Privacy Policy

The purpose of this Privacy Policy is to ensure that visitors to the bolyaiapartments.hu website (hereinafter: Website) and those who use the accommodation’s services (hereinafter: Data Subject) receive adequate information regarding the processing of their personal data, in accordance with the provisions of the European Union’s General Data Protection Regulation (GDPR) and national legislation (especially Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information).

1. Data of the Data Controller

  • Name: Joósa Zoltánné (Individual with Tax Number)

  • Registered office and mailing address: 9330 Kapuvár, Zöldfasor u. 59.

  • Tax Number: 91244972-1-28

  • NTAK registration number: MA25118110

  • Phone number: +36 30 277 6621

  • Email address: BolyaiApartments@gmail.hu

  • Website: bolyaiapartments.hu

2. Scope of Processed Data, Purpose and Legal Basis of Data Processing

2.1. Contact and Request for Quotation

  • Processed data: Name, email address, phone number, other personal data provided in the message.

  • Purpose of data processing: Answering the Data Subject’s questions, providing information, maintaining contact.

  • Legal basis of data processing: The Data Subject’s consent (GDPR Article 6 (1) (a)).

  • Duration of data processing: Until the purpose of contact is achieved, or until the Data Subject withdraws their consent.

2.2. Accommodation Booking and Invoicing

  • Processed data: Name, address (billing address), phone number, email address, arrival and departure date, number of guests.

  • Purpose of data processing: Conclusion and fulfillment of the accommodation service contract, communication related to the booking, and fulfillment of the statutory invoicing obligation.

  • Legal basis of data processing: Performance of a contract (GDPR Article 6 (1) (b)) and fulfillment of a legal obligation (GDPR Article 6 (1) (c), Accounting Act).

  • Duration of data processing: Accounting documents issued must be retained for 8 years in accordance with Section 169 (2) of Act C of 2000 on Accounting.

2.3. Mandatory Data Provision (NTAK and VIZA)

In accordance with current legislation, the accommodation service provider is obliged to transmit specified data to the National Tourism Data Supply Centre (NTAK) and the Guest Information Closed Database (VIZA) system via accommodation management software.

  • Processed data: The guest’s surname and first name, birth name, place and date of birth, gender, nationality, mother’s birth surname and first name, identification data of the identity document.

  • Purpose of data processing: Fulfillment of a legal obligation.

  • Legal basis of data processing: Fulfillment of a legal obligation (GDPR Article 6 (1) (c)).

3. Designation of Data Processors (Who can access the data?)

The Data Controller uses the following data processors to carry out its activities:

Hosting provider (website operation and email):

  • Company name: Webglobe, s.r.o.

  • Registered office: Vinohradská 190/2405 Praha 3 – Vinohrady, Czech Republic

  • Phone number: +420 603 111 111

  • Email address: info@webglobe.com

(It is also advisable to include the name and address of the accountant here if they issue or manage invoices, as well as the name of the invoicing software, e.g., Számlázz.hu / Billingo, if used.)

4. Data Security Measures

The Data Controller ensures the security of personal data through appropriate technical and organizational measures, protecting them against unauthorized access, alteration, transmission, disclosure, deletion, or destruction. The Website uses HTTPS (SSL) encryption to ensure the security of data transfer.

5. Rights of the Data Subject

The Data Subject is entitled at any time during the data processing period to:

  • Request information regarding the processing of their personal data (right of access).

  • Request the rectification of their inaccurate or incomplete personal data.

  • Request the erasure of their personal data (except when data processing is based on a legal obligation, e.g., invoicing).

  • Request the restriction of data processing.

  • Exercise their right to data portability.

  • Object to the processing of their personal data.

Requests regarding the exercise of rights can be sent by the Data Subject to the email address or postal address provided in point 1. The Data Controller will examine and respond to the request without undue delay, within a maximum of 30 days.

6. Legal Remedies

If the Data Subject believes that the Data Controller has violated the legislation on the protection of personal data, they may lodge a complaint with the supervisory authority:

National Authority for Data Protection and Freedom of Information (NAIH)

  • Address: 1055 Budapest, Falk Miksa utca 9-11.

  • Postal address: 1363 Budapest, Pf.: 9.

  • Phone: +36 (30) 683-5969; +36 (30) 549-6838; +36 (1) 391-1400

  • Email: ugyfelszolgalat@naih.hu

  • Website: www.naih.hu

Furthermore, in case of a violation of their rights, the Data Subject may also turn to a court (the court with jurisdiction over their place of residence or stay) against the Data Controller.