Privacy Policy

This Privacy Policy (hereinafter: Policy) determines the processing of data related to the operation of Somogy Kertje Üdülőfalu és Étterem (hereinafter: Accommodation) operated by Tornácos Accommodation Kft.

The Accommodation respects the rights of the Guests regarding their personal data and aims to comply with legal requirements, therefore it has prepared the following Policy, which is available electronically on the official website of the Accommodation (https://www.somogykertje.hu/adatvedelmi-tajekoztato) and on paper at the Accommodation. This information provides general information about data processing during the services provided by the Accommodation. The Accommodation processes personal data exclusively for a predetermined purpose for the period necessary for the exercise of rights and fulfillment of obligations. The Accommodation only processes personal data that is essential for the implementation of the purpose of data processing and is suitable for achieving the purpose.

DATA CONTROLLER INFORMATION

Name: Tornácos Accommodation Ltd.

Head office: 7281 Bonnya, Kossuth Lajos utca 82/A.

Site: 7281 Bonnya, Kossuth Lajos utca 82/A.

Mailing address: 7281 Bonnya, Kossuth Lajos utca 82/A.

Registration authority: Kaposvár Court of Appeals

Company registration number: 14-09-315787

Tax number: 25924277-2-14

Representative: dr. Szilvia Gyebrószky

Phone number: +36 30 663 5656

E-mail: info@somogykertje.hu;

Website: https://www.somogykertje.hu

Bank account number: Budapest Bank Zrt. 10103214-17247800-02004003

 

The data controller processes and ensures the security of the personal data provided to the Accommodation during contact with it, use of its services, use of its website (https://www.somogykertje.hu) and social platforms and interactions on them in accordance with the applicable laws.

1. Data protection related to the use of accommodation services

1.1. REQUEST FOR A QUOTE

When requesting a quote on the Accommodation Website, by phone or in person, in addition to the data related to the planned stay, the following personal data must be provided: name, e-mail address or telephone number. The purpose of data management is to establish contact, maintain contact, send a quote and provide information. The Accommodation stores and processes personal data for the duration of the purpose of data processing for at least 30 days, or until the User requests their deletion or withdraws their consent to the processing of their personal data. The legal basis for data processing is the taking of steps prior to concluding a contract at the request of the data subject pursuant to Article 6 (1) (b) of the GDPR. The Accommodation does not record telephone conversations.

1.2. RESERVATION

A reservation can be made by e-mail, by telephone, in person or using the online system on the Website. Data processing is based on the User’s voluntary, appropriately informed declaration, which is necessary for booking a room at the Accommodation. The duration of data processing: 8 years. The legal basis for data processing is the voluntary consent of the data subject pursuant to Section 5 (1) (a) of the Info. tv., and Section 169 (2) of Act C of 2000 on Accounting.

In the case of a room reservation made online, in person at the hotel or by telephone, the Accommodation may request one or all of the following personal data:

• Full name
• Telephone number
• Email address and/or mailing address
• Arrival date, departure date
• Number of adults and children staying in a room, their age group
• Room and/or package type
• Credit card details
• The service package you wish to use
• Registered office, mailing address
• Billing address
• In the case of a company, tax number, company registration number
• Comments – here you can enter your possible preferences
• Other necessary data (e.g. protection certificate)

The Accommodation uses this data for the purpose of handling the room reservation, maintaining contact with the User, as well as registering and fulfilling accommodation reservations, documenting payment, and fulfilling accounting obligations. The purpose of data management is also to identify the User as the person requesting the Accommodation service, to provide the ordered service, to send notifications related to it, to issue invoices, to process payments, to register Users and to distinguish them from each other.

The technological background of the online booking system is currently provided by Previo.hu Kft. (1119 Budapest Petzvál József u. 4/A), who, as a data processor, aggregates the data of incoming reservations, stores them on its server and enables the confirmation of reservations on its online interface.

1.3. online bank card payment

Name of the data processor: Teya Services Ltd.

Headquarters of the data processor: 1024, Budapest, Lövőház utca 39.

Phone number of the data processor: +361 793 6776 / +361 955 5786

Email address of the data processor: ugyfelszolgalat@teya.com

The Data Processor participates in the execution of the Online payment based on the contract concluded with the Data Controller. In the course of this, the Data Processor processes the billing name and address of the data subject, the order number and date within the civil law limitation period.

1.4. bank card and SZÉP CARD data

If the Guest wishes to secure the accommodation reservation by providing bank card data, contrary to point 1.3, the Accommodation may request the Guest to provide the following bank card data:

• Name on the card
• Card number
• Expiration date

The Guest also has the option to book a room with an OTP, K&H and MBH SZÉP card. From a data protection perspective, the data processing regulations of the given banks are authoritative, which can be found at the following links:

https://www.otpbank.hu/portal/hu/adatvedelem

https://www.kh.hu/adatvedelem

https://www.mbhbank.hu/adatvedelem

You can find information about payment methods with the SZÉP card on the following portals:

https://magan.szepkartya.otpportalok.hu/felhasznalas/

https://www.kh.hu/napi-penzugyek/bankkartya/szep-kartya

https://www.mbhszepkartya.hu/munkavallalokknak

With regard to accommodation, the purpose of data processing is to secure the reservation and to withdraw the total amount or part of the reservation, depending on cancellation. The legal basis for data processing is the performance of the contract concluded for the purpose of room reservation as a service. Providing the data is mandatory and is a condition for the provision of the service. After leaving the Accommodation, the data can no longer be disclosed and access is not possible. The accommodation does not store bank card data in full or in tokenized form. The data will be deleted after 8 years.

1.5. registration form and other data services required by the regulation

According to the law, the accommodation is obliged to record the guests’ data on the registration form, in the https://pms.previo.app/ application, and to the municipality.

The accommodation transmits the necessary data required by law in the https://pms.previo.app/ data management system.

Name of the data processor: Previo.hu Kft.

The registered office of the data processor: 1119 Budapest Petzvál József u. 4/A

Data processor’s telephone number: +36 1 445 3737

Data processor’s e-mail address: info@previo.hu

Accommodation NTAK code: PA20017981

In the case of NTAK and/or the registration form, the personal data that must be provided are the conditions for using the accommodation service:

• Legal obligation to provide: e.g.: gender, ID card number, time of stay, place and time of birth, citizenship, postal code, reservation value
• In order to provide the service, the following must be provided: first name, last name, mother’s name, billing information, contact information, loyalty program number, payment method, bank card information, room number, number of guests, etc.

By signing the registration form, the Guest accepts the Accommodation’s Data Protection Policy.

The Accommodation is also legally obliged to report all checking-in guests to the local government.

The data must be retained for 6 years from the date of registration.

1.6. billing-related data

Name of the data processor: Számlázz.hu

KBOSS.hu Trading and Service Limited Liability Company

Registered office of the data processor: 1031 Budapest, Záhony utca 7.

Customer service: https://www.szamlazz.hu/szamla/ugyfelszolgalat

In the case of issuing invoices and keeping other tax records, the Accommodation is obliged to retain the data for 8 years from the end of the calendar year. The Data Processor participates in the accounting of accounting documents based on a written contract concluded with the Data Controller. In the process, the Data Processor processes the name and address of the data subject to the extent necessary for the accounting records, for a period in accordance with Section 169 (2) of the Tax Act.

1.7. Guest questionnaire, evaluation

The Accommodation uses e-mail and paper-based guest questionnaires for quality assurance purposes. By filling them out, the Guest may provide the following personal data:

• Name
• Date of visit
• Room number
• Contact information (address, e-mail address, telephone number, home address)

Providing the data is not mandatory, it only serves to accurately investigate any complaints and ensure that a response is provided. The Guest may also fill out the questionnaire anonymously. The opinions received in this way, and any related data that cannot be traced back to the given Guest and cannot be linked to the Guest’s name, may also be used by the Accommodation for statistical purposes.

The Guest may voluntarily send his or her evaluation to info@somogykertje.hu. If feedback is requested, the Accommodation will contact the Guest within 30 days at one of the provided contact details (e-mail, address, telephone number).

1.8. complaint handling protocol

If the Guest does not agree with the on-site handling of the complaint or if it is not possible to investigate it immediately, the Guest may request the Accommodation to record a complaint handling protocol on site. The protocol contains the following data:

• Name and address of the consumer
• Place, time and method of submitting the complaint
• Detailed description of the Guest’s complaint (with necessary documents attached)
• Statement of the Accommodation on the Guest’s position regarding the complaint
• Signature of the person taking the minutes and the Guest
• Place and time of taking the minutes

In addition to/instead of taking the complaint management minutes, the Guest may also send their complaint to the email address info@somogykertje.hu. If feedback is requested, the Accommodation will contact the Guest at one of the provided contact details (email, address, telephone number) within 30 days. The Accommodation reserves the right to extend the data processing to the extent necessary for the purpose of enforcing legal claims in the event of a clearly malicious or abusive complaint.

2. Data protection related to the accommodation’s sales and marketing activities

2.1. WEBSITE, hosting services

The Accommodation records certain data of the visitor (hereinafter: User) when visiting the website it operates. The data that is technically recorded are the data of the User’s login computer that are generated during the use of the service and that are recorded by the data management system as an automatic result of technical processes. The system automatically logs the data that is automatically recorded upon entry or exit without a separate declaration or action by the User. This data cannot be linked to other user personal data – except in cases required by law. The data is only accessible to the Accommodation. The purpose of the automatically recorded data is

• Providing and displaying services, content and advertisements available on the Accommodation’s website
• Creating statistics (the data is used in aggregate form, without names and identifying data)
• Developing the IT system
• Protecting user rights

The html code of the Website operated by the Accommodation may contain links coming from and pointing to independent external servers for web analytics measurement. The measurement also includes tracking conversions. The web analytics service provider only processes browsing-related data that is not suitable for identifying individuals.

Currently, web analytics services are provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043), within the framework of the Google Analytics service. When using the service, the data made available by Users may be used by the Accommodation for analysis, targeted content or advertising.

Data automatically and technically recorded during the operation of the system will be stored in the system for a period of time that is reasonable for ensuring the operation of the system, starting from their generation. The Accommodation ensures that this automatically recorded data cannot be linked to other user personal data.

Hosting service provider of the Accommodation Website:

Name: Webglobe, s.r.o.

Registered office: Pobřežní 620/3 186 00 Prague 8

The service provider performs storage and data processing activities in connection with the operation of the Website, which it does not disclose to third parties, except in cases required by law.

2.2. Cookies

During a visit to the Website, the Accommodation places a small data package (so-called “cookie”) on the User’s computer. Based on this, the Accommodation manages, analyzes and stores aggregated data related to the Users’ browsing habits, thus ensuring the user experience and high-quality operation of the Website.

The User can consent to the use of cookies using the layer appearing on the Website. Cookies are generally stored for 30 days. The Accommodation runs so-called remarketing advertisements through the advertising systems of Facebook and Google AdWords. These service providers may collect or receive data from the Accommodation’s website using cookies, web beacons and similar technologies. The data collected in this way may appear on other websites in the Facebook and Google partner network. Remarketing lists do not contain the visitor’s personal data and are not suitable for personal identification.

The User can set or block cookie-related activities using the browser program. Without the use of cookies, the User may not be able to use all the services of the website.

The User can delete the use of cookies from his own computer.

The setting, deletion, and blocking activities depend on the browser, but can typically be done in the Settings/Privacy menu item.

Further information about the data protection policies of Google and Facebook can be found at the following contacts.

2.3. ELECTRONIC NEWSLETTER

If the User subscribes to the Accommodation’s newsletter, the Accommodation may send him a newsletter. The Accommodation tries to send its readers personalized offers according to their likely interests. By subscribing, the User consents to the Accommodation processing the personal data necessary for this purpose (usually: name, address, telephone number, e-mail address, interests). The Accommodation processes the data until the User requests its deletion or withdraws his/her consent. The possibility of unsubscribing is provided by a direct link in each newsletter. The deletion of personal data will take place within 10 working days of receipt of the request. The legal basis for data processing is the voluntary consent of the data subject and Section 6 (5) of the Advertising Act (Act XLVIII of 2008) on the basic conditions and certain limitations of economic advertising activities. The User is responsible for the authenticity of the personal data provided.

The technological background for sending the newsletter is provided by PREVIO s.r.o. (Kolbenova 882/5a, 190 00 Praha 9), who, as a data processor, stores the data of subscribers on its server and enables the sending of newsletters on its online interface.

The data processing related to the newsletter has been notified to the National Authority for Data Protection and Freedom of Information, the data protection registration identification number of the data processing is: NAIH-xxxxxx/year.

2.4. social media

The Somogy Kertje Holiday Village and Restaurant operated by the Accommodation is available on the Facebook and Instagram social media portals:

https://hu-hu.facebook.com/somogy.kertje.udulofalu

https://www.instagram.com/somogykertje?igsh=OGo1N3gzdnQwczd6

The Facebook user can “like” the news feed published on the message boards on the given page; You can subscribe by clicking on the “follow” link, and you can unsubscribe by clicking on the “dislike” link located there, or you can delete unwanted news appearing on the message board using the message board settings. The Accommodation has access to the profile of its “followers”, but it does not record it or manage it in its own internal system. The purpose of data processing is to share content on the website operated by the Accommodation, to communicate other news, promotions, and to keep in touch. With the help of Facebook pages, the Guest can book a room, participate in prize games and find out about the latest promotions.

The legal basis for data processing is the Guest’s voluntary consent, which can be revoked at any time by unsubscribing. The revocation does not affect the lawful data processing prior to that. In the event of revocation, you will not receive a notification from our news feed, news related to the Accommodation will not appear on the Guest’s news feed, but you will still have access to the news feed, as the page is public. The data processing period lasts until the Guest unsubscribes.

The Facebook and Instagram pages are data controllers independent of the Accommodation. The Guest can obtain information about the data management of the page from the data protection guidelines and regulations on the Facebook website at the following links:

• https://www.facebook.com/policies_center/
• https://www.facebook.com/about/privacy/update

You can obtain information about the data management of Instagram at the following link:

• https://privacycenter.instagram.com/policy

When using Facebook applications and competitions, data management takes place in accordance with the provisions of Section 2.6.

In the event of a room reservation, the Guest is automatically redirected to the Accommodation website. Data management takes place in accordance with the provisions of Section 1.2.

The Accommodation also publishes pictures/films on its Facebook page about various events/hotel/restaurant, etc.

2.5. Loyalty Program

The Loyalty Program of an accommodation facility is an exclusive service provided to natural persons, the purpose of which is to provide discounts to returning guests.

The Company may process the following personal data in the programs:

• Name
• Gender
• Mailing address
• Home address
• Phone number
• Email address
• Date of birth (Persons under the age of eighteen cannot participate in the programs.)
• Loyalty registration number

The purpose of data processing is to provide discounts to participants. Sending notifications about discounts. The legal basis for data processing is the Guest’s voluntary consent. The Guest may withdraw his/her consent at any time and request the deletion of his/her data by sending an e-mail to info@somogykertje.hu or a letter to the hotel’s postal address, provided that this does not affect the previous lawful data processing. Without consent, the Guest cannot be a member of the Loyalty Program. The processing of the personal data provided will continue as long as the Guest participates in the given program. The Loyal Guest program membership status will become inactive after 3 (three) years from the last use of the Accommodation service. The Accommodation stores the Guest’s personal data for the period specified in the current tax and accounting regulations.

More information can be found at https://www.somogykertje.hu/torzsvendeg .

2.6. prize draw

The Accommodation organizes prize draws independently or together with an external company from time to time. Participation in the prize draw is possible after applying on paper or online (website, Facebook, etc.), usually after providing the following data:

• Name
• Address
• Phone number
• Email address

It may happen that the above data is not needed (e.g. in a Facebook prize draw), or that other data is also needed, so the scope of the data may change.

The purpose of data processing is to organize a prize draw and to maintain contact in order for the Accommodation to deliver the prize to the winner. The legal basis for data processing is the Guest’s voluntary consent.

The Guest may withdraw their consent at any time by sending an e-mail to info@somogykertje.hu or a letter to the hotel’s postal address. The withdrawal does not affect the data processing prior to that. Consent is a condition for participation in the prize draw. Data processing lasts until the end of the prize draw. The data of the winner(s) and alternate winner(s) will be stored by the Accommodation for 8 years, if necessary, in accordance with current tax and accounting regulations.

We will always provide information about any data transfer, data processors, and other details of data management that differ from this information during the given prize draw.

2.7. gift and value vouchers

When purchasing a gift voucher, the Guest provides the following personal data:

• Name
• Billing name and address
• E-mail address or delivery name and address
• Phone number

The purpose of data management is to maintain contact in order to deliver the Gift Voucher, invoicing.

The legal basis for data management is the performance of the contract concluded for the purpose of issuing the Gift Voucher. Providing the data is mandatory and is a condition for the provision of the service. The personal data received will be stored by the Accommodation for 8 years in accordance with the current tax and accounting regulations.

3. OTHER DATA MANAGEMENT

3.1. ELECTRONIC SURVEILLANCE SYSTEM

In order to ensure the safety of guests and employees and the protection of property, the Accommodation operates an electronic surveillance and recording system (camera system) in the communal areas, courtyard, corridors and entrances.

The fact of camera surveillance is indicated by a clearly visible information sign in the monitored areas.

Purpose of data processing

• protection of persons and property,
• prevention and detection of violations,
• ensuring the safe operation of the Accommodation.

Legal basis for data processing

Legitimate interest pursuant to Article 6(1)(f) of the GDPR.

The legitimate interest of the Accommodation is in particular the protection of guests, employees and the property of the Accommodation.

The Accommodation conducted a balancing test before commencing data processing.

Scope of data processed

• image recording,
• the behavior of the data subject as seen in the recording.

The camera system does not record audio.

Retention period of recordings

The retention period of recorded recordings is a maximum of 30 days, unless the recording is necessary for the enforcement of a legal claim or for an official procedure; in this case, the retention may take place until the final conclusion of the procedure.

Access to recordings

Only authorized employees of the Accommodation may access the recordings in order to perform their duties.

Data subject rights

The data subject is entitled to exercise his or her rights under the GDPR, in particular, he or she may request information, request access, or object to data processing. The Accommodation will examine the requests individually and, in the absence of a legal obligation, will take action without undue delay.

3.2. EVENTS, PROGRAMS, AUDIO AND IMAGE RECORDING

The Guest acknowledges that the events may be recorded by the Accommodation’s staff, contractual partners of the Accommodation or the Guest, press officers, other Guests, or other third parties. The Accommodation is entitled to use the recordings made at the events for its own marketing and promotional purposes.

In the event of the objection of the person concerned, the Accommodation will omit the identifiable representation of the given person or remove the recording. If the Guest qualifies as a public figure, he or she may be named without his or her consent.

The creator of the recordings in accordance with the above acquires an unlimited, transferable, and exclusive right of use in space, time, and manner of use with respect to the Guest. The Accommodation’s staff and persons authorized by the Accommodation are entitled to exploit, use (in particular to promote the Events), reproduce, publish, adapt, make public, transmit to the public and distribute the presentation without restriction in relation to the Visitor, without having to provide the Guest with any compensation. The Guest specifically acknowledges that the Accommodation records the event or programs, reproduces the recorded recording and distributes it on a visual medium, broadcasts it or otherwise transmits it to the public, rebroadcasts it, including when the event or programs are made available to the public by wire or by any other means or method (e.g. via YouTube) in such a way that members of the public can individually choose the place and time of access. The Guest is not entitled to make any claims or demands against the Accommodation in connection with the above-mentioned display. The Guest is entitled to make audio and video recordings at the Event, provided that this may be done exclusively with an integrated video and audio recorder in a telecommunications device (e.g. mobile phone, tablet) used for personal purposes or with non-professional photographic equipment, and that the images and audio recordings made by the Guest may not be sold or utilized for consideration or for commercial purposes without consideration, and the Visitors appearing on them may not be named without their consent, and their personal rights may not be violated. The Accommodation expressly excludes its liability in the event that other Guests violate the above-mentioned provisions.

3.3. Job advertisements

The Applicant has the opportunity to apply for the Accommodation’s job offers by e-mail, on paper, or by telephone. The purpose of data processing is to provide information to job seekers about the announced applications, to select suitable candidates and to contact them during the application for the job offer. The legal basis for data processing is the consent of the Applicant, the voluntary provision of their data. The provision of data is voluntary, but in case of deficiencies (e.g. contact information), the Accommodation cannot assess the application.

The CVs and data of those who apply unsuccessfully to the job advertisements are archived by the Accommodation and, if applicable, reprocessed. The Applicant may withdraw their consent at any time in writing by e-mail or letter. The withdrawal does not affect the lawful data processing prior to that. The Accommodation transfers the data of the successful applicant to the employee data and processes it in accordance with the applicable laws.

3.4. personnel

The information contained in this information also applies to the employees of the Accommodation and the processing of their data. The Accommodation processes the data of the employees in accordance with the applicable laws.

3.5. TRANSFER OF DATA

The Accommodation shall only transfer personal data to third parties with the prior consent of the other party (Guest, User, Data Subject, Partner, Interested Party, Applicant, etc.). This does not apply to any data transfers that are mandatory by law.

Pursuant to current legislation, the Accommodation shall provide information, data and documents upon request from official bodies. The Accommodation shall only provide the authorities with personal data – if the authority has specified the exact purpose and scope of the data – to the extent and insofar as this is necessary to achieve the purpose of the request. The Accommodation, as the Data Controller, shall be entitled and obliged to transfer all personal data at its disposal and duly stored by it to the competent authorities, which it is obliged to transfer by law or a legally binding official obligation. The Accommodation shall not be held liable for such data transfer or the consequences arising therefrom.

If the Accommodation transfers the operation or utilization of the content service on its Websites, in part or in whole, to another party instead of the current operator, the personal data it manages may be transferred to this third party for further processing in its entirety without requesting separate consent.

This data transfer serves the continuity of the registration of already registered Users.

4. RIGHTS AND THEIR EXERCISE

Changes in personal data or requests for deletion of personal data may be communicated by means of a written statement expressed in a private document with full probative value sent to the registered e-mail address or by post. After the request for deletion or modification of personal data has been fulfilled, the previous (deleted) data can no longer be restored.

Users may request information about the processing of their personal data. The Accommodation shall only consider a request for information sent by e-mail to be authentic if it is sent from the User’s registered e-mail address. At the request of the data subject, the data controller shall provide information about the data of the Data Subject processed by it or by the data processor it has commissioned, their source, the purpose, legal basis, duration of the data processing, the name, address of the data processor and its activities related to the data processing, and – in the case of the transfer of the data subject’s personal data – about the legal basis and recipient of the data transfer. The request for information must be sent by e-mail to info@somogykertje.hu.

The Accommodation is obliged to provide the information in writing to the data subject’s request in a clear and understandable form as soon as possible after the request is submitted, but no later than 30 days.

The information described above is free of charge if the person requesting information has not yet submitted a request for information to the data controller regarding the same data set in the current year. In other cases, a cost reimbursement may be determined. The data controller may refuse to inform the data subject in writing in the cases specified in the Info Act.

The data subject may request the data controller to correct his/her personal data and to delete or block his/her personal data – with the exception of mandatory data processing.

Personal data must be deleted if

• its processing is unlawful;
• the data subject requests it – as set out in the Info Act;
• it is incomplete or incorrect – and this condition cannot be legally remedied –, provided that deletion is not excluded by law;
• the purpose of the data processing has ceased to exist or the statutory deadline for storing the data has expired;
• it was ordered by the court or the Authority

4.1. ACCOMMODATION AS DATA CONTROLLER

Accommodation as data controller declares that during data processing, Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information Act (“Data Protection Act”). The Accommodation provides information on data processing not listed in these Regulations when collecting the data. The Accommodation does not check the personal data provided to it. The person providing it is solely responsible for the adequacy of the data provided. If the User does not provide his own personal data, he is obliged to obtain the consent of the person concerned.

Employees who are employed or under contract with the Accommodation are entitled to access personal data.

4.2. LEGAL REMEDY

A complaint can be filed with the National Data Protection and Freedom of Information Authority:

Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Mailing address: 1530 Budapest, Pf.:5.

Phone: +36 1 391 14 00;

E-mail: ugyfelszolgalat@naih.hu;

Website: http://www.naih.hu

Accommodation contact: info@somogykertje.hu

Budapest, 2026.02.20.

Note: Should there be any differences between the original Hungarian Privacy Policy and this English translation, the Hungarian version MUST BE considered the valid one.