Privacy Policy

1. Data Controller Details

The Data Controller responsible for processing the personal data collected via the contact form at https://www.thebudapesthost.com is:

• Name / EntityKovács Krisztina e.v. (Sole Proprietor)
• Registered AddressHock János utca 11., 2nd Floor, Apt. 9, 1082 Budapest, Hungary
• Tax Number77654906-1-42
• Registration No. (EVNY)60073143
• E-mailinfo@thebudapesthost.com
• Phone+36 20 543 2932

2. Scope, Legal Basis, Purpose and Retention of Data Processing

Providing your personal data through the web form is voluntary. Your first name, last name and e-mail address are required to submit the form and respond to your inquiry; the message field is optional. When you submit a message using the form on our website, we process your personal data as set out below.

We process the following personal data submitted through the form:

• Full Name — to identify the inquirer / client.
• E-mail Address — to contact you and send responses to your inquiry.
• Message / Form Content — to understand and respond to your request, feedback, or service inquiry.

Legal basis: Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR, as explained below; Art. 6(1)(f) GDPR for retention after the inquiry is resolved.

Retention period: for 1 year after the last communication concerning the inquiry.

Art. 6(1)(b) applies where you request steps towards a contract to which you would personally be a party. Art. 6(1)(f) applies to business representatives and other inquiries: our legitimate interest is to respond to inquiries and maintain business communications. Once an inquiry is resolved, retention for the remainder of the one-year period is based on Art. 6(1)(f), for continuity when handling follow-up inquiries and avoiding repeated requests for the same information. Any subsequent processing for providing services is covered by separate information supplied before that processing begins.

3. Cookies and Analytics

Our website uses only cookies that are strictly necessary for it to function correctly. We do not use advertising cookies, and any non-essential functional or analytics cookies are set only on the basis of your consent, which you can manage or withdraw through the cookie settings available on the website or in your browser.

Our website is also registered with Google Search Console and Bing Webmaster Tools. These are search-performance tools that provide the site owner with aggregated, non-identifying statistics about how the site appears in search results; they are enabled by means of a verification tag and do not set tracking cookies on your device through our website.

If additional analytics or advertising tools (for example, Google Analytics or Google Ads conversion tracking) are introduced in the future, this Policy will be updated accordingly, and any required consent will be obtained.

4. Data Processors and Recipients

Your personal data is handled confidentially and is only accessed by authorized personnel or trusted technical service providers (Data Processors):

• Contact-form delivery: Web3Forms — the service that receives submissions from the contact form on our website and forwards them to us by e-mail. It processes the data you submit solely to deliver your message to us, on our behalf.
• Hosting, server storage and e-mail: BlazeArts Kft. (FORPSI) — Thaly Kálmán u. 39., 1096 Budapest, Hungary; Tax No.: 12539833-2-43; www.forpsi.hu. Provides hosting, server storage, and the mail-server services used to receive and respond to contact requests.
• Search-performance tools: Google (Search Console) and Microsoft (Bing Webmaster Tools), as described in Section 3.

5. International Data Transfers

We do not sell your personal data or transfer it to third parties for their own purposes. Our website is hosted within the European Union (BlazeArts Kft. / FORPSI, Hungary), so the hosting and storage of your data takes place within the European Economic Area (EEA). Some service providers we use for contact-form delivery and search performance (Web3Forms, Google, Microsoft) may process limited data outside the EEA; where this occurs, such transfers are carried out under appropriate safeguards recognized by the GDPR — such as an adequacy decision of the European Commission or Standard Contractual Clauses — to ensure your data receives an equivalent level of protection. You may request a copy of the relevant safeguards at info@thebudapesthost.com.

6. Rights of the Data Subject

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: to confirm whether your data is being processed and to obtain a copy of it.
• Right to Rectification: to have inaccurate or incomplete data corrected.
• Right to Erasure (“Right to be Forgotten”): to have your data deleted under certain conditions.
• Right to Restriction of Processing: to restrict processing under specific statutory circumstances.
• Right to Data Portability: to receive your data in a structured, commonly used, machine-readable format, where processing is automated and based on consent or a contract, subject to Art. 20 GDPR.
• Right to Object: to object at any time, on grounds relating to your particular situation, to processing based on legitimate interest (Art. 6(1)(f) GDPR).
• Right to Withdraw Consent: where processing is based on consent (e.g., non-essential cookies), you may withdraw it at any time, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at info@thebudapesthost.com. We will respond without undue delay and within one month of receiving your request. Where necessary due to the complexity or number of requests, this period may be extended by two further months; we will notify you of the extension and its reasons within the first month.

7. Legal Remedies and Complaints

If you believe your data protection rights have been violated, we encourage you to contact us directly so we can resolve the matter promptly. You also have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or the alleged infringement, or seek a judicial remedy:

• Supervisory AuthorityNational Authority for Data Protection and Freedom of Information (NAIH)
• AddressFalk Miksa utca 9-11., H-1055 Budapest, Hungary
• Mailing AddressH-1363 Budapest, Pf. 9.
• Phone+36 (1) 391-1400
• E-mailugyfelszolgalat@naih.hu
• Websitehttps://www.naih.hu

Judicial Remedy: you may also initiate legal proceedings before the competent Regional Court (Törvényszék) in Hungary or before the courts of the EU Member State where you have your habitual residence, as provided by Art. 79(2) GDPR.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the tools we use, or applicable law. The current version is always available on our website, and the effective date below indicates when it was last revised. We encourage you to review it periodically.

Effective Date: 14th September 2026 · Kovács Krisztina e.v. · www.thebudapesthost.com