Privacy Policy

Astoria Loft Elite Apartment – Private Accommodation

1. Data Controller Information

Name: Marianna Tavasziné Engi
Address: 1053 Budapest, Múzeum körút 1.
Email: engimarianna@gmail.com
Tax ID: 59299680-1-41
The data controller operates as a private individual and is not considered a business entity.
________________________________________

2. Purpose of Data Processing

The processing of personal data serves the following purposes:
• Managing accommodation bookings (reservation, confirmation, guest identification, invoicing)
• Fulfilling legal obligations (e.g., data provision to NTAK, guest registration)
• Contact and communication with guests
• Complaint handling and enforcement or protection of legal claims
________________________________________

3. Categories of Personal Data Processed

The following personal data may be processed during the booking process:
• Full name of the guest
• Email address
• Phone number
• Address (for invoicing purposes)
• Personal identification data (e.g., passport or national ID number, nationality – for legally required reporting)
• Credit card data is not accessed; payment processing is handled by the respective booking platform (e.g., Airbnb)
________________________________________

4. Legal Basis of Processing

• Contractual necessity for the performance of the accommodation agreement (GDPR Article 6(1)(b))
• Compliance with legal obligations (GDPR Article 6(1)(c)), particularly those related to reporting and registration obligations
• Legitimate interests (GDPR Article 6(1)(f)), including complaint handling and legal defense

________________________________________

5. Data Retention Period

Personal data is retained in accordance with applicable legal requirements:
• Invoicing data is retained for 8 years (as per tax and accounting legislation)
• Reservation data is retained for 2 years following the end of stay
• In the event of legal enforcement, data is retained within the applicable civil law limitation period (typically 5 years)

________________________________________

6. Data Transfers and Data Processors

Personal data may be shared with the following third parties:
• National Tourism Data Supply Centre (NTAK) and the Closed Guest Information Database (VIZA) – in accordance with mandatory legal data reporting obligations
• Accountant – for issuing invoices, if applicable
• Booking platforms (e.g., Airbnb.com, Booking.com, Expedia.com) – in accordance with their respective privacy policies
• Previo.hu Kft. (1119 Budapest, Petzvál József u. 4/A) – a contracted software service provider supporting booking and guest administration. Previo acts as a data processor and handles personal data exclusively on behalf of and under the instructions of the data controller.
All data processors operate under a data processing agreement and act solely in accordance with the controller’s instructions.
________________________________________

7. Rights of the Data Subject

You have the following rights in relation to your personal data:
• Right to access the data stored about you
• Right to rectification or erasure
• Right to restriction of processing
• Right to data portability
• Right to object to processing (in case of legitimate interest)
• Right to lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11.
Website: www.naih.hu
Email: ugyfelszolgalat@naih.hu

________________________________________

8. Automated Decision-Making and Profiling

No automated decision-making or profiling takes place.

________________________________________

This Privacy Policy complies with the requirements of the EU General Data Protection Regulation (GDPR) 2016/679 and the Hungarian Act CXII of 2011 on Information Self-Determination and Freedom of Information.
Version: 10 June 2025