Privacy policy
Offi ház Eger
Privacy Policy
Name of the data controller: Goldener Löwe Hotel Kft.
Address of the data controller: 3300, Eger Dobó tér 5.
Contact details of the data controller:
- Phone: +36 36 311 005
- Email: offihaz@offihaz.hu
- Website: offihaz.hu
I. Data Processing Information - General Principles and Rules
- Your personal data as the data subject (hereinafter: User) may only be processed if the User consents to it, or in cases of mandatory data processing, if the law or – based on the authorization of the law – a local government decree orders it for public interest purposes defined therein.
- Personal data may also be processed if obtaining the User’s consent is impossible or would involve disproportionate costs, and the processing of personal data is necessary for the fulfillment of a legal obligation incumbent on the data controller, or for the enforcement of the legitimate interest of the data controller or a third party, and the enforcement of this interest is proportionate to the restriction of the right to the protection of personal data.
- Users who have not reached the age of 18 and otherwise incapacitated Users cannot personally avail themselves of the services offered by Offi Ház Eger; consent can only be given by their legal representative. The Service Provider is not able to verify the authority of the consenting person, or to know the content of the legal representative’s statement. Therefore, the User or their legal representative ensures that the consent complies with the legal requirements. The Service Provider considers the consent of the legal representative to be given appropriately.
- If personal data is collected with the consent of the data subject, the data controller may process the collected data for the purpose of fulfilling a legal obligation or for the enforcement of the legitimate interest of the data controller or a third party, even without additional consent, and after the withdrawal of the data subject’s consent.
- Personal data may only be processed for specific purposes, for the exercise of rights, and for the fulfillment of obligations.
- Only personal data that is essential for the realization of the purpose of data processing and suitable for achieving the purpose may be processed. Personal data may only be processed to the extent and for the duration necessary for the purpose.
- During data processing, it must be ensured that the data is accurate, complete, and, if necessary for the purpose of data processing, up-to-date, and that the User can be identified only for the time necessary for the purpose of data processing.
- The User may request information from the Service Provider in writing about the processing of their personal data, the correction of their personal data, as well as the deletion or blocking of their personal data – except for mandatory data processing.
- Before starting any data processing, the Service Provider informs Users whether the data processing is based on consent or is mandatory. The information regarding the processing of User data is clear, understandable, and detailed, including the purpose and legal basis of the data processing, the persons entitled to process and process the data, and the duration of the data processing. It is the User’s duty to read the information regarding data processing before giving explicit consent, and it is the User’s responsibility to consent to data processing only if they have accepted the conditions of data processing.
- Upon written request from the User, the Service Provider provides separate information about the data managed by the Service Provider or processed by the Service Provider or its authorized data processor, the source of the data, the purpose of the data processing, its legal basis, duration, the name and address of the data processor, and the data processing-related activities, and – in case of transfer of personal data – the legal basis and recipient of the data transfer. The Service Provider is obliged to provide the information in a clear form, in writing, within the shortest possible time, but not later than within 25 days of the submission of the User’s request. The information is free of charge if the requester has not submitted a request for information to the Service Provider for the same data scope in the current year. In other cases, a fee may be charged. The already paid fee must be refunded if the data was processed unlawfully or if the request for information led to a correction.
The scope of processed data:
- General browsing During the general browsing of our pages and viewing generally accessible content, we do not collect or store personal data. Additionally, we do not track your browsing.
- Order / inquiry for individual guests For inquiries: Full name, email address, phone number For orders and reservations: First name, last name, email address, country, phone number, address (city, postal code, street-house number). For orders, we may involve additional data processors.
Adatfeldolgozó neve:
NetHotelBooking Kft. | 8200 Veszprém, Boksa tér 1/A | A RESnWEB rendszer révén az online szállásfoglalás lehetőségének biztosítása |
Phone: +36 88 783 704
Email: info@resnweb.com
Address: 8200 Veszprém, Ádám Iván u. 1.
Order / inquiry for companies
- For inquiries: Full name, email address, phone number, company name, company address
- For orders: Ordering company’s name, address, contact person’s name, phone, email, billing address, tax number, company registration number, mailing address. •
- Personal data processed for voucher purchases: Full name, email address, phone number Applying for hotel or restaurant job offers: Full name, email address, phone number, current employment status
The rights of the data subject (the person whose personal data our company processes) include:
- The right to request access to their personal data,
- The right to request correction of their data,
- The right to request deletion of their data,
- The right to request the restriction of the processing of personal data, under the conditions set out in Article 18 of the GDPR (meaning that our company should not delete or destroy the data until requested by a court or authority, but for a maximum of thirty days, and beyond that, not process the data for other purposes),
- The right to object to the processing of personal data,
- The right to exercise the right to data portability. Under this right, the data subject is entitled to receive their personal data in a Word or Excel format and is also entitled to transmit this data to another data controller upon request to our company.
The duration of data processing is the period during which the customer relationship between the User and the Service Provider exists, or the period until the User withdraws their consent.
The customers right to access
The data subject is entitled to receive feedback from the data controller as to whether the processing of their personal data is ongoing. If the processing of personal data is ongoing, the data subject is entitled to access the personal data and the following information:
- The purposes of the data processing;
- The categories of personal data concerning the data subject;
- The names of recipients or categories of recipients to whom the personal data have been or will be disclosed, including recipients in third countries (outside the European Union) or international organizations;
- The planned duration of storage of the personal data;
- The right to rectification, erasure, or restriction of processing, and the right to object;
- The right to lodge a complaint with the supervisory authority;
- Information about the sources of the data;
- The fact of automated decision-making, including profiling, and meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
Use of Cookies on the Website
To facilitate the use of the website and related services, we use cookies. Cookies are small data units that your browser stores on your computer’s hard drive and are essential for the full use of the website. We use cookies to better understand how users use the website and to enable improved navigation. For example, they help determine whether the user has visited the website before or is visiting for the first time. The cookies we use do not store personal data or information suitable for identifying other individuals. If you do not want to receive cookies, you can set your internet browser to automatically block and delete all cookies from your computer’s hard drive or receive a warning before a cookie is saved.
By accepting the information about the cookies that appear on the first visit, the user consents to the Provider recording the data and information described in this statement, as well as placing the necessary cookies for recording. Additionally, you can delete previously allowed cookies at any time.
Google AdWords
The website uses the Google Analytics service, which is an analytical service provided by Google and is part of Google AdWords. It operates as follows: when you click on an ad displayed by Google through AdWords, AdWords stores a conversion tracking cookie (“conversion cookie”) on your computer’s hard drive. These cookies expire after 30 days and do not allow the user to be individually identified. If you visit certain pages on the website, we and Google recognize that you clicked on the ad and were redirected to that page.
The information acquired through these cookies is intended to compile statistics for AdWords customers. Through these statistics, we can determine the total number of users who clicked on the ad displayed by Google and visited the page with the conversion tracking tag.
The Google Analytics service is also used for statistical purposes to analyze AdWords data and “DoubleClick” cookies. If you do not agree with this, you can disable the function through the Ad Preferences Manager/Ad Settings (http://www.google.com/settings/ads/onweb).
Social Media usage (Social plug-ins)
The website allows the use of social media plug-ins, especially from ‘Facebook’ and ‘Instagram.’ If you click on one of these buttons, you simultaneously share information with the social media service provider. The provider may display this information on the Provider’s social media profile and share it with their contacts.
We have no influence on the nature and extent of the data collected by these social media platforms. If you would like more information about the information collected by social media platforms, their purposes and scope, as well as the processing and use of such information, and the rights and privacy settings options to protect your privacy, please refer to the privacy policies of the relevant social media platforms. The privacy policy for Facebook can be found here: http://www.facebook.com/about/privacy/ and http://www.facebook.com/help/?faq=186325668085084. The privacy policy for Instagram is available here: https://hu-hu.facebook.com/help/instagram/155833707900388/“
Legal Remedies
If you believe that your right to the protection of personal data has been violated, you have the right to seek redress according to the relevant laws from the competent authorities, namely the National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C).
If you feel that your right to the protection of personal data has been violated by the Service Provider, you can also take legal action against them. The court will handle the case promptly, and the jurisdiction lies with the court. The lawsuit can be initiated before the court chosen by the User, either based on their place of residence or stay.
