1. Data controller
- Controller
- Budai Zalán, sole proprietor (ZLN Gallery)
- Address
- 1121 Budapest, Rácz Aladár út 47., Hungary
- Registration number
- 62909815
- Tax number
- 43922941-1-43
- Contact
- [OFFICIAL EMAIL REQUIRED]
2. Scope
This notice covers ZLN Gallery Open Call applications, related communication and optional artist marketing emails. Additional information may apply to subsequent exhibition agreements.
3. Personal data collected
Legal name, optional artist name, email, country, portfolio link, artwork title, year, category, description, original format, technical details, AI-use and audio answers, uploaded preview or link, required declarations and optional marketing preference.
Administrative records may include submission date, review status and notification history.
4. Purposes and legal bases
Application review: steps requested by the applicant prior to a possible agreement; GDPR Article 6(1)(b).
Application communication: notifying applicants and clarifying submitted information; GDPR Article 6(1)(b).
Duplicate and abuse prevention: legitimate interest in enforcing Open Call rules; GDPR Article 6(1)(f), subject to a balancing assessment.
Optional marketing emails: separate, voluntary consent; GDPR Article 6(1)(a).
[VERIFY LEGAL BASES AGAINST ACTUAL OPERATIONS BEFORE LAUNCH.]
5. Required and optional data
Information marked as required is needed to evaluate an application. Marketing consent is entirely optional and does not influence selection.
6. Processors and recipients
Tally provides our application form and processes submissions on behalf of the controller.
Google Sheets is planned but is not described as active until the integration is enabled.
[VERIFY: hosting, email provider, Tally subprocessors, actual authorised users and any additional recipients.]
Submitted artworks are not automatically made public or provided to venues or marketing partners.
Hetzner Online GmbH (Industriestr. 25, 91710 Gunzenhausen, Germany): provides the server infrastructure for the ZLN Gallery website. The applicable data processing terms and actual server-side processing must be verified before launch.
7. International transfers
[VERIFY actual service provider and subprocessor locations, transfers outside the EEA and applicable GDPR safeguards.]
8. Retention and deletion
Unsuccessful applications: proposed deletion within 90 days after the selection process ends, unless another lawful retention reason applies.
Selected artists: information necessary for agreements, exhibitions, accounting and legal requirements is handled under separate retention rules.
Marketing: until consent is withdrawn, while records necessary to demonstrate compliance may be retained for the applicable period.
[FINALISE RETENTION PERIODS AND ACTUAL DELETION PROCEDURES ACROSS TALLY AND ALL COPIES.]
9. Data security
Our intended safeguards include restricted access, account protection, appropriate permissions and prevention of unauthorised disclosure or loss.
[VERIFY SECURITY MEASURES ACTUALLY IMPLEMENTED.]
10. Your rights
Subject to applicable conditions, you may request access, rectification, erasure, restriction, portability or object to processing. Consent may be withdrawn at any time without affecting earlier lawful processing.
We generally respond within one month, subject to GDPR rules allowing extension.
You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or seek a judicial remedy.
[DATA PRIVACY CONTACT EMAIL REQUIRED.]
11. Automated decisions
Artistic selection is intended to be manual. No solely automated decisions with legal or similarly significant effects are planned.
12. Effective date and changes
[EFFECTIVE DATE REQUIRED.] We will update this notice when our actual processing changes.
13. Optional public artist profile
Applicants may separately indicate whether they would like a public ZLN Gallery artist profile if selected. Displaying a portfolio or social media link is an additional optional choice.
A profile may feature the approved public artist name, country, artwork title, year, description, and approved artwork preview.
Legal names, private email addresses, payment information and application records will not be published automatically. No portrait is required.
The application preference is not final publication authorisation. Exact profile details, usage rights, and publication duration require a separate agreement.
[TO FINALISE: legal basis for publication, duration, amendment and removal procedures.]