Privacy Policy

Effective from: 29 October 2026

This policy is based on Regulation (EU) 2016/679 (GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information. It explains how we process your personal data when you use our website, contact us or use our services.

1. Controller

Name: Nagy Milán e.v. (Moving Stays)
Address: Széchenyi István utca 4/c, 4243 Téglás, Hungary
Registration no.: 60343439 · Tax no.: 90981342-1-29
Email: movingstays@gmail.com

We are not required to appoint a Data Protection Officer.

2. Processing activities

2.1. Quote requests and contact (form, email, messages)

Data: name, email, phone (optional), property or business name, the link you provide, your message.
Purpose: replying to your request, preparing your free demo, communication.
Legal basis: steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)).
Retention: 1 year from the last contact if no order is placed, then deleted.
We cannot reply to your request without this data.

2.2. Creating demo and final videos (photos you provide)

Data: the photos you send, any personal data visible in them (e.g. identifiable people, number plates), and the videos made from them.
Purpose: creating and delivering the videos.
Legal basis: pre-contractual steps and performance of the contract (Art. 6(1)(b)).
Retention: 1 year from delivery, so we can make revisions or regenerate the video, then deleted.
Please send photos without identifiable people where possible. If a person is visible, by sending the photo you confirm that they have agreed to its use.

2.3. Performing orders

Data: name, billing name and address, tax number (for businesses), email, phone, order details.
Purpose: concluding and performing the contract.
Legal basis: performance of a contract (Art. 6(1)(b)).
Retention: 5 years from the end of the contract, the general limitation period for civil claims under Hungarian law.

2.4. Invoicing

Data: the mandatory content of the invoice.
Purpose: compliance with accounting and tax obligations.
Legal basis: legal obligation (Art. 6(1)(c); Hungarian VAT Act CXXVII of 2007, §§ 169 and 179; Accounting Act C of 2000, § 169).
Retention: 8 years.

2.5. Publishing references

Data: property or business name, location, and the video made of it (on our website and social media pages).
Legal basis: your prior written consent (Art. 6(1)(a)).
Retention: until you withdraw your consent. You can withdraw it at any time, without affecting the lawfulness of publication before withdrawal. We will then remove the content from our website and our own pages.

2.6. Business outreach

We may contact accommodation providers, wineries, venues and other businesses directly to present our services.

Data: business name, contact person’s name, business email, phone, website, and the content of the outreach and any reply.
Source: publicly available sources (the business’s website and social media, public accommodation directories and booking sites).
Purpose: presenting a business offer.
Legal basis: legitimate interest (Art. 6(1)(f)): presenting our services to businesses through contact details they publish for their business activity. Details of our balancing test are available on request.
Retention: 1 year from the last outreach, or until you object.
Objection: you can ask us at any time not to contact you again, by replying or writing to movingstays@gmail.com. We will stop contacting you and delete your data, keeping only what is needed to make sure we don’t contact you again.

If you follow or message our pages, we can see your public profile name, messages and comments through the platform.

Purpose: communication.
Legal basis: legitimate interest (Art. 6(1)(f)).
For Facebook and Instagram Page Insights we are joint controllers with Meta Platforms Ireland Ltd. (Art. 26 GDPR). Meta provides its own information on this.
The platforms’ own processing is governed by their own privacy policies.

3. Recipients and processors

We do not sell your data or share it for third-party marketing. We use the following providers:

Provider	Role	Location / transfer safeguard
Netlify, Inc.	website hosting, contact form delivery by email	USA – EU-U.S. Data Privacy Framework (DPF), Standard Contractual Clauses (SCC)
Google Ireland Ltd. / Google LLC (Gmail, Drive, Calendar)	email, documents, scheduling	EU / USA – DPF
Higgsfield Inc.	AI video generation from your photos	USA – DPF / SCC
Anthropic (Claude)	AI assistant for preparing texts and emails	USA – DPF / SCC
Meta Platforms Ireland Ltd., TikTok Technology Ltd.	social media pages	EU / third countries – per platform terms
Accountant and invoicing software	invoicing, bookkeeping	Hungary

About AI video generation: according to its own privacy policy, Higgsfield may use uploaded content to improve its AI models. We therefore upload only what is needed to create your video, and delete your photos from the provider’s system once the project is closed. If you don’t want your photos processed by an AI provider, we unfortunately cannot provide the service, so we tell you about this before you order.

We may disclose data to authorities only where required by law.

4. Cookies and analytics

This website does not use tracking, analytics or marketing cookies, and loads no third-party tracking code. Our hosting provider may briefly process technically necessary log data (e.g. IP address, time, browser type) for operation and security.

(If analytics or advertising code such as Meta Pixel or Google Analytics is added in the future, we will update this section and ask for cookie consent first.)

5. Security

Data is stored in accounts protected by passwords and two-factor authentication, and the website is served over HTTPS. We do not carry out automated decision-making or profiling.

6. Your rights

You have the right to:

Access your data and get a copy (Art. 15).
Rectification of inaccurate data (Art. 16).
Erasure (Art. 17).
Restriction of processing (Art. 18).
Data portability in a machine-readable format (Art. 20).
Object to processing based on legitimate interest (Art. 21). For direct marketing this right is unconditional.
Withdraw consent at any time, without affecting earlier processing (Art. 7(3)).

Send requests to movingstays@gmail.com. We reply without undue delay and within 1 month at the latest. In justified cases this can be extended by 2 months, and we will let you know.

7. Complaints

Please contact us first so we can resolve the issue. You may also lodge a complaint with the Hungarian supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)

Falk Miksa utca 9–11., 1055 Budapest, Hungary
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

You may also lodge a complaint with the authority in your own EU country of residence, or go to court.

8. Changes

We update this policy when the law or our services change. The current version is always available on this page.