Privacy policy

Data Controller details and contact information:

Name: Best Hosting Balaton Kft
Registered office: 8254 Kékkút, Fő utca 43.
NTAK registration number: EG24088247
Tax number: 27538096-2-19
E-mail: info@kekkutvendeghaz.hu

Location of accommodation service:
Kékkút Guesthouse
8254 Kékkút, Fő utca 62.

The Data Controller shall in all cases ensure the lawfulness and purposefulness of the processing of personal data it manages.

2. Personal data (GDPR Article 4(1)): any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3. Purpose of data processing: providing prior information about the accommodation, enabling online booking, providing other accommodation services, maintaining contact via newsletter.

4. Categories of personal data processed: surname and first name, place and date of birth, home address (country, postcode, city, street, house number), phone number, e-mail address, nationality, national ID or passport number, bank card number, SZÉP card details (ID, name on card), vehicle registration number.

5. Legal basis for data processing: pursuant to GDPR Article 6(1):

a) the data subject has given consent to the processing of their personal data for one or more specific purposes,

b) processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract,

c) processing is necessary for compliance with a legal obligation to which the controller is subject,

d) processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.

6. Use of data processors:

Activity performed by the data processor: Hosting services

Name of data processor: Best Hosting Balaton Kft

Registered office: 8254 Kékkút, Fő utca 43.

E-mail: info@kekkutvendeghaz.hu

Website: https://kekkutvendeghaz.hu/

7. Duration of data processing: two years following the last day of the stay as per the booking; for newsletter services, until receipt of unsubscription from the newsletter.

8. Disclosure of data to authorities, public bodies and courts

For the purpose of fulfilling legal obligations, certain authorities, public bodies and courts may contact the Data Controller for the disclosure of personal data. The Data Controller shall only disclose personal data to the above organisations — provided the relevant organisation has specified the exact purpose and scope of the data — to the extent strictly necessary for the fulfilment of the request, and only where required by law.

8. Rights of the data subject (GDPR Chapter III):

a) Right to transparent information (GDPR Articles 12–14): The Data Controller fulfils its information obligation through this privacy notice, covering the controller, the data protection officer, the purpose and legal basis of processing, the duration, the source of data, data subject rights, and remedies. Oral information may also be provided to the data subject following verification of identity.

b) Right of access (GDPR Article 15): The data subject may request access to their personal data and a copy thereof from the Data Controller.

The Data Controller must provide feedback to the data subject as to whether their personal data is being processed; if such processing is ongoing, the data subject is entitled to access the following information: the purposes of processing; the categories of personal data concerned; the recipients or categories of recipients to whom the data have been or will be disclosed; the envisaged period of storage, or if not possible, the criteria used to determine that period; the right to request rectification, erasure or restriction of processing, and to object to processing; the right to lodge a complaint with a supervisory authority; where the data were not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling, and meaningful information about the logic involved and the significance and envisaged consequences of such processing for the data subject.

c) Right to rectification (GDPR Article 16): The data subject may request the rectification of inaccurate personal data or the completion of incomplete data.

d) Right to erasure (GDPR Article 17): The data subject may request the erasure of their personal data where: the data are no longer necessary for the purposes for which they were collected; the data subject withdraws consent and there is no other legal basis for processing; the data subject objects to processing and there are no overriding legitimate grounds; the data have been unlawfully processed; erasure is required to comply with a legal obligation.

e) Right to restriction of processing (GDPR Article 18): The data subject may request restriction of processing where: the accuracy of the data is contested; the processing is unlawful but the data subject opposes erasure; the controller no longer needs the data but the data subject requires them for legal claims; the data subject has objected to processing pending verification of whether the controller's legitimate grounds override those of the data subject.

f) Right to data portability (GDPR Article 20): The data subject has the right to receive their personal data in a structured, commonly used and machine-readable format and to transmit those data to another controller, where processing is based on consent or a contract and is carried out by automated means.

g) Right to object (GDPR Article 21): The data subject may object to the processing of their personal data on grounds relating to their particular situation, where processing is based on legitimate interests. In the event of an objection, the controller may no longer process the data unless it demonstrates compelling legitimate grounds that override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

h) Right to lodge a complaint with a supervisory authority (GDPR Article 77): The data subject has the right to lodge a complaint with a supervisory authority. In Hungary, the competent authority is the National Authority for Data Protection and Freedom of Information (NAIH), website: www.naih.hu.

i) Right to judicial remedy (GDPR Article 79): The data subject has the right to an effective judicial remedy against the Data Controller or processor. Legal proceedings may be brought before the courts of the Member State where the controller or processor is established, or before the courts of the Member State where the data subject has their habitual residence.

9. Contact for data protection matters

If you have any questions about our services or our data protection practices, or if you wish to exercise any of your rights, please call +36 30 279 29 08 or write to us at info@kekkutvendeghaz.hu.