Privacy Policy
1. Data Controller Details:
Ditta Szállás A – Erzsébet Ditta Szilágyi
Ditta Szállás B – Erzsébet Szilágyiné Pozsgai
Address: 1-3 Bajcsy-Zsilinszky utca, Debrecen, 4025
Website: www.dittadebrecen.hu
Place of Complaint Handling: dittadebrecen@gmail.com
The purpose of this privacy policy is to lay down the data protection and data management principles applied by Ditta Szállás (hereinafter: Service Provider). The Service Provider recognizes these principles as binding upon itself and undertakes to ensure that all data processing related to its services and the operation of its website complies with the provisions set out in this policy and the applicable legislation.
The Service Provider considers it essential to ensure that in all areas of its services, the rights and fundamental freedoms of every individual—regardless of nationality or place of residence—are respected during the processing of their personal data, with particular regard to the right to privacy.
The Service Provider aims to inform data subjects about the legal basis of data processing before such processing begins.
Ditta Szállás A – Erzsébet Ditta Szilágyi
Ditta Szállás B – Erzsébet Szilágyiné Pozsgai
Address: 1-3 Bajcsy-Zsilinszky utca, Debrecen, 4025
Website: www.dittadebrecen.hu
Place of Complaint Handling: dittadebrecen@gmail.com
The purpose of this privacy policy is to lay down the data protection and data management principles applied by Ditta Szállás (hereinafter: Service Provider). The Service Provider recognizes these principles as binding upon itself and undertakes to ensure that all data processing related to its services and the operation of its website complies with the provisions set out in this policy and the applicable legislation.
The Service Provider considers it essential to ensure that in all areas of its services, the rights and fundamental freedoms of every individual—regardless of nationality or place of residence—are respected during the processing of their personal data, with particular regard to the right to privacy.
The Service Provider aims to inform data subjects about the legal basis of data processing before such processing begins.
2. Legal Background:
Act CXII of 2011 on the Right to Informational Self-Determination and on Freedom of Information (hereinafter: Info Act)
Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (specifically Section 13/A)
Act XLVII of 2008 on the Prohibition of Unfair Commercial Practices against Consumers
Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activity (specifically Section 6)
Act C of 2003 on Electronic Communications (specifically Section 155)
Act CXII of 2011 on the Right to Informational Self-Determination and on Freedom of Information (hereinafter: Info Act)
Act CVIII of 2001 on Certain Issues of Electronic Commerce Services and Information Society Services (specifically Section 13/A)
Act XLVII of 2008 on the Prohibition of Unfair Commercial Practices against Consumers
Act XLVIII of 2008 on the Basic Conditions and Certain Restrictions of Economic Advertising Activity (specifically Section 6)
Act C of 2003 on Electronic Communications (specifically Section 155)
3. Data Protection Principles
Personal data may only be processed for specific purposes, in order to exercise rights and fulfill obligations.
Only personal data that is essential for the fulfillment of the purpose of data processing and suitable for achieving that purpose may be processed. Personal data may only be processed to the extent and for the duration necessary to achieve the purpose.
The Service Provider considers the protection of personal data to be of paramount importance in its activities. It ensures the security of such data, takes the necessary technical and organizational measures, and establishes the procedural rules required to comply with the relevant legislation.
Personal data may only be processed for specific purposes, in order to exercise rights and fulfill obligations.
Only personal data that is essential for the fulfillment of the purpose of data processing and suitable for achieving that purpose may be processed. Personal data may only be processed to the extent and for the duration necessary to achieve the purpose.
The Service Provider considers the protection of personal data to be of paramount importance in its activities. It ensures the security of such data, takes the necessary technical and organizational measures, and establishes the procedural rules required to comply with the relevant legislation.
4. Legal Basis for Data Processing
Pursuant to Section 5 (1) a) of the Info Act, data processing is based on the voluntary consent of the data subjects, which is given following appropriate prior information. None of these data processing activities are considered mandatory data processing based on legal obligations.
The Data Controller is obliged to design and execute data processing operations in such a way as to ensure the protection of the privacy of data subjects when applying the Info Act and other rules applicable to data processing.
No sensitive or special categories of personal data are required to use the Service Provider’s services.
In order to provide a customized service, the Service Provider places a small data packet (a so-called “cookie") on the User’s computer. The purpose of the cookie is to ensure the highest possible quality of operation of the website and to enhance the user experience. Users can delete cookies from their own computers or configure their browsers to block the use of cookies. By blocking cookies, the User acknowledges that without cookies, the website may not function at full capacity.
Scope of data subjects/users:
Visitors to the website.
Pursuant to Section 5 (1) a) of the Info Act, data processing is based on the voluntary consent of the data subjects, which is given following appropriate prior information. None of these data processing activities are considered mandatory data processing based on legal obligations.
The Data Controller is obliged to design and execute data processing operations in such a way as to ensure the protection of the privacy of data subjects when applying the Info Act and other rules applicable to data processing.
No sensitive or special categories of personal data are required to use the Service Provider’s services.
In order to provide a customized service, the Service Provider places a small data packet (a so-called “cookie") on the User’s computer. The purpose of the cookie is to ensure the highest possible quality of operation of the website and to enhance the user experience. Users can delete cookies from their own computers or configure their browsers to block the use of cookies. By blocking cookies, the User acknowledges that without cookies, the website may not function at full capacity.
Scope of data subjects/users:
Visitors to the website.
5. Complaint Handling
Users may submit their complaints to the Service Provider by sending an email to the accommodation’s email address (dittadebrecen@gmail.com). The place of complaint handling is identical to the place of service provision.
Users may submit their complaints to the Service Provider by sending an email to the accommodation’s email address (dittadebrecen@gmail.com). The place of complaint handling is identical to the place of service provision.
6. Data Processing Related to the Accommodation
Operation of Security Cameras:
A security camera system operates at the accommodation to protect and preserve the personal safety and property of the Service Provider. The entry of guests into the accommodation premises shall be deemed as implied consent to the recording and storage of camera footage.
Operation of Security Cameras:
A security camera system operates at the accommodation to protect and preserve the personal safety and property of the Service Provider. The entry of guests into the accommodation premises shall be deemed as implied consent to the recording and storage of camera footage.
7. Rights of Data Subjects
The data subject may request from the data controller:
a) information about the processing of their personal data,
b) the rectification of their personal data, and
c) the erasure or blocking of their personal data, with the exception of mandatory data processing.
The Data Subject may object to the processing of their personal data if:
a) the processing or transfer of personal data is necessary solely for the fulfillment of a legal obligation applicable to the Service Provider, or for the enforcement of a legitimate interest of the Service Provider, the recipient, or a third party, unless the data processing is mandated by law;
b) the personal data is used or transferred for the purpose of direct marketing, public opinion polling, or scientific research;
c) in any other cases specified by law.
The Service Provider will investigate the objection within the shortest possible time from the submission of the request, but no later than 15 days, make a decision on its validity, and inform the applicant of its decision in writing. If the Service Provider finds the data subject’s objection justified, it will terminate the data processing—including further data collection and transfer—and block the data. Furthermore, it will notify all parties to whom the personal data subject to the objection had been previously transferred, who are then obliged to take action to enforce the right to object.
The Service Provider shall erase personal data if:
its processing is unlawful,
the data subject requests it,
the data is incomplete or incorrect—and this state cannot be legally corrected—provided that erasure is not prohibited by law,
the purpose of data processing has ceased,
the statutory period for data storage has expired,
it has been ordered by a court or the Data Protection Commissioner.
Legal Remedies, Enforcement through Courts:
For any requests or observations, please contact the Service Provider’s staff at dittadebrecen@gmail.com.
If the data subject disagrees with the Service Provider’s decision, they may turn to court.
Legal remedies and complaints can be filed with the National Authority for Data Protection and Freedom of Information:
National Authority for Data Protection and Freedom of Information (NAIH)
22/C Szilágyi Erzsébet fasor, Budapest, 1125
Mailing address: 1530 Budapest, Pf.: 5.
Phone: +36-1-391-1400
Fax: +36-1-391-1410
Email: ugyfelszolgalat@naih.hu
The data subject may request from the data controller:
a) information about the processing of their personal data,
b) the rectification of their personal data, and
c) the erasure or blocking of their personal data, with the exception of mandatory data processing.
The Data Subject may object to the processing of their personal data if:
a) the processing or transfer of personal data is necessary solely for the fulfillment of a legal obligation applicable to the Service Provider, or for the enforcement of a legitimate interest of the Service Provider, the recipient, or a third party, unless the data processing is mandated by law;
b) the personal data is used or transferred for the purpose of direct marketing, public opinion polling, or scientific research;
c) in any other cases specified by law.
The Service Provider will investigate the objection within the shortest possible time from the submission of the request, but no later than 15 days, make a decision on its validity, and inform the applicant of its decision in writing. If the Service Provider finds the data subject’s objection justified, it will terminate the data processing—including further data collection and transfer—and block the data. Furthermore, it will notify all parties to whom the personal data subject to the objection had been previously transferred, who are then obliged to take action to enforce the right to object.
The Service Provider shall erase personal data if:
its processing is unlawful,
the data subject requests it,
the data is incomplete or incorrect—and this state cannot be legally corrected—provided that erasure is not prohibited by law,
the purpose of data processing has ceased,
the statutory period for data storage has expired,
it has been ordered by a court or the Data Protection Commissioner.
Legal Remedies, Enforcement through Courts:
For any requests or observations, please contact the Service Provider’s staff at dittadebrecen@gmail.com.
If the data subject disagrees with the Service Provider’s decision, they may turn to court.
Legal remedies and complaints can be filed with the National Authority for Data Protection and Freedom of Information:
National Authority for Data Protection and Freedom of Information (NAIH)
22/C Szilágyi Erzsébet fasor, Budapest, 1125
Mailing address: 1530 Budapest, Pf.: 5.
Phone: +36-1-391-1400
Fax: +36-1-391-1410
Email: ugyfelszolgalat@naih.hu