Privacy Policy
Sunset Apartmanház – Balatonfüred
Effective: 2026.11.02 onwards
Sunset Apartmanház (hereinafter: the Accommodation Provider) values the personal data of its guests and website visitors, as well as their security. This data processing notice outlines what personal data the Accommodation Provider processes, for what purpose, and on what legal basis during the use of the website, contact, accommodation booking, and the use of services.
During data processing, the Accommodation Provider acts in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), as well as relevant Hungarian legislation.
1. Data Controller Details
-
-
- Name of the Accommodation Provider: Sunset Apartmanház
- Registered Office / Operator Name: Tóváriné Stocker Éva
- Registered Office: 8230 Balatonfüred Madách Imre u. 7.
- Accommodation Address: 8230 Balatonfüred Madách Imre u. 7.
- Tax Number: 91458670-1-39
- Email Address: evakagylo@gmail.com
- Phone Number: +36 20 266 3424
- Website: www.sunsetapartmanhaz.hu
-
Hereinafter, the above-mentioned person or entity shall be considered the data controller.
2. Scope of Personal Data Processed and Purpose of Data Processing
2.1. Contact, Inquiry
If a guest makes an inquiry via email, phone, or the contact form on the website, the Accommodation Provider may process the following data:
-
-
- name;
- email address;
- phone number, if provided;
- content of the message;
- other voluntarily provided data related to the inquiry.
-
Purpose of data processing: to respond to inquiries and maintain contact.
Legal basis: taking steps at the request of the data subject prior to entering into a contract, or the legitimate interest of the data controller, depending on the nature of the specific inquiry.
Retention period: until the inquiry is closed, or for the period necessary to enforce any potential claims, taking into account relevant legislation.
2.2. Accommodation Booking and Provision of Accommodation Services
In case of a booking, personal data necessary for organizing and fulfilling the service will be processed.
The scope of data concerned may include, depending on the booking method and legal obligations:
-
-
- the booker’s name and contact details;
- the booking date and duration of stay;
- the number of guests and booking details;
- data related to payment and invoicing;
- guest data required by law.
-
Purpose of data processing: recording the booking, maintaining contact, fulfilling accommodation services, invoicing, and complying with legal obligations.
Legal basis: performance of a contract, compliance with a legal obligation, or the legitimate interest of the data controller, depending on the nature of the specific data processing.
Retention period: the retention period for booking data depends on the type of data and related legal obligations. Data related to accounting documents must be retained for the period specified by accounting regulations.
2.3. Mandatory Recording and Transmission of Guest Data
Based on legislation related to accommodation services, the Accommodation Provider may be obliged to record, process, and transmit specific guest data to designated systems.
The scope of data, method of recording, retention period, and range of recipients depend on current legal requirements.
The legal basis for data processing is compliance with a legal obligation applicable to the Accommodation Provider.
2.4. Online Payment using SimplePay
As SimplePay online payment is available on the website, payment transactions are processed through the SimplePay system.
In connection with payment, depending on the nature of the transaction, data such as name, email address, transaction ID, payment amount, date of payment, and information regarding the success of the payment may be processed.
Bank card details must be entered into the payment service provider’s system; the Accommodation Provider cannot request bank card details via email or other channels not designated for this purpose.
During payment, SimplePay processes data according to the role and conditions defined in its own data processing notice. The Accommodation Provider may process transaction data necessary for the completion of the booking and payment.
SimplePay’s data processing notice is available here: https://simplepay.hu/adatkezelesi-tajekoztatok/
2.5. Invoicing and Accounting
The Accommodation Provider processes data necessary for issuing invoices, accounting, and fulfilling tax obligations.
Purpose of data processing: fulfilling invoicing, accounting, and tax obligations.
Legal basis: compliance with a legal obligation.
Retention period: the statutory retention period for accounting documents, generally at least 8 years.
3. Website Operation and Cookies
During the operation of the website, technical data such as IP address, browser type, operating system, and time of visit may be recorded in the logs of the hosting provider or systems used for website operation.
The website may use cookies for proper functioning, retaining user settings, and – if applied – for statistical or marketing purposes.
For the use of non-essential cookies, the Accommodation Provider requests prior consent in accordance with relevant regulations.
Detailed information about the cookies actually used, their purpose, lifespan, and management methods is provided in a separate cookie policy or the cookie settings interface available on the website.
4. Data Processors and Data Transfer
During the operation of its services, the Accommodation Provider may use service providers belonging to the following categories:
-
-
- web hosting and website operator;
- booking and accommodation management system provider;
- online payment service provider;
- invoicing and accounting service provider;
- IT systems used or designated based on legal regulations.
-
Data processors may only access data to the extent necessary for the performance of the service and in accordance with contractual and legal conditions applicable to them.
The Accommodation Provider only transfers personal data to third parties with a proper legal basis, to the extent necessary for the performance of the service, or based on a legal obligation.
5. Data Security
The Accommodation Provider implements appropriate technical and organizational measures to protect personal data from unauthorized access, alteration, disclosure, loss, or destruction.
6. Rights of Data Subjects
The data subject is entitled, according to the relevant legal conditions, to:
-
-
- request information about the processing of their personal data;
- request access to their processed personal data;
- request the rectification of inaccurate data;
- request the erasure of data, if the legal conditions for it exist;
- request the restriction of data processing;
- object to data processing based on legitimate interest;
- withdraw their consent at any time in the case of consent-based data processing;
- exercise the right to data portability in cases defined by law;
- lodge a complaint with the competent supervisory authority.
-
Requests can be submitted using the contact details listed in point 1 of the Accommodation Provider. The Accommodation Provider processes requests according to GDPR regulations.
7. Complaint and Legal Remedy
If the data subject believes that the processing of their personal data violates the relevant data protection regulations, they may lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH).
NAIH contact details:
-
-
- Address: 1055 Budapest, Falk Miksa utca 9–11.
- Postal Address: 1363 Budapest, Pf. 9.
- Website: https://www.naih.hu/
-
The data subject may also turn to the court if the legal conditions are met.
8. Amendment of the Notice
The Accommodation Provider reserves the right to amend this notice, especially in the event of legislative changes or changes in data processing practices.
The currently effective data processing notice is available on the Accommodation Provider’s website.
Last updated: 2026.11.02.