1. Purpose of this policy
This Privacy Policy explains what personal data Balaton Essence processes, for what purposes, on what legal basis, for how long, and what rights data subjects have.
2. Categories of personal data processed
For bookings
- name
- email address
- phone number
- booking details
- arrival and departure dates
- selected apartment
- payment-related data
For inquiries and contact requests
- name
- email address
- phone number, if provided
- content of the message
3. Purposes of data processing
- recording and managing bookings
- confirming bookings
- communicating with Guests
- processing online payments
- performing the service
- fulfilling invoicing and legal obligations
- enforcing or defending legal claims where necessary
4. Legal bases of processing
- performance of a contract or taking steps prior to entering into a contract
- compliance with legal obligations
- legitimate interests, especially in connection with claims management or complaint handling
5. Storage and processing of data
Booking data submitted through the website is stored in Balaton Essence's own booking and administration system, where it is used by the Data Controller for managing and fulfilling bookings.
During the payment process, the online payment service provider processes the data required to complete the payment. The exact provider should be listed here by name once the final payment solution is confirmed.
6. Data retention
- Booking data: for the period necessary to perform the contract and enforce possible legal claims.
- Invoicing data: for the retention period required by applicable accounting and tax laws.
- Contact messages: until the matter is closed, or for no longer than necessary.
7. Cookies
The website may use technical cookies necessary for its operation. If statistical or marketing cookies are introduced in the future, separate information and, where required, consent management will be provided.
8. Rights of data subjects
Data subjects have the right in particular to:
- request information about the processing of their personal data
- request access to their personal data
- request rectification of inaccurate data
- request erasure of data where the conditions are met
- request restriction of processing
- object to processing
- exercise the right to data portability where applicable
9. Remedies
Data subjects may contact the Data Controller at [email protected]. They also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.
10. Data security
The Data Controller applies appropriate technical and organisational measures to protect personal data, especially against unauthorised access, alteration, disclosure, deletion or destruction.
11. Amendments to this policy
The Data Controller reserves the right to amend this Privacy Policy. The current version is always available on the website.