Privacy and GDPR
How enquiries, project data, retention, deletion requests and data-subject rights are handled.
Privacy noticeGovernance · transparency · human responsibility
BANHALMI Trust Center
A single, clear index to how we handle personal data, commissioned images, copyright, AI-assisted workflows, security and accountable project delivery.
Policies and operating standards
These summaries route to the authoritative documents. Project-specific scope, rights and obligations are always defined by the accepted written offer.
Cookies and analytics
Necessary storage and optional services remain separated through consent controls.
Cookie policyTerms and project governance
Offers, booking, approvals, delivery, payment, confidentiality and contingency rules.
Terms and conditionsCopyright and image licences
Copyright remains with the photographer; agreed final images are used within the written licence.
Usage-rights FAQResponsible AI and editing
AI may assist limited production or administrative steps. Creative decisions, sensitive edits and final delivery remain under human oversight.
Machine-readable AI statementSecurity and infrastructure
Access is limited to the agreed project team; galleries and delivery links may expire; third-party services are documented in the privacy notice.
Privacy and processorsAccessibility
Keyboard navigation, visible focus, readable mobile forms, reduced motion and clear validation states.
Accessibility statementBusiness transparency
Legal identity, Vienna headquarters, Budapest base and official registration details.
Legal noticeQuality and contact
Final selections are human reviewed. Questions, rights requests and project concerns receive a direct response.
Contact BANHALMIHuman oversight
Norbert Banhalmi retains photographic and creative direction and final image approval. Automated tools do not independently decide who is photographed, which images are published, or whether a sensitive alteration is acceptable.
EU AI Act transparency
Article 50 of Regulation (EU) 2024/1689 applies from 2 August 2026. BANHALMI follows the applicable transparency duties and the European Commission’s 2026 guidance. Where Article 50 requires disclosure of AI-generated or manipulated image, audio or video content, including deepfakes, the disclosure is made in an appropriate and clear form. For evidently artistic or creative work, disclosure is provided in a way that does not unnecessarily interfere with the work itself.
AI-assisted text intended to inform the public on matters of public interest remains under human editorial review. Where the Article 50 exception to disclosure is relied on, the content is reviewed under editorial control and a natural or legal person retains editorial responsibility. AI does not independently decide publication, sensitive retouching, biometric categorisation or the selection of people. Client-confidential material is not intentionally submitted for public-model training.
Official sources: Regulation (EU) 2024/1689 · European Commission Article 50 guidelines · Code of Practice on Transparency of AI-Generated Content.
Microsoft Clarity and UX analytics
With your explicit analytics consent, BANHALMI uses Microsoft Clarity (Microsoft Corporation) to understand how visitors interact with the websites through aggregated usage metrics, heatmaps and session interaction diagnostics. Clarity project ky4j4kbgt7 is used on norbertbanhalmi.com and project pll7h5wbpt on banhalmi.art. The service is not loaded before analytics consent. Advertising storage remains denied and BANHALMI does not use Clarity for advertising or remarketing.
Depending on the consented Clarity configuration, interaction and technical data can include page and session identifiers, device/browser information, approximate network/location information, clicks, scrolling and rendered page interactions. Content masking is used to reduce exposure of user-entered or sensitive content. The legal basis is Article 6(1)(a) GDPR together with applicable ePrivacy rules. Consent can be withdrawn at any time through Cookie settings; withdrawal sends a denied consent signal to Clarity and clears available first-party Clarity cookies.
Clarity may use first-party cookies such as _clck and _clsk after consent and may involve Microsoft domains and related technical identifiers as documented by Microsoft. Any international transfer is handled under the safeguards applicable to Microsoft's active contractual framework. This processing is covered by the same controller and privacy framework across norbertbanhalmi.com and banhalmi.art.