Privacy notice

1. Who handles your data?

Kiss Norbert, a Hungarian sole trader operating as KiNo Video, is the controller for this website and its enquiry system. Contact: info@kinovideo.hu, +36 30 565 0952. Registered identity appears in the Legal notice.

2. Enquiries and communication

The form stores the information you choose to send: company, website, email or other contact details in your message, video types, dates, locations, free text, language, page context, request identifier and timestamps. All form fields are optional. If no contact method is provided we may be unable to reply. Do not send sensitive personal information or confidential third-party material that is unnecessary for the brief.

We use these data to understand the task, prepare an offer and communicate. Where you request steps toward your own contract, the basis is GDPR Article 6(1)(b). For a company’s contact person, the basis is our legitimate interest in handling business enquiries, Article 6(1)(f). This is separate from cookie consent. The enquiry is stored in our protected administration system; no automatic enquiry email is sent. Replies can be sent personally from info@kinovideo.hu.

The manually applied red/yellow/green/blue labels describe enquiry progress. They are not automated scoring, profiling or decisions with legal effects. Unconverted enquiries are manually reviewed 12 months after the last meaningful contact and deleted when no longer needed. Retention for a documented legal claim or a contracted project is assessed separately. There is no automatic enquiry deletion. Contract, accounting and footage records have their own purposes and retention rules.

3. Optional visit statistics

Only after you allow statistics, this site sends a page view to its own server. The event contains the path without query string or fragment, selected site language, a broad mobile/tablet/desktop category, referring domain without its path, a masked IP network (IPv4 /24 or IPv6 /48), and an identifier derived from a random browser token and the day. Full IP addresses and the raw browser token are not stored as analytics events. Pseudonymous data are not claimed to be anonymous.

The purpose is to understand which pages are useful and how people reach the site. The basis is your consent, GDPR Article 6(1)(a). There is no Google Analytics, advertising profile or cross-site identifier. The random first-party browser cookie lasts 30 days; individual events are retained for 90 days. The daily identifier is not a continuous visitor count across days.

Changing statistics to off stops new events and deletes the browser identifier. The settings interface also asks the server to delete prior events attributable to the current token. Older tokens that have already expired or been removed cannot be recovered by the site. A deletion error is shown if the server cannot confirm it.

4. YouTube films you choose to play

Images and fonts are served locally. No YouTube iframe is loaded before you click a film’s Play with YouTube control. The information beside that control explains the Google connection before activation. That informed click allows only this opened player to load; it does not enable statistics or save a general video permission. The cookie-panel choice is independent: leaving it unanswered or choosing Essential only does not prevent you from playing a film.

The selected film uses the privacy-enhanced youtube-nocookie.com player. Google still receives your IP address, device/connection and playback data and may set or read cookies or browser storage. Privacy-enhanced mode does not mean data-free or cookie-free playback. The purpose of our activation is to show the film you requested; the basis is your consent for that activation, GDPR Article 6(1)(a). Google’s own processing is described in its current privacy and cookie information.

Google Ireland Limited is the European provider. Google may involve recipients outside the EEA; see policies.google.com/privacy ↗ for its current privacy and transfer information. We cannot control provider retention or every storage entry created by a played film. Closing the player removes the iframe. Withdraw optional consent in Privacy settings also closes active players in open site tabs. Another film requires its own play click. Stopping playback cannot undo data already sent to Google or remove all provider cookies. Direct YouTube links leave this website and are governed by that service.

5. Security, operation and recipients

Enquiries are accessible to the owner and people expressly authorised to operate the system. RackForest provides hosting and email infrastructure in Hungary. Public pages are served over HTTPS; application code, databases, secrets and backups are stored outside the public document root. Separate local preview and administrative recovery copies may be held on the owner’s protected equipment.

Access control, input checks, prepared database queries and rate limits protect the application. Abuse buckets use a keyed IP hash and expire after one day. Analytics retains masked networks rather than full IP addresses. Network and hosting infrastructure necessarily process connection IP addresses. Our diagnostic logs and application backups are kept for 30 days; RackForest’s separate operational logs follow its agreement and privacy policy. No automatic enquiry email is sent.

6. Your rights and contact

Depending on the legal basis and circumstances, you may request access, correction, erasure, restriction and portability, and object to processing based on legitimate interests. Optional consent can be withdrawn in Privacy settings without affecting processing that was lawful before withdrawal. Contact info@kinovideo.hu; identify the relevant enquiry if possible, without sending unnecessary identity documents.

We normally respond within one month. If a complex request requires an extension allowed by law, we explain it within that month. You may complain to Hungary’s National Authority for Data Protection and Freedom of Information (NAIH), another competent EEA supervisory authority, or seek a judicial remedy. Current NAIH submission channels: NAIH ↗.

7. Project footage is a separate matter

This notice covers the website. Filming participants, project footage, client assets, releases, portfolio publication and any work as a processor for a client must be addressed for the particular production. A processing agreement under GDPR Article 28, where required, is separate from this privacy notice and from commercial terms.