HILTON WEBSHOP
PRIVACY POLICY
Last modified: 26 July 2024
1. Data Controller
Danubius Hotels Zrt.
Full name: Danubius Szállodaüzemeltető és Szolgáltató Zártkörűen Működő Részvénytársaság
Registered office: 1051 Budapest, Szent István tér 11.
Company registration number: 01-10-041120
Representative: Balázs Kovács CEO
e-mail: adat@danubiushotels.com
(hereinafter referred to as "Danubius")
2. Processors and other data controllers
The hosting service is provided by MediaCenter Hungary Kft (headquarters: 6000 Kecskemét, Sosztakovics u. 3. II/6) as data processor;
Horizont Informatika Kft. (registered office: 4034 Debrecen, Repce u. 3., company registration number: 09-09-010685, tax number: 13282895-2-09) is the data processor;
For invoicing, we use the system of számlázz.hu (KBOSS.hu Kft.; registered office: 1031 Budapest, Záhony utca 7.), who acts as data processor.
In case of payment, you will be redirected to the OTP Bank site, and the data transmitted to OTP Mobil Kft. as data processor will be as follows. The nature and purpose of the data processing activities carried out by the data processor can be found in the SimplePay Data Processing Information Notice, at the following link: https://simplepay.hu/vasarlo-aff
Data processing
| Data processing | Purpose of the data processing | Retention time | Legal basis of the data processing |
| A. Data processed during a webshop purchase: Name, e-mail address, billing address. | Execution of contract | Until the execution of contract (The proof of purchase will be kept for 8 years/ point C) | Data processing necessary for the performance of the contract. Providing the data is a condition of purchase (Article 6(1)(b) GDPR) |
| B. Contact details of companies: name, company telephone number, company e-mail address | Business contact in relation to the order | Until the business relationship continues or the contact person changes | Legitimate interest in the performance of the contract and in maintaining contact. You may object to the processing of your personal data at any time by sending an e-mail (Article 6(1)(f) GDPR). |
| C. Data on the invoice issued in the case of an individual: name, address | Compliance with a legal obligation | 8 years | Retention is necessary for tax and accounting purposes. Provision of the data is a condition of compliance (Article 6(1)(c) GDPR) |
| D. Personal data provided in requests: Name, e-mail address, telephone number | Responding to enquiries and handling complaints | 5 years | Consent, which you provide by sending the request. Consent may be withdrawn at any time by e-mail. (Article 6 (1) (a) GDPR) |
| E. Record of a consumer complaint | Compliance with a legal obligation | 3 years | Retention is necessary due to legal requirements for consumer protection. The provision of the data is a condition for the complaint to be recorded (Article 6(1)(c) GDPR). |
Your rights
Where the legal basis for processing is the performance of a contract (3/A): you may at any time request information (access) about the processing of your personal data, request the rectification, erasure, restriction of processing or request the transfer of your personal data.
Where the legal basis for processing is your consent (3/D): you may at any time withdraw your consent, request information (access) about the processing of your personal data, request the rectification, erasure or restriction of the processing of your personal data or request the transfer of your personal data.
Where the legal basis for the processing is the fulfilment of a legal obligation (3/C;3/E): you may at any time request information (access) about the processing of your personal data, request the rectification of your data or restrict the processing of your data.
If the legal basis for processing is our legitimate interest (3/B): you may at any time request information (access) about the processing of your personal data, request the rectification, erasure or restriction of the processing of your data, or object to the processing of your data.
If you feel that the processing of your personal data is in breach of the provisions of the General Data Protection Regulation (GDPR), you can lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH) or take your case to court.
If you wish to exercise any of these rights, please email us at adat@danubiushotels.com . To learn more about your rights, please see our full Privacy Notice at www.danubiushotels.hu/adatvedelem .
[1] Under Section 169(2) of Act C of 2000 on Accounting, "Accounting documents directly and indirectly supporting the accounting settlements (including general ledger accounts, subledgers and detailed records) must be kept in legible form for at least 8 years, in a way that allows for retrieval based on the reference to the accounting records”
[2] Under Section 17/A(7) of Act CLV of 1997 on Consumer Protection, "The company must keep the record of the complaint and a copy of the response for three years and present it to the inspection authorities upon request."