PRIVACY POLICY
Effective from 28 September 2026
PURPOSE OF THIS NOTICE
Details of Szalon 2000 Kft. as Data Controller:
Registered office: 1095 Budapest, Lechner Ödön fasor 1. A. ép. 422. ajtó, Hungary
Showroom: 1095 Budapest, Lechner Ödön fasor 1. Fsz./80., Hungary
Company registration number: 01-09-422297
Tax number: 11969268-2-43
With this Notice, the Data Controller wishes to inform everyone who uses its services about how it processes personal data. Accordingly, the Data Controller kindly asks everyone who wishes to use its services to do so only if they acknowledge the contents of this Notice. Data processing under these rules complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
ACTIVITIES OF THE DATA CONTROLLER THAT REQUIRE THE PROCESSING OF PERSONAL DATA
The Data Controller's core activity involving personal data is the "Mock-up 3D SCANNING", during which one or more people are reconstructed lifelike: their outline is recorded in full aesthetic detail and then, through data conversion, turned into a figurine. Based on the scanned data, figurines can be ordered in several sizes.
On its website, the Data Controller offers appointment booking and gift voucher requests.
This Notice describes the data processing related to the activities outlined above. It is available at https://mock-up.hu/adatvedelmi-tajekoztato/ (Hungarian) and https://mock-up.hu/en/privacy (English translation).
The Data Controller reserves the right to amend this Notice at any time. For the purposes of this Notice, a service user is anyone who performs at least one act involving data processing (e.g. a website visitor or a scanned person alike).
ACKNOWLEDGEMENT OF THIS NOTICE
The service user acknowledges that they may independently consent to the processing of their personal data only if they are at least 18 years old (under 18, the consent of a parent or legal guardian is required, and under 14 their presence is also required), and declares that at the time of giving consent they are at least 18 years old and their legal capacity is not restricted. They further declare that they accept and acknowledge the provisions of this Privacy Policy.
PERSONAL DATA PROCESSED
- Processing related to web hosting:
While the Website is used, the hosting provider of the Data Controller may obtain certain data related to the User's internet use (e.g. IP address), which the Data Controller does not process; in this respect the hosting provider's privacy policy applies. (Hosting provider: Lovable Labs Incorporated, place of registration: Delaware, United States of America, postal address: One Lincoln Street, Suite 2500, Boston, MA 02111, USA, European representative: Lovable Labs AB, Regeringsgatan 25, 111 53 Stockholm, Sweden, e-mail: support@lovable.dev, privacy contact: dpo@lovable.dev, website: https://lovable.dev) These technical data do not allow conclusions about the User's identity or profile; the Provider uses this information in a form unsuitable for personal identification, solely for the technical operation of the Website and for statistical purposes. While operating the Website, the hosting provider performs built-in visitor analytics (e.g. number of page views, referring page, device and browser type, country), resulting in aggregated statistics unsuitable for personal identification. Lovable's built-in analytics uses a "session-id" cookie. Purpose: aggregated, anonymous visit statistics and ensuring the technical operation of the Website; duration: the session (until the browser is closed); legal basis: the Data Controller's legitimate interest in operating the Website securely and measuring traffic anonymously [Article 6(1)(f) GDPR].
- Processing related to in-person purchases:
– name,
– e-mail address,
– phone number,
– billing address,
– delivery address.
- Processing related to online requests (appointment booking, contact):
– name,
– e-mail address,
– phone number.
- Gift voucher requests
Data processed: the purchaser's name, e-mail address and phone number, the recipient's name, the model, the size and the delivery method. Purpose: issuing and redeeming the voucher. Legal basis: performance of a contract (Article 6(1)(b) GDPR). Duration: until 1 month after the voucher's validity expires; invoices are kept for 8 years under accounting law.
- Use of cookies
The website uses the four categories selectable in the cookie banner:
– Necessary cookies: storing your cookie choice and selected language. These are essential for the website to work; their legal basis is the legitimate interest of the Data Controller.
– Statistics: Google Analytics 4 (Google Ireland Ltd.), for aggregated measurement of traffic.
– Marketing: Meta pixel (Meta Platforms Ireland Ltd.), for measuring Facebook and Instagram ads.
– External content: embedded Google Maps on the contact and booking pages.
The legal basis for the non-necessary categories (statistics, marketing, external content) is the User's consent, which can be withdrawn or changed at any time via the "Cookie settings" link in the footer. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Google's privacy policy: https://policies.google.com/privacy?hl=en. Meta's privacy policy: https://www.facebook.com/privacy/policy.
- Data processors
– Lovable Labs Incorporated (hosting, database, automatic e-mails; e-mails are sent via Mailgun's EU servers),
– Websupport s.r.o. (host of the e-mail mailbox at our contact address, info@mock-up.hu; e-mails sent to us and the booking and voucher notifications arrive here),
– Google (Analytics, Maps),
– Meta (pixel),
– accounting, shipping and printing partners (see "Other information from the Data Controller" below).
Data transfers to the United States are based on the European Commission's adequacy decision or its standard contractual clauses.
- DATA PROCESSING DURING "Mock-up" 3D SCANNING
"Mock-up" 3D SCANNING is a service available in person only. Under 18, the consent of a parent or legal guardian is required, and under 14 their presence as well.
The data processed during "Mock-up" 3D SCANNING is a data set recording the complete outline of the entire human body with photographic precision, which the Provider stores on a data carrier at the same time as recording (scanning); based on this data, the Provider's external printing partner reconstructs it as a lifelike figurine. The Provider keeps the scan data for fulfilling the order and then for reorders for up to 1 year from the scan. At the data subject's separate request, the scan data is deleted after the figurine is completed. The scan data and any image taken during scanning or of the finished figurine are separate data sets: images may be used for reference or advertising purposes only with the data subject's separate, prior and explicit consent.
- DATA PROCESSING RELATED TO HOME DELIVERY
– name,
– delivery address,
– phone number,
– e-mail address.
PURPOSE OF PROCESSING:
| PROCESSING | PURPOSE / LEGAL BASIS |
| Processing related to web hosting | data processed for using the website, but not linked to a specific person (not personal data) |
| In-person purchase | voluntary consent to processing for contact / communication purposes / processing necessary for the performance of a contract |
| Processing related to online requests | voluntary consent to processing for contact / communication purposes |
| Processing related to cookies | necessary cookies: legitimate interest; statistics, marketing, external content: consent |
| Gift voucher requests | performance of a contract (Article 6(1)(b) GDPR) |
| Processing during "Mock-up" 3D SCANNING | voluntary consent to processing / consent necessary for the performance of a contract |
| Processing related to home delivery | voluntary consent for the purpose of performing the contract |
DURATION OF PROCESSING
| PROCESSING | DURATION |
| Processing related to web hosting | during use of the website (not personal data) |
| Processing related to in-person purchases | for the time necessary to complete the transaction, including the record-keeping period required by tax law |
| Processing related to online requests | while the request is being handled |
| Processing related to cookies | until consent is withdrawn (cookies deleted from the browser) |
| Processing during "Mock-up" 3D SCANNING | the Provider keeps the scan data for reorders for up to 1 year from the scan; at the data subject's separate request it is deleted after the figurine is completed; use of images for reference or advertising requires separate consent |
| Processing related to home delivery | for 1 month after fulfilment |
| Processing related to appointment booking | for 1 month after fulfilment; if no order is placed, for 5 days after the booked appointment |
| Processing related to gift voucher requests | for 1 month after the voucher's validity expires |
| Processing related to contact | for 1 month after the matter is closed |
| Storage of cookie choice | for 1 month |
| Processing related to invoicing | for 8 years under accounting law |
OTHER INFORMATION FROM THE DATA CONTROLLER
The Data Controller informs users of the "Mock-up" 3D SCANNING service that during this processing the data are transferred to a third country, which is essential for performing the contract. The printing partner (data processor) operates in China. A data processing and data transfer agreement (based on the European Commission's Standard Contractual Clauses – SCC) is in force between the third-country Data Processor and the Data Controller, ensuring processing that meets applicable European standards and providing full guarantees for it.
The personal data processed may be accessed by the service provider performing accounting/shipping tasks as a data processor, with which the Data Controller has also concluded a data processing agreement to ensure secure and fair processing.
The Data Controller informs the service user that they may request access to, rectification or erasure of their personal data, or restriction of its processing, may object to the processing of such personal data, and are also entitled to data portability.
The Data Controller informs that consent to processing may be withdrawn at any time, which does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
For any questions or requests, the service user may contact the Data Controller – Szalon 2000 Kft. – as follows:
– in person at the showroom – 1095 Budapest, Lechner Ödön fasor 1. Fsz./80. – during opening hours (available on the website), with minutes taken,
– by post at 1095 Budapest, Lechner Ödön fasor 1. A. ép. 422. ajtó,
– by e-mail at info@mock-up.hu.
The Data Controller informs that a complaint regarding data processing may be lodged with the supervisory authority (Hungarian National Authority for Data Protection and Freedom of Information – NAIH)
registered office: 1055 Budapest, Falk Miksa utca 9–11., postal address: 1363 Budapest, Pf. 9., phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu