This notice covers how the studiofinder.hu studio directory website handles personal data. Purchases in the patentduo.hu webshop are governed by the webshop's own Privacy Policy.
This is an English translation of the Hungarian original; in case of any discrepancy, the Hungarian version prevails.
1. The data controller
Szima Ákos e.v. (operator of Studiofinder) – 4030 Debrecen, Szepesi utca 114. Building A – registration number: 62341055 – tax number: 92072945-1-29 – Email: info@patentduo.hu. More details: Imprint.
The patentduo.hu webshop is a separate data controller, run by Orbán Ivett e.v.: once you click through to the webshop, its privacy notice applies to you.
2. What data we process, for what purpose and on what legal basis
a) Operation and log data
When you visit the website – and also when the Studiofinder review widget loads on a studio's own website (without cookies or analytics) – our hosting provider (Vercel) records technical logs: IP address, browser and device data, and the pages requested. Purpose: operating the service securely and preventing abuse. Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)).
b) Analytics (with your consent)
If you accept in the cookie banner, we use the following tools to measure traffic and improve the site: Google Analytics 4 (Google Ireland Ltd.), Microsoft Clarity (Microsoft Ireland Operations Ltd.) and Vercel Speed Insights. Purpose: analyzing usage and finding errors and slowdowns. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time. The specific cookies are listed in our Cookie policy.
c) Displaying studio data
Unless the studio has provided its own, its photos and opening hours come from a public source, Google, with the author credited. We don't store Google ratings; on the profile they're shown by Google's official element (see point i). These are not your personal data. (Reviews written on Studiofinder are covered in point g.)
d) Email sign-up (OptiMonk)
We show sign-up forms on the site (pop-up and embedded) using OptiMonk (OptiMonk Global Zrt., Hungary), so you can subscribe to our newsletter and studio tips. To display the form correctly and limit how often it appears, OptiMonk may use a cookie or browser identifier; so it only loads if you accept in the cookie banner. We only process your email address if you actually submit the form. Purpose: sending newsletters and staying in touch. Legal basis: your explicit, voluntary consent by subscribing (GDPR Art. 6(1)(a)), which you can withdraw at any time by unsubscribing from the emails. Subscribers are added to the patentduo.hu webshop's newsletter list: this list is managed by Orbán Ivett e.v., who runs the webshop and sends the newsletters, as an independent controller. There is currently no sign-up campaign running on the directory.
e) Content reports
If you report illegal or incorrect content using the report form, we process the name, email address and report text you provide. Purpose: investigating the report, confirming receipt and notifying you of the decision. Legal basis: legal obligation (GDPR Art. 6(1)(c), DSA Art. 16). We don't pass your name or email address on to the studio concerned.
f) Messaging a studio (contact form)
On some studios' profiles (“Message the studio”) you can send the studio a message. In that case we process the name, email address, phone number (if you provide it) and the text of your message. Purpose: forwarding your message to the studio so it can reply, and keeping a record of the inquiry in the studio's account. Legal basis: your consent, given with a separate checkbox on the form (GDPR Art. 6(1)(a)); you can withdraw it at any time at info@patentduo.hu. Recipient: the selected studio – more precisely, the people with access to the studio's partner account. They receive the message by email and from then on handle it under their own privacy practices. Retention: 1 year on our side. To prevent abuse, we keep a hash of your IP address (not the address itself) in memory for at most one hour.
g) Writing a review of a studio
If you write a review of a studio, we process the name you provide (as you want it to appear), your email address, the star rating, the review text and – if you give it – when you visited. Purpose: verifying the review (email confirmation, human moderation under our review policy) and publishing it on the studio's profile; we send the confirmation link and the decision to your email address. Legal basis: your consent, given when you submit (GDPR Art. 6(1)(a)); you can ask us to delete your review at any time at info@patentduo.hu. Public: your name as you entered it, the stars, the text and the month of publication. Not public: your email address – the studio can't see it either. Studiofinder may use AI to create a short summary of published reviews (the texts pass through Google's or Anthropic's service, without names or email addresses). Retention: an unconfirmed review is deleted after 7 days; we delete your email address 30 days after the decision; a published review stays until you ask us to delete it or the studio's profile is removed.
h) Asking a studio a question (“Questions and answers”)
On Pro studios' profiles you can ask a public question. We process the text of your question and – if you give it – your name; if you ask to be notified of the answer, your email address too. Purpose: forwarding your question to the studio and publishing it together with the studio's answer; notifying you of the answer. Legal basis: your consent (GDPR Art. 6(1)(a)). Public: the question and the studio's answer (never your email address). Retention: we delete your email address when the notification is sent (or after 90 days at the latest); the question and answer stay online for at most 2 years. To prevent abuse, we keep a hash of your IP address in memory for at most one hour.
i) Displaying Google reviews (Google Maps Platform)
On a studio's profile, Google ratings and reviews are shown by Google's official element. We only load it if you click the “Show Google reviews” button: your browser then requests data directly from Google (Google Ireland Ltd.), and Google receives your IP address and your browser's technical data – this is governed by Google's privacy policy, and Google acts as an independent controller. We don't store any of the content of Google reviews. Purpose: showing Google reviews about the studio. Legal basis: your consent, given by clicking (GDPR Art. 6(1)(a)). Your browser remembers your choice (pd_gmp), so on other profiles the reviews load automatically as you scroll; you can withdraw this at any time with the “Don't load automatically on other profiles” link in the box or by clearing your browser data.
j) “Near me” – location
If you tap “Near me” or “Studios near me”, your browser asks for permission to share your location. If you allow it, your location is used only in your browser: it calculates how far away the studios are and sorts them by distance. We don't send your location to ourselves or any third party, and we don't store it; your browser remembers it until you close the tab (pd_me) so the next list page can also sort by distance. Legal basis: your consent, given through the browser permission (GDPR Art. 6(1)(a)); you can withdraw it at any time in your browser settings.
k) Videos on Pro profiles (Mux)
Some studios have an intro video on their profile. We load its preview image from our own server; the video itself only loads when you start it. Your browser then requests it from the servers of Mux, Inc. (USA), and Mux receives your IP address and your browser's technical data. We've turned off the player's own analytics and cookies, so playback doesn't set any cookies. Purpose: playing the video you started. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
3. Processors and data transfers
The providers above (Vercel, Google, Microsoft, OptiMonk, Mux for videos, Supabase and Resend for reports, reviews and questions, and Google or Anthropic for the AI summary) act as data processors. Some data may also be transferred to the United States; these providers ensure an adequate level of protection under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses (SCCs).
4. Retention period
We keep content reports for one year after they're closed. Retention periods for reviews and questions are described in points g) and h). We keep analytics data according to the provider's settings (for Google Analytics 4 user-level data this is typically at most 14 months). We keep technical logs only for the short time needed for security. The entry storing your cookie choice stays in your browser until you delete it.
5. Your rights
You have the right to access your personal data, to have it corrected or erased, to restrict its processing, to object to it, and to withdraw your consent at any time. You can withdraw consent by bringing up the cookie banner again (by clearing your browser's stored data for this site), or exercise your rights by writing to info@patentduo.hu.
6. Remedies
You can file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information: NAIH, 1055 Budapest, Falk Miksa utca 9–11.; email: ugyfelszolgalat@naih.hu; web: naih.hu. If your rights are violated, you can also go to court.
Last updated: October 11, 2026. This English version is a translation; in case of any difference, the Hungarian version prevails.