Privacy Policy
Effective from: 8 October 2026
This policy describes how the AM Projects gallery handles the personal data of visitors, enquirers and customers of the https://amprojects.hu/ website.
1. Data controller
Name:
Longinvest Tanácsadó Betéti Társaság (AM Projects)
Registered office:
1088 Budapest, Bródy Sándor u. 22. 1/18, Hungary
Company registration number:
01-06-727108
Tax number:
20535669-2-42
Represented by:
Annamária Molnár, managing director
E-mail:
amprojects.space@gmail.com
Phone:
+36 30 300 8019
The data controller is not required to appoint a data protection officer. For data protection matters, please contact us at the e-mail address above.
2. Legal background
The data controller processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.), Act CVIII of 2001 on electronic commerce services (Ekertv.), Act C of 2003 on electronic communications (Eht.) and Act C of 2000 on accounting (Sztv.).
The website presents artworks, artists and exhibitions, and the artworks can be ordered in the webshop. There is no online payment: the buyer collects the ordered artwork in person at the gallery and pays in cash on collection.
3. Webshop orders
Data processed:
name, e-mail address, phone number, billing address, details and price of the ordered artwork, date of the order, comments
Purpose:
receiving and confirming the order, arranging collection, performing the contract, issuing the invoice
Legal basis:
performance of a contract (GDPR Art. 6(1)(b)); for invoices, legal obligation (GDPR Art. 6(1)(c), Sztv. Section 169)
Retention:
order data until the contract is performed and any resulting claims expire (5 years); accounting documents are kept for 8 years
Without the data required for the order, the order cannot be fulfilled. The website has no user registration.
4. Quote request and contact form
Data processed:
name, e-mail address, phone number, postal address, content of the message
Purpose:
answering the enquiry, preparing a quote, keeping in contact
Legal basis:
steps taken at the request of the data subject prior to entering into a contract (GDPR Art. 6(1)(b)), or the data controller’s legitimate interest in answering the enquiry (GDPR Art. 6(1)(f))
Retention:
1 year from the last contact; if it leads to a purchase, as set out in Section 3
The data is stored in the data controller’s e-mail account and in the website’s administration interface.
5. Contact by e-mail and phone
The data controller processes the data that the data subject provides by e-mail, by phone or in social media messages (name, contact details, content of the message). The purpose is to answer questions and to discuss matters related to the artworks. The legal basis and retention period are the same as in Section 4.
6. Cookies and consent management
A cookie is a small data file that the website places on the visitor’s device. On the first visit, the website displays a cookie notice (CookieYes). Apart from necessary cookies, all cookies and external services are loaded only after the visitor has given consent.
Consent can be changed or withdrawn at any time by clicking the cookie icon in the bottom left corner of the screen. Withdrawal does not affect the lawfulness of earlier processing.
Necessary cookies (legal basis: legitimate interest, Eht. Section 155(4)):
for the operation of the website and to remember the cookie choice – e.g. cookieyes-consent (1 year), wpEmojiSettingsSupports (session), cookies required for the WooCommerce cart (session, up to 2 days)
Functional cookies (legal basis: consent):
remembering the language choice and the Google Maps map – trp_language (1 month), NID – Google (6 months)
Statistics cookies (legal basis: consent):
audience measurement and the source of the visit – _ga, _ga_* – Google Analytics (up to 2 years), sbjs_* – WooCommerce (session, up to 6 months)
Marketing cookies:
the website does not use advertising cookies
An up-to-date list of cookies, by category, can be found in the cookie settings window.
7. Google Analytics 4 (Google Site Kit)
We measure website traffic with Google Analytics 4, connected to the website by the Google Site Kit plugin. Measurement starts only after statistics cookies have been accepted (Google Consent Mode).
Data processed:
shortened IP address, device and browser data, pages viewed, time and length of the visit, referring page, approximate geographic location
Purpose:
statistical analysis and improvement of the website; the data controller sees aggregated reports only
Legal basis:
consent (GDPR Art. 6(1)(a))
Retention:
up to 14 months
Without consent, Google Analytics does not set cookies and does not track.
8. Google Maps
On the Contact and About Us pages, an embedded Google Maps map shows the location of the gallery. The map loads only after functional cookies have been accepted. When it loads, Google may process the visitor’s IP address and browser data under its own privacy policy (policies.google.com/privacy). Legal basis: consent (GDPR Art. 6(1)(a)). The gallery’s address can also be found without the map in the website footer.
9. Social media
The website contains links to our Facebook and Instagram pages, but no embedded social media content or tracking code (pixel). When you click a link, the privacy rules of Meta Platforms Ireland Ltd. apply.
10. Technical log data
The hosting provider’s server automatically logs the visitor’s IP address, the time of the visit, the address of the page opened and the browser type. This data is processed solely for secure operation, troubleshooting and the prevention of abuse. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Retention: according to the hosting provider’s settings, usually up to 90 days.
11. Data processors and recipients
We do not sell personal data or share it with third parties for marketing purposes. The following providers may access the data on behalf of the data controller, to the extent necessary.
Hosting provider:
BlazeArts Kft. (Forpsi), 1096 Budapest, Thaly Kálmán utca 39., Hungary, domain@forpsi.hu, +36 1 610 5506 – storage of the website, orders and form submissions
Google Ireland Ltd.:
Gordon House, Barrow Street, Dublin 4, Ireland – Google Analytics 4, Google Site Kit, e-mail (Gmail)
CookieYes Limited:
United Kingdom – management and logging of cookie consents
In the event of a request from an authority or court, the data controller is obliged to provide the data required by law.
12. Transfers outside the EU
When Google services are used, data may be transferred to the United States. Google LLC participates in the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision. An adequacy decision is also in force for the United Kingdom.
13. Data security
The website runs over an encrypted (HTTPS) connection. Only authorised persons have access to the administration interface, which uses a hidden login address and limits login attempts. In the event of a personal data breach, the data controller acts in accordance with Articles 33–34 of the GDPR.
14. Your rights
You have the right to request information about and access to your data (GDPR Art. 15), to request its rectification (Art. 16) or erasure (Art. 17), to request restriction of processing (Art. 18), to receive your data in a machine-readable format (Art. 20), to object to processing based on legitimate interest (Art. 21), and to withdraw your consent at any time.
Requests can be sent to amprojects.space@gmail.com or by post to the registered office. The data controller responds free of charge within one month at the latest; this deadline may be extended by two months where justified. No automated decision-making or profiling takes place on the website.
15. Remedies
Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9.
E-mail: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
Website: www.naih.hu
If your rights are infringed, you may also go to court; at your choice, proceedings may be brought before the regional court of your place of residence or stay.
16. Changes to this policy
The data controller may amend this policy, in particular if the website’s functions, the services used or the law change. The current version is always available on this page.