Privacy Notice
The purpose of this Privacy Notice is to ensure that data subjects receive appropriate information in accordance with data protection regulations regarding the data processing activities carried out by Napsugár Vendégváró Kft. (hereinafter referred to as the “Data Controller”) and are able to exercise their legal rights.
Data Controller:
The current details of the Data Controller are as follows:
- Name: Napsugár Vendégváró Kft.
- Registered office: 8600 Siófok, Küszhegyi utca 1/A, Hungary
- Company registration number: 14 09 312284
- Tax number: 23805741-2-14
- Represented by: Margit Bagdiné Jakab
- E-mail: margit.jakab@gmail.com
Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR), as well as Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).
Scope of processed personal data, purpose, duration and legal basis of data processing
Purpose of data processing: Contact
Visitors may contact the Data Controller via the e-mail address provided under the “Contact” menu item on the website or by completing the contact form.
Data subject: the sender of the message
Categories of personal data processed: name, e-mail address, phone number, message content and subject
Legal basis of data processing: consent of the data subject
Purpose of data processing: contacting the Data Controller
Data processing platform: electronic
Recipients of the data: the Data Controller and those internal employees of the Data Controller whose duties require access to and processing of the data.
Data transfer: The Data Controller does not transfer personal data to third parties, except where required by law (e.g. courts, investigative authorities, prosecution services).
Data retention period: Until the withdrawal of consent, or – if necessary for the enforcement of claims – for 5 years (statutory limitation period under the Civil Code); otherwise, for 30 days following receipt of the message.
Consequences of failure to provide data: failure of successful communication
Purpose of data processing: Data processed in connection with website visits
| Categories of data | Purpose of data processing | Legal basis | Retention period |
| IP address, time of visit, operating system and browser type used by the visitor | Ensuring the proper and high-quality operation of the website, monitoring and improving service quality, and identifying visitors attacking the website | Legitimate interest (GDPR Article 6(1)(f)) | The partial IP address of the user is stored for 7 days and then automatically deleted. |
Purpose of data processing: Cookies used on the website
When visiting the website at [website address], a small file called a “cookie” is placed on the visitor’s computer, which may serve several purposes.
Some of the cookies we use are essential for the proper operation of the website (“session cookies”), while others collect information about website usage (cookies required for statistical purposes) to make the site more convenient and useful. Some cookies are temporary and are deleted when the browser is closed, while others are persistent and remain on the user’s device for a longer period.
The legal basis for processing cookies necessary for the operation of the website is the legitimate interest of the Data Controller, for which a balancing test has been conducted.
“Session cookies”
Session cookies are necessary for browsing the website and using its basic functions. They enable the website to remember actions performed by the visitor during a session. Without these cookies, smooth website operation cannot be guaranteed. These cookies are valid for the duration of the visit and are automatically deleted at the end of the session or when the browser is closed.
The website uses the following session cookies:
| Cookie name | Purpose | Legal basis | Retention period |
| buildr_live_session | Used to retrieve session status between sessions. | Legitimate interest – GDPR Article 6(1)(f) (based on balancing test) | End of session |
| XSRF-TOKEN | Used to retrieve session status between sessions. | End of session | |
| cookies-state | Stores cookie consent information. | End of session | |
| VISITOR_INFO1_LIVE | YouTube LLC cookie used to measure available bandwidth and determine whether the new or old player interface is displayed. | 5 months | |
| YSC | YouTube LLC cookie that stores whether YouTube content is displayed as embedded video. | End of session |
“Cookies required for statistical purposes”
To provide content preferred by visitors, we create statistics about website usage habits.
| Cookie name | Purpose | Legal basis | Retention period |
| _ga | Registers a unique identifier used to generate statistical data on website usage. | Consent of the data subject – GDPR Article 6(1)(a) | 399 days |
| _gat | Used by Google Analytics to throttle request rates. | 1 day | |
| _gid | Stores a unique value for each visited page. | 1 day | |
| collect | Identifies the device used to visit the website. | End of session |
“Cookies required for marketing activities”
Marketing cookies are used to display advertisements that are relevant or of interest to visitors and to measure campaign performance.
| Cookie name | Purpose | Legal basis | Retention period |
| DEVICE_INFO | Tracks user interaction with embedded content. | Consent of the data subject – GDPR Article 6(1)(a) | 6 months |
Purpose of data processing: Navigation to social media platforms
If the visitor is logged in to the selected social media platform at the same time, the visit may be linked to the user’s account.
Links to Facebook and Instagram are indicated by icons operated by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin).
Links to Twitter and LinkedIn are indicated by the respective platform icons.
Rights of data subjects
Data subjects may request information, correction, deletion, restriction of processing, withdraw consent, and exercise their other rights in accordance with the GDPR.
20 February 2023