Privacy Policy of Hellohungary Touristic Portal
Summary of the Privacy Policy
The purpose of the Summary of the Privacy Policy is to briefly describe the scope of personal data we process and the method of data processing in connection with your use of the website (‘Website’) available at https://hellohungary.hu/.
Controller
Controller is Hellohungary Turisztikai Szolgáltató Korlátolt Felelősségű Társaság (seat: 1011 Budapest, Szilágyi Dezső tér 1., e-mail: adatvedelem@hellohungary.hu; ‘Hellohungary’, or ‘us’).
Purpose and legal basis of processing data
In connection with the maintenance and the providing of the Website as an information society service, we may process your personal data for the following purposes:
- Log in, managing user accounts: processing your data is necessary for us to identify you as a user and to provide you with access to the services of the Website. The legal basis for processing your data is provided by the performance of the terms of use of the Website as a contractual legal basis and by our legitimate interest (e.g. if you are a business contact).
- Website operation: during the operation of the Website, we store and process data on your end-user device for the purposes of providing service, in accordance with the Website Cookie Policy, for which we rely on our legitimate interest regarding the functionality cookies and in connection with geolocation data on your consent as a legal basis.
- Providing customer service: processing your data is necessary for us to be able to handle your application or complaint indicated in your request, for which we rely on our legitimate interest as a legal basis.
Providing data is optional, however, in some cases we are not be able to answer your questions or provide services of the Website without it.
Recipients of data transfer
We may share your personal data with our service providers and cooperating partners helping us in our activity operating inside and outside the territory of the European Union. Appropriate guarantees have been inducted and we maintain the security of your data.
Your rights
You have the right to freely withdraw your consent at any time without restriction in case of processing data based on consent. Withdrawal of consent shall not affect the lawfulness of processing data based on consent prior to withdrawal.
You have right to request information from us about your personal data processed, you have the right to rectification, the right to object and the right to erasure personal data with certain limits, the right to request a copy of the data, to exercise your right to data portability or to request partly the restriction of processing.
You are entitled to object against processing your personal data at any time, for reasons related to your special situation; in this case we might no longer process your personal data. Should you have the right to object, and you exercise it, your personal data will no longer be processed for such purposes by us. There is not any cost for exercising this right.
Hellohungary Touristic Website – Full Privacy Policy
The purpose of the Privacy Policy is to describe, the scope of personal data we process and the method of data processing in connection with your use of the website (‘Website’) available at https://hellohungary.hu/.
Controller
Controller is Hellohungary Turisztikai Szolgáltató Korlátolt Felelősségű Társaság (seat: 1011 Budapest, Szilágyi Dezső tér 1., e-mail: adatvedelem@hellohungary.hu; ‘Hellohungary’, or ‘us’).
Purpose of processing personal data
In connection with the maintenance and provision of the Website as an information society service, we may process your personal data for the following purposes:
- Log in, managing user accounts: processing your data is necessary for us to identify you as a user and to provide you with access to the services of the Website. The legal basis for processing your data is provided by the performance of the terms of use of the Website as a contractual legal basis and by our legitimate interest (e.g. If you are a business contact)
- Website operation: during the operation of the Website, we store and process data on your end-user device for the purposes of providing service, in accordance with the Website Cookie Policy, for which we rely on our legitimate interest and, in connection with geolocation data, on your consent as a legal basis.
- Providing customer service: processing your data is necessary for us to be able to handle your application or complaint indicated in your request, for which we rely on our legitimate interest as a legal basis.
Providing data is optional, however, in some cases we are not be able to answer your questions or provide services of the Website without it.
Categories of personal data processed
We process the following personal data for the abovementioned purposes:
- Log in and user account data: identification data (name, email address and password), Facebook/Google authentication token, log in confirmation code.
- End-user data: data temporarily stored cookies, geolocation data.
- Customer service data: name, email address, data of request, application or complaint.
Legal basis of processing personal data
We rely on various legal bases in order to process your personal data:
- In case of your consent, we process your personal data on the basis of Article 6 (1) a) of the GDPR (‘Consent’).
- On the basis of Article 6 (1) b) of the GDPR, performance of the contract between us (‘Performance of the contract’).
- On the basis of performance of legal obligation based on Article 6 (1) c) of the GDPR (‘Legal obligation’).
- Our or third party’s legitimate interest pursuant to Article 6 (1) f) of the GDPR (‘Legitimate interest’).
For the following purpose, we process the following categories of personal data on the following legal basis:
Purpose of data processing | Categories of personal data processed | Legal Basis |
---|---|---|
Log in, managing user accounts | Log in and user account data, partner profile data / company data | Performance of the contract, legitimate interest |
Website operation | End-user data | Legitimate interest, consent, consent for geolocation data |
Providing customer service | Customer service data | Legitimate interest |
We have legitimate interest and it is partially our legal obligation in gratifying the needs of our customers and their contacts, and the submitted complaints, queries, requests and communications related to the operation of our Website, the administration of individual logins and profiles. This includes, if necessary, providing your personal data to our external providers, e.g. lawyers, assisting us in responding to and resolving complaints, requests, (legal) claims and queries.
As a user of the Website, you may reasonably expect responding to your queries and settling and handling such claims requires the processing of your personal data or designating a registered partner in your complaint or claim in order for us to involve such registered partner in resolving your complaint or claim and thus settle your claim or complaint.
It is in our legitimate interest to place certain data related to the operation of the Website on your end-user device in order to operate the Website, as processing of this data and the exercise of our legitimate interest precedes your right to disposal of personal data as a user of the Website since the restriction of rights is necessary and proportionate for the basic operation of the Website. Furthermore, we are entitled to place certain data related to the operation of the Website on your end-user device for the personal use based on your consent.
If you have any further question about the legitime interest on which we rely as a legal basis for processing data, please contact us at adatvedelem@hellohungary.hu.
Duration of the storage of your personal data
In accordance with data protection law, we exclusively process your personal data, until you are the user or the visitor of the Website, and until this data is necessary for us to fulfil our obligations and necessary for the purpose for which the data is collected.
- The data processed on the basis of your consent will be processed until the withdrawal of your consent.
- Your customer service enquiry will be preserved for one year.
- Your complaint and the answer thereof will be preserved for three years.
- We preserve personal data to support incidental civil claims within the limitation period for civil claims, that is the end of the fifth year.
- If administrative or judicial procedure is initiated in connection with our service, we will continue to process your personal data for the duration of such proceedings until their legally binding conclusion.
Data relating to the usage of the Website is stored up to 6 months in a manner suitable for personal identification.
Recepient(s) of data transfer
Your personal data may only be accessed on a ‘need-to-know basis’s by our authorized employees and by our service provider business partners’ employees.
We transfer your personal data for the purposes concerned to the following recipients and categories of recipients:
- Processors: we may transfer your personal data to certain third parties, whether affiliated or independent, in order to process the data on our behalf in accordance with instructions and for the purpose of the processing. These processors are contractually obliged to implement appropriate technical and organizational measures to protect the personal data and to process the personal data only in accordance with the instructions.
Your personal data is accessed on a ‘need-to-know basis’s by the following service providers in connection with their following activities:
Processor | Seat | Activity |
---|---|---|
Microsoft Ireland | South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Írország, EU | Microsoft Azure hosting |
Ecoform Systems Kft | 8900 Zalaegerszeg, Tompa M. utca 1-3. II. em | Website operation |
Google Ireland LLC | Google Building Gordon House, Barrow St, Dublin 4, Írország | Google Maps related services |
Third parties: various organizations, whether affiliated or independent, determining the purposes and means of the processing of personal data, either individually or jointly with others. For example, Hungarian lawyers, auditors, and other authorities.
International data transfers
We process your personal data in accordance with Hungarian data protection laws and transfer the data within the European Economic Area (‘EEA’) and outside the EEA to the United States. If we transfer your personal data outside the EEA, we take appropriate measures to ensure that your personal data is adequately protected, regardless of the country to which the data is transferred, in compliance with our legal obligations. Such a measure might be an EU Commission decision on data protection compliance or, for example, requiring and obtaining contractual commitment from any third party with access to personal data that ensures that your personal data receives at least the same protection as within the EEA. We provide a copy of the guarantees on request regarding personal data transferred outside the EEA, or if you need further information on these measures, please contact us at adatvedelem@hellohungary.hu.
Your rights
You have the following rights in relation to our data processing:
- Right to access: You are entitled to receive verification/feedback from us regarding to whether or not your personal data is being processed, and if so, you have the right to access your personal data. The right to access includes, inter alia, the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed.
- Right to rectification: You have the right to rectification of your personal data on request.
- Right to object: You are entitled to object against processing your personal data at any time, for reasons related to your special situation; in this case it may be required from us to stop processing your personal data. Should you have the right to object, and you exercise it, your personal data will no longer be processed for such purposes. There is not any cost for exercising this right. You are not entitled to object, in particular if processing your personal data is necessary for pre-contractual steps or for the performance of an already signed contract.
- Right to restriction of processing: You have the right to request the restriction of processing your personal data.
- Right to erasure (‘right to be forgotten’): You are entitled to request the erase of your personal data.
- Right to data portability: You have the right to receive your personal data provided and available for us, in a structured, commonly used and machine-readable format, furthermore you are entitled to transfer these personal data to another controller without hindrance.
Right to complain: You can submit a complaint to the National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., phone number: +36-1-391-1400, fax: +36-1-391-1410, e-mail: ügyfelszolgalat@naih.hu)