Privacy Policy

Last updated: 10 July 2026

1. Introduction

This Privacy Policy explains how we collect, use, store and share personal data when you use the Kiosk Caricature Crafter service (the “Service”), and describes your rights under the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information.

2. Data Controller

The controller responsible for your personal data is:

  • Perimedeus Kft.
  • Tax number (adószám): 23381438-2-19
  • Registered office: [registered address — to be completed]
  • Email: daniel@pathcraftvr.com

3. What Data We Process

  • Your photograph (selfie). When you start a session, the kiosk camera takes a photo of you. This image is used only to generate your cartoon caricature. We do not use it to identify you, we do not perform biometric matching, and it is not published or shared with anyone other than the image-generation processor described in section 5.
  • The generated caricature and caption. An AI-generated cartoon image and a short humorous caption are created from your photo and printed for you.
  • Payment data. Payments are handled by Barion. We do not receive or store your card details. We receive a payment identifier confirming that a payment succeeded.
  • Invoicing data. A receipt is issued for each purchase through Billingo, as required by Hungarian tax law.
  • Fraud-prevention and technical data. The Barion Pixel processes information about your device and browsing session to detect payment fraud. Its base (fraud-prevention) functions run whenever you use the Service, as this is necessary to keep payments secure. Its analytics and marketing functions run only if you give consent. Our hosting and database infrastructure also processes standard connection data (such as IP address) needed to operate the website securely.

4. Purposes and Legal Bases

We process personal data on the following legal bases (GDPR Article 6):

  • Providing the Service (taking your photo, generating and printing the caricature) — performance of a contract, Art. 6(1)(b), and your consent given by starting the capture, Art. 6(1)(a).
  • Processing payments — performance of a contract, Art. 6(1)(b).
  • Issuing receipts and keeping accounting records — compliance with a legal obligation, Art. 6(1)(c).
  • Payment fraud prevention (Barion Pixel, base functions) — our and Barion’s legitimate interest in preventing fraud and meeting payment-security obligations, Art. 6(1)(f).
  • Analytics and marketing (Barion Pixel, optional functions) — your consent, Art. 6(1)(a), which you give or refuse via the cookie banner and can withdraw at any time.
  • Operating and securing the website — our legitimate interests, Art. 6(1)(f).

5. Recipients and Processors

We share personal data only with service providers who process it on our behalf or as independent controllers for the purposes above:

  • Google (Gemini API) — generates the caricature and caption from your photo.
  • Barion Payment Zrt. — payment processing and the Barion Pixel fraud-prevention service.
  • Billingo (Billingo Technologies Zrt.) — issuing electronic receipts.
  • Google Firebase — hosting, database and infrastructure for the website and kiosk coordination.

6. International Transfers

Some processors (in particular Google) may process data outside the European Economic Area, including in the United States. Where this happens, the transfer is protected by appropriate safeguards under GDPR Chapter V, such as the European Commission’s Standard Contractual Clauses and/or the EU–US Data Privacy Framework.

7. Data Retention

  • Your photo and generated caricature are kept only for as long as needed to produce and print your image, and are deleted shortly afterwards. They are not uploaded to any public location.
  • Payment identifiers are retained to prevent duplicate charges and to reconcile transactions.
  • Receipts and accounting records are retained for 8 years, as required by Hungarian accounting law (Act C of 2000, § 169).

8. Cookies and Tracking

We use one strictly necessary cookie to remember your consent choice. The Barion Pixel loads to keep payments secure (fraud prevention); its analytics and marketing functions activate only after you accept. We do not use cookies for advertising by any other party. For full details, see our Cookie Policy.

9. Your Rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • request rectification of inaccurate data;
  • request erasure (“right to be forgotten”);
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • data portability;
  • withdraw consent at any time (this does not affect processing carried out before withdrawal).

To exercise these rights, contact us at daniel@pathcraftvr.com. We respond within one month.

10. Right to Lodge a Complaint

If you believe we have processed your data unlawfully, you may lodge a complaint with the Hungarian supervisory authority:

You may also complain to the supervisory authority in your EU country of residence.

11. Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or alteration.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. The “Last updated” date above shows when it was last revised.

13. Contact

For any questions about this policy or your data, contact us at daniel@pathcraftvr.com.

Back to Kiosk