SHOWLANE · 2026-10-12.2
Processing of Customer Content
Operator and contact details
- Name
- Vágó Péter János e.v.
- Registered address
- 1124 Budapest, Lejtő út 4.
- Tax number / registration
- 41852718-1-43 · 58098091
- Customer support
- v.peter@smartsquareproductions.com
- Customer support telephone
- +36 70 672 8020
- Privacy contact
- vproperty.hu@gmail.com
Roles and accepted instructions
The ShowLane operator is the controller for its own account, billing and security processing. For post materials, own photos, video, audio, scripts and submitted content containing personal data that are stored and edited on a customer's instructions, the customer may be the controller and ShowLane the processor. For this use, the processing terms below form part of the terms accepted when creating an account; their version and acceptance time are recorded against the account. Acceptance of the shared registration terms alone does not open the full Studio, a paid service or an external connection.
Scope and data types
Processing covers storage, editing and export on request during the account's existence and until a deletion request is fulfilled. Data may include customer-supplied names, likenesses, audio, contact details, post text and media; data subjects are people appearing in the material. The service is not designed to process special categories of personal data. The customer is responsible for the legal basis for uploading and instructing processing. Separately enabled phone submissions, approval communication, social publishing and cloud archiving require documented instructions and appropriate own connections. Local video creation and audio recording do not use an AI provider.
Protection and providers
The operator acts on documented instructions, and people with access to personal data are bound by confidentiality. Account and profile boundaries, server-side permission checks, a five-minute inactivity expiry and server-side protection of connection secrets limit access. Netlify may be used for account and media storage, and OpenAI for a separately requested AI action, under the conditions stated on the Privacy page; the customer grants general authorisation for these by accepting these terms. Other separately connectable providers receive data only according to the customer's choice and instructions. The operator will give notice before appointing a new subprocessor; objections may be made through the privacy contact. Appropriate privacy obligations apply to subprocessors; exclusive EU storage or zero provider retention is not promised.
Rights, checks and closure
The operator uses the information and technical capabilities available to assist with data subject requests, incidents, impact assessments and regulatory obligations. It informs the customer if it considers an instruction to infringe privacy law. Through the privacy contact, the customer can request information and evidence of compliance, or an agreed proportionate audit; other customers' data and access secrets cannot be disclosed.
Personal data export and media library downloads support return of data. A verified administrator fulfils account deletion, listing the own media prefix and checking that files are absent. Removal of active content, proof of removal by external providers and mandatory financial retention require separate checks. Request status and completion can be followed through a private receipt. The application does not claim immediate deletion of provider backups and logs; the Privacy page sets out the precise limits.
Legal background
GDPR · Act CVIII of 2001 · Government Decree 45/2014 (II. 26.)