Privacy notice

1. Who we are

TheCrowdCam is operated by C-RT Media Kft. (seat: 4254 Nyíradony, Galamb utca 18.; premises: 1045 Budapest, Berni utca 1.; company registration number: 09-09-034429; tax number: 32094066-2-09; EU VAT number: HU32094066; email: marketing@crtmedia.hu). We are the data controller for TheCrowdCam: the website, the camera, the albums, the live wall and organizer accounts.

Event organizers decide to run TheCrowdCam at their event and moderate its photos. For sponsor opt-ins, the organizer and the named sponsor are independent controllers of the email lists they receive.

2. Guests who use the camera

What we process:

• the name or nickname you enter, and whether you confirmed you are 16 or older;
• the photos you take, the time they were taken and which event they belong to;
• if you ask for it: your email address to receive the album link, and your language;
• a random code saved on your phone (local storage) so the camera remembers you. It is not used for tracking.

Why and on what basis: to run the event camera and the shared album (GDPR Art. 6(1)(b) – providing the service you asked for), and to send you the album link (Art. 6(1)(a) – your consent, which you can withdraw at any time).

Who can see your photos: nobody before the reveal time set by the organizer; after it, everyone with the album link. Photos the organizer approves can appear on the live wall at the venue. The organizer can hide or delete any photo.

How long: photos, names, album email addresses and sponsor opt-ins are deleted automatically 7 days after the event ends (when the camera closes). We keep only anonymous totals (number of guests, photos and opt-ins) for the event report. Copies the organizer or sponsors have already downloaded or published are their own responsibility.

Marketing use: by joining the camera, guests agree that the organizer and its sponsors may use their photos for marketing purposes, such as social media, websites, press and the event report (see section 8 of the terms). Guests are told this on the camera screen before joining. You can ask the organizer or us to stop using or to remove a photo at any time.

3. Sponsor opt-ins

Some events ask whether you want to hear from the event’s sponsor. This is always optional and only offered to guests aged 16 or older. If you tick it, we record your email address, the exact consent text and the time, and pass them to the organizer and the named sponsor (Art. 6(1)(a) – consent). Our copy is deleted 7 days after the event; the organizer and the sponsor keep theirs under their own privacy notices.

You can withdraw this consent at any time, with the sponsor directly or by writing to us; we then remove you from our copy and tell the organizer.

4. People who appear in photos

Guests photograph the event, so other attendees may appear in pictures. Organizers inform attendees with notices at the venue, including that photos may be used for marketing and social media. If you appear in a photo and want it removed, write to the organizer or to us with the event name and a description of the photo; we remove it promptly (Art. 6(1)(f) – legitimate interest of the event in documenting it, balanced against your right to object under Art. 21).

5. Organizers, contact requests and payments

• Contact and pilot requests (name, email, organization, country, message): to answer you and prepare an offer (Art. 6(1)(b) and (f)); kept for 2 years after the last contact.
• Organizer contacts and event settings, including uploaded logos: to provide the service (Art. 6(1)(b)); kept for the contract and 5 years after it (civil-law limitation period).
• Invoices and payment records: required by law (Art. 6(1)(c)); kept for 8 years under the Hungarian Accounting Act (Act C of 2000, section 169). Card payments are handled by Stripe; we never see or store full card numbers.

6. Cookies and similar technologies

We do not use advertising or analytics cookies. We use only what the service needs to work: a sign-in cookie for the admin area and local storage on guests’ phones for the camera (your guest code, the self-timer setting, and photos waiting to upload when there is no signal). These are strictly necessary and need no consent.

7. Who processes data for us

We use these service providers (data processors), bound by data processing agreements:

• Vercel Inc. (USA) – website hosting;
• Supabase Inc. (USA) – database and photo storage; the data itself is stored in the EU;
• Resend (Plus Five Five, Inc., USA) – sending album emails;
• Stripe Payments Europe Ltd. (Ireland) – card payments for organizers.

Where data is transferred to the USA, the transfer relies on the EU–U.S. Data Privacy Framework or the European Commission’s standard contractual clauses (GDPR Art. 45–46). We do not sell personal data.

8. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict its use, to data portability, to object, and to withdraw consent at any time (GDPR Art. 15–21). Use the form below or email marketing@crtmedia.hu. We answer within one month.

You can also complain to the Hungarian data protection authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; email: ugyfelszolgalat@naih.hu; web: www.naih.hu. You may also go to court.

9. Children

Guests under 16 can use the camera, but we never ask them for an email address and never offer them sponsor opt-ins. Organizers of events with children must have the permissions required for photography. Parents can ask us to remove any photo of their child.

10. Security and changes

Photos are stored in private storage and shown only through time-limited links. Access to organizer dashboards uses secret links; the admin area is password-protected. We may update this notice; the date above shows the latest version.