Géza Mezei, operator of Borostyán Guesthouse (hereinafter: Service Provider or Data Controller), undertakes appropriate measures to ensure that all information referred to in Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR) and all communications under Articles 15 to 22 and 34 relating to processing are provided to data subjects in a concise, transparent, intelligible, and easily accessible form, using clear and plain language.
1. Data Controller Details
- Name: Géza Mezei
- Registered address / Accommodation: Kossuth Lajos út 50, 3246 Mátraderecske, Hungary
- Email: info@borostyanvendeghaz-matraderecske.hu
- Phone: +36 20 446 1216
- NTAK Registration Number: MA22039829
- Tax ID: 57720357-1-30
2. Scope of Processed Data, Purposes, and Legal Basis
| Purpose of Processing | Categories of Data | Legal Basis | Retention Period |
|---|---|---|---|
| Inquiries & Communication | Name, email address, phone number, message details | Consent of the data subject (GDPR Art. 6(1)(a)) | Up to 1 year following closure of the inquiry |
| Accommodation Booking & Guest Registration | Name, contact details, arrival/departure dates, guest count, address, ID document data | Performance of a contract (GDPR Art. 6(1)(b)) and legal obligation (Hungarian VIZA registry) | 5 years following completion of the stay |
| Invoicing & Financial Compliance | Name, billing address, payment details | Legal obligation (Hungarian Accounting Act, GDPR Art. 6(1)(c)) | 8 years from the date of invoice issuance |
| Property & Guest Protection (CCTV) | Video and audio recordings in the enclosed courtyard | Legitimate interest of Controller (GDPR Art. 6(1)(f)) | Maximum 3 days from recording |
3. Courtyard CCTV Monitoring (Video & Audio)
An electronic security camera surveillance system operates in the enclosed courtyard and parking area of the guesthouse for the protection of guests, staff, and property.
The cameras monitor exclusively the outdoor yard and vehicle parking areas; private rooms, indoor spaces, and bathrooms are not monitored.
The surveillance system is technically capable of and actively performs both video recording and audio recording in the courtyard area.
Recordings are stored securely on the Controller’s own hardware, accessible solely by the Controller, and are retained for a maximum of 3 days unless retained longer due to an official police, court, or legal investigation.
Legal basis: Legitimate interest of the Data Controller (GDPR Article 6(1)(f)).
4. Cookies and External Services
This website is statically generated (Static Site Generation), performs no visitor profiling or behavioral advertising tracking, and does not deploy analytical or marketing cookies. Browsing this website creates no proprietary tracking cookies and uses no persistent client storage (localStorage).
External Services:
- Google Maps (Two-Click Privacy Protection): The interactive map embedded across the website (homepage and Contact page) is inactive by default and loads strictly upon the visitor’s explicit interaction (clicking the "Load interactive map" button). Prior to activation, no connection, network request, or cookie exchange occurs with Google Maps servers. Once loaded, the privacy policy of Google LLC applies (policies.google.com/privacy).
- Google Reviews: Guest reviews displayed on the site are pre-fetched during publication from a static file served directly by our own server, eliminating client-side API requests to Google Places.
- Locally Hosted Fonts (Self-Hosted): The Plus Jakarta Sans font is served directly and exclusively from our own server as static webfont files. No external connections are made to third-party font networks (such as Google Fonts).
Because the website uses no consent-required tracking cookies or persistent user trackers, an intrusive cookie banner popup is not required.
5. Data Transfers and Processors
- Accountant (fulfillment of statutory tax and accounting obligations).
- Public authorities (National Tax and Customs Administration - NAV, National Tourism Data Center - NTAK, VIZA registry) strictly based on legal obligations.
- Personal data is never transferred, traded, or sold to third parties for marketing purposes. We do not operate email newsletters.
6. Data Subject Rights and Remedies
You have the right to request access to your personal data, request rectification or erasure of your personal data, request restriction of processing, and object to processing by contacting us at info@borostyanvendeghaz-matraderecske.hu.
Should you have any concerns or complaints regarding our data handling, we kindly ask you to contact us directly first so that we may promptly resolve the issue!
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C, Hungary
Email: ugyfelszolgalat@naih.hu | Website: www.naih.hu
Phone: +36 1 391 1400
7. Amendments to this Privacy Policy
We reserve the right to amend this Privacy Policy, with appropriate notice provided to data subjects. The current version will always remain accessible on this website.
8. Governing Legislation
Applicable primary legal regulations governing our processing operations:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
- Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (Info Act)
- Act V of 2013 on the Civil Code (Ptk)
- Act CVIII of 2001 on Electronic Commerce and Information Society Services (Eker Act)
- Act C of 2003 on Electronic Communications (Ehtv)
- Act CLV of 1997 on Consumer Protection (Fogyv Act)
- Act CLXV of 2013 on Complaints and Public Interest Notifications (Pktv)
- Act XLVIII of 2008 on Essential Conditions of and Certain Limitations on Economic Advertising Activity (Grtv)