DATA OF THE CONTROLLER AND THE PROCESSORS

Data of the controller(s) Name: P92 Primus Rendezvényszervező és Szolgáltató Kft.
Address: 2617 Alsópetény, Petőfi Sándor utca 52.
Place of data processing: 2617 Alsópetény, Petőfi Sándor utca 52.
E-mail address: sales@pronaykastely.hu
Phone number: +36 1 453 4100

Data of the processor(s) Name: Ante P92 Kft.
Address: 1038 Budapest, Fürdő utca 2.
Place of data processing: 1038 Budapest, Fürdő utca 2.
E-mail address: info@p92.hu
Phone number: +36 1 453 4100

Name: P92 Prónay-kastély Kft.
Address: 2617 Alsópetény, Petőfi Sándor utca 52.
Place of data processing: 2617 Alsópetény, Petőfi Sándor utca 52.
E-mail address: sales@pronaykastely.hu
Phone number: +36 1 453 4100

Data of the Data Protection Officer(s) Name: Tibor Persa
Address: 1038 Budapest, Fürdő u. 2.
E-mail address: tibor.persa@p92.hu
Phone number: +36 20 464 5417

Data of the Data Protection Authority Name: National Authority for Data Protection and Freedom of Information
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
Postal address: 1530 Budapest, Pf.: 5.
E-mail address: ugyfelszolgalat@naih.hu
Phone number: +36 1 391 1400
Website: https://naih.hu/

PRESENTATION OF DATA PROCESSING ACTIVITIES BY PURPOSE

Request for Quotation
Purpose of data processing: Request for quotation for accommodation and/or events (online registration form).

Scope of processed data and the purpose of data processing:

Personal data: First and last name Purpose: Contacting, addressing, identification.
Personal data: E-mail address Purpose: Keeping contact.
Personal data: Subject of the request for quotation Purpose: Defining the request.
Personal data: Comment, message Purpose: Recording requirements related to the request for quotation, and using them for the preparation of the offer.
Personal data: Time of the request for quotation Purpose: Temporal placement of the request.

Legal basis for data processing: The legal basis for data processing is your consent. The consent is based on Point a) of Paragraph (1) of Section 5 of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (“Privacy Act”) and Paragraphs (1)-(2) of Section 6 of Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities.

Duration of data processing: Our company processes the data provided by you until the withdrawal of your consent. Based on the withdrawal of your consent, the data will be deleted from our database within a maximum of 25 days.

Designation and activity of the controller and processors: Our company uses processors for the present purpose, which company(ies) and their activities are presented below.

Name of Controller: Ante P92 Kft.
First and last name: Records it in a database, sends an offer via the mailing system, uses the name on a password-protected offer page, records it by name in case of booking, contract, and prepares personal calculation. A thematic inquiry related to the request for quotation may occur within 1 year. Duration of data processing: Until withdrawal of consent, maximum 7 years.
E-mail address: Records it in a database, sends an offer via the mailing system, in case of booking, records the data in a contract or calculation. A thematic inquiry related to the request for quotation may occur within 1 year. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Subject of the request for quotation: Records it in a database. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Comment, message: Records it in a database, sends an offer via the mailing system according to the requirements formulated here. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Time of the request for quotation: Records it in a database for temporal retrievability. Duration of data processing: Until withdrawal of consent, maximum 7 years.

Name of Processor: P92 Primus Rendezvényszervező és Szolgáltató Kft.
First and last name: Records it in a database, sends an offer via the mailing system, uses the name on a password-protected offer page, records it by name in case of booking, contract, and prepares personal calculation. A thematic inquiry related to the request for quotation may occur within 1 year. Duration of data processing: Until withdrawal of consent, maximum 7 years.
E-mail address: Records it in a database, sends an offer via the mailing system, in case of booking, records the data in a contract or calculation. A thematic inquiry related to the request for quotation may occur within 1 year. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Subject of the request for quotation: Records it in a database. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Comment, message: Records it in a database, sends an offer via the mailing system according to the requirements formulated here. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Time of the request for quotation: Records it in a database for temporal retrievability. Duration of data processing: Until withdrawal of consent, maximum 7 years.

Name of Processor: P92 Prónay-kastély Kft.
First and last name: Records it in a database, sends an offer via the mailing system, uses the name on a password-protected offer page, records it by name in case of booking, contract, and prepares personal calculation. A thematic inquiry related to the request for quotation may occur within 1 year. Duration of data processing: Until withdrawal of consent, maximum 7 years.
E-mail address: Records it in a database, sends an offer via the mailing system, in case of booking, records the data in a contract or calculation. A thematic inquiry related to the request for quotation may occur within 1 year. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Subject of the request for quotation: Records it in a database. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Comment, message: Records it in a database, sends an offer via the mailing system according to the requirements formulated here. Duration of data processing: Until withdrawal of consent, maximum 7 years.
Time of the request for quotation: Records it in a database for temporal retrievability. Duration of data processing: Until withdrawal of consent, maximum 7 years.

SENDING NEWSLETTERS

Scope of processed data and the purpose of data processing: The purpose of data processing is to be able to send newsletters created in e-mail format to customers and visitors (potential customers) who have subscribed to the newsletter.

Personal data: E-mail address Purpose: We send notifications about product news and related products to the e-mail address provided by the subscriber.
Personal data: Person’s name Purpose: We process the name in order to address you appropriately during correspondence.

Legal basis for data processing: The legal basis for data processing is your consent. The consent is based on Point a) of Paragraph (1) of Section 5 of Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (“Privacy Act”) and Paragraphs (1)-(2) of Section 6 of Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities.

Duration of data processing: Our company processes the data provided by you until the withdrawal of your consent. Based on the withdrawal of your consent, the data will be deleted from our newsletter database within a maximum of 25 days, and thereafter we will not send you any newsletters.

KEEPING CONTACT WITH CUSTOMERS

Our company ensures that our customers and interested parties can contact us by e-mail.

Scope of processed data and the purpose of data processing:
Personal data: E-mail address Purpose: The e-mail address is essential for identifying the user.
Personal data: Contact person’s name Purpose: We process the contact person’s name to address them appropriately during correspondence, and so that upon arrival of the sent e-mail, the recipient’s identity can be identified within the company – in case of a central e-mail address.

Legal basis for data processing: The consent of the data subject. The consent is based on Point a) of Paragraph (1) of Section 5 of the Privacy Act.

Duration of data processing: Data is processed for this purpose until the withdrawal of consent, but at the latest for one year following the last correspondence. Thereafter, your data will be deleted from our contact list.

DATA SECURITY

We inform you that we have taken the technical and organizational measures, and we have established and operate the procedural rules that are necessary to ensure the appropriate protection of your personal data. The data stored in our system can be accessed after password identification, and access to the data is tied to authorization levels. To prevent the accidental destruction of data, our processors perform backups. Access to the website is provided through a secure “https” protocol.

RIGHTS RELATED TO DATA PROCESSING

Right to request information: You may request information from us in writing through our contact details regarding the following: ● what personal data of yours we process, ● on what legal basis we process it, ● for what purpose of data processing we process it, ● from what source we process it, ● for how long we process it, ● to whom, when, based on what legal regulation, to which of your personal data we provided access or to whom we forwarded your personal data. Your request will be fulfilled within a maximum of 25 days, in a letter sent to the contact details provided by you, or in the case of an electronic request, to the electronic mail address.

Right to rectification: You may request in writing through our contact details that our company modify any of your personal data. Our company will fulfill your request within a maximum of 25 days and will send you a notification about this in a letter sent to the contact details provided. If our company is unable to fulfill your request, we will send you a notification about the refusal of fulfillment within the same deadline in a letter to your provided contact details, or in the case of an electronic request, to your electronic mail address.

Right to erasure: You may request the erasure of your personal data from our company in writing through our contact details. The request for erasure will be rejected if a legal regulation obliges our company to further store the personal data. Such a case is, for example, that we are obliged to process data related to invoicing until the deadline specified by law. Our company will fulfill your request within a maximum of 25 days and will send you a notification about this in a letter sent to the contact details provided. If our company is unable to fulfill your request because a legal regulation orders mandatory data processing, we will send you a notification about the refusal of fulfillment within the same deadline in a letter to your provided contact details, or in the case of an electronic request, to your electronic mail address.

Right to restriction of processing (blocking): You may request in writing through our contact details that your personal data be blocked by our company. The blocking lasts as long as the reason indicated by you necessitates the storage of the data. You may request the blocking of your data, for example, if you think that your request was processed unlawfully by our company, but due to an official procedure initiated by you, it is necessary that our company does not delete your request. In this case, until the request of the authority, our company continues to store your request – which qualifies as personal data – and deletes the data afterwards. Our company will fulfill your request within a maximum of 25 days and will send you a notification about this in a letter sent to the contact details provided, or in the case of an electronic request, to your electronic mail address.

Right to object: You may object to the data processing in writing through our contact details if your personal data would be forwarded or used by our company for the purpose of direct marketing, public opinion polling, or scientific research. For example, you may object to our company using your personal data for sending newsletters without your consent. You may also object to the data processing if, in your opinion, it is strictly necessary for fulfilling a legal obligation concerning our company or for enforcing a legitimate interest, except for data processing based on legal authorization. Thus, for example, you cannot object to us processing your data defined by law during invoicing. If you object to our data processing activity, we will investigate it in the shortest possible time, but within a maximum of 15 days, and we will make a decision on its merit, which we will communicate to you in writing. If you do not agree with our decision, you are entitled to turn to the court to change the decision within 30 days from its delivery, or, if we did not make a decision within the specified deadline, from its expiration.

LEGAL ENFORCEMENT OPTIONS RELATED TO DATA PROCESSING

If you have submitted a request for rectification, blocking, or erasure to us, or objected to the data processing, but we have not fulfilled your request, you are entitled to turn to a court or authority. In court proceedings, you are entitled to initiate the procedure at the regional court according to your place of residence, which body shall act with priority. You can find the regional court with the appropriate jurisdiction at this link: http://birosag.hu/ugyfelkapcsolati-portal/illeteke…. You can also initiate the procedure of the National Authority for Data Protection and Freedom of Information (NAIH) if you experience a data protection violation. Please note that NAIH advises data subjects to first contact the data controller to find a peaceful solution in case of a problem. Therefore, in the present case, we ask you that if any problem or claim arises, please submit it to us first. You can contact NAIH in the following ways: by e-mail at ugyfelszolgalat@naih.hu, by mail at the address 1530 Budapest, Pf.: 5. You can read about the investigation of complaints related to the exercise of data subjects’ rights at the following link: https://www.naih.hu/panaszuegyintezes-rendje.html.

INFORMATION ON COOKIES USED ON THE WEBSITE

What are cookies? Cookies are files created by websites visited by the visitor on the visitor’s computer or mobile phone. A cookie is a text file that stores information concerning: ● the visitor ● the operation of the website ● the connection between the visitor and the web server ● the improvement of user experience. By using cookies, websites are capable of, for example: ● keeping you logged in ● remembering your website preferences ● offering you locally relevant content.

Management of cookies: Most browsers automatically accept cookies. You have the option to manage cookies in your browser settings: you can disable and delete them. If you want to read more about setting cookies, you can find out more in the help and documentation of the browser you are using.

Cookies used on our website Types of cookies:
Performance cookies (Google Analytics): These cookies contribute to providing a more complete user experience by collecting browsing data. They are only installed on the visitor’s machine if the visitor has given their consent.
System cookies: Cookies strictly necessary for the operation of the website. This cookie does not require your consent, it does not store personal data.

Google Analytics (Performance cookie): We use the Google Analytics program on our website. Google Analytics is a program that helps us get a more accurate picture of our visitors’ activities, and to modify the content of our website accordingly. With the help of such cookies, we have the opportunity to, for example, measure the traffic of the website, the time spent on our pages, and to select the most popular content. Therefore, Google Analytics uses cookies to collect information and prepare reports from statistical data regarding the use of the website without individually identifying visitors to Google. These cookies therefore do not identify you personally, they do not record your name and e-mail address; the data is stored in an aggregated and anonymous manner. The cookies used by Google Analytics are described in the table below.

Cookie name: _ga Cookie lifespan: 2 years Description of cookie function: Serves to distinguish users.
Cookie name: _gid Cookie lifespan: 24 hours Description of cookie function: Serves to distinguish users.
Cookie name: _gat Cookie lifespan: 1 minute Description of cookie function: Throttles the request rate sent to the server.

You have the option to turn off the Google Analytics service after enabling its use for cases when you visit a website. You can access more information about this at the following link: https://tools.google.com/dlpage/gaoptout?hl=en

Tripadvisor (Functional cookie)
Cookie name: ServerPool Cookie lifespan: Until browser is closed
Cookie name: TACds Cookie lifespan: 1 month.
Cookie name: TASession Cookie lifespan: Until browser is closed
Cookie name: TAUnique Cookie lifespan: More than 1 month.

PHP Session Cookie (System cookie)
System cookie required by websites written in PHP. The website does not work without it.

Cookie name: PHPSESSID Cookie lifespan: Until browser is closed. Description of cookie function: Serves to distinguish the browser session.
Cookie name: consentPageOpened Cookie lifespan: Until browser is closed. Description of cookie function: Serves to implement cookie management.
Cookie name: consentPageRequested Cookie lifespan: Until browser is closed. Description of cookie function: Serves to implement cookie management.
Cookie name: cookieFunctional Cookie lifespan: Until browser is closed. Description of cookie function: Serves to implement cookie management.
Cookie name: cookiePerformance Cookie lifespan: Until browser is closed. Description of cookie function: Serves to implement cookie management.
Cookie name: cookieSession Cookie lifespan: Until browser is closed. Description of cookie function: Serves to implement cookie management.
Cookie name: cookieStatus Cookie lifespan: Until browser is closed. Description of cookie function: Serves to implement cookie management.