Privacy/Privacy Statement

Kárándás Kft. respects the personal rights of its Guests and has therefore prepared the following Privacy Policy (hereinafter: “Policy”).

Our Company, as the data controller, declares that it carries out data processing in accordance with the provisions of Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter: the “Data Protection Act”). This Privacy Policy provides general information on the processing of personal data during the provision of our Company’s services. Due to the diversity of our Guests’ needs, the method of data processing may differ in certain cases from what is described in this Policy; such deviations may occur at the request of the Guest, in which case our Company will provide prior information about the exact procedure. For any data processing not covered by this Policy, our Company will provide information in advance of such processing.

In the course of its activities, the Service Provider considers the protection of personal data to be of paramount importance. Any personal data provided is always handled in compliance with the applicable laws, ensuring their security, and implementing the necessary technical and organizational measures as well as establishing the procedures required for compliance with the relevant legislation. This Privacy Statement applies to all services (including those accessed or used online, or through any other platform or device). The Privacy Statement is drawn up in accordance with the laws in force at any given time, with particular reference to: Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter: “Data Protection Act”); Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data; Act VI of 1998 on the promulgation of the Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data, signed in Strasbourg on 28 January 1981; Act CVIII of 2001 on certain issues of electronic commerce services and information society services; Act CXIX of 1995 on the use of name and address data serving research and direct marketing purposes.

2011. Data Collection: Data processing is carried out solely with your consent. The personal data and user information you voluntarily provide will be used exclusively for accommodation booking and marketing purposes, in accordance with the Data Protection Act (Act CXII of 2011). We do not transfer your data to third parties! Data may only be disclosed to a third party if you have given your prior, explicit consent.
2012. What personal data do we collect, and how do we process them? When making a reservation, you provide the following data via our online forms: Name Phone number Email address Home address This information is required to process and finalize your booking (e.g., sending a booking confirmation email). We store the data only for as long as necessary to fulfill the purpose of processing. When subscribing to our newsletter, you provide the following data via our online form: Name Email address

III. For what purpose do we request your personal data? We request your personal data for the purpose of identifying you and managing your booking. When you subscribe to our newsletter, your data is added to our mailing list.

Use of Hotel Services: All data processing related to the use of services is based on the Guest’s voluntary consent, and its purpose is to ensure the provision of the service and to maintain communication. The personal data specified in this section—except where otherwise provided in the subsections—are retained by our Company for the period required by applicable tax and accounting regulations, after which they are deleted. For certain services, Guests may provide additional information in the “Message” or “Comment” field, which helps us better understand and fulfill their needs. However, providing such information is not a condition for room reservations or the use of other services. Guests may also subscribe to the newsletter while using any of our services.

1.1. Room Reservation: In the case of online, in-person (paper-based), or telephone reservations, our Company requests/may request the following information from the Guest: First name, last name Address (street, city, postal code, country) Email address Phone number Credit/debit card type Credit/debit card number Cardholder’s name Card expiry date Credit/debit card CVC/CVV code (known as Card Validation Code – CVC2 for MasterCard, or Card Verification Value – CVV2 for Visa International).

1.2. Registration Form: When using hotel services, the Guest is required to complete a registration form, in which they consent to our Company processing the following mandatory data for the purposes of fulfilling legal obligations (particularly those related to immigration and tourist tax regulations), proving such compliance, and identifying the Guest. These data will be processed for as long as the competent authority may verify compliance under the relevant legislation: Full name (first and last name) Address Nationality (processed exclusively for statistical purposes, not traceable back to the individual) Place and date of birth For third-country nationals, the law requires the processing of the following additional data, besides the above personal identifiers: Passport identification data Address of the accommodation provider Dates of arrival and departure at the accommodation Visa or residence permit number Date and place of entry into the country Definition of third-country national: Any person who is not a citizen of Hungary or an EEA (European Economic Area) member state, including stateless persons. EEA member states include the member states of the European Union, as well as Iceland, Liechtenstein, and Norway as associated states, and Switzerland as a state with equivalent status. The provision of these mandatory data by the Guest is a prerequisite for using hotel services. By signing the registration form, the Guest consents to our Company processing and archiving the personal data provided through the form for the purpose of concluding the contract, proving its performance, and asserting any claims, within the above-mentioned retention period. By providing an email address on the registration form, the Guest also has the option to subscribe to the Company’s newsletter.

1.3. Bank Card Data: The bank card, credit card, or bank account details provided during the room reservation process will only be used by our Company to the extent and for the duration necessary to exercise its rights and fulfill its obligations. These data are processed by our Company’s contracted banking partners.