Data protection
Data management policy of the operator of the Balatonhostels website
1. Concepts
Pursuant to EU Regulation 2016/679 (April 27, 2016) on the protection of natural persons with regard to the processing of personal data and the free flow of such data:
GDPR (General Data Protection Regulation) is the new Data Protection Regulation of the European Union
data controller: the natural or legal person, public authority, agency or any other body that determines the purposes and means of processing personal data independently or together with others; if the purposes and means of data management are determined by EU or member state law, the data controller or the special aspects regarding the designation of the data controller may also be determined by EU or member state law;
data management: any operation or set of operations performed on personal data or data files in an automated or non-automated manner, such as the collection, recording, organization, segmentation, storage, transformation or change, query, insight, use, communication, transmission, distribution or otherwise by making available, coordinating or connecting, limiting, deleting or destroying;
data processor: the natural or legal person, public authority, agency or any other body that processes personal data on behalf of the data controller;
personal data: any information relating to an identified or identifiable natural person (data subject); a natural person can be identified directly or indirectly, in particular on the basis of an identifier such as name, number, location data, online identifier or one or more factors relating to the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person identifiable;
third party: the natural or legal person, public authority, agency or any other body that is not the same as the data subject, the data manager, the data processor or the persons who have been authorized to handle personal data under the direct control of the data manager or data processor;
the consent of the data subject: the voluntary, specific and clear declaration of the will of the data subject based on adequate information, with which the data subject indicates by means of a statement or an act clearly expressing the confirmation that he gives his consent to the processing of personal data concerning him;
restriction of data management: marking of stored personal data for the purpose of limiting their future management;
registration system: a file of personal data divided in any way – centralized, decentralized or functional, or according to geographical aspects – which is accessible based on specific criteria;
data protection incident: a breach of security that results in the accidental or unlawful destruction, loss, alteration, unauthorized disclosure or unauthorized access to personal data transmitted, stored or otherwise handled;
2. General provisions
Balatonhostels is the authorized user of the copyright and other intellectual property rights related to any text, image, sound and other material on the website.
The company respects copyright and does not use other people's intellectual property on the site without permission and does not knowingly violate the relevant legislation. If you experience the opposite, please notify us immediately so that we can eliminate the violation as soon as possible. You are entitled to read the website www.balatonhostels.hu, make copies of it by printing or downloading it to a data carrier, but only for personal, private and non-commercial purposes. It is forbidden to sell a copy of any part of the website for the purpose of financial gain, and it is only possible with the consent of the owner to change any part of the website or to build it into another work, publication or website, either in electronic or printed form. Apart from what is described here, Balatonhostels does not grant any other authorizations or rights in relation to its website.
The owner of the website reserves the right to make any changes, corrections or modifications to its website at any time, when it deems it necessary, without prior warning.
3. Data of the data controller:
The name of the data controller: Zoltán Kerék
The headquarters of the data controller:
Contact: balatonhostels@gmail.com
Website: www.balatonhostels.hu
Telephone number:
4. Name of data management:
Data management based on the voluntary, informed and definite consent of users, in the case of users registered on the website.
5. Legal basis for data management:
CXII of 2011 on the right to information self-determination and freedom of information. on the basis of § 5 of the Act, the voluntary, informed and definite consent of the users.
6. Scope of processed data:
A. Mandatory data provided by the user during registration: name, e-mail address and telephone number
B. Based on the user's decision, data that can be entered during registration: home address
C. Minors under the age of 16 may not register on the website.
D. When using the website, the IP address of the user's computer, the start and end time of the visit, and in some cases - depending on the settings of the user's computer - the type of browser and operating system are recorded. This data is automatically logged by the system. The Service Provider does not link the data in the log file with other personal data.
7. Purpose of data management:
A. In the case of registration for the newsletter, in the case of the data provided by the user, the purpose of the data management is to identify the user for the purpose of sending the newsletter and providing information. The Service Provider sends a newsletter to users registered for the newsletter. The user can prohibit the use of data for this purpose by unsubscribing. The user gives his consent to this data management in the following ways:
By entering your name and e-mail address in the "Newsletter Subscription" menu item, then clicking on the "Subscribe" button.
By filling out and sending the "Request for quote" or "Booking" online form by clicking on the "Subscribe" button on the last page of the form.
By filling out and sending the "Instant messaging" internet form in such a way that you do not click the check box in front of the text "I subscribe to the newsletter".
B. In the case of a request for a quote, the purpose of data management for the data provided by the user is to identify the user and then to inform him by e-mail or telephone only and exclusively in connection with the given request for a quote or reservation. The user gives his consent to this data management by filling out and sending the "Request for Offer" online form.
C. In case of express consent of the user, the purpose of data management is for the Service Provider to contact the user with personalized offers by phone or e-mail. The user gives his consent to this data management in the following ways:
the. By filling out and sending the "Newsletter Subscription", "Offer Request" or "Instant Messaging" internet form in such a way that "I consent to the accommodation contacting me with personalized offers and promotions." the check box in front of the text is not checked.
D. By entering this portal, a log file is created about certain parameters of your computer and its IP address. This data is only used by the operator for the development of the portal. This portal and some of its applications store small text information files, so-called "cookies" are used, which are stored on the visitor's hard drive to facilitate customer identification and further visits. The user of the portal can determine whether he wants to accept cookies or not, and whether he can be notified if the viewed page sends him a cookie. If you allow the use of cookies in your computer's browser, you consent to the information transmitted in this way being used by the operator of this portal for the purpose of operation. Remember, if you do not allow the acceptance of cookies, in that case some services of the website will not be available or will be limited.
E. This website uses the Google Analytics web analytics service provided by Google, Inc. ("Google"). Google Analytics uses "cookies", text files placed on your computer, which are intended to help analyze the use of the website. The information generated by the "cookie" about the use of the website (including your IP address) is transmitted to and stored by Google on servers in the United States. Google uses this information to evaluate your use of the website, to compile reports on website activities for website operators, and to provide other services related to website activities and internet usage. Google may also transfer this information to third parties if this is required by law or if the third parties process the information on behalf of Google. Google does not associate your IP address with other data held by Google. You can refuse the use of "cookies" by choosing the appropriate settings of your browser, but please note that in this case you will not be able to use all the functions of this website. By using this website, you consent to the processing of your data in the manner specified above and for the purposes specified above. The data manager does not use the personal data for purposes other than those indicated. Personal data is transferred to third parties only with the prior and informed consent of the user. This does not apply to possible data transmissions that are required by law.
8. Duration of data management:
The Service Provider has the right to manage the data provided by the user during registration, either compulsorily or voluntarily, until the user uses the opt-out option provided by the Service Provider. Based on the user's voluntary decision, the Service Provider deletes the data within 5 working days from the receipt of the deletion request. If the user uses personal data illegally, deceptively, or commits a crime, the Service Provider may delete all his personal data immediately upon becoming aware of it, as provided in the terms of use, at the same time as canceling the registration.
9. Rights related to data management
You can request information from the Data Controller in writing through the contact details provided in point 3, so that the Data Controller can inform:
1. Right to request information
-
what personal data,
-
on what legal basis
-
for what purpose of data management,
-
from what source
-
how long you treat
to whom, when, on the basis of which legislation, to which personal data did the Data Controller provide access or to whom did it transmit your personal data.
2. Right to rectification
The owner of the personal data can ask the Data Controller in writing to change some of his personal data (e.g. in the event of a change of e-mail address or postal address) through the Data Manager's contact information provided in point 3. The data controller fulfills the request within 30 days and notifies the requester in writing at the contact information provided in the request.
3. Right to erasure
The owner of personal data may request the deletion of personal data from the Data Controller in writing through the contact details provided in point 3. The Data Controller may reject the deletion request in the event that the law or an internal regulation obliges the Data Controller to continue storing personal data. However, if there is no such obligation, the Data Controller shall fulfill the request within 30 days and notify the applicant by letter.
4. Right to protest
The owner of the personal data can object in writing to the data management through the contact details of the Data Controller provided in point 3, if the Data Controller forwards or uses their personal data for the purpose of direct business acquisition, public opinion polls or scientific research.
You may object to data processing even if the processing of personal data is necessary solely to fulfill a legal obligation of the Data Controller or to enforce its legitimate interests, with the exception of data processing based on legal authorization.
5. Right to Block
The owner of the personal data can ask the Data Controller in writing to block his personal data via the Data Controller's contact information provided in point 3. The blocking lasts as long as the specified reason makes it necessary to store the data.
6. Procedure in case of failure to exercise the right related to data management
The Data Controller strives to ensure that the owner of Personal Data can exercise his rights related to data management in accordance with the law and that all cases are concluded to his satisfaction.
If the objections, complaints and requests of the Personal Data Owner have not been satisfactorily resolved, or the Personal Data Owner considers at any time that a violation of rights has occurred in connection with the processing of his personal data, or there is a direct threat thereof, the National Data Protection and Freedom of Information Authority is entitled to report
Contact details of the National Data Protection and Freedom of Information Authority
Headquarters: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Mailing address: 1530 Budapest, Pf. 5
Phone: +36 1 391 1400 Fax: +36 1 391 1410
E-mail: ugyfelszolgalat@naih.hu
Web: naih.hu
When using the service, the data recorded in the log file is stored by the system. The time of the last visit is automatically overwritten by the system at the time of the user's next visit.
10. Data deletion:
The user's request for deletion of their own data must be sent by e-mail to balatonhostels@gmail.com. The Service Provider deletes the data within 5 working days from the receipt of the deletion request. In case of deletion, the displayed data cannot be restored. Newsletter unsubscribing takes place automatically, using the link in the newsletters.
11. Data security measures:
We store personal data in the territory of the Republic of Hungary. All data provided by the user during registration on the website is stored by the Service Provider on a secure, closed server. During data management and processing, the provided data can only be seen by employees employed by the Service Provider and the Data Processor with unique, limited ("admin") access.
12. Data transfer
The Service Provider informs the customer and requests his consent if his data is forwarded to a third party. The Service Provider keeps a record of data transmission.
13. The possibility of amending the data management policy:
The Service Provider reserves the right to unilaterally modify this data management policy with prior notice to users. By using the service after the amendment takes effect, you accept the amended data management policy.
14. Users' rights regarding the management of their data:
Customers can request information about the management of their data (personal and special data). Upon request, the data controller provides the data subject with information about the data it manages, the purpose, legal basis, duration of data processing, the name, address (headquarters) of the data processor and its activities related to data processing, as well as about who and for what purpose the data is or has been received. The request for information must be sent by e-mail to the address balatonhostels@gmail.com, to which the person concerned will receive an answer within 8 working days. Customers can request the deletion of their data, as specified under the period of data management.
15. Legal enforcement options:
CXII of 2011 on the right to self-determination of information and freedom of information. law and the Civil Code. based on this, you can exercise it before a court, and you can also ask for the help of the President of the National Data Protection and Freedom of Information Authority (dr. Attila Péterfalvi, President of the National Data Protection and Freedom of Information Authority, 1125 Budapest, Szilágyi Erzsébet fasor 22/c Postal address: 1534 Budapest, Pf.: 834. , or contact the operator's staff with your comments at the e-mail address balatonhostels@gmail.com.
16. User consent:
After reading this data management policy, the user considers the following consent to be accepted if he/she fills in and sends any of the "(Newsletter) Subscription", "Request for Offer" or "Contact" online forms. Data is entered manually only after written consent.
Content of contribution:
"I have read the Data Management Policy, I have been properly informed about the management of my data and during my registration on the website accessible via the URL link www.balatonhostels.hu, the Service Provider can manage and process my data in accordance with the provisions of the Data Management Policy."