Privacy Policy and Statement

The operator of gyoparosfurdo-oroshaza.hu hereby informs visitors to the website of its practices regarding the processing of personal data, the organisational and technical measures taken to protect such data, and visitors’ rights in this regard and the means of exercising them.

We have reviewed our activities relating to the processing of personal data in light of the rules mandated and applicable under the new European Union General Data Protection Regulation (GDPR) and are committed to carrying them out in accordance with the requirements set out therein and in the applicable domestic legislation.

Details and contact information of the Data Controller
Name of the Data Controller: Orosházi Városüzemeltetési és Szolgáltató Zrt. (hereinafter: Service Provider)
Postal address: 5900, Orosháza, Fürdő u. 5.
Email address: info@varosuzemeltetes.hu
Telephone number: +36 (68) 512-460
Name of our Data Protection Officer: Dr Péter Fejes
Contact details of our Data Protection Officer: drfejes.peter@hanganov.hu

Principles of data processing

We are committed to protecting the personal data of both visitors to our website and all data subjects, and we consider it of paramount importance to respect their right to informational self-determination.

We treat personal data as confidential and take all necessary security, technical and organisational measures to ensure the security of personal data.

If you have any questions that are not clearly answered in this privacy notice, please contact us using the contact details provided above! We aim to respond to you as quickly as possible; however, if providing a proper answer to your question takes more time, we undertake to respond within a maximum of 15 days.

You may request information regarding the processing of your personal data at any time in writing (by email or by post to our address) or verbally (by telephone). Please note that if you contact us by telephone – provided your request relates to data processing (e.g. you are requesting the erasure of your data) – we will need to verify your identity to ensure you are entitled to make the request before we can comply with it. If identification is not possible, we can only provide general information regarding data processing. For this reason, we recommend that you submit your question or request in writing where possible.

Request for a quote

In the “Accommodation” section of our website, after selecting the requested accommodation or accommodations, you can request a quote from the relevant accommodation or accommodations by clicking the “Request a Quote” button. To request an accommodation quote, you must first enter the selected dates and the number of guests. You must then provide your personal details required for contact (name, email address, telephone number). If, after entering your details, you decide to send the quote request via , we will forward the details required for the quote request to the accommodation provider’s email address and also store them in our own database for future reference. Please note that although we have informed the accommodation providers that they may process the data provided in the enquiry responsibly, solely and exclusively for the purpose of responding to the specific enquiry, and for a reasonable period of time, we cannot accept responsibility for their compliance with this. We do not pass on the data to any third parties other than the selected accommodation provider(s).

Purpose of data processing
To provide website visitors with personalised information regarding the availability and prices of accommodation.

Legal basis for data processing
Data processing is based on voluntary consent in accordance with the EU General Data Protection Regulation (GDPR) and Act CXII of 2011 on the Right to Self-Determination in Information and Freedom of Information (Infotv.).

Scope of data processed
Data that the user is required to provide when requesting a quote:

Name
Telephone number
Email address

Data transfer
The user’s data is automatically forwarded via email to the email address or addresses of the selected accommodation provider(s) stored in our system during the quote request process.

Duration of data processing
As the necessary information is provided by the selected accommodation provider(s) – of which we are not informed – we retain your personal data in our system for a further 5 years following the request for a quote, for the lawful verification of the fact and time of the request, as well as the identity of the person making the request. Please note that although we have advised the selected accommodation provider(s) to retain their personal data only for a reasonable period, we do not have the means to verify this.

Exercising your rights
You may request information regarding the processing of your data at any time via the contact details provided above. You may also request the correction of your data stored in our system at any time if you find, for example, that you have provided it incorrectly or that we have recorded it incorrectly or incompletely. You may also request the deletion of your data stored in our system, and provided there are no legal obstacles, we will comply with your request without delay (otherwise, we will inform you of the reason for refusing the deletion). Please note that you may exercise your rights directly with the relevant accommodation provider(s) regarding the data transmitted to them for your chosen accommodation(s), or regarding any amendments or deletions to such data.

Who has access to the data?
We will forward the data you have provided to the email addresses of the selected accommodation provider(s) stored in our system. In addition, only our staff are authorised to access your data.

Enquiries, contact

You can contact us via any of the contact details available on our website. We will use the personal data you provide when contacting us solely for the purpose of communicating with you; we will not pass this information on to third parties.

Purpose of data processing
To provide information to enquiries.

Legal basis for data processing
In the case of enquiries or requests for information, data processing is based on voluntary consent in accordance with the EU General Data Protection Regulation (GDPR) and Act CXII of 2011 on the Right to Self-Determination in Information and Freedom of Information (Infotv.).

Scope of data processed
When you contact us, we process the following data that you have voluntarily provided:

name
email address
telephone number
address (postal address)

Duration of data processing
We process your personal data for varying periods depending on the nature of the contact.
Once the necessary information has been provided, we do not retain it any longer, unless a legitimate claim can be made regarding the ad hoc nature of the contact, in which case we may retain it for up to 5 years for the purpose of verification.

Exercising your rights
You may request information regarding the processing of your data at any time via the contact details provided above.
You may also request the rectification of your data at any time if you find, for example, that you have provided it incorrectly or that we have recorded it incorrectly or incompletely.

You may also request the erasure of your data, and provided there are no legal obstacles to this, we will comply with your request without delay (otherwise, we will inform you of the reason for refusing the erasure).

Gyoparosfurdo-oroshaza.hu e-newsletter: When a user subscribes to the newsletter, the name and email address provided by the user are stored for the purpose of sending them the newsletter. We do not pass on the stored data to third parties.

Purpose of data processing
In the case of newsletter registration, the purpose of processing the data provided by the user is to identify the user for the purpose of sending the newsletter. The Service Provider sends the newsletter to users who have registered for it. The user may prohibit the use of their data for this purpose by unsubscribing. If the user no longer wishes to receive the newsletter, they may remove themselves from the newsletter mailing list by clicking on the “Unsubscribe” link at the end of the newsletters sent out. Naturally, we will also remove the user from the newsletter database upon individual request, which may be submitted via the contact details provided above.

Scope of data processed

Name
Email address

Duration of data processing
The Service Provider is entitled to process data voluntarily provided by the user until the user makes use of the “unsubscribe” option provided by the Service Provider or requests the Service Provider to delete their data in any other way in relation to this data processing.

Exercising your rights
You may request information regarding the processing of your data at any time via the contact details provided above.

You may also request the rectification of your data at any time if you find, for example, that you have provided it incorrectly or that we have recorded it incorrectly or incompletely.

Prize Draws

Providing personal data is required to participate in prize draws advertised on the website. The Service Provider will not use personal data for purposes other than those specified; however, with the participant’s consent, it may combine such data with other data processing activities (e.g. newsletters).

Purpose of data processing
To organise the prize draw and to clearly identify the winners.

Scope of data processed

name
email address
telephone number
address (postal address)

Duration of data processing
We process your personal data for varying periods depending on the nature of the prize draw. We do not retain your data after the prize draw has been conducted, unless applicable tax and accounting laws impose a retention obligation on us in connection with the collection of the prize, in which case we are required to retain the documents containing your personal data for at least 5 years to demonstrate compliance with legal requirements.

Data transfer
We do not normally transfer your data to third parties. Should this nevertheless occur, it will be clearly stated in the terms and conditions of the relevant prize draw.

Exercising your rights
You may request information about the processing of your data at any time via the contact details provided above.

You may also request the correction of your data at any time if you find, for example, that you have provided it incorrectly or that we have recorded it incorrectly or incompletely.

Cookie management

What is a cookie?
A cookie is a text file placed on the device (computer, smartphone) and which typically contains information relating to the connection between the web server and your device or to the functioning of the website (for example, a so-called session ID, which is a unique string of characters consisting of letters, numbers and other punctuation marks; the time you opened or visited the website, etc.), the contents of which are occasionally read back by the web server whilst you are browsing our website or when you visit it again later.

The website (server) uses the cookie’s content to improve the user experience and to provide the services offered on the website. For example, when you shop in an online store, the store generally uses such cookies to distinguish between and manage ongoing purchases (e.g. the current contents of your basket). If your internet connection is interrupted whilst shopping, the website can use the previously stored cookie to know which products you have added to your basket and which products you were searching for; once the connection is restored, you can continue shopping from where you left off.

Purpose of data processing
To identify users visiting our website, distinguish them from one another, identify their current session, store the data provided during that session, and prevent data loss.

Scope of data processed
The cookie used on our website is a so-called functional cookie that supports the website’s operation and contains information that can be interpreted by the website’s code. We do not pass on the information stored in the functional cookie to third parties.

Duration of data processing
The cookie used on our website, known as a session cookie, expires as soon as you leave or close our website.

Legal basis
Most web browsers automatically allow the use of cookies. However, you can change this setting at any time, block cookies and delete them. You can access, view and review the contents of cookies stored on your device at any time.

To manage, disable or delete cookies, most popular web browsers usually provide an option under their settings, typically in a sub-menu labelled ‘Security’, ‘Privacy’ or ‘Data Protection’, under the heading ‘Cookies’.

You can find further information on managing cookies in the help section of the relevant browser, or by clicking on the browser name in the links below: Microsoft Internet Explorer, Google Chrome, Mozilla Firefox, Microsoft Edge.

Facebook cookies

Visitors with a Facebook account can ‘Like’ or ‘Share’ our website and the content published on it, during which Facebook also uses cookies to carry out the action initiated by the user. You can find further information regarding Facebook’s data processing and the use of cookies here:
https://www.facebook.com/about/privacy, https://www.facebook.com/policies/cookies/

Purpose of data processing
To provide Facebook’s services to visitors to the website.

Scope of data processed
The cookies used by Facebook contain information that can be interpreted by the service (unique strings of characters consisting of letters, numbers and other punctuation marks).

Duration of data processing
The cookies used by Facebook to perform ‘Like’ or ‘Share’ actions expire as soon as you leave the website or close our page in your browser.

Exercising your rights
You can also disable the use of cookies used by Facebook, along with all other cookies. You can access, view and delete the contents of cookies stored on your device at any time.

Images and videos displayed on the website

We regularly report on our website about current news, events and happenings relating to our company, during which we also publish images and videos.

We take great care to ensure that the content of the images and videos published on our website does not infringe upon the personal rights or legitimate interests of others, and that we hold the necessary permission and authorisation for their lawful use in all cases.

Purpose of data processing
To provide information to visitors to the website.

Scope of data processed
Images of identifiable, recognisable natural persons appearing in the recordings.

Duration of data processing
Until the data subject withdraws their consent or until the relevant content is deleted from our website.

Exercising your rights
You may request information about the processing of your data at any time via the contact details provided above. You may also request the deletion of your data, and upon your request, we will remove from our website any recordings in which you are identifiable or recognisable.

Who can access the data?
Anyone who visits our website can access and view the information published on it.

Google Analytics

This website uses the Google Analytics web analytics service provided by Google, Inc. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help analyse how the website is used. The information generated by the cookie regarding your use of the website (including your IP address) is transmitted to and stored on Google’s servers in the United States. Google uses this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. Google will not associate your IP address with any other data held by Google. You may refuse the use of cookies by selecting the appropriate settings in your browser, but please note that if you do so, you may not be able to use the full functionality of this website. By using this website, you consent to the processing of your data in the manner and for the purposes set out above.

Name and address of data processors and description of data processing

Adana Online Kft., 1222 Budapest, Komáromi út 53/2 – provision of technical infrastructure, provision of ancillary services closely related to data processing
Infoweb Bt., 1222 Budapest, Komáromi út 53/2 – provision of ancillary services closely related to data processing
Orosházi Városi Rendezvényszervező és Szolgáltató Nonprofit Zrt. 5900 Orosháza, Fürdő u. 5-1. – provision of ancillary services closely related to data processing
Rocket Science Group, LLC, 30308 Atlanta, 675 Ponce de Leon AVE NE – server services

Data security measures

Personal data is stored on the computers of Orosházi Városüzemeltetési és Szolgáltató Zrt. (email), on the servers of Adana Online Kft. (website database) and on the server of Rocket Science Group, LLC, 30308 Atlanta, 675 Ponce de Leon AVE NE (newsletter). All data provided by the user during registration on the website is stored on a secure, restricted server. During data management and processing, the data provided may only be accessed by authorised developers, online editors and project managers who have unique, restricted (‘admin’) access.

Data transfer
We do not disclose your personal data to anyone without the necessary authorisation; we only transfer it to third parties if you have given your prior consent. An exception to this may apply if we are legally obliged to transfer the data, for example in the event of an official investigation, in which case we are obliged to provide the data required for the purpose of the investigation upon an official request from the relevant authority (e.g. the police, the public prosecutor’s office, a court, etc.). Your separate consent is not required for this, as it is our statutory duty.

Users’ rights regarding the processing of their personal data

Users may request information regarding the processing of their personal data. Upon request, the Service Provider shall provide the data subject with information regarding the data it processes, the purpose, legal basis and duration of the data processing, the name and address (registered office) of the data processor and its activities related to data processing, as well as who receives or has received the data and for what purpose. Requests for information must be sent by email to info@varosuzemeltetes.hu, to which the data subject will receive a reply within 8 working days. Users may request the erasure and rectification of their data, as specified under the section on the duration of data processing.

Deletion of personal data

Users must submit requests for the deletion of their own personal data by email to info@varosuzemeltetes.hu. The Service Provider will delete the data within 5 working days of receiving the deletion request. Once deleted, the displayed data cannot be restored.

Applicable legislation

We undertake to process personal data in accordance with the legislation in force at any given time, and in particular with the legal provisions listed below:

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as the GDPR;
Act CXII of 2011 (Infotv.) on the right to informational self-determination and freedom of information.

Complaints handling and further legal remedies

We do everything in our power to ensure that personal data is processed in accordance with the law. If you feel that we have failed to do so, or if you have any questions in this regard, please contact us or our data protection officer using the contact details provided above.

In the event of a breach of your rights regarding the protection of your personal data – should the Service Provider fail to cease its unlawful conduct despite your notification – you may seek further redress by contacting the National Authority for Data Protection and Freedom of Information at the following contact details:

Official name: National Authority for Data Protection and Freedom of Information (NAIH)
Postal address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Telephone number: +36 (1) 391-1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu

Possibility of amending the privacy policy

We reserve the right to review and amend this notice as necessary, which may be justified in the event of changes to the relevant legislation or to our data processing activities and the technology used for them. Should the amendment affect your personal data processed on the basis of your voluntary consent, we will inform you of this without delay and suspend the further processing of your personal data until you give your consent again. The current Privacy Policy is always available here, published publicly on the website.

If you have any further questions or comments, in addition to the contact details above, you may also contact the spa staff at ertekesites@gyoparosfurdo.hu.