Effective date: 12 August 2026
The controller responsible for the processing of personal data through this website is:
Company name: ARRABONA STUDIO Produkciós Korlátolt Felelősségű Társaság
Short name: ARRABONA STUDIO Kft.
Registered office: 9122 Felpéc, hrsz. 0106/2., Hungary
Company registration number: 08-09-024127
Tax number: 24121615-2-08
E-mail: info@arrabonastudio.com
Website: arrabonastudio.com
Hereinafter referred to as “Arrabona Studio”, “we”, “us” or the “Controller”.
This Privacy Policy explains how we collect, use, store and protect personal data when visitors use our website or contact us.
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and applicable Hungarian data protection legislation.
Depending on how you interact with the website, we may process the following categories of personal data:
name;
e-mail address;
information included in messages sent to us;
information relating to a request for quotation, cooperation or services;
IP address;
browser and device information;
date and time of website access;
pages visited and basic technical log data;
cookie identifiers and consent preferences;
information generated through optional analytics or marketing technologies, where such technologies are enabled with the visitor’s consent.
We do not intentionally request special categories of personal data through the general website contact form.
Please do not include sensitive personal information in a general enquiry unless it is genuinely necessary.
The website provides a contact form through which visitors may provide:
their name;
their e-mail address;
a message.
Visitors may also contact Arrabona Studio directly by e-mail.
Personal data submitted through the contact form or by e-mail is processed for the purpose of:
responding to enquiries;
communicating with potential clients or partners;
discussing productions, creative projects or collaborations;
preparing proposals or quotations;
taking steps requested by the data subject before entering into a contract.
Where the enquiry relates to a potential contract or service, processing is based on Article 6(1)(b) GDPR, as it is necessary to take steps at the request of the data subject prior to entering into a contract.
For other general or professional enquiries, processing may be based on our legitimate interest under Article 6(1)(f) GDPR in responding to communications addressed to our business.
Where an enquiry does not lead to a contractual relationship, correspondence will normally be retained for no longer than one year after the enquiry has been concluded, unless continued retention is reasonably necessary for the establishment, exercise or defence of legal claims.
Where a contractual relationship is established, relevant correspondence and contractual records may be retained for the period necessary to perform the contract and, where appropriate, for the applicable statutory limitation period.
When you visit the website, certain technical information may automatically be processed by the website server.
This may include:
IP address;
date and time of access;
requested page or resource;
browser type;
operating system;
referring page;
technical error and security information.
Technical information may be processed in order to:
operate the website;
maintain website security;
identify technical errors;
prevent abuse, attacks and unauthorised access;
investigate security incidents.
Where such information constitutes personal data, processing is based on our legitimate interest under Article 6(1)(f) GDPR in maintaining the security and reliable operation of the website.
Technical logs are retained only for as long as reasonably necessary for these purposes, unless a longer retention period is required in connection with a security incident or legal claim.
The website uses cookies and similar technologies.
Cookies are small files or identifiers stored on or accessed from a visitor’s device.
The website distinguishes between the following categories:
These technologies are necessary for the basic operation, security and functionality of the website or for storing the visitor’s privacy preferences.
Where personal data is processed through strictly necessary technologies, processing is based on the provision of the requested website functionality and, where applicable, our legitimate interest in operating a secure website.
These technologies do not require optional consent where they are strictly necessary for providing a service explicitly requested by the visitor.
Preference technologies may store settings that improve or personalise the visitor’s experience.
Where these technologies are not strictly necessary, they are used only after the visitor has given consent.
Statistics and analytics technologies may be used to understand how visitors interact with the website, for example which pages are visited and how users navigate through the site.
Non-essential statistics technologies are activated only with the visitor’s prior consent.
Marketing technologies may be used to measure campaigns, track interactions or support advertising and social media functionality.
Such technologies are used only where the visitor has provided the necessary consent.
The legal basis for processing personal data through optional statistics, preference or marketing technologies is Article 6(1)(a) GDPR – consent.
Visitors may accept, reject or modify optional cookie categories through the website’s Manage Consent / Cookie Preferences interface.
Consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
The current cookie-management interface should be considered the authoritative source for the exact cookies, services, purposes and storage durations used on the website.
The website contains links to third-party platforms, including social media and video-sharing services such as YouTube and Facebook.
Simply displaying a normal external link does not necessarily result in personal data being transmitted to the third party. However, when a visitor clicks such a link, the relevant third party may process data according to its own privacy policy.
Where third-party content is embedded directly into the website, the relevant provider may receive technical information such as:
the visitor’s IP address;
browser and device information;
the page visited;
cookie or account identifiers.
Where consent is legally required for such third-party technologies, the content or associated tracking technology should be activated only after the visitor has provided the appropriate consent.
Third-party providers act under their own terms and privacy policies in relation to processing for their own purposes.
Where a website enquiry results in a business relationship, we may process additional personal data necessary for:
preparing quotations;
negotiating contracts;
delivering audiovisual, production or creative services;
communicating with clients, partners, contributors or suppliers;
managing projects;
invoicing and accounting;
establishing, exercising or defending legal claims.
The legal basis may include:
Article 6(1)(b) GDPR – performance of a contract or steps prior to entering into a contract;
Article 6(1)(c) GDPR – compliance with a legal obligation;
Article 6(1)(f) GDPR – legitimate interests relating to business administration and the establishment or defence of legal claims.
Contractual records may generally be retained for the period necessary to comply with applicable legal requirements and limitation periods.
We do not sell personal data.
Personal data may be accessible, where necessary, to service providers supporting the operation of our business and website, including:
website hosting providers;
website maintenance and IT service providers;
e-mail service providers;
cookie consent management providers;
analytics providers, if enabled;
accountants and professional advisers where necessary.
Such service providers may act as data processors and may process personal data only for the purposes necessary to provide their services and in accordance with applicable data protection requirements.
Personal data may also be disclosed to courts, public authorities or other competent bodies where disclosure is required by law.
Some third-party online service providers may process data outside Hungary or outside the European Economic Area.
Where personal data is transferred to a country outside the European Economic Area, Arrabona Studio or the relevant service provider will rely on an appropriate safeguard recognised by the GDPR where required, such as:
an adequacy decision of the European Commission;
Standard Contractual Clauses;
another valid transfer mechanism under Chapter V of the GDPR.
We retain personal data only for as long as necessary for the purpose for which it was collected.
Retention periods may differ depending on the processing activity.
In particular:
contact enquiries that do not result in a contract are normally retained for up to one year after the communication has ended;
contractual information may be retained for the applicable limitation period;
records subject to accounting or other statutory retention requirements are retained for the period required by law;
technical server logs are retained only for a limited period appropriate for security and technical purposes;
cookie-related information is retained according to the duration specified in the website’s cookie-management system.
Once personal data is no longer required, it will be deleted or anonymised unless further retention is required or permitted by law.
Under the GDPR, you may have the following rights in relation to your personal data:
Right of access – you may request information about whether and how your personal data is processed and obtain a copy of your data.
Right to rectification – you may request correction of inaccurate or incomplete personal data.
Right to erasure – you may request deletion of personal data where the statutory conditions are met.
Right to restriction of processing – you may request restriction of processing in certain circumstances.
Right to data portability – where applicable, you may request personal data in a structured, commonly used and machine-readable format.
Right to object – you may object to processing based on legitimate interests on grounds relating to your particular situation.
Right to withdraw consent – where processing is based on consent, you may withdraw that consent at any time.
Right to lodge a complaint – you may lodge a complaint with a competent data protection supervisory authority.
Requests concerning your personal data may be sent to:
We will respond to requests without undue delay and, as a general rule, within one month as required by the GDPR.
If you believe that your personal data has been processed unlawfully, you may lodge a complaint with the Hungarian supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information
(Nemzeti Adatvédelmi és Információszabadság Hatóság – NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, P.O. Box 9., Hungary
E-mail: ugyfelszolgalat@naih.hu
Telephone: +36 1 391 1400
You also have the right to seek a judicial remedy in accordance with applicable law.
Arrabona Studio takes appropriate technical and organisational measures designed to protect personal data against:
unauthorised access;
accidental loss;
unlawful disclosure;
alteration;
destruction;
misuse.
Access to personal data is limited to persons and service providers who require such access for legitimate business purposes.
Arrabona Studio does not use personal data collected through this website for automated decision-making producing legal or similarly significant effects on visitors.
We may update this Privacy Policy where necessary due to:
changes in the website;
changes in our services;
changes in the technologies or providers we use;
changes in legal requirements.
The current version will always be published on the website together with its effective date.
For privacy-related enquiries or requests concerning your personal data, please contact:
ARRABONA STUDIO Kft.
9122 Felpéc, hrsz. 0106/2., Hungary
E-mail: info@arrabonastudio.com
