DRAFT – legal review required

Privacy notice

This notice describes what personal data we process, why, for how long, and what rights you have in connection with it.

This translation is provided for information. The contract is concluded with a Hungarian provider under Hungarian law; in case of dispute, the Hungarian text prevails.

1. The data controller

Data controller: TODO: name of data controller, TODO: registered seat. Accommodation: Horizont Haus, 7181 Tevel, Tanya utca 3., Hungary, registration number: MA26125583.

Contact for data protection matters: TODO: email address.

2. What data we process and why

Purposes of processing

Fulfilling the booking: name, email address, phone number, details of the stay, payment data. Legal basis: performance of the contract.
Contact: name, email address, phone number, the content of the message. Legal basis: consent.
Invoicing and accounting: billing name and address. Legal basis: legal obligation.
Statutory reporting to the Hungarian accommodation management system (NTAK), including recording the guest’s identity document data. Legal basis: legal obligation. How the recording is done: TODO: NTAK/VIZA data recording details.
Measurement and advertising: only with your consent, as given in the cookie settings.

3. Data processors

Who we pass data to

SimplePay Zrt. – online payment. 1138 Budapest, Váci út 135–139. B. ép. 5. em., Hungary.
Supabase – database and server back end.
Cloudflare – serving the website, spam protection.
Resend – sending the booking emails.
Google (Analytics, Ads) and Meta – only with marketing consent.
Accounting and invoicing: TODO: invoicing provider.

4. How long we keep the data

We keep data relating to a booking until the limitation period following performance of the contract expires, and accounting documents for the 8 years prescribed by law.

We keep contact messages for at most 1 year, after which they are deleted.

5. Your rights

You can submit your request at TODO: email address; we reply within one month at the latest.

What you can ask of us

Information about what data of yours we process.
Rectification, if any of the data is inaccurate.
Erasure, where the data is no longer needed.
Restriction of processing, or objection to the processing.
Data portability: we also provide your data in a machine-readable form.
Withdrawal of consent, at any time, with effect for the future.

6. Remedies

If you believe the processing is unlawful, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9–11., naih.hu), or turn to a court.