Privacy Policy and Data Processing Notice (GDPR)

Privacy Policy and Data Processing Notice (GDPR)

Aranyeső Apartments

Effective: 23 January 2026

---

1. Details of the Data Controller

Name of Data Controller: Wellnessbau BLTN Limited Liability Company
Short name: Wellnessbau BLTN Ltd.
Registered office: 1022 Budapest, Bimbó út 1–5, Building B, Ground Floor 3, Hungary
Company registration number: 01-09-385931
Tax number: 26357924-2-41
Main activity: 5520 – Holiday and other short-stay accommodation

Contact:
E-mail: balaton@aranyeso-apartmanhazak.hu
Phone: +36 70 287 0090

Hosting provider:
Name: Rackhost Plc.
Registered office: 6722 Szeged, Tisza Lajos körút 41, Hungary
Address: 1132 Budapest, Victor Hugo utca 18–22, Hungary
Company registration number: 06-10-000489
Tax number: 25333572-2-06

---

2. Legal Background of Data Processing

Data processing is governed by the following legislation:

• Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)
• Applicable Hungarian data protection laws
• German data protection regulations (Federal Data Protection Act – BDSG)

The Data Controller processes personal data in accordance with the data protection principles of the European Union.

---

3. Categories of Personal Data Processed

3.1. Data processed during booking and communication

• Name
• Email address
• Phone number
• Arrival and departure dates
• Number of guests

3.2. Billing-related data

• Billing name
• Residential address / registered office

3.3. Technical data

• IP address
• Browser type
• Cookies and logged technical data

---

4. Purpose of Data Processing

Personal data are processed for the following purposes:

• Recording, managing, and fulfilling accommodation bookings
• Communication with guests
• Compliance with legal obligations (invoicing, accounting)
• Ensuring secure website operation
• Marketing communication, solely based on the data subject’s prior consent

---

5. Legal Basis of Data Processing

Pursuant to Article 6(1) of the GDPR:

• (b) performance of a contract or steps prior to entering into a contract
• (c) compliance with a legal obligation
• (a) voluntary consent of the data subject
• (f) legitimate interest of the Data Controller (website security and operation)

---

6. Data Transfers and Data Processors

Personal data may be transferred to third parties only in the following cases:

• Accounting and invoicing service providers
• IT service providers
• Authorities, where required by law

Personal data are not sold and are generally processed within the European Union.

---

7. Data Retention Period

• Accounting and invoicing data: 8 years
• Booking-related data: 2 years after performance
• Marketing data: until withdrawal of consent

---

8. Cookies

The website uses cookies to ensure proper operation and improve user experience. Cookies may be disabled or deleted at any time in the user’s browser settings.

---

9. Rights of Data Subjects

The data subject has the right to:

• Request information about the processing of their personal data
• Request access to processed data
• Request rectification or erasure
• Request restriction of processing
• Object to data processing
• Lodge a complaint with a supervisory authority

---

10. Right to Lodge a Complaint

In Hungary: National Authority for Data Protection and Freedom of Information (NAIH)

In Germany: The competent state data protection authority according to the data subject’s place of residence

---

11. Contact

For data protection inquiries or to exercise your rights:

E-mail: balaton@aranyeso-apartmanhazak.hu
Phone: +36 70 287 0090