response 

3) Scope of data subjects: All natural persons who visit or follow the Data Controller's social media pages, interact with the content posted there (e.g., by liking or disliking), or share such content—in whole or in part—with their own contacts.

4) Duration of data processing: Until unsubscribing.

  1. Data processing related to banking information

1) Legal basis for data processing: The provision of data related to bank transfers is based on voluntary consent.

2) The purpose of data processing is to facilitate the financial performance of the data subjects.

Scope and purpose of the processed data: 

Data/Purpose 

Name (of the account holder) / Identification 

E-mail address (postal address) / Required for sending the payment request and invoice 

Bank account number / Identification 

Reference/Note / Identification 

Amount / Required for fulfillment

3) Scope of affected parties: Any natural or legal person wishing to pay via bank transfer.

4) Duration of data processing: In accordance with applicable accounting regulations .

5) The data processing procedure:

a) The Data Controller sends a payment request/invoice to the data subject's e-mail (postal) address.

b) The data subject transfers the appropriate amount to the Data Controller's bank account.

c) The Data Controller verifies the transfer.

d) Data related to the bank transfer is entered into the Data Controller's accounting system, which is accessible only to the data processor.

Contact details for the National Authority for Data Protection and Freedom of Information 

Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c. Levelezési cím: 1530 Budapest, Pf. 5

Phone: +36 1 391 1400

Fax: +36 1 391 1410

E-mail : ugyfelszolgalat@naih.hu Web: naih.hu

  1. Possibilities for enforcing rights in relation to data processing

In the event of unlawful data processing affecting you, you may initiate a civil lawsuit against the Data Controller. Such cases fall within the jurisdiction of the regional court (*törvényszék*). You may choose to file the lawsuit before the regional court competent for your place of residence (a list of regional courts and their contact details can be viewed at the following link: https://birosag.hu/torvenyszekek). 

This document enters into force on January 1, 2026, and remains in effect until revoked or until a new policy comes into force. 

Szederkény, January 1, 2026.