Privacy Policy

Astoria Loft Elite Apartment – Private Accommodation

This Privacy Policy complies with the requirements of the EU General Data Protection Regulation (GDPR) 2016/679 and the Hungarian Act CXII of 2011 on Information Self-Determination and Freedom of Information.

1. Data Controller / Who We Are

Name: Marianna Tavasziné Engi
Role: Private accommodation provider
Address: 1053 Budapest, Múzeum körút 1., Hungary
Email: astoria.eliteapartment@gmail.com / engimarianna@gmail.com
Phone: +36 30 646 8498
Website: https://astoriaeliteapartment.com/
Tax number: 59299680-1-41
NTAK registration number: MA24105209
The data controller operates as a private individual providing short-term accommodation services in Budapest.
________________________________________

2. Categories of Personal Data Collected

During booking and service provision, the following categories of personal data may be processed:

• Full name
• Address
• Date and place of birth
• Nationality
• Passport/ID data (VIZA/NTAK legal requirement)
• Email address
• Phone number
• Payment information
• IP address
• Booking details

Credit card data is not directly accessed by the data controller; payment processing is handled by the respective booking platform (e.g., Airbnb, Booking.com).

________________________________________

3. Purpose of Data Processing

Personal data is processed for the following purposes:

• Managing accommodation bookings (reservation, confirmation, guest identification, invoicing)
• Providing accommodation services
• Communication before, during, and after the stay
• Fulfilling legal obligations (Hungarian tourism and tax law, NTAK/VIZA reporting)
• Complaint handling and enforcement or protection of legal claims
• Issuing invoices via Szamlazz.hu
• Requesting guest reviews (legitimate interest)
• Sending newsletters (only with explicit consent)

________________________________________

4. Legal Basis of Processing (GDPR Article 6)

Data processing is based on:

• Contract performance (Article 6(1)(b))
• Legal obligation (Article 6(1)(c))
• Legitimate interest (Article 6(1)(f))
• Consent (Article 6(1)(a))

________________________________________

5. Data Transfers and Data Processors

Personal data may be shared with the following entities:

Mandatory authorities

• National Tourism Data Supply Centre (NTAK)
• Closed Guest Information Database (VIZA)

Service providers (data processors)

• Previo s.r.o. – property management and booking system
• Previo.hu Kft. (1119 Budapest, Petzvál József u. 4/A) – contracted IT provider
• Szamlazz.hu – invoicing system
• Hostinger – website hosting provider
• Accountant – if applicable
• Booking platforms (e.g., Airbnb, Booking.com, Expedia.com)

All data processors act under data processing agreements and process data solely on behalf of and according to the instructions of the data controller.

________________________________________

6. Data Retention Period

Personal data is retained as follows:

• Invoices: 8 years (Hungarian accounting law)
• Reservation data: 2 years after the end of stay
• Tourism/NTAK data: according to legal requirements
• Newsletter data: until consent is withdrawn
• Legal claims: up to 5 years (general civil law limitation period)

________________________________________

7. Data Subject Rights

You have the following rights:

• Right of access to your personal data
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object (in case of legitimate interest)

You also have the right to lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9-11.
Website: www.naih.hu
Email: ugyfelszolgalat@naih.hu

________________________________________

8. CCTV Surveillance

CCTV cameras operate in the building staircase.

________________________________________

Data controller: Condominium Association
The accommodation provider has no access to the recordings.

________________________________________

9. Automated Decision-Making and Profiling

No automated decision-making or profiling is carried out.

________________________________________

10. Final Provisions

This Privacy Policy is published on the website and booking platforms.

________________________________________

Last updated: 1 April 2026

COOKIE POLICY

Website: https://astoriaeliteapartment.com/ Hosting provider: Hostinger
This website uses cookies in accordance with the GDPR and the Hungarian Information Act.

1. What Are Cookies?

Cookies are small text files stored on your device when you visit a website.

________________________________________

2. Types of Cookies Used

• Essential Cookies
  Necessary for website functionality (booking form, security).
• Analytics Cookies
  Used to analyze website traffic (e.g., Google Analytics – if activated).
  
• Marketing Cookies
  

  Used only with user consent for marketing purposes.

________________________________________

3. Legal Basis

• Essential cookies: legitimate interest (GDPR 6(1)f)
• Analytics & marketing cookies: consent (GDPR 6(1)a)

________________________________________

4. Managing Cookies

Users can:

• Accept or reject cookies via cookie banner
• Modify browser settings
• Withdraw consent anytime

________________________________________

5. Third-Party Cookies

Third-party services (e.g., booking widgets, analytics providers) may place cookies in accordance with their own privacy policies.

________________________________________

Last updated: 1 April 2026