KIMERA PRODUCTION – Privacy Notice (GDPR)

Version: 25 August 2025

This Privacy Notice explains how KIMERA PRODUCTION Filmgyártó Korlátolt Felelősségű Társaság (short name: KIMERA PRODUCTION Kft.) processes personal data in compliance with the General Data Protection Regulation (EU 2016/679, “GDPR”) and Hungarian data protection law (especially the Information Act – Infotv.).

1. Data Controller Information

Company name: KIMERA PRODUCTION Filmgyártó Korlátolt Felelősségű Társaság

Short name: KIMERA PRODUCTION Kft.

Year of establishment: 2007

Tax number: 13878320-2-13

Main activity (NACE/TEÁOR): 5911 – Motion picture, video and television programme production

Registered seat: 2112 Veresegyház, Árpád út 11., Hungary

Representative: Gergely Tóth

E-mail: tg@kimeraproduction.com

Telephone: +36209492262

Website: kimeraproduction.com

If not appointed: “We have not designated a Data Protection Officer, as the conditions of Article 37 GDPR do not apply.”

Supervisory Authority:
National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary

Mailing address: 1363 Budapest, Pf. 9.

Phone: +36 (1) 391-1400

Email: ugyfelszolgalat@naih.hu

Website: https://www.naih.hu

2. Purposes, Legal Bases and Retention

We process personal data for the following purposes:

2.1 Contact, inquiries, offers

Data: name, e-mail, phone, company, message

Legal basis: Article 6(1)(b) GDPR (steps prior to a contract) or Article 6(1)(f) GDPR (legitimate interest in communication)

Retention: 12 months after closure of communication

2.2 Contractual partners (clients, suppliers, crew)

Data: name, address, tax ID, bank details, signature

Legal basis: Article 6(1)(b) GDPR (performance of a contract), Article 6(1)(c) GDPR (legal obligation – accounting)

Retention: contract term + 8 years (accounting records)

2.3 Invoicing & accounting

Data: name/company, address, tax ID, invoice items

Legal basis: Article 6(1)(c) GDPR – legal obligation (Accounting Act, VAT Act)

Retention: 8 years

2.4 Casting / recruitment (production purposes)

Data: name, contact details, CV, photo/video material

Legal basis: Article 6(1)(b) GDPR (pre-contractual steps) or Article 6(1)(a) GDPR (consent)

Retention: successful candidates: contract duration + 3 years (claims); unsuccessful: 12 months

Note: for minors, parental/legal guardian consent required. Special categories of data are not processed unless explicitly necessary, with separate consent.

2.5 Marketing (newsletters, promotional materials, advertising campaigns)

Data: name, e-mail address, preferences, interaction data

Legal basis: Article 6(1)(a) GDPR (consent), Hungarian e-Communications Act (Grt.)

Retention: until withdrawal of consent, or after 24 months of inactivity

2.6 Website use & cookies

Necessary cookies: session ID, language preference – legal basis: Article 6(1)(f) GDPR (legitimate interest) or exemption under ePrivacy rules; retention: until browser close / max. 1 year

Analytics cookies: truncated IP, device/browser info, visited pages – legal basis: consent; retention: 13–26 months

Marketing/ads cookies: advertising IDs, cookie IDs – legal basis: consent; retention according to provider (Google, Meta, etc.)

3. Recipients & Processors

Personal data may be shared with:

IT & hosting providers (e.g. website/server providers)

Accounting and legal partners

Newsletter/CRM platforms (e.g. Mailchimp, Hubspot – specify)

Casting platforms (if used)

Banks and payment service providers

All processors are bound by GDPR-compliant data processing agreements (Article 28 GDPR). Data is never sold.

4. International Transfers

By default, data is stored in the EEA. If third-country transfers occur (e.g. cloud services in the US), we ensure compliance via adequacy decisions or Standard Contractual Clauses (SCCs) plus supplementary safeguards.

5. Data Subject Rights

You have the right to:

access your personal data (Art. 15 GDPR)

rectify inaccuracies (Art. 16)

erase data (“right to be forgotten”, Art. 17)

restrict processing (Art. 18)

data portability (Art. 20)

object to processing (Art. 21)

withdraw consent at any time (Art. 7(3))

We do not engage in automated decision-making or profiling unless explicitly communicated.

Complaints: you may lodge a complaint with the NAIH or bring proceedings before Hungarian courts.

6. Data Security

We implement appropriate technical and organizational measures:

Access control and role-based permissions

Encrypted communications (SSL/TLS)

Regular backups and system monitoring

Logging and incident response procedures

Incidents: will be reported to NAIH within 72 hours, and to affected data subjects if high risk is present.

7. Cookies & Online Advertising

Our website uses:

Necessary cookies (always active)

Analytics cookies (e.g. Google Analytics – only with consent)

Advertising/remarketing cookies (e.g. Google Ads, Facebook Pixel – only with consent)

Consent management: a cookie banner (CMP) allows you to accept/reject categories.

Suggested banner text:

“We use cookies to ensure the basic functioning of the site, and with your consent also for analytics and marketing purposes. You can change your preferences anytime.”

Buttons: “Only necessary” • “Accept all” • “Settings”

8. Social Media

On our official pages (Facebook, Instagram, YouTube, etc.) the platform and we may act as joint controllers for analytics/statistics. Please check each platform’s privacy policy.

9. Retention Summary

Contracts & accounting: 8 years

Inquiries: 12 months

Marketing/newsletter: until withdrawal / 24 months inactivity

Casting: successful = contract + 3 years, unsuccessful = 12 months

Cookies: session/1 year/13–26 months depending on type

10. Updates

This Notice may be updated from time to time. Any changes will be published on our website.
Effective date: 25 August 2025