DD Media Productions Limited Liability Company 

Privacy Policy

Effective as of February 14, 2025

In the course of its business activities, DD Media Productions Limited Liability Company pays special attention to the lawful, transparent, and secure processing of your personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: GDPR), Act CXII of 2011 (hereinafter: Infotv.).

The purpose of this Privacy Notice is to provide you with as complete information as possible about what personal data we process in the course of our activities, the purpose of such processing, with whom we share your personal data, and what rights you have in connection with the processing of your personal data.

1. What types of data are considered personal data?

Any information relating to an identifiable or identified natural person—that is, a data subject—is considered personal data. Such information includes, among other things, the data subject’s name, place and date of birth, mother’s name, address, and the online identifier used by the data subject.

1. What does "data processing" mean?

Any operation or set of operations performed on personal data or data files, whether by automated or non-automated means, including collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

1. Who processes your personal data?

Your personal data is processed by our company, DD Media Productions, a limited liability company.

Company Information:

• Legal representative: Dávid Andor Szabó, Managing Director
• Registering court: Company Registry of the Budapest Metropolitan Court
• Company registration number: 13-09-237508
• Headquarters: 9 Irsai út, Csemő, 2713
• Email: ddmediaproductionskft@gmail.com

Our company does not have a data protection officer.

1. What personal data do we process, for what purposes do we process this data, and on what legal basis?

Personal data may be processed for a specific purpose provided that a legal basis for data processing exists under the provisions of the GDPR and the Information Act, meaning that data may be processed for that purpose in accordance with those laws.

Our company processes the following personal data:

Processed data	Data Processing purpose	Legal Basis for Data Processing	The provision setting forth the legal basis
name	Identification of the data subject prior to entering into a contract	necessary to take steps at the request of the data subject prior to entering into a contract	GDPR, Article 6(1)(b)
phone	Communication prior to signing a contract	necessary to take steps at the request of the data subject prior to entering into a contract	GDPR, Article 6(1)(b)
email address	Communication prior to signing a contract	necessary to take steps at the request of the data subject prior to entering into a contract	GDPR, Article 6(1)(b)
age	verifying whether the individual is an adult or a minor, and, depending on that, whether a contract for a specific job can be entered into with them; if so, whether the consent of their legal representative(s) is required	necessary to take steps at the request of the data subject prior to entering into a contract	GDPR, Article 6(1)(b)
Full-body, head-and-shoulders, and passport-style photos; photographs of the individual concerned	determining whether the candidate fits into our Company’s model concept	necessary to take steps at the request of the data subject prior to entering into a contract	GDPR, Article 6(1)(b)

You can find the information above on our website at www.ddmodelagency.com, and share them with us by clicking the “Apply” button. This means that you wish to enter into a contractual relationship with our Company; therefore, our Company acts at your request when processing the shared data. Our Company will decide whether to enter into a contract with you based on the personal data you submit, and will contact you via the contact information you provided to communicate relevant details and clarify any questions.

If you contact our Company in connection with exercising your data protection rights, we will typically process your name, email address, mailing address, and any additional personal data provided in your request, depending on how you submit your request. This data processing is carried out in accordance with a legal obligation based on Article 13 of the GDPR.

1. Duration of Data Processing

We will process the personal data described in the previous section for the duration of the application process, which is approximately 30 days.

If you contact our Company in connection with the exercise of your data protection rights, we will process the personal data you provide in this context until your request has been resolved.

1. Your Rights

In connection with the data processing carried out by our Company, you have the following rights:

1. Right of access – Article 15 of the GDPR
2. the right to rectification – Article 16 of the GDPR
3. the right to erasure (“the right to be forgotten”) – Article 17 of the GDPR
4. The right to restriction of processing – Article 18 of the GDPR
5. The right to data portability – Article 20 of the GDPR
6. the right to object – Article 21 of the GDPR

Our company does not have a data protection officer.

1. The Right of Access

You have the right to receive confirmation from our Company as to whether your personal data is being processed, and if such processing is taking place, you also have the right to access your personal data and the following information:

1. the purpose of data processing,
2. the categories of personal data concerned,
3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, including, in particular, recipients in third countries or international organizations,
4. where applicable, the planned duration of the storage of personal data, or, if this is not possible, the criteria for determining that duration,
5. the data subject’s right to request that the data controller rectify, erase, or restrict the processing of personal data concerning him or her, and to object to the processing of such personal data,
6. the right to file a complaint with a supervisory authority,
7. if the data was not collected from the data subject, any available information regarding the sources,
8. the fact of automated decision-making, including profiling, as referred to in Article 22(1) and (4) of the GDPR, as well as, at least in these cases, the logic applied and clear information regarding the significance of such data processing and the likely consequences for the data subject.

If personal data is transferred to a third country or to an international organization, the data subject has the right to be informed about the appropriate safeguards regarding the transfer in accordance with Article 46 of the GDPR. Whenever our Company transfers personal data to a third country or an international organization, it ensures in every case that the data protection practices and regulations of the third country or international organization have been approved by the European Commission through an adequacy decision; or, if no such decision exists, that the data controller, data processor, and the international organization provide appropriate safeguards pursuant to Article 46 of the GDPR with respect to their data controller and data processor activities.

Upon request, our company will provide you with a copy of the personal data subject to processing. We may charge a reasonable fee, based on administrative costs, for any additional copies you request. 

If you submitted your request for information electronically to exercise this right, we will provide you with the information in a widely used electronic format (e.g., Word document, PDF file), unless you request otherwise.

Please note that your right to request a copy must not adversely affect the rights and freedoms of others!

1. The Right to Correction

You have the right to request that our Company correct any inaccurate personal data concerning you without undue delay. Taking into account the purpose of the data processing, you also have the right to request that incomplete personal data be supplemented.

1. The Right to Erasure

You have the right to request that the data controller erase your personal data without undue delay, and the data controller is obligated to erase the data subject’s personal data without undue delay if any of the following grounds apply:

1. the personal data is no longer necessary for the purpose for which it was collected or otherwise processed,
2. You withdraw your consent, which serves as the basis for the data processing, and there is no other legal basis for the data processing,
3. You object to the processing of your personal data pursuant to Article 21(1) of the GDPR, and there are no legitimate grounds for the processing that override your interests, or you object to the processing of your personal data pursuant to Article 21(2) of the GDPR,
4. we are processing your personal data unlawfully,
5. Your personal data must be erased to comply with a legal obligation under Union or Member State law applicable to the data controller.

1. The Right to Restriction

 

You have the right to request that the data controller restrict data processing if any of the following conditions are met:

1. If you contest the accuracy of the personal data, the restriction applies for a period that allows the data controller to verify the accuracy of the personal data,
2. the processing of your personal data is unlawful, and you object to the erasure of the data and instead request that its use be restricted,
3. the data controller no longer needs the personal data for processing purposes, but you require it to assert, exercise, or defend legal claims,
4. You have objected to the processing of your personal data pursuant to Article 21(1); in this case, the restriction applies for as long as it has not been determined whether the data controller’s legitimate interests take precedence over your legitimate interests.

If data processing is subject to restriction, the personal data subject to the restriction may be processed—other than for storage purposes—only with your consent, or for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. 

Our company will notify you in advance if the restriction on data processing is lifted.

1. The Right to Data Portability

You have the right to receive the personal data concerning you that you have provided to our Company in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another data controller without our Company hindering this. This right applies to data processing by our Company based on consent pursuant to Article 6(1)(a) of the GDPR, as well as to data processing based on a contract pursuant to Article 6(1)(b) of the GDPR.

If technically feasible, you may request that our Company directly transfer your personal data—which may be transferred as described in the preceding paragraph—to the data controller you have designated.

Please note that our Company bears no liability whatsoever in connection with the data processing activities of any data controller to whom personal data processed by our Company is transferred pursuant to this authorization.

1. The Right to Protest

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for this purpose.

Direct marketing is defined as the totality of informational activities and ancillary services conducted through direct solicitation, the purpose of which is to convey commercial advertising to customers that is directly related to the sale or provision of products or services, or to the promotion of sales.

1. How can you exercise your rights regarding data processing?

You may exercise your rights regarding data processing by submitting a written request to our Company. You may send this request to our Company via email or by mail to the email address listed in Section 3 of this notice, as well as to our Company’s registered office.

Within one month of receiving your request, our Company will inform you of the actions taken in response to your request. If your request is complex and the number of requests received by our Company is high, this deadline may be extended by an additional two months. Our Company will notify you of any extension of the deadline within one month of receiving your request, specifying the reasons for the delay.

Our Company is required to process your request free of charge, provided that the request is not unfounded or excessive. It is our Company’s responsibility to prove that the request is unfounded or excessive.

If we do not take any action in response to your request, we will notify you without delay—but no later than one month from the date we received your request—of the reasons for not taking action, as well as your right to file a complaint and the available remedies.

1. Automated decision-making, profiling

Our company does not engage in automated decision-making or profiling, and we do not use your personal data for these purposes.

1. Liability for inaccuracies in personal data provided to our Company

Please note that our Company assumes no liability whatsoever if you have provided us with inaccurate personal information.

1. Who has access to the personal data processed by our Company?

Members and employees who personally participate in our Company’s activities, as well as persons in other employment-related legal relationships with our Company, are entitled to access the personal data processed by our Company.

Our company uses cloud-based storage services in the course of its operations; as a result, your personal data is stored on the servers of these storage providers.

1. Method of Data Collection

Our company does not collect personal data from publicly available databases or other records; it obtains such data exclusively through voluntary disclosure.

1. What is a data breach, and how do we handle it?

A data breach is defined as a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or unauthorized access to personal data that is transmitted, stored, or otherwise processed.

In accordance with Article 33(1) of the GDPR, our company will report any data breach to the supervisory authority without undue delay and, where feasible, no later than 72 hours after we become aware of the data breach.

In the notification, we describe the nature of the data breach, including—if possible—the categories and approximate number of data subjects, as well as the categories and approximate volume of data affected by the breach, we provide the name and contact information of a contact person for further information, describe the likely consequences of the data breach, and outline the measures taken or planned by the data controller to address the data breach, including, where applicable, measures to mitigate any adverse consequences resulting from the data breach.

 If the data breach is likely to pose a high risk to your rights and freedoms, our Company will notify you of the data breach without undue delay.

Our Company is required to maintain a record of data protection incidents.

1. Cookies

Please be advised that our website uses cookies. You can find detailed information about them on our website.

1. Legal Remedies

If you have a complaint regarding our Company’s data processing practices, you may submit your complaint directly to the National Authority for Data Protection and Freedom of Information (address: H-1055 Budapest, Falk Miksa utca 9-11; phone: +36-1-683-5969; email: ugyfelszolgalat@naih.hu; website: www.naih.hu e-government portal: NAIH, 429616918).

If our Company violates your rights, you may bring a lawsuit. The conduct of the lawsuit falls within the jurisdiction of the court. The lawsuit may be filed—at your discretion—before the court with jurisdiction over your place of residence or current location. Upon your request, we will provide detailed information regarding your options and means of legal redress.