Who is responsible for processing your data?
The data controller is the business operating this website; its details below remain to be completed. Using Stripe, Printful and other technical providers does not remove the operator's information and data protection obligations. Privacy enquiries: [email protected].
Creating and storing your artworks
The application processes uploaded photos, completed images, the pet name, style and size you provide, and identifiers associated with your session. Images and related records are stored in Supabase storage and databases. The photo and generation instructions are sent to Google Gemini to create the artwork. An image or identifier that can be linked to a user may be personal data even when another provider handles checkout details.
Orders, production and payment
Payment and delivery details are entered at Stripe checkout. Printful receives the order data needed for printing and delivery. The application processes the image, name, size, print snapshot and associated product/order identifiers for the order. The precise provider legal entities, controller/processor roles and actual data transfer settings must be finalised based on the contracts.
Contact us
The name, email address and message you provide when contacting us are used to respond to your enquiry. Once the form is enabled, messages will be forwarded through the configured email provider to [email protected]. The application does not create a separate message database; messages may remain with the email providers and in the recipient's mailbox. Technical rate limiting may briefly process IP addresses. Form submission cannot be activated until the email provider and retention periods are finalised.
Purposes, legal bases and retention periods – to be finalised
Article 6(1)(b) GDPR may provide the legal basis for processing necessary to provide the requested service and fulfil an order; point (c) may apply to legal obligations and point (f) to properly documented legitimate interests. These must be finalised separately for each purpose based on actual operations. This draft does not yet specify retention periods for uploaded and completed images, sessions, enquiries, orders or backups. The current text does not promise automatic deletion.
Providers and international transfers
Hosting, Supabase, Google Gemini, Stripe, Printful and an email provider may be involved in operating the service. The precise regions, legal entities, processing agreements, transfers outside the EEA and their safeguards must be documented according to actual subscription settings. We do not claim that all data remains exclusively in the EU.
Your data protection rights
Subject to the applicable conditions, you may request access, rectification, erasure, restriction of processing and data portability; you may object to processing based on legitimate interests. If processing relies on consent, you may withdraw it. Requests generally require a response within one month. You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (naih.hu) and seek a judicial remedy.
Language preference
On your first visit, we choose the language using the country code determined from your IP address by the hosting provider: Hungarian for Hungary and English for other countries. If the country cannot be determined, English is the default. You can change this at any time using the HU/EN selector. The petfolio-language cookie stores your manually selected language for up to one year. It contains no IP address and is not used for marketing tracking.
Operator's details
- Operator's legal name
- Legal form
- Registered office
- Tax number
- Registration / company registration number
- Registration authority
- Phone number