Data Protection Notice

Effective: 26 October 2026

This notice describes the processing of personal data in connection with the napviraghaz.hu website, the Napvirág-Ház online booking and gift card processes, contact functions and newsletter subscription, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Hungarian law.

1. Principles of processing

Personal data are processed lawfully, fairly and transparently, for specified purposes and only to the extent and for the period necessary. Appropriate technical and organisational measures are used to protect confidentiality, integrity and availability.

2. Booking requests and accommodation services

Data processed: name, email address, phone number, address, postal code, city, arrival and departure dates, number of guests, selected room(s), requested extras, comments and booking status. Purpose: processing booking requests, providing offers, communication and preparation/performance of the accommodation service. Legal basis: steps prior to entering into a contract and performance of a contract (Article 6(1)(b) GDPR).

Booking data are retained for as long as necessary and, where a contract is concluded, for the period required for the establishment, exercise or defence of legal claims. Data appearing on accounting documents are retained for the statutory accounting period.

3. Gift card requests

The buyer's name, email, phone number and address, recipient name, requested nights/breakfast and message are processed to handle, coordinate and fulfil the request. The legal basis is Article 6(1)(b) GDPR.

4. Contact enquiries

When you contact us by phone or email, the contact details and message content are processed to answer the enquiry, administer the matter and, where necessary, handle related legal claims. The legal basis may be pre-contractual steps, performance of a contract or the controller's legitimate interest (Article 6(1)(b) or (f) GDPR).

5. Newsletter

Newsletter subscriptions are based on consent (Article 6(1)(a) GDPR). Consent may be withdrawn at any time; withdrawal does not affect the lawfulness of processing carried out before withdrawal.

6. Website logs and security

The web server may log technical data such as IP address, date and time, requested URL, browser and device information for operation, troubleshooting and IT security. The legal basis is the controller's legitimate interest in secure and reliable operation (Article 6(1)(f) GDPR).

7. Google services

The website may use Google Analytics, Google reCAPTCHA and Google Maps. Technical data may be transmitted to Google when these services are used. Non-essential analytics storage is subject to consent. reCAPTCHA is used to prevent abuse and automated form submissions.

8. Processors and recipients

• hosting and IT service providers;
• WGX / Webgalamb for technical newsletter management where used;
• Google for Analytics, reCAPTCHA and Maps where used;
• invoicing, accounting and public authorities where required by law or service performance.

Personal data are shared only to the extent necessary. Where data are transferred to a third country, the safeguards required by the GDPR and used by the relevant service provider apply.

9. Security and backups

Access control, logging, HTTPS encryption, backups and other security measures may be applied. Deleted or modified data may remain in backup copies until the relevant backup cycle expires.

10. Your rights

You may request access, rectification, erasure, restriction, data portability, object to processing based on legitimate interests, and withdraw consent at any time. Requests can be sent to napviraghaz@gmail.com.

11. Complaints

You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 1055 Budapest, Falk Miksa utca 9-11., Hungary; postal address: 1363 Budapest, P.O. Box 9; email: ugyfelszolgalat@naih.hu; website: www.naih.hu. You may also seek judicial remedy.

12. Changes to this notice

The controller may update this notice when services, technology or applicable law change. The current version is always published on this page.