- +36 20 514 0540
- info@cabinbalaton.hu
- 8314 Vonyarcvashegy, Agyagos u. 9.
Data management information
Date of adoption: 2024-07-08
Name: Balaton Next Limited Liability Company
Location: 8314 Vonyarcvashegy, Rákóczi köz 12
Postal address and complaint handling service: 8314 Vonyarcvashegy, Rákóczi köz 12
E-mail: info@cabinbalaton.hu
Phone number: +36-20-514-0540
Website: http://www.cabinbalaton.hu
Name: Nethely Ltd.
Postal address: 1115 Budapest, Halmi utca 29.
E-mail address: info@nethely.hu
Phone number: +36-1-445-2040
What is a cookie?
The Data Controller uses so-called cookies when you visit the website. A cookie is a bundle of letters and numbers that our website sends to your browser to save certain settings, facilitate the use of our website and help us to collect some relevant statistical information about our visitors.
Some of the cookies do not contain any personal information and cannot be used to identify an individual user, but some of them contain a unique identifier – a secret, randomly generated sequence of numbers – that is stored on your device, thus ensuring your identification. The duration of each cookie is described in the relevant description of each cookie.
Legal background and legal basis for cookies:
We distinguish between three types of cookies: cookies that are essential for the proper functioning of the Website, cookies for statistical purposes and cookies for marketing purposes.
The legal basis for the processing of the data is 6. Article 6(1)(a) of the Regulation, your consent is required for statistical and marketing cookies and Article 6. legitimate interest necessary for the functioning of the Website, in the case of cookies necessary for its functioning, in accordance with Article 4(1)(f).
Main features of the cookies used by the website:
Cookies are essential for the operation of the website:
If you do not accept the use of these cookies, certain features may not be available to you.
CookieConsent
elementor
PHPSESSID
chakra-ui-color-mode
wp-wpml_current_language
_ga
_ga_#
rc::a
rc::c
wordpress_test_cookie
wpEmojiSettingsSupports
sbjs_current
sbjs_current_add
sbjs_first
sbjs_first_add
sbjs_migrations
sbjs_session
sbjs_udata
elfsight_viewed_recently
wcpay_currency
For more information on how to delete cookies, please follow the links below:
There may be more than one processing operation for the purposes of contracting and performance. Please note that data processing in relation to complaint handling and warranty management will only take place if you exercise one of these rights.
If you do not make a purchase through the webshop, but are a visitor to the webshop, the marketing processing may apply to you if you provide us with your consent for marketing purposes.
More details on data processing for the purposes of contracting and performance:
Processing the order
Processing of orders requires data processing activities in order to fulfil the contract.
Processed data
During the processing, the Data Controller processes your name, address, telephone number, e-mail address, the characteristics of the Service purchased, the order number and the date of purchase.
When purchasing a gift voucher, you can also specify a different delivery address (if you request postal delivery).
If you have placed an order in the webshop, the processing of the data and the provision of the data is essential for the performance of the contract.
Duration of data processing
Data will be processed for 5 years in accordance with the statute of limitations under civil law.
Legal basis for data processing
Performance of the contract. [Processing under Article 6(1)(b) of the Regulation]
Issue of the invoice
The data processing is carried out in order to issue invoices in accordance with the law and to fulfil the obligation to keep accounting records. The Sztv. 169. § (1)-(2), companies must keep the accounting documents directly and indirectly supporting the accounting.
Data processed
Name, address, e-mail address.
Duration of data processing
The invoices issued are in accordance with the Sztv.
169. § (2), must be kept for 8 years from the date of issue of the invoice.
Legal basis for data processing
The legal basis for data processing is the 2007. CXXVII. 159. § (1) of the Act on Accounting 2000. Act C of 2006 No 169. § (2) shall be kept for 8 years [processing pursuant to Article 6 (1) (c) of the Regulation].
The data management process is carried out in order to handle consumer complaints. If you have lodged a complaint with us, the processing of the data and the provision of the data are essential.
Data processed
Customer’s name, phone number, email address, complaint content.
Duration of data processing
Consumer complaints are kept for 3 years under the Consumer Protection Act.
Legal basis for processing
Whether or not you contact us with a complaint is a voluntary decision, but if you do contact us, we will be able to investigate your complaint in accordance with the Consumer Protection Act 1997. CLV. Act 17/A. § (7) we are obliged to keep the complaint for 3 years [data processing under Article 6(1)(c) of the Regulation].
During the registration, ordering, newsletter subscription, the IT system stores the IT data related to the consent for later evidence.
Data processed
Date of consent and IP address of the data subject.
Duration of data processing
Due to legal requirements, consent must be verified at a later date, therefore the duration of data storage is stored for a period of limitation after the termination of data processing.
Legal basis for processing
The Regulation Article 7(1) imposes this obligation. [Processing under Article 6(1)(c) of the Regulation]
The Service Provider also provides the possibility to contact you by sending a message on the Website.
Managed data
To contact us, you must provide your name, email address and telephone number, optionally you can also send us a message.
Duration of processing
The data will be processed until the contact is processed for the purposes described in this section.
Legal basis for processing
The legal basis for processing is your consent (Regulation 6. processing within the meaning of Article (1)(a))
A 2016. CLVI. Act 9/H. §, the Service Provider shall, in order to protect the rights, safety and property of the data subject and others, and to monitor compliance with the provisions on the stay of third-country nationals and persons enjoying the right of free movement and residence, record, at the time of check-in, certain data of the accommodation user on the hosting provider designated by the Government Decree, through the accommodation management software.
The accommodation user is required to present the identification document to the accommodation provider for the purpose of recording the data. In the absence of such a document, the Service Provider must refuse to provide the accommodation service, and the processing of the data is therefore a condition sine qua non for the use of the service.
Data processed
For the purpose of data processing, the following data must be recorded in the designated software:
Duration of processing
The Service Provider shall process the data of the accommodation user until the last day of the first year following the year in which the data become known to the Service Provider.
Legal basis for processing
The legal basis for data processing is the 2016. CLVI. Act 9/H. §-Compliance with the legal obligation under § 6 of the Decree (Decree 6. Article 2(1)(c)).
If the Data Controller intends to carry out further processing, it shall provide prior information on the essential circumstances of the processing (legal background and legal basis of the processing, purpose of the processing, scope of the data processed, duration of the processing).
Name of the data processor: Nethely Kft.
Contact details of the data processor:
Phone number: +36-1-445-2040
E-mail address: info@nethely.hu
Head office: 1115 Budapest, Halmi utca 29.
Website: www.nethely.hu
The Processor stores personal data on the basis of a contract with the Data Controller. You are not entitled to access personal data.
Name of the data processor: Számlázz.hu – KBOSS.hu Kft
The data processor is located at 1031 Budapest, Záhony utca 7.
Telephone number of the data processor:
E-mail address of the data processor: info@szamlazz.hu
The website of the data processor: https://www.szamlazz.hu/
The Processor shall contribute to the recording of accounting documents on the basis of a contract with the Data Controller. In doing so, the Data Processor shall disclose the name and address of the data subject to the extent necessary for accounting purposes, in accordance with the provisions of the Act. 169. § (2) for a period of time, after which it shall delete it.
The name of the data controller is Stripe, Inc.
The controller is located at 185 Berry Street, Suite 550, San Francisco, CA 94107
Telephone number of the controller:
E-mail address of the controller: info@stripe.com
Website of the controller: https://stripe.com/en-hu
The payment service provider is contracted by the Data Controller to assist in the execution of the online payment, for which purpose data is transferred to the online payment service provider during the purchase process. In doing so, the online payment service provider will process the billing name and address of the data subject, the order number and the date of the order in accordance with its own data processing rules.
The purpose of the transfer is to provide the online payment service provider with the transaction data necessary for the payment transaction related to the purchase initiated with the online payment service provider.
Legal basis for the transfer of data: the Regulation 6. the performance of a contract concluded between you and the Data Controller pursuant to Article 4(1)(b), which includes payment by the customer and, in the case of online payment, the transfer of data pursuant to this point is necessary for the payment
Data processor name: Hungarian Tourist Agency Zrt.
Address of the data processor: Budapest, Kacsa u. 15-23, 1027
Processor’s email address: info@mtu.gov.hu
During the period of processing, you have the following rights under the Regulation:
If you wish to exercise your rights, this will involve your identification and the Data Controller will need to communicate with you. Therefore, for identification purposes, you will be required to provide personal data (but identification will only be based on data that the Data Controller already processes about you) and your complaint about the processing will be available on the Data Controller’s email account for the period of time specified in this notice in relation to complaints. If you are a former customer and would like to be identified for complaint or warranty purposes, please provide your order ID for identification purposes. We can also use this to identify you as a customer.
The Data Controller shall respond to complaints about data processing within 30 days at the latest.
Right to withdraw consent
You have the right to withdraw your consent to data processing at any time, in which case the data will be deleted from our systems. However, please note that cancellation of an outstanding order may result in our inability to deliver to you. In addition, if the purchase has already been made, we cannot delete billing data from our systems under accounting rules and, if you have a debt to us, we may process your data even if you withdraw your consent on the basis of a legitimate interest in the recovery of the debt.
Access to personal data
You have the right to receive feedback from the Data Controller as to whether or not your personal data is being processed and, if it is being processed, you have the right to:
The purpose of exercising the right may be to ascertain and verify the lawfulness of the processing, and therefore, in the event of repeated requests for information, the Data Controller may charge reasonable compensation for the provision of information.
Access to personal data is provided by the Data Controller by sending you the personal data and information processed by email after you have identified yourself. If you are registered, we will provide access so that you can view and control the personal data we process about you by logging into your account.
Please indicate in your request whether you want access to your personal data or information about data management.
Right to rectification
You have the right to have inaccurate personal data relating to you corrected by the Data Controller without delay upon your request.
Right to restriction of processing
You have the right to have the Data Controller restrict processing at your request if one of the following conditions is met:
If the processing is restricted, such personal data may be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or of an important public interest of the Union or of a Member State.
The Data Controller will inform you in advance (at least 3 working days before the lifting of the restriction) about the lifting of the restriction.
Right to erasure – right to be forgotten
You have the right to have the Controller delete personal data concerning you without undue delay if one of the following grounds applies:
If the Data Controller has disclosed personal data about you for any lawful reason and is required to delete it for any of the reasons set out above, it shall take reasonable steps, including technical measures, taking into account the available technology and the cost of implementation, to inform other data controllers that you have requested the deletion of the links to or copies of the personal data in question.
Erasure does not apply where the processing is necessary:
Right to object
You have the right to object to the processing of your personal data based on legitimate interests at any time on grounds relating to your particular situation. In such a case, the Controller may no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling, where it is related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, your personal data will no longer be processed for these purposes.
Right to portability
If the processing is automated or if the processing is based on your voluntary consent, you have the right to request the Data Controller to receive the data you have provided to the Data Controller, which the Data Controller will make available to you in xml, JSON or csv format, and if technically feasible, you may request that the Data Controller transfer the data in this format to another data controller.
Automated decision-making
You have the right not to be subject to a decision based solely on automated processing (including profiling) that would have legal effects concerning you or similarly significantly affect you. In such cases, the Data Controller shall take appropriate measures to protect the rights, freedoms and legitimate interests of the data subject, including at least the right to obtain human intervention by the Data Controller, to express his or her point of view and to object to the decision.
The above does not apply if the decision:
The Data Controller declares that it has implemented appropriate security measures to protect personal data against unauthorised access, alteration, disclosure, transmission, disclosure, erasure or destruction, accidental destruction or accidental damage and inaccessibility resulting from changes in the technology used.
The Data Controller will make every effort to ensure that its data processors also take appropriate data security measures when working with your personal data, as far as organisational and technical possibilities allow.
If you believe that the Data Controller has violated a legal provision on data processing or has failed to comply with a request, you may initiate an investigation procedure with the National Authority for Data Protection and Freedom of Information (postal address: 1363 Budapest, Pf. 9., e-mail: ugyfelszolgalat@naih.hu, telephone +36 (30) 683-5969 +36 (30) 549-6838; +36 (1) 391 1400).
You are also informed that you may bring a civil action against the Data Controller before a court in the event of a breach of the legal provisions on data processing or if the Data Controller has not complied with a request.
The Data Controller reserves the right to amend this Privacy Notice in a way that does not affect the purpose and legal basis of the processing. By using the website after the amendment comes into force, you accept the amended privacy policy.
If the Data Controller wishes to carry out further processing of the data collected for purposes other than those for which they were collected, the Data Controller will inform you of the purposes of the processing and the following information before carrying out the further processing:
Processing can only start after this, if the legal basis for the processing is consent, and you must give your consent in addition to the information.
This document contains all relevant information on data management in connection with the operation of the webshop in accordance with the European Union’s General Data Protection Regulation 2016/679 (hereinafter referred to as the Regulation. GDPR) and the European Data Protection Supplement 2011. CXII. tv. (hereinafter: Infotv.).
This document contains all relevant information on data management in connection with the operation of the webshop in accordance with the European Union’s General Data Protection Regulation 2016/679 (hereinafter referred to as the Regulation. GDPR) and the European Data Protection Supplement 2011. CXII. tv. (hereinafter: Infotv.).
COPYRIGHT © 2023 CABIN BALATON
COPYRIGHT © 2023 CABIN BALATON