The purpose of this notice is to explain, in plain language, what personal data the operator of Pool and Chill Balaton processes, for what purpose, on what legal basis, and for how long, and what rights you, as the data subject, may exercise.
The data processing complies with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, "GDPR"), Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information, and the relevant sector-specific legislation.
Name: Róbert Korcsmáros (private individual with a tax number, private accommodation provider)
Service name: Pool and Chill Balaton
Registered address: 8171 Balatonvilágos, Petőfi Sándor utca 45., Hungary
Address of the accommodation: Balatonvilágos, József Attila utca 127., Hungary
Tax number: 91904418-1-34
NTAK registration number: MA26125508
Tax status: exempt from VAT (the controller is not liable for VAT)
Email: poolandchillbalaton@gmail.com
Phone: +36 30 556 5202
Website: https://poolandchillbalaton.hu
Facebook: Pool & Chill Balaton - Medencés apartmanház
Instagram: dbogi_kozmetikus
Represented by: Róbert Korcsmáros
The controller is not required to and does not appoint a dedicated Data Protection Officer (DPO). Data protection questions may be directed to the contact details above.
Purpose: recording and confirming bookings, performing the accommodation service contract, and communicating with the Guest in connection with the booking.
Data processed: the name, email address and phone number of the person making the booking; booking details (apartment, arrival and departure dates, number of guests); the number and age of guests (including children), needed to determine occupancy and the tourist tax; billing details; and the content of any message sent.
Legal basis: performance of a contract (GDPR Art. 6(1)(b)). The person making the booking must be at least 18 years old.
Retention period: 5 years following performance of the contract or the limitation of claims arising from the service (Section 6:22 of the Hungarian Civil Code). For data linked to accounting documents, see Section 3.4.
Bookings are made through the WP Booking System, which stores the data in the controller's WordPress database on the website's hosting server.
Purpose: fulfilling the statutory obligations applicable to accommodation providers, keeping a guest register, and transmitting data to the National Tourism Data Supply Centre (NTAK) and the Guest Information Closed Database (VIZA).
Data processed: the guest's family and given name, birth name, place and date of birth, gender, nationality, mother's name, the type and number of an identity document suitable for identification (identity card, passport or driving licence), address, and the start and end date of the stay.
The data is recorded at check-in using the property management software (vendégem.hu).
Legal basis: compliance with a legal obligation (GDPR Art. 6(1)(c)), pursuant to Act CLVI of 2016 on the State Tasks Related to the Development of Tourism Areas and its implementing decrees.
Retention period: the controller processes guest data until the last day of the year following the year in which it was recorded, after which it is irreversibly deleted.
Purpose: fulfilling, declaring and paying the tourist tax obligation owed to the local government of Balatonvilágos.
Data processed: the number and age of guests (to determine any tax exemption), the number of guest nights, and any circumstance giving rise to an exemption.
The tourist tax is included in the stated accommodation price.
Legal basis: compliance with a legal obligation (GDPR Art. 6(1)(c)), pursuant to Act C of 1990 on Local Taxes and the relevant local government decree.
Retention period: until the limitation period for the tax assessment expires, i.e. until the end of the 5th year following the declaration (Act CL of 2017 on the Rules of Taxation).
Purpose: issuing an invoice for the service and retaining accounting documents.
Data processed: billing name and address, and, for companies, company name and tax number, together with the description and amount of the service.
Invoices are issued through the NAV Online Invoicing system.
Legal basis: compliance with a legal obligation (GDPR Art. 6(1)(c)), pursuant to Section 169 of Act C of 2000 on Accounting and Act CXXVII of 2007 on Value Added Tax.
Retention period: 8 years following the issuance of the document (Section 169, Act on Accounting).
Purpose: responding to enquiries received via the website's contact form, by email or by phone, and maintaining contact.
Data processed: name, email address, phone number, and the content of the message.
Messages submitted via the contact form (an Elementor or HTML-based form) are sent to the controller's email address, poolandchillbalaton@gmail.com.
Legal basis: the data subject's consent (GDPR Art. 6(1)(a)), or, for enquiries relating to a booking, performance of a contract or steps taken prior to entering into a contract (GDPR Art. 6(1)(b)).
Retention period: up to 1 year following resolution of the enquiry or withdrawal of consent; for booking-related enquiries, for the duration of the contractual data processing.
The controller operates a single camera covering a closed, privately used part of the garden of the accommodation. The camera does not monitor any area used by or accessible to guests.
Purpose: protection of property, safeguarding the controller's assets.
Data processed: footage of the closed area within the camera's field of view.
Legal basis: the controller's legitimate interest (GDPR Art. 6(1)(f)). The controller has carried out a balancing-of-interests assessment and concluded that the property protection interest is proportionate to the privacy of data subjects, given that the camera monitors an area not visited by guests.
Retention period: footage is stored for a short period, up to 8 days, after which it is automatically overwritten, unless retention is required to assert a legal claim or for official proceedings.
The website uses cookies necessary for its operation, as well as, subject to consent, statistical and marketing cookies and measurement tools.
Through the Google Site Kit plugin, the following Google services are integrated into the website: Google Analytics (visitor statistics), Google Ads (advertising management, conversion tracking) and Google Tag Manager (tag management). The website also uses the Meta Pixel (Facebook Pixel) for advertising and measurement purposes.
Cookies and measurement tools requiring consent are only activated if you give your explicit consent through the cookie consent interface shown on the website (Simple GDPR Cookie Compliance). Consent can be withdrawn at any time, and cookies can also be deleted or blocked in your browser settings.
Purpose: ensuring the website functions correctly, compiling visitor statistics, targeting advertisements, and measuring the effectiveness of advertising campaigns.
Legal basis: for cookies strictly necessary for operation, the controller's legitimate interest (GDPR Art. 6(1)(f)); for all other cookies and measurement tools, the data subject's consent (GDPR Art. 6(1)(a)).
Retention period: until each cookie's own expiry, or until consent is withdrawn.
The controller operates Facebook and Instagram pages. If you follow, like, or interact with these pages (comments, messages, reactions), the controller processes the data you provide for the purpose of communication and information, based on your consent. Information about the platforms' own data processing is provided by Meta Platforms Ireland Limited.
To achieve the above purposes, the controller uses the following data processors, who process data solely on the controller's instructions.
Hosting provider: Netmask Interactive Kft. (1131 Budapest, Nővér u. 110., Hungary, company registration number: 01-09-954570, email: ugyfelszolgalat@netmask.hu). Data processed: all data stored on the website and in the booking system.
Web analytics and advertising management: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Data processed: data related to website use collected via Google Analytics, Google Ads and Google Tag Manager.
Advertising management and measurement: Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Data processed: website-usage data collected via the Meta Pixel.
Tourism-related data reporting takes place through the vendégem.hu property management software, pursuant to statutory obligations.
If the controller engages an external accountant for bookkeeping purposes, billing and accounting data will be transferred to them under a data processing agreement.
Under statutory reporting obligations, the controller transfers data to the National Tourism Data Supply Centre (NTAK) and the VIZA system, the National Tax and Customs Administration (NAV, in connection with invoice data reporting), and the local government of Balatonvilágos (tourist tax).
Bank transfers are processed with the involvement of MBH Bank Nyrt.
In connection with Google's and Meta's services, data may be transferred outside the European Economic Area, to the United States. The legality of such transfers is ensured by the EU-U.S. Data Privacy Framework, based on the European Commission's adequacy decision, and/or the standard contractual clauses approved by the European Commission.
The controller applies appropriate technical and organisational measures to protect personal data. The website is accessible over an encrypted (SSL/TLS) connection, access to the systems is password-protected, and only authorised persons have access to the data.
Under the GDPR, you have the following rights, which you may exercise using the controller's contact details above:
The controller will respond to your request within 1 month at the latest, which may be extended by a further 2 months where justified.
If you believe that the processing of your data does not comply with applicable law, please contact the controller directly using the contact details above in the first instance.
You may also lodge a complaint with the supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Phone: +36 1 391 1400
Email: ugyfelszolgalat@naih.hu
Website: https://naih.hu
You may also bring proceedings before a court in the event of a breach of your rights. Proceedings may be brought before the tribunal competent for the data subject's place of residence or stay.
The controller reserves the right to unilaterally amend this notice. The version in effect at any given time is available on the website. In the event of a material change, the controller will publish a notice about the change on the website.