in which we inform you as a visitor of our website, as well as the data management and data protection rules of our accommodation.
1. What basic principles do we follow during our data management?
Our team follows the following basic principles when handling data:
We handle personal data legally and fairly, as well as transparently for you.
We only collect personal data for specific, clear and legitimate purposes and do not process them in a way that is incompatible with the purposes.
The personal data we collect and manage are appropriate and relevant for the purposes of data management, and are limited to what is necessary.
Our team takes all reasonable measures to ensure that the data we manage is accurate and, if necessary, up-to-date, inaccurate
we delete or correct personal data immediately.
We store personal data in such a way that you can only be identified for the time necessary to achieve the goals of personal data management.
By applying appropriate technical and organizational measures, we ensure adequate security of personal data against unauthorized or illegal processing of data, - against accidental loss, destruction or damage
Our team your personal data:
Based on your prior information and voluntary consent, we handle it only to the extent necessary and in each case for a purpose, i.e. we collect, record, systematize, store and use it.
2. Who are we?
The data we manage:
Name of activity |
Legal basis |
Managed data |
Period |
Website visit:
|
|
|
|
Registration on the website:
|
|
|
|
Use of website services:
|
|
|
|
Newsletter service:
|
|
|
|
Direct marketing service:
| |||
Administration:
|
|
|
|
We only ask our website visitors for their personal data if they want to register, log in or make a reservation on our website.
We cannot link personal data provided in connection with registration or using the website's services, and it is not our goal to identify our visitors.
If you have questions about data management, you can request further information by e-mail or by post at booking@lelalakeside.hu
3. What are cookies and how do we manage them?
Cookies are small data files (hereinafter: cookies), which are transferred to your computer through the use of the website, so that they are saved and stored by your Internet browser. The majority of the most commonly used internet browsers (Chrome, Firefox, etc.) accept and enable the download and use of cookies as a default setting, but it depends on you whether you refuse or disable them by changing your browser settings, or you also the cookies already stored on your computer can delete it. The "help" menu item of each browser provides more information on the use of cookies.
There are cookies that do not require your prior consent. Our website provides brief information about these at the start of your first visit, such as authentication, multimedia player, load balancer, session cookies helping to customize the user interface, and user-centric security cookies.
Our team will inform you about cookies that require consent - if the data management already starts when you visit the site - at the start of the first visit and we ask for your consent.
Our team does not use or allow cookies that allow third parties to collect data without your consent.
Acceptance of cookies is not mandatory, however, our team does not assume responsibility if our website does not function as expected if cookies are not allowed.
What cookies do we use?
Type |
Contribution |
Description |
Goal |
Validity |
System cookies. |
It doesn't require. |
Web application firewall session cookie |
Ensuring the operation of the website. |
End of browsing session. |
Tracking cookie. |
It requires. |
For personalization. |
Remembering your settings increases |
30 days. |
Tracking cookie. |
It doesn't require. |
To identify new sessions and visitors, |
When visiting the website, |
30 days. |
You can read more details about third-party cookies here https://www.google.com/policies/technologies/types/, and about data protection https://www.google.com/analytics/learn/privacy.html?hl=hu here.
4. What else do you need to know about the data management of our website?
You voluntarily provide us with your personal data during the registration, booking and contact with our team, which is why we ask that you gradually ensure the veracity, correctness and accuracy of your data, as you are responsible for them. Incorrect, inaccurate or incomplete data can be an obstacle to using our service.
If you do not provide your own personal data, but someone else's, we assume that you have the necessary authorization.
You can withdraw your consent to data management at any time free of charge:
We undertake to register the withdrawal of consent - for technical reasons - with a deadline of 14 days, however, we would like to draw your attention to the fact that in order to fulfill our legal obligations or assert our legitimate interests, we may process certain data even after the withdrawal of consent (E.g. § 169 of the Accounts Act, § 17 of the Accounts Act /THE §)
In the event of the use of misleading personal data, or if one of our visitors commits a crime or attacks our Team's system, we will immediately delete the visitor's data at the same time as canceling their registration, and - if necessary - we will keep them for the duration of the establishment of civil liability or the conduct of criminal proceedings.
5. What do you need to know about our data management for direct marketing and newsletter purposes?
You can give your consent for us to use your personal data for marketing purposes by making a statement during registration or later by modifying your personal data stored on the website's interface (i.e. by clearly declaring your intention to consent). In this case - until you withdraw your consent - we will also process your data for the purpose of direct marketing and/or sending newsletters and we will send you advertising and other mailings as well as information and offers and/or forward newsletters (Grtv. § 6).
You can give your consent for direct marketing and the newsletter together or separately, and you can withdraw it/them free of charge and at any time.
Cancellation of registration is always considered a withdrawal of consent. Withdrawal of consent to data management for direct marketing and/or newsletter purposes is not interpreted as withdrawal of consent to data management related to our online store.
We undertake the registration of the withdrawal or cancellation of individual consents - for technical reasons - with a deadline of 14 days.
6. Other data management issues.
Your data can only be forwarded within the framework defined by law, and in the case of our data processors, we ensure by stipulating contractual conditions that they cannot use your personal data for purposes contrary to your consent. More information can be found in point 2.
Our team abroad is GDPR and Infotv. may only transmit data based on its relevant provisions.
The court, the prosecutor's office and other authorities (e.g. police, tax office, National Data Protection and Freedom of Information Authority) may contact our team to provide information, provide data or make documents available. In these cases, we must fulfill our obligation to provide data, but only to the extent that is absolutely necessary to achieve the purpose of the request.
The contributors and employees of our team involved in data management and/or data processing are entitled to know your personal data to a predetermined extent - under the burden of confidentiality.
We protect your personal data with appropriate technical and other measures, as well as ensure the security and availability of the data, as well as protect them from unauthorized access, alteration, damage, disclosure and any other unauthorized use.
As part of organizational measures, we check physical access in our buildings, we continuously educate our employees and keep paper-based documents locked away with appropriate protection. As part of the technical measures, we use encryption, password protection and anti-virus software. However, we draw your attention to the fact that data transmission via the Internet cannot be considered a fully secure data transmission. Our team does everything in order to make the processes as safe as possible, however, we cannot take full responsibility for data transmission through our website, but we adhere to strict regulations regarding the data received by our team in order to protect your data and prevent illegal access.
With regard to security issues, we ask for your help in carefully keeping your access password for our website and/or website and not sharing this password with anyone.
7. What are your rights and remedies?
You about data management:
• you can request information,
Supervisory Authority: National Data Protection and Freedom of Information Authority
Székhely: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Levelezési cím: 1530 Budapest, Pf.: 5.
Telefon: +36 (1) 391-1400
Fax: +36 (1) 391-1410
E-mail:ugyfelszolgalat@naih.hu
Honlap:https://naih.hu/
Upon your request, we provide information about the data you manage or process by us - or by our commissioned data processor
• about your data,
We will provide our information as soon as possible, within 14 days (but no later than 1 month) from the submission of the application. The information is free of charge, unless you have already submitted an information request to us for the same data area in the current year. The reimbursement you have already paid will be refunded in the event that the data was handled unlawfully or the request for information led to a correction. Information can only be refused in cases provided for by law by indicating the legal place, as well as by providing information about the possibility of judicial remedy or turning to the Authority.
Our team will notify you and all those to whom the data was previously transmitted for the purpose of data management about the correction, blocking, marking and deletion of personal data, unless the failure to notify does not harm your legitimate interests.
If we do not comply with your request for correction, blocking or deletion, within 14 days (but no later than 1 month) after receiving the request, we will inform you in writing or - with your consent - electronically, of the reasons for our refusal and inform you of the legal remedy in court, as well as the appeal to the Authority about the possibility.
If you object to the processing of your personal data, we will examine the objection as soon as possible, within 14 days (but no later than 1 month) from the submission of the request, and we will inform you of our decision in writing. If we have decided that your protest is well-founded, in that case we will terminate the data management - including further data collection and transmission - and block the data, as well as notify all those to whom the personal data affected by the protest have been notified of the protest and the measures taken based on it. previously forwarded, and who are obliged to take action to enforce the right to protest.
We will refuse to comply with the request if we prove that the data processing is justified by compelling legitimate reasons that take precedence over your interests, rights and freedoms, or that are related to the submission, enforcement or defense of legal claims. If you do not agree with our decision, or if we miss the deadline, you can go to court within 30 days from the notification of the decision or the last day of the deadline.
Adjudication of data protection lawsuits falls under the jurisdiction of the court, the lawsuit can be initiated - at the choice of the data subject - before the court of the residence or place of residence of the data subject. A foreign citizen can also file a complaint with the competent supervisory authority according to his place of residence.
We ask that you contact our team before filing your complaint with the supervisory authority or the court - in order to negotiate and resolve the problem as quickly as possible.
8. What are the main governing laws for our activities?
Regulation (EU) 2016/679 of the European Parliament and of the Council on the processing of personal data of natural persons (GDPR).
9. Modification of data management information
Our team reserves the right to amend this Data Management Information, of which it will inform the affected parties in an appropriate manner. Information related to data management is published on lelalakeside.hu/en/adatvedelmi-tajekoztato the website.