Skip to main content

Vár-Liget Guesthouse

BOOK NOW

Privacy Policy

The purpose of this Privacy Policy is to give the guests of the Vár-Liget Guesthouse and the visitors of this website transparent and clear information about how their personal data is processed, in accordance with the GDPR (General Data Protection Regulation) and Act CXII of 2011 on Informational Self-Determination and Freedom of Information.

1. Details of the Data Controller For bookings made through this website and for the accommodation service, the Data Controller is the operator of the property:

  • Name: Béla Szőke (private individual registered for tax purposes in Hungary)

  • Name of the accommodation: Vár-Liget Guesthouse

  • Address: Szabadság utca 4, 3264 Kisnána, Hungary

  • Tax number: 72766167-1-30

  • NTAK registration number: MA19003614

  • Email: szoke.bela53@gmail.com

  • Telephone: +36 30 205 4126

2. Data processed, purpose and legal basis In order to provide the accommodation service and to meet our statutory obligations, we process the following data:

  • Booking data: name, address, email address, telephone number.

    • Purpose: recording the booking, keeping in contact, providing the service.

    • Legal basis: performance of a contract (Article 6(1)(b) GDPR).

  • Invoicing data: name, billing address, tax number (in the case of a company).

    • Purpose: issuing an accounting document.

    • Legal basis: compliance with a legal obligation (under Section 169(2) of the Hungarian Accounting Act; Article 6(1)(c) GDPR).

  • NTAK and VIZA (Guest Information Closed Database) data: family name and given name, name at birth, place and date of birth, sex, nationality, mother's name, and the identifying data and a copy of the identity document (identity card / passport).

    • Purpose: mandatory data reporting to the authorities under the tourism legislation in force (Act CLVI of 2016). Under this Act, the document of every guest must be recorded with a document reader, regardless of age.

    • Legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR).

3. Data transfers and data processors The Data Controller does not sell personal data. Data is transferred to third parties only where required by law or in order to provide the technical background of the service, to the following data processors:

  • Hosting provider (physical server): Websupport Magyarország Kft. (registered office: Fehérvári út 97–99, 1119 Budapest, Hungary; email: info@mhosting.hu).
    They provide the physical server infrastructure on which the website and the email service run.

  • Domain and hosting administration: Wandler Kft. (registered office: Belváros tér 1, 2nd floor, door 3, 3200 Gyöngyös, Hungary; company registration number: 10-09-025672; tax number: 13133887-2-10). As the official subscribers of the hosting service and the domain, they have technical access to the server infrastructure.

  • IT and web operations: BlondApex Bt. (registered office: Belváros tér 1, 2nd floor, door 3, 3200 Gyöngyös, Hungary; company registration number: 10-06-023054; tax number: 23260250-2-10). They develop and maintain the website and the online booking system, and therefore have technical visibility of the system.

  • Invoicing software: the Online Invoicing system of the Hungarian National Tax and Customs Administration (NAV).

  • Authorities (NTAK / VIZA): document data is transferred to the closed system operated by the Hungarian Tourism Agency (MTÜ).

  • Booking portals (where applicable): if the booking is made on Booking.com or Szallas.hu, the processing of data is also governed by the privacy policy of the portal concerned.

4. Retention periods

  • Invoicing data: under the Accounting Act, we are required to retain issued invoices for 8 years.

  • Booking data: for 5 years following performance of the contract (departure), in line with the civil law limitation period.

  • VIZA data: data transferred to the VIZA system is retained on the central storage facility for the period specified by law (a maximum of 2 years). It is not kept on the property's own devices after recording.

5. Rights of data subjects Under the GDPR, the Guest is entitled at any time to:

  • request information about the processing of their personal data (right of access);

  • request the rectification of inaccurate data;

  • request the erasure of their data (except data that must be retained by law, such as invoices);

  • object to the processing, or request that the processing be restricted.

Requests may be submitted to the email address given in Section 1, and we will provide a substantive response within 30 days.

6. Remedies and complaints If the data subject considers that we have infringed their rights in the course of processing, we ask that they contact us first using the details above so that we can resolve the matter. In addition, they are entitled to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9–11, 1055 Budapest, Hungary; ugyfelszolgalat@naih.hu), or to bring the matter before a court. ...................................................................................................................................................................................................................................................................... This English text is a translation provided for information purposes. In the event of any discrepancy, the Hungarian version of this Privacy Policy shall prevail.

BOOK NOW