Legal

Terms & privacy

General Terms and Conditions and Privacy Policy

This is an English translation for information. In case of any discrepancy or dispute, the Hungarian version prevails.

Key information

  1. When applying, please fill in the application form at https://pannipix.hu with your correct details. Where justified, other channels of communication may also be used to arrange the appointment. After you apply through the form, we will ask for further details about the tattoo you would like. If these fit my profile and I can take on the work, a uniform design fee of HUF 15,000 must be paid by bank transfer following a telephone consultation. The Service Provider sends the details needed for the transfer by e-mail after the consultation. Once the amount has been received, an appointment for the tattoo can be booked from the options offered according to available capacity. I meet the client in person only on the day of the tattoo, but this may change depending on prior arrangements. If necessary, a further personal meeting may also take place to perfect the designs and the work.
  1. On the day of the tattoo, the client and I go through the details of the tattoo again, including new ideas and any changes. The design is finalised after the client arrives, and the client may freely modify the design within the limits of the idea given in advance. I do not send the design in advance, so the client sees it for the first time on the day of the tattoo.
  2. The client must inform me of any infectious disease (HIV, hepatitis, AIDS) when applying. Without this information the tattoo cannot be carried out.
  3. The client accepts that, besides the tattoo artist, the client’s own contribution is also essential to the final result, as the client ensures the right result by carefully following the aftercare instructions below.
  4. The client must raise any reservations or problems immediately and in person at the time of the tattoo; later complaints are not possible.
  5. The information given on the application form must be correct in all cases.
  6. In case of cancellation, please let me know at least two weeks before the appointment. In case of force majeure, the client must also notify me of the cancellation, even immediately before the appointment. In this case the design fee cannot be refunded.
  1. On cancellation, the appointment may be rescheduled to a later date, for which no new design fee has to be paid. After a second cancellation the design fee is forfeited and must be paid again for the next booking.
  2. The client must always arrive at the appointment clean and well-groomed; otherwise I am entitled to cancel the tattoo, and the design fee will not be refunded.
  3. The client receives all necessary information about the tattoo and the appointment by e-mail.
  4. The client must follow the aftercare instructions I give, and acknowledges that these may differ from other aftercare guides.
  5. The client also acknowledges the following grounds for exclusion:
    • If the application form has not been filled in
    • If the consent form is not accepted
    • If the client is undergoing antibiotic treatment
    • If the client has a severe skin condition
    • If the client does not arrive clean and well-groomed
    • In the case of infectious diseases (HIV, AIDS, hepatitis)
    • For persons under 18
    • If the client is pregnant or breastfeeding
  1. Applying does not mean an immediate appointment; it must always be finalised based on the tattoo artist’s decision and according to the offer given.
  2. The client receives the price of the tattoo and the method of payment in a separate offer, which depends on the style, placement, size and complexity of the idea.

General Terms and Conditions

Panna Horváth, sole trader, tattoo artist (registered office: 1114 Budapest, Bartók Béla út 34.; tax number: 56316669143; registration number: 54950438), hereinafter: the Service Provider, sets out the conditions for using and providing the tattoo service she offers and the general terms and conditions of the contracts concluded (hereinafter: GTC) as follows:

1. Scope of the GTC; conclusion, subject and content of the contract

a) These GTC apply to every individual contract concluded by the Service Provider for creating a tattoo, regardless of whether it has been put in writing. Deviation from these GTC is valid only in writing.

b) The Service Provider publishes the current text of the GTC on our website and, in case of amendment, publishes the amended text 7 days before the amendment takes effect.

c) By booking an appointment and by ordering or using the services, the Client declares that they have read these General Terms and Conditions before concluding the contract and accept their content as binding on them.

d) The contract is concluded between the person using the service (hereinafter: Client) and the Service Provider (together hereinafter: the Parties).

Unless otherwise indicated, the Service Provider is the person who provides the service to be used. With regard to the tattoo, the Parties conclude the contract in person, based on the consultation, orally or by conduct implying consent.

e) The client receives the price of the tattoo and the method of payment in a separate offer, which depends on the style, placement, size and complexity of the idea.

The quote is valid for the period stated on it, or failing that for 30 days, regardless of the number and duration of sessions.

The Service Provider starts or performs the Service only if the Client has accepted the quote in advance.

It does not constitute an offer when an interested person enquires about the services and their prices in person, by phone, on social media or by e-mail and the Service Provider gives information about them. The data and information given by the Service Provider in such cases are for information only.

Special and promotional prices are valid only for the period indicated and cannot be combined with other discounts.

f) The subject of the contracts concluded between the Parties is the consultation about the service and the tattoo service ordered by the Client on that basis and undertaken by the Service Provider (hereinafter: the Service).

The subject and content of the contract concluded for the Service are set out in these GTC and their annexes, the price according to the quote and the consent forms.

The Client acknowledges that, in addition to accepting the provisions of these GTC, they must accept the conditions set out in other documents in order to use the services. The Client further acknowledges that by accepting the quote and paying the design fee they order the Service.

2. Booking

a) When applying, the client must fill in the application form with correct details at https://pannipix.hu, which can be found on the Service Provider’s website. Where justified, other channels of communication may also be used to arrange the appointment. After you apply through the form, we will ask for further details about the tattoo you would like. If these fit my profile and I can take on the work, a uniform design fee of HUF 15,000 must be paid by bank transfer following a telephone consultation. The Service Provider sends the details needed for the transfer by e-mail after the consultation.

Once the amount has been received, an appointment for the tattoo can be booked from the options offered according to available capacity. The Service Provider confirms the booking by e-mail within 3 working days at the latest. Without confirmation no contract is concluded.

The Service Provider meets the client in person only on the day of the tattoo, but this may change depending on prior arrangements. If necessary, a further personal meeting may also take place to perfect the designs and the work.

No contract is concluded between the Parties by electronic means.

b) The Client must notify the Service Provider without delay by e-mail or phone if they cannot attend the booked appointment.

c) The provisions on lateness, postponement and cancellation of the appointment are set out in section 3.

3. Using the Services

a) On the day of the tattoo, the client goes through the details of the tattoo again with the Service Provider, including new ideas and any changes. The design is finalised after the client arrives, and the client may freely modify the design within the limits of the idea given in advance. The Service Provider does not send the design in advance, so the client sees it for the first time on the day of the tattoo.

The client must inform the Service Provider of any infectious disease (HIV, hepatitis, AIDS) when applying. Without this information the tattoo cannot be carried out.

b) When using the service, the Client must be in a suitable physical and mental condition; otherwise the Service Provider is entitled to refuse to provide the Service. The Service Provider may also refuse to perform the services in the cases set out in other sections of these GTC.

c) Before using the Service, the Client receives detailed oral information about the whole course of the service.

If the Client has already used the Service and has already signed the consent form for it once, then in the case of a repeat tattoo — unless legal provisions state otherwise — the contract may also be concluded, and the Service performed, by conduct implying consent.

d) Lateness

The booked time is the start time of the tattoo. For a punctual start, arrival 5 minutes earlier is required.

Lateness is the actual time of availability compared with the start time.

If the Client reports their lateness, or fails to report it due to a technical problem, and is no more than 10 minutes late, the Service Provider accepts this. If the Client reports their lateness and it exceeds 10 minutes, the Service Provider is entitled to decide unilaterally, taking the circumstances into account, whether to perform the Service or whether a new appointment must be booked. The latter counts as cancellation of the appointment by the Client.

If the Service Provider performs the Service but it takes less time than planned, the missed part cannot be “made up” later, and the Client is not entitled to compensation or reimbursement of costs.

e) Postponement

The Client is entitled to postpone the booked appointment free of charge, at the latest two weeks beforehand, to another date no more than once, by phone, e-mail or other written message.

f) Cancellation of the appointment:

The Client can cancel the previously booked appointment free of charge at the latest two weeks beforehand by phone, e-mail or other written message.

Failure to attend the appointment counts as cancellation.

g) For payment obligations arising from cancellation and postponement within the deadlines or periods set out in points d–e–f), the provisions of section 6 apply.

4. Rights and obligations of the Service Provider

a) The Service Provider carries out the tattooing activity with the care generally expected in the given situation, within the framework of professional requirements, observing ethical rules, to the best of her knowledge and conscience, at the level determined by the material and personal conditions available to her, in accordance with her professional competence, and in compliance with the laws, regulations, professional rules and protocols applicable to her activity.

The Service Provider carries out her activity ensuring the conditions prescribed by the laws in force.

b) The Service Provider performs the Service on the basis of the information provided by the Client and a prior consultation. The Service Provider is entitled to determine the professional elements of the Service herself and to change them at any time during the treatment.

d) The Service Provider is obliged to comply with professional rules even if this is contrary to the Client’s request or wishes. If the tattoo requested by the Client would violate a law or a professional rule, the Service Provider must refuse the service.

The Service Provider — in addition to the cases specifically regulated in these GTC — is entitled to refuse the tattoo if

(i) the Service Provider does not have the personal or material conditions required to provide the necessary service;

(ii) the Client seriously breaches their obligation to cooperate, or breaches it in a way that affects the result of the tattoo;

(iii) the Client behaves offensively or threateningly towards the Service Provider, other Clients or third parties present at the place of the Service;

(iv) the conduct of the Client, or of a person arriving with them, endangers the life or physical integrity of the Service Provider, other Clients or third parties present at the place of the Service; or

(vi) the Client fails to meet their payment obligation.

In these cases the Service Provider is entitled to claim compensation for damages or costs in view of the Client’s breach of contract as set out in section 6, while the Client may not claim reimbursement of their costs or damages from the Service Provider.

e) If, due to any unforeseeable external cause or circumstance, the Service Provider is unable to provide the Service at the booked time or place, this does not constitute a breach of contract by the Service Provider, and the Client may use the service at a new, agreed time or place.

5. Rights and obligations of the Client

a) The Client must arrive 5 minutes before the booked appointment, be ready to start the tattoo at the booked time, provide the data and information requested by the Service Provider in connection with the requested tattoo, and pay the price of the Service to the Service Provider.

The Client must also respect the applicable Hungarian laws relating to their care, as well as the Service Provider’s house rules.

The Client must arrange any interpreting or translation that may be needed, at their own expense.

b) The Client acknowledges that, besides the Service Provider, the Client’s own contribution is also essential to the final result, as the client ensures the right result by carefully following the aftercare instructions below.

c) The Client acknowledges that they must raise any reservations or problems immediately and in person at the time of the tattoo; later complaints are not possible.

d) The Client must cooperate with the Service Provider and, in particular but not exclusively:

– inform her of any infectious disease (HIV, hepatitis, AIDS) when applying. Without this information the tattoo cannot be carried out;

– inform her — in connection with their own illness — of anything that may endanger the life or physical integrity of others, in particular infectious diseases;

– follow the aftercare instructions received from her in connection with the tattoo;

– credibly verify the personal data required by law.

6. Price of the Service, payment terms, payment obligations in case of cancellation, lateness and breach of contract

a) The price of the Services under the contract is the price according to the Service Provider’s quote. The Client acknowledges that the price in the quote is valid only under unchanged circumstances, i.e. the items in it may change for professional reasons arising during the tattoo, e.g. additional material requirements.

b) The Client must in all cases pay the price of the Services provided to the Service Provider, even if they claim not to be satisfied with the result of the tattoo.

The Client must pay the full price even if, because of their lateness, the Service Provider performs the tattoo but in a shorter time than planned. In this case the missing time cannot be made up, and the Client is not entitled to compensation.

c) The Client must pay the design fee by bank transfer before the tattoo, and the price of the Service after the tattoo, on site, in cash or by bank card.

d) In case of late payment, the Client must pay statutory default interest under the Hungarian Civil Code.

e) If the Client pays from a foreign bank account or by bank card, all related costs, including currency conversion costs, are borne by the Client.

f) If the Client requests that a tattoo already started be interrupted or stopped, they must pay the Service Provider the price of the service used, the resulting damage to the Service Provider and her incurred, justified and verified costs, but at least the price of the Service.

g) If the Service Provider refuses to provide the Service for any reason regulated and defined in these GTC — including the case where the Service Provider has started the tattoo but its completion or result fails due to the Client’s breach of contract, or the tattoo cannot be carried out because of the Client’s lateness — the Client must pay a penalty in view of their breach of contract, equal to the price of the Service.

h) If, due to any unforeseeable external cause or circumstance, the Service Provider is unable to provide the service at the booked time or place, this does not constitute a breach of contract by the Service Provider, and the Client may use the service at a new, agreed time or at a different place, but is not entitled to compensation for damages or costs.

7. Data protection

a) The Service Provider informs the Client about the processing of their personal data in a separate notice.

8. Liability, warranty

a) The Service Provider provides the Services in accordance with professional rules, with the utmost professional care.

The Client acknowledges that every tattoo involves risk, and that the Client must bear all risks for which the Service Provider cannot be held responsible, i.e. where she acted in accordance with professional rules.

b) The Service Provider does everything to achieve the desired effect and result; however, the Client acknowledges that, depending on the body’s biological response and on foreseeable and unforeseeable risks, the result may differ from the average, and the Service Provider is not liable for such a difference.

Furthermore, since the assessment of the result of a tattoo service is extremely subjective and varies from person to person, the Service Provider bears no liability for complaints of an aesthetic nature and excludes all financial or any other liability.

d) The Service Provider is not liable for complications or other illnesses resulting from the Client breaching their obligations under these GTC or the aftercare information, or not following the instructions, suggestions or advice given by the Service Provider.

e) The Service Provider is not liable for costs and damages suffered by the Client because the Service Provider is temporarily unable to provide her service due to force majeure. For the purposes of these GTC, force majeure includes in particular war, natural disaster, illness, death, strike or temporary absence of the attending doctor or of the Service Provider for any reason, and the interruption of public utilities affecting the place of the service.

i) The Service Provider accepts no liability for the Client’s personal belongings in the area of the Service and is not obliged to keep property or personal belongings left by the Client and return them to the Client.

j) Beyond the above, the Service Provider is liable only for breaches of contract or damage that she caused intentionally and that are expressly and directly related to the provision of the service or the Service Provider’s conduct. The exclusion of liability does not apply to liability for breaches of contract that harm human life, physical integrity or health.

9. Miscellaneous provisions

a) The contract is concluded for a fixed term, until the ordered service has been performed.

b) The Service Provider is entitled to amend the provisions of these GTC at any time, in particular in the event of changes in law, professional regulations, protocols or the standards of international partners. The amended GTC are effective from the date stated on them and are published on the Service Provider’s website before they take effect.

Please check any changes to the GTC before ordering or using the Service. If a provision of the General Terms and Conditions is legally incomplete or invalid, the relevant legal provisions apply to that part. The rest of the contract remains valid.

c) During the conclusion and performance of the contract, the Parties must cooperate and inform each other of material circumstances affecting the contract and of any changes to them. The legal consequences of failing to provide, or delaying, information are borne by the Party that failed to communicate the information or did so late.

d) The Client is entitled to file a complaint with the Service Provider in connection with the tattoo service.

The Service Provider must investigate the complaint and inform the Client of the result in writing as soon as possible, but no later than within thirty working days. Exercising the right to complain does not affect the Client’s right — as set out in separate legislation — to turn to bodies employing legal representatives and other bodies to have the complaint investigated.

e) If the Client qualifies as a consumer, they are entitled to make an oral or written complaint about the conduct, activity or omission of the Service Provider. Notification of a warranty claim (a claim to remedy a breach of contract) does not constitute a complaint. Consumer complaints are handled in accordance with Act CLV of 1997 on Consumer Protection. Complaints are handled at the Service Provider’s e-mail address, info@pannipix.hu, to which letters may also be sent.

f) A Client who qualifies as a consumer is entitled to turn to the Conciliation Board competent for their place of residence or stay if we reject their consumer complaint. A condition for starting the procedure is that the Consumer has tried to settle the dispute directly with the Service Provider. In the Conciliation Board procedure the Service Provider is obliged to cooperate. Accordingly, at the request of the Conciliation Board, the Service Provider must send a written reply, attend the hearing before the Conciliation Board and ensure the participation of a person authorised to reach a settlement. If the Service Provider’s registered office or site is outside the county of the chamber operating the territorially competent Conciliation Board, the Service Provider’s obligation to cooperate extends to offering the possibility of a written settlement appropriate to the consumer’s claim. If the Service Provider fails to meet this obligation to cooperate, the matter falls within the competence of the Consumer Protection Authority, under which fines must be imposed for unlawful conduct by businesses, with no possibility of waiver. The Consumer may request the initiation of the Conciliation Board procedure. The request must be submitted in writing (by letter, fax, telegram, or electronically on the Conciliation Board’s website) to the chair of the Conciliation Board.

The request must contain:

The Consumer’s name, place of residence/stay and contact details

The name and registered office/site of the company involved in the consumer dispute

The Consumer’s position and the related evidence and facts

The Consumer’s statement that they have tried to settle the dispute directly with the business concerned

The Consumer’s statement that they have not initiated another Conciliation Board procedure in the matter, have not started mediation, have not filed a statement of claim and have not applied for an order for payment

A motion for the Board’s decision

The Consumer’s signature

If the Consumer has requested the competence of a board other than the competent Conciliation Board, an indication of this

The document, or a copy of it, whose content the Consumer relies on as evidence must always be attached to the request.

If an authorised representative acts in the complaint, the power of attorney issued by the Consumer must be attached to the request.

More information about the Conciliation Boards: http://www.bekeltetes.hu

Contact details of the territorially competent Conciliation Boards:

Baranya County Conciliation Board

7625 Pécs, Majorosy Imre u. 36.

(72) 507-154

bekelteto@pbkik.hu

Bács-Kiskun County Conciliation Board

6000 Kecskemét, Árpád krt. 4.

(76) 501-525, (76) 501-500

bkmkik@mail.datanet.hu

Békés County Conciliation Board

5600 Békéscsaba, Penza ltp. 5.

(66) 324-976, 446-354, 451-775

bmkik@bmkik.hu

Borsod-Abaúj-Zemplén County Conciliation Board

3525 Miskolc, Szentpáli u. 1.

(46) 501-091, 501-870

kalna.zsuzsa@bokik.hu

Budapest Conciliation Board

1016 Budapest, Krisztina krt. 99.

(1) 488-2131

(1) 488-2186

bekelteto.testulet@bkik.hu

Csongrád County Conciliation Board

6721 Szeged, Párizsi krt. 8-12.

(62) 486-987

E-mail: info@csmkik.hu

Fejér County Conciliation Board

8000 Székesfehérvár, Hosszúséta tér 4-6.

(22) 510-310

fmkik@fmkik.hu

Győr-Moson-Sopron County Conciliation Board

9021 Győr, Szent István út 10/a.

(96) 520-217

bekelteto@gymskik.hu

Hajdú-Bihar County Conciliation Board

4025 Debrecen, Petőfi tér 10.

(52) 500-749

info@hbkik.hu

Heves County Conciliation Board

3300 Eger, Faiskola út 15.

(36) 416-660/105

hkik@hkik.hu

Jász-Nagykun-Szolnok County Conciliation Board

5000 Szolnok, Verseghy park 8.

(56) 510-610

kamara@jnszmkik.hu

Komárom-Esztergom County Conciliation Board

2800 Tatabánya, Fő tér 36.

(34) 513-010

kemkik@kemkik.hu

Nógrád County Conciliation Board

3100 Salgótarján, Alkotmány út 9/a

(32) 520-860

nkik@nkik.hu

Pest County Conciliation Board

1055 Budapest Kossuth tér 6-8.

(1)-474-7921

Somogy County Conciliation Board

7400 Kaposvár, Anna utca 6.

(82) 501-000

skik@skik.hu

Szabolcs-Szatmár-Bereg County Conciliation Board

4400 Nyíregyháza, Széchenyi u. 2.

(42) 311-544, (42) 420-180

endrediemese@invest.hu

Tolna County Conciliation Board

7100 Szekszárd, Arany J. u. 23-25.

(74) 411-661

kamara@tmkik.hu

Vas County Conciliation Board

9700 Szombathely, Honvéd tér 2.

(94) 312-356

vmkik@vmkik.hu

Veszprém County Conciliation Board

8200 Veszprém, Budapest u. 3.

(88) 429-008

vkik@veszpremikamara.hu

Zala County Conciliation Board

8900 Zalaegerszeg, Petőfi utca 24.

(92) 550-514

zmkik@zmkik.hu

g) In the event of a breach of consumer rights, the Consumer is entitled to file a complaint with the Consumer Protection Authority competent for their place of residence. After assessing the complaint, the authority decides whether to conduct a consumer protection procedure. First-instance official tasks are performed by the district offices. Their contact details: http://jarasinfo.gov.hu/

h) The Consumer is entitled to enforce their claim arising from the dispute before a court in civil proceedings, in accordance with Act V of 2013 on the Civil Code and Act CXXX of 2016 on the Code of Civil Procedure.

i) Online dispute resolution platform: on the website set up by the European Commission, after registering as a Consumer and filling in the request found there, the Consumer can settle disputes relating to online purchases without going to court. This is another way of enforcing consumer rights without geographical barriers. You can file a complaint about a product or service purchased online. You and the company you complain about can choose together, on this online dispute resolution platform, which dispute resolution body should handle the complaint. The online dispute resolution platform is available at: https://webgate.ec.europa.eu/odr/main/?event=main.home.show&lng=EN

j) Obligation of the Service Provider in case of withdrawal by the Consumer: refund obligation of the Service Provider: if the Consumer withdraws from the Service under Section 22 of Government Decree 45/2014. (II. 26.), the Service Provider refunds the design fee paid by the Consumer within 14 days of becoming aware of the withdrawal. In case of withdrawal/termination under Section 22 of Government Decree 45/2014. (II. 26.), the Service Provider refunds the uniform design fee due to the Consumer using the same payment method the Consumer used. With the Consumer’s consent the Service Provider may use another payment method for the refund, but the Consumer may not be charged any additional fee as a result. The Service Provider is not liable for late performance due to a bank account number or postal address given incorrectly by the Consumer.

k) In matters not regulated in these GTC, the Hungarian laws in force apply, in particular the provisions of Act V of 2013 (Civil Code).

10. Copyright

The content of this website is a copyrighted work within the meaning of Section 1 (1) of Act LXXVI of 1999 on Copyright, and every part of it is protected by copyright. Under Section 16 (1) of the same Act, it is prohibited to use the images and texts on our website without permission, or to use malicious applications that modify our website. Please note that materials, images, videos and texts may be taken from our website and database only with the written consent of the rights holder and with the source indicated.

Privacy Policy

THE DATA CONTROLLER

This notice (Full Privacy Notice) sets out the data processing principles and practice of Panna Horváth, sole trader, tattoo artist (registered office: 1114 Budapest, Bartók Béla út 34.; tax number: 56316669143; registration number: 54950438), as independent data controller (hereinafter: the Controller). In accordance with the Fundamental Law of Hungary, Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (hereinafter: Info Act) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, hereinafter: “GDPR”), the Controller defines its data processing principles as follows in order to ensure the protection of personal data.

INTRODUCTION

The purpose of the Full Privacy Notice is to explain how the Controller collects, processes and uses the personal data of its customers, clients and website visitors (hereinafter: “Client” or “Data Subject”) in the course of its activities. The Controller respects the personality rights of its Clients and therefore acts in accordance with the following data processing policy (hereinafter: Policy). The Controller reserves the right to change the Policy in order to align it with changes in the legal background and other internal rules.

This Policy governs the data processing activities related to the services provided by the tattoo studio of Panna Horváth, sole trader, and available through the website.

This Policy enters into force on 27.10.2026.

  1. DEFINITIONS AND INTERPRETATIVE PROVISIONS:

Data processing: any operation or set of operations performed on personal data or sets of data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Personal data: data that can be associated with the data subject — in particular the data subject’s name, identification mark, and knowledge characteristic of one or more of their physical, physiological, mental, economic, cultural or social identity — as well as any conclusion about the data subject that can be drawn from the data.

Special data: personal data relating to racial origin, nationality, political opinion or party affiliation, religious or other philosophical beliefs, membership of an interest representation organisation, sex life, health, addiction, and criminal personal data.

Health data: under Section 3 of Act XLVII of 1997 on the Processing and Protection of Health and Related Personal Data, data relating to the physical, mental and psychological condition of the data subject, their addictions, the circumstances of illness or death and the cause of death, communicated by the data subject or by another person about them, or detected, examined, measured, imaged or derived by the healthcare network; as well as any data related to or influencing the above (e.g. behaviour, environment, occupation); and, under Article 4 (15) of the GDPR, personal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about their health status.

Tattoo studio: the tattoo studio at the address above, operated by the Controller;

Consent: a freely given, specific and unambiguous indication of the data subject’s wishes, based on appropriate information, by which they give unambiguous agreement to the processing of personal data relating to them — in full or for certain operations;

Controller: the natural or legal person, or organisation without legal personality, who alone or jointly with others determines the purposes of the processing of data, makes and implements decisions on the processing (including the means used), or has them implemented by a processor it engages;

Data processing (operations): regardless of the procedure used, any operation or set of operations performed on data, in particular collection, recording, organisation, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, erasure and destruction, as well as preventing further use of the data, taking photographs, sound or video recordings, and recording physical characteristics suitable for identifying a person;

Data transfer: making data available to a specific third party;

Data processing (technical): performing technical tasks related to data processing operations, regardless of the method and means used to carry out the operations and the place of application, provided that the technical task is performed on the data;

Data erasure: making data unrecognisable in such a way that it can no longer be restored;

Data blocking: marking data with an identification mark in order to restrict its further processing permanently or for a specified period;

Data destruction: complete physical destruction of the data carrier containing the data;

Data set: all data managed in one register;

Third party: a natural or legal person, or organisation without legal personality, other than the data subject, the controller or the processor;

Personal data breach: unlawful processing of personal data, in particular unauthorised access, alteration, transfer, disclosure, erasure or destruction, as well as accidental destruction and damage;

Controller under this policy: Panna Horváth, sole trader, tattoo artist (registered office: 1114 Budapest, Bartók Béla út 34.; tax number: 56316669143; registration number: 54950438).

Processor: a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.

PURPOSES OF PROCESSING

In line with the purpose of this policy, the purposes of processing are as follows:

Preparing, concluding and performing contracts concluded or to be concluded with the Controller, in particular recording, storing and processing the data subject’s data for contacting them and keeping in touch; and

Fulfilling the Controller’s legal obligations and enforcing its legitimate interests;

After the termination of a contract concluded with the Controller, exercising rights and fulfilling obligations arising from the contract, in particular enforcing claims based on the contract;

Preventing, investigating and uncovering abuses related to the Controller’s services and sales;

LEGAL BASIS OF PROCESSING

The legal basis of processing is the voluntary consent of the data subject, based on prior information provided by the Controller.

If the processing of personal data is required by law, the processing is mandatory. The Controller informs the data subject — including Staff and Partners — of this.

If personal data were collected with the data subject’s consent, the Controller may — unless the law provides otherwise — process the collected data without further separate consent, and even after the data subject has withdrawn consent, in order to fulfil a legal obligation applicable to it, or to enforce its own or a third party’s legitimate interest, if enforcing this interest is proportionate to the restriction of the right to the protection of personal data. The Controller informs the data subject if their personal data are processed on this legal basis.

DURATION OF PROCESSING

Processing lasts until the data subject’s personal data are erased at their request or their consent to processing is withdrawn or, in the absence of such a provision — and unless the law provides otherwise — for 3 years after the limitation period for enforcing the rights and obligations arising from the legal relationship in connection with which the Controller processes the personal data.

STATEMENTS OF THE CONTROLLER

The Controller declares that

  1. in the course of processing it acts in accordance with the provisions of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information;

personal data that come to the knowledge of the Controller during processing may be known only to the Controller;

it ensures that the policy in force is always accessible to the data subject, thereby giving effect to the principle of transparency;

the website processes the personal data of visitors confidentially, in accordance with the legal requirements in force, ensures their security, takes technical and organisational measures, and establishes procedural rules to ensure full compliance with the principles of data protection;

the Tattoo studio processes the personal data of its Clients confidentially, in accordance with the legal requirements in force, ensures their security, takes technical and organisational measures, and establishes procedural rules to ensure full compliance with the principles of data protection;

in order to preserve the data it processes, it takes and ensures all IT and other measures supporting secure data storage, processing and transfer;

it does everything that can be expected of it to protect the personal data it processes against unauthorised access, alteration, disclosure, erasure, damage and destruction, and to guarantee the technical conditions required for this;

it transfers personal data to third parties only exceptionally, and connects its database with another controller only if the data subject expressly consents to it or the law permits it, and if the conditions of processing are met for each item of personal data;

for the purpose of monitoring measures related to personal data breaches and informing the data subject, it keeps a register containing the scope of the personal data concerned, the scope and number of persons affected by the breach, the date, circumstances and effects of the breach and the measures taken to remedy it, as well as other data specified in the legislation requiring the processing;

by applying appropriate security measures to protect personal data stored in automated data files, the Controller prevents accidental or unlawful destruction or accidental loss, as well as unauthorised access, alteration or dissemination.

ACTIVITIES AND SCOPE OF DATA PROCESSED

Within the services provided by the Tattoo studio, the processing of all data relating to the data subject is based on voluntary consent, and its purpose is to ensure the provision of the service and to keep in touch. With the exceptions set out in the individual sub-points, the Controller keeps the personal data in this section in accordance with the applicable tax and accounting rules and erases them after the relevant retention period has expired.

For some services it is possible to provide further data that help to fully understand the Client’s needs, but these are not a condition for using the services provided by the Tattoo studio.

The data subject may request the modification, erasure and/or blocking of data recorded and stored during any processing activity, as well as detailed information about the processing, by sending a request to info@pannipix.hu, unless another contact is given for the processing activity concerned.

Providing the data that are mandatory for each processing activity is a condition for the Client to use the services provided by the Tattoo studio.

Requesting a quote / information

The Controller allows data subjects to request a quote or information from the Controller, as operator of the Tattoo studio, by providing the data detailed below. Requesting a quote or information is voluntary.

When a quote is requested, the Controller asks / may ask the Client to provide the following data:

The activity and process concerned by the processing are as follows:

When applying, the applicant enters their basic details on the https://pannipix.hu website.

They then receive a data request form at the e-mail address given, where they must enter the details of the tattoo they have in mind.

The Tattoo artist decides whether to take on the work. If she decides to do so, following a telephone consultation she sends the quote by e-mail, together with the details needed to transfer the design fee.

The design fee is paid by bank transfer to the Tattoo artist’s bank account. The Tattoo artist issues the invoice within 3 days of the amount being credited to her bank account and sends it electronically to the e-mail address given when applying.

The purpose of processing is to provide the data subject with a quote and appropriate information, and to keep in touch.

The Controller does not store the personal data provided in a separate data set and erases them after replying.

The liability statement

Before its services are used, the Controller may ask the data subject for a liability statement, together with the data specified in the following point.

If the Controller requests such a statement, the scope of data processed is as follows:

The activity and process concerned by the processing are as follows:

Before using the given service, the data subject accepts a liability statement by providing the specified data, which the Controller stores in accordance with its Archiving Policy.

If the data subject is a minor, the statement of their parent or guardian is required to use the given service.

If the data subject discloses health data to the Controller that affect the provision of the service, the Controller may refuse to provide the service.

The Controller always issues an invoice or receipt for the service used and stores a copy of it in accordance with the Archiving Policy.

The Controller stores billing data for the period required by the applicable tax and accounting rules and erases them after this period.

IMAGES TAKEN WITH THE DATA SUBJECT’S CONSENT

In full compliance with Section 2:48 (1) of the Civil Code in force, the Controller takes pictures of the Data Subject and of the finished tattoo only with the data subject’s consent, and publishes them on its website, Facebook page or Instagram page only with the data subject’s consent.

The Controller declares, and the data subject acknowledges, that if the data subject is recognisable in the picture taken, the picture qualifies as personal data and the following rules apply to its processing:

– If the data subject is recognisable in the picture, they may request its immediate deletion and that a new picture be taken.

– If the data subject only later becomes aware that they are recognisable in the picture, they may request its removal from the website or Facebook page.

– If the data subject is recognisable in the picture and expressly consents to its publication, they may withdraw their consent at any time without giving reasons.

– Following a request for deletion or withdrawal of consent, the Controller must immediately take steps to remove the picture.

WEBSITE ANALYTICS (PLAUSIBLE ANALYTICS)

The Controller measures website traffic with Plausible Analytics, solely for aggregated statistical purposes (for example, how many visitors arrived, which pages they viewed, where they came from, what type of device and browser they used, and from which country).

The measurement does not use cookies and does not store any data on the visitor’s device. The service does not store visitors’ IP addresses; it uses them together with browser data to create an irreversible identifier that changes daily, so visitors cannot be identified or tracked across different days or other websites. The provider stores the data within the European Union, does not share it with third parties and does not use it for advertising.

As no personal data linked to the visitor is created during the measurement, the visitor’s consent is not required; the legal basis is the Controller’s legitimate interest in improving the operation and content of the website.

DATA PROCESSING AND DATA TRANSFER

Data are transferred in all cases only with the data subject’s consent or on the basis of legal authorisation.

Processor under this policy:

The Controller’s partner for issuing invoices:

The company providing hosting for the Controller’s websites also qualifies as a processor:

The provider of the Controller’s e-mail system is also a processor:

A further processor in connection with sending newsletters:

Processor and joint controller partner due to the use of the Facebook and Instagram pages:

Provider of the service used to measure website traffic:

For data storage in a cloud-based online database, the service provider qualifies as a processor:

REMEDIES

The data subject may request information about the processing of their personal data, and may request the rectification or — except for processing required by law — the erasure or blocking of their personal data at info@pannipix.hu, or, for the individual processing activities, as set out there.

At the data subject’s request, the Controller provides information about the data it processes, the purpose, legal basis and duration of processing, the details of the processor if one is used, the circumstances and effects of any personal data breach and the measures taken to remedy it, and — if the data subject’s personal data are transferred — the legal basis, purpose and recipient of the transfer.

The Controller rectifies personal data that do not correspond to reality, and erases data if:

– its processing is unlawful;

– the data subject requests it;

– it is incomplete or incorrect — and this cannot be lawfully remedied — provided that erasure is not excluded by law;

– the purpose of processing has ceased, or the statutory period for storing the data has expired;

– it has been ordered by a court or by the Hungarian National Authority for Data Protection and Freedom of Information.

The Controller notifies the data subject of the rectification and erasure, as well as everyone to whom the data were previously transferred for processing. Notification may be omitted if, in view of the purpose of processing, this does not harm the data subject’s legitimate interests.

The data subject may object to the processing of their personal data if

– the processing (transfer) of personal data is necessary solely to enforce a right or legitimate interest of the controller or the recipient, except in the case of mandatory processing;

– the personal data are used or transferred for direct marketing, opinion polling or scientific research;

– the exercise of the right to object is otherwise permitted by law.

The Controller — while suspending the processing — examines the objection as soon as possible after the request is submitted, but within no more than 15 working days, and informs the applicant of the result in writing. If the applicant’s objection is justified, the Controller stops the processing — including further data collection and transfer — and blocks the data, and notifies everyone to whom it previously transferred the personal data concerned by the objection, and who are obliged to take action to enforce the right to object, of the objection and of the measures taken on its basis.

If the data subject disagrees with the Controller’s decision, or the Controller misses the deadline referred to above, the data subject is entitled to go to court within 30 days of its communication.

Enforcement in court: in case of violation of their rights, the data subject may go to court. The court acts in the matter as a priority. The Controller must prove that the processing complies with the law.

In case of violation of your right to informational self-determination, you may file a report or complaint with:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c

Phone: +36 (1) 391-1400

Fax: +36 (1) 391-1410

Web: http://www.naih.hu

E-mail: ugyfelszolgalat@naih.hu

In case of violation of your rights relating to content harmful to minors, inciting hatred or exclusionary content, correction, the rights of deceased persons, or damage to reputation, you may file a report or complaint with:

National Media and Infocommunications Authority (NMHH)

1015 Budapest, Ostrom u. 23-25.

Postal address: 1525. Pf. 75

Phone: (06 1) 457 7100

Fax: (06 1) 356 5520

E-mail: info@nmhh.hu

Budapest, 27.10.2026