Privacy Policy Boutique Appartement Hévíz
1. General Information
This privacy policy describes how we process your personal data and the rights you have in this regard.
2. Responsible Entity
The entity responsible for processing your data is:
Name: BOUTIQUE APARTEMENST IN HÉVÍZ
Campany name: PEARL CITY SUITES Kft,
Adress. Jókai Str. 2 8380 Hévíz,
Commercial register number : 20-09-076012,
VAT number: 26329060-2-20.
Represented by: Shareholder Abdulla Saad Abdulla Alsharif
Responsible person: Abdulla Saad Abdulla Alsharif
Phone: +36 30 176 30 13
3. Legal Basis
The processing of your data is based on Article 6(1)(b) GDPR (General Data Protection Regulation), as the processing is necessary for the fulfillment of the contract.
4. Definitions
To ensure that personal data is processed lawfully, fairly, and in a transparent manner for the data subject, we inform you about the legal definitions used in this privacy policy:
Personal Data: All information that relates to an identified or identifiable natural person (hereinafter "data subject"). A person is considered identifiable if they can be identified, directly or indirectly, particularly by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific characteristics that express the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Processing: Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Restriction of Processing: The marking of stored personal data with the aim of limiting their future processing.
Profiling: Any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular, to analyze or predict aspects concerning that natural person's work performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements.
Pseudonymization: The processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Filing System: Any structured set of personal data which is accessible according to specific criteria, whether centralized, decentralized, or dispersed on a functional or geographical basis.
Controller: The natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law.
Processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
Recipient: A natural or legal person, public authority, agency, or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
Third Party: A natural or legal person, public authority, agency, or body other than the data subject, controller, processor, and persons who, under the direct authority of the controller or processor, are authorized to process personal data.
Consent: Any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
5. Types of Data Processed
We process the following data:
Name, surname
Address
Telephone number
Email address
Payment data
Billing data
6. Purposes of Processing
The data we process are used solely for fulfilling the contract, such as booking and billing your accommodation.
7. Data Recipients
Your data will only be shared with the necessary parties for contract fulfillment, such as payment processors or suppliers.
8. Data Retention Period
Your data will be stored as long as necessary for contract fulfillment. After the contract is terminated, your data will be retained until final billing and possibly until the expiration of statutory retention periods.
9. Your Rights
You have the following rights regarding your personal data:
Right of Access: You have the right to request confirmation as to whether your personal data are being processed. If so, you have the right to access your data and obtain further information.
Right to Rectification: You have the right to request the immediate correction of incorrect personal data or the completion of incomplete personal data.
Right to Erasure: You have the right to request the immediate deletion of your personal data if certain conditions are met, such as when the data are no longer necessary for the purposes for which they were collected or processed.
Right to Restriction of Processing: You have the right to request the restriction of processing of your personal data under certain conditions, such as when you contest the accuracy of the data.
Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit those data to another controller.
Right to Object: You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
Right to Withdraw Consent: If the processing of your personal data is based on your consent, you have the right to withdraw this consent at any time.
10. Data Security
We employ technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.
11. Changes to the Privacy Policy
We reserve the right to change this privacy policy as necessary to adapt it to changes in legal requirements or modifications of our services or data processing.
12. Contact Information
For questions about the processing of your data or to exercise your rights, please contact the responsible entity mentioned above.