Privacy Policy and Cookie Notice

• Effective date: 25 May 2026
• Website: meseillusztralas.hu
• Data Controller: Galantusz Grafika Bt.
• Registered seat: 2252 Tóalmás, Hungary
• Company registration number: 13-06-069354
• Tax number: 20713319-1-13
• Representative / contact person: János Ujréti
• E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.
• Phone: +36 70 264 7665

This Privacy Policy and Cookie Notice explains how personal data is processed when using the meseillusztralas.hu website, requesting a quotation, contacting us, or communicating with us in connection with a commissioned project. It describes what personal data we process, for what purposes, on what legal basis, for how long, and what rights data subjects have.

This notice applies to the meseillusztralas.hu website and to the services made available through or in connection with that website.

Language and governing version: this English version is provided for information purposes. In the event of any inconsistency, interpretation issue or legal dispute, the Hungarian version of this Privacy Policy and Cookie Notice shall prevail.

1. Principles of data processing

We process personal data lawfully, fairly and transparently. We only request and use data that is necessary for a specific purpose, such as handling enquiries, preparing quotations, maintaining contact, performing a contract, issuing invoices or ensuring the secure operation of the website.

We do not sell personal data, we do not transfer it to third parties for marketing purposes, and we do not use it for purposes unrelated to providing our services or operating the website.

2. When do we process personal data?

The meseillusztralas.hu website is primarily a presentation and enquiry website for custom illustration, children’s book illustration, book cover design, visual planning and related graphic design services. Personal data may typically be processed in the following situations:

• when a visitor fills in a contact form;
• when a visitor contacts us by e-mail or phone;
• when a visitor requests a quotation;
• when an order, contract or project is created;
• when invoicing obligations arise;
• when technical data necessary for the operation of the website is generated;
• when the visitor sets cookie preferences;
• when statistical or analytical measurement is carried out, if such tools are active on the website.

3. Contact and quotation requests

When contacting us through the website or by e-mail, we may process the following personal data:

• name;
• e-mail address;
• phone number, if provided by the person making the enquiry;
• content of the message;
• description of the project or assignment;
• any other data voluntarily provided by the person making the enquiry;
• technical data, such as the time of submission, IP address and data related to spam protection.

Purpose of processing: responding to enquiries, preparing quotations, consultation and communication.

Legal basis of processing:

• the data subject’s consent, when they voluntarily send a message or quotation request;
• steps prior to entering into a contract, where the enquiry concerns a specific assignment or service;
• legitimate interest, where retaining previous communication is necessary to clarify a disputed matter, misunderstanding or professional consultation.

Retention period: data related to enquiries and contact requests is generally retained for up to 2 years from the last substantive communication, unless a longer retention period is necessary due to a contract, invoicing obligation or the enforcement of legal claims.

4. Orders, contractual relationship and performance

If an enquiry results in an order, further data may need to be processed in order to provide the service.

Processed data may include:

• name or company name;
• name of the contact person;
• e-mail address;
• phone number;
• billing data;
• contractual data;
• project description, manuscript, illustration instructions and visual references;
• client feedback;
• documents related to project performance;
• payment and invoicing information.

Purpose of processing: providing the commissioned service, maintaining contact, fulfilling contractual obligations, invoicing and documentation.

Legal basis of processing:

• performance of a contract;
• compliance with a legal obligation, especially in connection with invoicing and accounting obligations;
• legitimate interest, for example in the event of a contractual dispute, proof of performance or enforcement of claims.

Retention period: contractual and performance-related data is retained until the expiry of the general limitation period under civil law, typically for 5 years after the contract has been completed. Accounting documents and invoicing data must be retained for 8 years in accordance with the applicable legal requirements.

5. Billing data

For invoicing purposes, we process the following data:

• name or company name;
• billing address;
• tax number, where required;
• e-mail address, if the invoice is sent electronically;
• content of the invoice;
• payment-related data.

Purpose of processing: issuing invoices and complying with accounting and tax obligations.

Legal basis of processing: compliance with a legal obligation.

Retention period: the mandatory retention period under accounting rules, typically 8 years.

6. Portfolio, references and presentation of completed work

The meseillusztralas.hu website also functions as a portfolio and service presentation website. Completed work may be presented as a reference, including projects, books, covers, illustrations or graphic design work.

In the portfolio, we generally do not present personal data of private individuals, but rather the completed work, project type, book title, nature of the assignment or publicly available publication details.

If a reference includes personal data, such as the name, testimonial, photograph or non-public project details of a private individual, such data will only be used where there is an appropriate legal basis, typically consent or a contractual agreement.

Purpose of processing: presenting professional references, building a portfolio and credibly presenting the services.

Legal basis of processing:

• consent, where the personal data of the data subject is presented;
• legitimate interest, where the presented reference is public, professional in nature and does not infringe the rights of the data subject;
• contractual agreement, where the use of the reference has been separately agreed by the parties.

Retention period: until consent is withdrawn, until the reference is no longer relevant, or until the data is deleted following a valid objection.

7. E-mail communication

During e-mail communication, we process the content of messages, contact details, attachments and information necessary for consultation and project coordination.

Purpose of processing: communication, quotation preparation, project management, performance of services and clarification of disputed matters.

Legal basis of processing: steps prior to entering into a contract, performance of a contract, consent or legitimate interest.

Retention period: general enquiries are retained for up to 2 years, contractual or performance-related correspondence for up to 5 years, and data related to invoicing or legal obligations for the period required by law.

8. Technical data and logging

During the operation of the website, technical data may be generated, such as:

• IP address;
• browser type;
• device type;
• operating system;
• time of visit;
• pages viewed;
• error messages;
• security log data.

Purpose of processing: ensuring the secure operation of the website, detecting errors, preventing abuse and carrying out technical maintenance.

Legal basis of processing: the Data Controller’s legitimate interest in operating a secure and stable website.

Retention period: technical log data is generally retained for up to 30–90 days, unless a longer retention period is necessary to investigate a security incident, abuse or technical error.

9. Cookies and similar technologies

The website may use cookies. A cookie is a small data file stored by the browser on the user’s device. Cookies may be used to ensure the operation of the website, remember user preferences, perform statistical measurement or, where active, carry out marketing-related measurement.

We distinguish between cookies that are necessary for the operation of the website and cookies that require consent.

9.1. Necessary cookies

These cookies are required for the basic operation of the website. They may be used, for example, for session management, security protection, form functionality or storing cookie preferences.

Legal basis: legitimate interest and ensuring the operation of the website.

Consent: separate consent is not required for these cookies.

Retention period: until the end of the session or for the period necessary for technical operation.

9.2. Statistical / analytical cookies

These cookies may help us understand how visitors use the website, which pages are popular, where visitors arrive from and what technical errors occur.

Such a tool may be Google Analytics or another analytical measurement tool, if active on the website.

Legal basis: consent.

Withdrawal of consent: the visitor may withdraw consent at any time by changing the cookie settings.

Retention period: depends on the settings of the relevant analytical service.

9.3. Marketing and advertising cookies

Marketing or advertising cookies are only used if such tracking code, advertising system or tracking technology is actually active on the website. This may include advertising conversion measurement or social media-based remarketing.

Legal basis: consent.

Withdrawal of consent: the visitor may withdraw consent at any time by changing the cookie settings.

Note: if meseillusztralas.hu does not use marketing tracking codes, this section should be simplified or removed.

9.4. Changing cookie settings

The visitor may delete or disable cookies at any time in their browser settings. In addition, if a cookie management interface is available on the website, the visitor may modify or withdraw their previous consent there.

If cookies are disabled, certain functions of the website may not work or may only work in a limited way.

10. Embedded content and external services

The website may contain embedded content or technical elements from external service providers, such as:

• maps;
• videos;
• social media embeds;
• fonts;
• form protection;
• analytical tracking codes;
• external gallery or portfolio elements.

These external service providers may carry out their own data processing, for example by processing IP addresses, browser data or cookie data. The use of external services must be specified according to the actual technical settings of the website.

If Google Fonts, Google Maps, YouTube, reCAPTCHA, Meta/Facebook embeds or similar elements operate on the website, special attention should be paid to these services.

11. Data processors

The Data Controller may use data processors for the operation of the website and the provision of services. Data processors may process data only according to the instructions of the Data Controller and only to the extent necessary.

Hosting provider

Name: DotRoll Kft.

Address: 1148 Budapest, Fogarasi út 3–5., Hungary

Activity: hosting services, domain and technical operation.

Scope of affected data: technical data related to the operation of the website, server logs and data transmitted through the website.

12. Data transfers

Personal data is transferred to third parties only where this is necessary for the performance of the service, compliance with a legal obligation or enforcement of legitimate claims.

Such recipients may include:

• accountant;
• provider of the invoicing software;
• hosting provider;
• legal representative, if a legal dispute arises;
• authority, where data provision is required by law;
• printing, publication preparation or other performance-related partner, where this is justified by the specific project and the data transfer is necessary.

We do not transfer personal data to third parties for marketing purposes.

13. International data transfers

Certain external service providers, such as analytical, advertising or technical service providers, may transfer data outside the European Economic Area. Such services may only be used if the lawful conditions for the transfer are met, for example through appropriate contractual safeguards, transfer mechanisms or user consent.

The actual scope of external services used on the website must be specified according to the technical settings of the website.

14. Rights of data subjects

The data subject may request information at any time about what personal data we process about them.

The data subject has the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to restriction of processing;
• right to data portability, where the conditions apply;
• right to object in the case of processing based on legitimate interest;
• right to withdraw consent, where processing is based on consent;
• right to lodge a complaint with the supervisory authority.

Requests may be submitted through the following contact details:

E-mail: This email address is being protected from spambots. You need JavaScript enabled to view it.

We respond to requests without undue delay, but no later than within 30 days. Where necessary, in the case of complex or numerous requests, this deadline may be extended in accordance with the applicable legal rules.

15. Withdrawal of consent

Where processing is based on consent, the data subject may withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

In the case of cookie consent, consent may be modified or withdrawn through the cookie settings available on the website or through the browser settings.

16. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, deletion, damage or loss.

Such measures may include, among others:

• password-protected access;
• security measures provided by the hosting provider;
• regular updates;
• restriction of access rights;
• backups;
• spam and abuse protection;
• deletion of unnecessary data.

17. Data breach

A data breach means any event that results in the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or unauthorised access to, personal data processed by us.

In the event of a data breach, the Data Controller examines the circumstances of the event, takes the necessary measures and, where required by law, notifies the supervisory authority and informs the affected data subjects.

18. Legal remedies

The data subject may primarily contact the Data Controller with any question or request concerning data processing:

If the data subject believes that their rights have been infringed in connection with the processing of their personal data, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

The data subject may also turn to a court if they believe that their rights have been infringed in connection with the processing of their personal data.

19. Amendments to this notice

The Data Controller reserves the right to amend this Privacy Policy and Cookie Notice, especially in the event of changes in legislation, changes in the technical operation of the website, the introduction of a new service, a new data processor or a new cookie management solution.

The current version of this notice is available on the meseillusztralas.hu website.