As a data controller, we are committed to protecting personal data. This notice describes the data processing practices of Zöld Ablakos Ház, based on the General Data Protection Regulation (GDPR – EU Regulation 2016/679) and applicable Hungarian law.
1. Details of the data controller
Name of the data controller: Farkas Tibor (sole proprietor)
Registered seat of the data controller: 1183 Budapest, Vág utca 17.
Tax ID: 91751502-1-43
NTAK number: MA26122464
Email: info@zoldablakoshaz.hu
Phone: +36 20 263 8112
2. Legal bases for data processing
We process personal data on the following legal bases:
- Performance of a contract (GDPR Article 6(1)(b)): processing data necessary to conclude and perform the accommodation agreement
- Compliance with a legal obligation (GDPR Article 6(1)(c)): obligations prescribed by law (e.g. NTAK data reporting, accounting rules)
- Consent (GDPR Article 6(1)(a)): for newsletters and marketing communications
- Legitimate interest (GDPR Article 6(1)(f)): the safety of the guesthouse and our guests
3. Data processed and its purpose
3.1 Booking and guest service
| Data processed | Purpose | Retention period |
|---|---|---|
| Full name | Identification, accommodation agreement | 8 years (accounting law) |
| Email address | Communication, confirmation | 2 years after the stay |
| Phone number | Communication, emergency contact | 2 years after the stay |
| Arrival and departure dates | Accommodation agreement, NTAK data reporting | 8 years (statutory obligation) |
| Number of guests | Capacity planning, NTAK data reporting | 8 years (statutory obligation) |
| Payment data (transfer reference) | Accounting documentation | 8 years (Accounting Act) |
3.2 NTAK data reporting
Under the legislation applicable to accommodation providers (Government Decree 239/2009 and the rules governing the NTAK system), mandatory data reporting on guests must be carried out to the National Tourism Data Supply Center (NTAK). The legal basis for this processing is compliance with a legal obligation.
The scope of data recorded in the NTAK system complies with current statutory requirements. More information: info.ntak.hu
3.3 Website (cookies)
Our website uses session-based cookies that are necessary for its technical operation. These are deleted when the browser is closed and do not perform personal identification. We do not currently use third-party analytics or marketing cookies.
3.4 Contact messages
Data included in messages sent by email or through the online booking form is processed solely for the purpose of responding and handling the inquiry. If a booking is not made, the data is deleted within 90 days.
4. Data transfer and processors
We do not share your personal data with third parties, except in the following cases:
- NTAK system: transfer of legally required data to the National Tourism Data Supply Center
- Accountant: to the extent necessary for handling accounting documents
- Authorities: in case of a legal obligation or an official request
We do not transfer your data outside the European Economic Area (EEA).
5. Rights of the data subject
Under the GDPR, you may exercise the following rights:
| Right | Description |
|---|---|
| Right of access | You may request information about the data we process about you and the circumstances of the processing |
| Right to rectification | You may request correction of inaccurate data |
| Right to erasure | You may request deletion of your data when processing is no longer necessary (except where a statutory obligation applies) |
| Right to restriction | You may request that processing be restricted in specific cases |
| Right to object | You may object to processing based on legitimate interest |
| Right to data portability | You may request your data in a machine-readable format (for processing based on consent) |
| Right to withdraw consent | You may withdraw your consent at any time (this does not affect the lawfulness of processing before the withdrawal) |
Exercising your rights
You may submit your request by email (info@zoldablakoshaz.hu) or by post (1183 Budapest, Vág utca 17.). We will respond to your request within 30 days.
6. Data security
We protect your personal data with appropriate technical and organizational measures against unauthorized access, alteration, disclosure, or destruction. Physical documents are kept in a lockable storage unit; electronic data is kept in password-protected systems at a reliable hosting provider.
7. Data breach
In the event of a data breach that is likely to pose a risk to the rights of the data subject, we will notify the NAIH (Hungarian National Authority for Data Protection and Freedom of Information) within 72 hours, and will also inform the data subjects if the breach poses a high risk.
8. Complaints and legal remedies
If you believe that the processing of your data violates the GDPR, you may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH):
- Postal address: 1055 Budapest, Falk Miksa utca 9–11.
- Email: ugyfelszolgalat@naih.hu
- Website: naih.hu
You are also entitled to seek judicial remedy, which may be initiated before the competent Hungarian court.
9. Amendments to this notice
We update this notice as needed. We will inform data subjects of any changes on the website and, where possible, by email. The current version is always available on the website.
For any questions about data processing, feel free to reach out to us: info@zoldablakoshaz.hu