Preamble and Explanation of Terms

The purpose of this Website is to present the activities of BB Holiday 4U Kft. operating it (hereinafter: Operator), and to provide information about the Operator’s activities and the rules applicable to them.

This Privacy Notice sets out the rules relating to the protection of natural persons with regard to the processing of personal data and to the free movement of personal data, and in particular protects the rights related to the protection of personal data in accordance with the guidance of the applicable legislation.

Operator:

This website, https://bbholiday4u.com, is operated by BB Holiday 4U Kft. (postal address: 1174 Budapest, Klapka utca 17.; tax number: 32684296-2-42, e-mail: bbholiday4u@gmail.com, telephone number: +36 70 4555604, bank account number: MBH Bank.10300002-13880306-00014901,).

Place of service:

7275. Igal Mátyás Király utca 11

User:

Any person who visits the website and/or uses the services provided by the Website and/or by the Operator. The personal scope of the Privacy Notice therefore extends to natural persons who make enquiries or request or send offers through the Website, as well as to the representatives and contact persons of non-natural persons. Its personal scope further extends to those entrusted with the operation of the Website.

Scope of the Privacy Notice:

The scope of this Privacy Notice extends to the services and data processing activities provided by the Operator in connection with this website (hereinafter: Website). Unless otherwise stipulated, the scope of the Privacy Notice does not extend to services and data processing activities related to content published on the Website by third parties, or to the services and data processing activities of websites to which a link found on this Website leads.

Personal data:

Any information relating to an identified or identifiable natural person. The Operator does not process special categories of personal data or criminal personal data under any circumstances.

Data processing:

Any operation or set of operations performed on personal data or data files, whether by automated or non-automated means.

Data transmission:

Making data accessible to a specified third party.

Disclosure:

Making data accessible to anyone.

Data erasure:

Rendering data unrecognizable in such a way that its restoration is no longer possible.

Data processing by processor:

The entirety of data processing operations performed by a data processor acting on behalf of or on the instructions of the data controller.

Data file:

The entirety of data managed in one register.

Rules relating to the Operator

Data processing

Place of data processing, applicable regulation

The processing of personal data takes place at the postal address of the Operator or in the premises of the data processor entrusted by the Operator. Decisions relating to data processing are made by the Operator. During the processing of the listed personal data, in order to ensure the storage and availability of the data, the Operator may use data processors for the purpose of hosting services.

The Operator is a natural person carrying out economic activity, the place of data processing is Hungary.

On this basis, the processing of personal data is governed by Hungarian legislation, primarily Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (hereinafter: Infotv.).

During data processing, the Operator is also governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter: GDPR Regulation).

Legal basis, scope, purpose and principles of data processing:

The controller of the personal data is the Operator and its employees, who may process the data only to the extent strictly necessary for the performance of their duties. The Operator ensures, by means of appropriate information security measures, that the User’s personal data are protected, among others, against unauthorized access or unauthorized alteration. Access to personal data stored on servers is logged, on the basis of which it can always be checked who accessed which personal data and when. The Operator ensures, by means of appropriate organizational measures, that personal data cannot become accessible to an indefinite number of persons.

The legal basis for data processing is the voluntarily given consent of the Users. By using the Website and by sending the request for an offer, Users accept this Privacy Notice.

Scope and purpose of the processed data:

The Data Controller operates accommodation as a private individual with a tax number. The website provides the opportunity to send a request for an offer. During the request for an offer, in addition to the data indicated in the table, the planned date of arrival and departure must be provided. The request for offer form also provides the opportunity to add a comment in the window named “comment”.

The booking depends on the Data Controller’s (Operator’s) feedback by e-mail. The Operator issues an e-invoice for the transferred amount, for which it is technically necessary to provide the User’s booking residential address.

The scope of the processed data is limited to the application of what is described in this point, to the necessary and sufficient extent. The Data Controller does not use the User’s personal data for any purpose other than the described purpose.

The data of the request for offer form reach the Data Controller directly by e-mail. The Data Controller sends the answer to the User’s question / the confirmation of the booked date – unless otherwise provided – by replying to the e-mail address provided on the form. By providing their data, the User voluntarily consents to the processing of their data until the purpose is achieved and to the Operator contacting them through the provided contact details.

The Operator processes only the personal data provided by the User and the personal data generated during the User’s activity related to the Website.

The Operator strives to fully enforce the rights of the data subjects.

The Operator does not process data whose processing is not necessary for achieving the operational purposes.

The Operator therefore processes personal data exclusively for a specific purpose at every stage of data processing. Purpose limitation and the smallest possible scope of data processing also apply with regard to the processed data set. The collection and processing of personal data is fair and lawful.

The Operator ensures that the processed data are accurate and up to date, that the Users’ rights are properly enforced, and if the identification of the User is no longer necessary, the data processing is modified so that the data subject can no longer be identified.

The Operator transmits or makes the processed data accessible to third parties only if the data subject has expressly consented to this, or if this is ordered by law. As an accommodation operator, the service is subject to tourist tax, which is payable to the competent Municipality of Dömös, and may make it necessary to record further personal data, including the data of persons travelling together with the User. In accordance with the applicable legislation, the Operator is entitled to use a data processor for the purpose of certain technical operations. The data processor is entitled only to implement the decisions of the Operator, in accordance with the Operator’s instructions. The use of a data processor does not affect the responsibility of the Operator.

The Operator is entitled to use the data – including recorded technical data – for statistical purposes in a manner not suitable for personal identification.

Data processors connected with the Data Controller

If data processing is carried out by another person on behalf of the Data Controller, the Data Controller may only use data processors that provide appropriate guarantees for compliance with the requirements set out in this Notice. The relevant declarations of the data processors are either publicly available or available to the Data Controller.

Duration of data processing, information

The Operator deletes the provided data if:

• the purpose of data processing has ceased;
• the data subject requests it;
• the data are incomplete or incorrect, and this makes their use impossible;
• their processing is unlawful, or their deletion is ordered by law;
• it is ordered by an authority or court.

The offer sent by the Operator in response to a request for an offer is valid for 2 days, i.e. 48 hours. The Data Controller undertakes that if the booking is not made within 2 days following the offer sent after the request for an offer, the User’s data will be permanently deleted. If the booking is completed, the Data Controller deletes the data processed until then within 3 days after the closing of the service.

The User may request information about the processing of their data, and also has the right to correct their data and to request from the Operator the correction of incorrectly recorded data that the User cannot correct.

The User may request the restriction or deletion of their personal data processed in connection with the website, with regard to which the Operator is obliged to take action within 5 days.

If the User objects to the data processing, they may protest against it, in which matter the Operator conducts an investigation and makes a decision within 15 days.

The User may request information, correction and deletion through the provided contact details. The Operator provides the information by electronic mail.

During the deletion of personal data, the data are rendered unrecognizable in such a way that the connection between the data and the data subject can no longer be restored.

If a civil law relationship is established between the User and the Operator, the rules of civil law shall also apply to the processing of the data. In this case, personal data may be processed for the enforcement of civil law claims. If an authority or court procedure is initiated due to the User’s unlawful act, the Operator may process the data in order to successfully close such procedure.

Data security, processing of data for technical purposes

The Operator takes all necessary measures that can be expected of it in the interest of data security, and ensures an appropriate level of protection of the data, in particular against unauthorized access, alteration, transmission, disclosure, deletion or destruction, as well as against accidental destruction and damage. The Operator ensures the security of the data by appropriate technical and organizational measures.

Rules relating to Users

Duties and responsibility of the User, procedure against the User violating the rules

The User is obliged to act with due care when providing their data. The Operator cannot be held liable for damage arising from the User’s failure to properly ensure the protection of their data.

The User may use the site only at their own responsibility. The Operator assumes no liability for any damage or inconvenience suffered by the User during the use of the site that arose from the User not acting with due care during the use of the site.

The User may disclose their data and make them accessible to others only at their own responsibility.

The User is obliged to act fairly during the use of the site, with regard to the rights and interests of others.

The User is obliged to respect the effective legislation, and during use is obliged to refrain from any activity that is unlawful or that infringes the interests of others.

All Users are obliged to refrain from any activity that prevents the intended use of the site.

All Users are obliged to refrain from any activity that infringes the interests of the Operator. Within this, the User is particularly obliged to refrain from disturbing or hindering the operation of the site, and from activities aimed at obtaining or using the Operator’s business secrets or information kept secret by the Operator. The User is obliged to refrain from any communication that contains untrue information concerning the service.

They are further obliged to refrain from any activity that endangers the IT security of the site.

Activities aimed at advertising their own or another person’s product or service are prohibited.

During the request for an offer, Users may provide only their own personal data. Providing the data of other persons qualifies as unlawful data processing, which may have the consequences specified in separate legislation. In the event of misuse of another person’s personal data, the Operator provides assistance to the acting authorities in uncovering the infringement and identifying the perpetrator of the infringement. The restrictions set out in this point apply to all visitors of the site.

Activities aimed at advertising their own or another person’s product or service are prohibited.

If the conduct of the User gives rise to authority or court proceedings, the Operator may store the data necessary for identifying the User, as well as the data relating to the infringement, and may transfer them to the acting bodies.

Exclusion of the Operator’s liability

The Operator undertakes to take all measures that can be expected of it to ensure the uninterrupted and continuous nature of the service; however, it does not warrant uninterrupted access to the website, and cannot be held liable for the suspension or termination of the service. The Operator assumes no responsibility for the conduct of Users.

The information published on the Website does not constitute an offer; it is for information purposes only. The Operator assumes no liability for whether the services appearing on the Website will actually be available in the future. Becoming acquainted with the information published on the Website does not replace becoming acquainted with the official information relating to the use and utilization of the services.

Despite all efforts of the Operator to prevent this, it may occur that changes are made on the Website independently of the Operator’s will and influence; therefore, unless otherwise provided by law, the Operator assumes no liability of any nature regarding the accuracy, reliability, timeliness or content of its website or the information available on the website. The Operator assumes no liability for materials created or published by a third party that are connected to or refer to the Operator’s website. The Operator is not liable for damages, losses or costs arising in connection with its website, from its use or inability to use it, its improper operation, malfunction, computer virus, line or system error, or other similar cause.

The Website may also contain links that lead to sites not operated by the Operator and that serve only the information of Users. The Operator has no influence over the content and security of these websites and therefore bears no responsibility for them.

Enforcement of rights

Users may submit their complaints and objections directly to the Operator – which must be sent to the Operator’s contact details – and the Operator will do everything in its power to terminate and remedy any infringements. The Operator examines the complaints submitted to it and informs the User of its position and the measures taken.

On the basis of the Infotv., in addition to contacting the Operator as data controller, the User may also address complaints directly to the National Authority for Data Protection and Freedom of Information, and may also enforce their claim through court proceedings.

Closing statement

The Operator reserves the right to amend the Privacy Notice, but displays it on its website with the effective content, which is always accessible and public to anyone. The amendments take effect only after publication, but the Operator is not obliged to send separate notification of the amendments to the Users.

This Privacy Notice entered into force on 01.01.2026.

National Authority for Data Protection and Freedom of Information (NAIH)

address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c

postal address: 1530 Budapest, P.O. Box: 5

ugyfelszolgalat@naih.hu

telephone: +36 (1) 391-1400, fax: +36 (1) 391-1410

www.naih.hu