Effective: from the date of publication on the website until withdrawn.

This notice explains how Vogue Wave Kft. (“Vogue”, “we”) handles personal data on restaurantvogue.hu and its subdomains (for example szilveszter.restaurantvogue.hu, ajandek.restaurantvogue.hu, christmasdinner.restaurantvogue.hu, corporateevents.restaurantvogue.hu), and when you book a table, buy from us, stay with us or hold an event on board.

It is based on Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and on Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.

1. Who we are

We are not required to appoint a data protection officer (Article 37 GDPR). For any data protection question, write to us at office@restaurantvogue.hu.

2. What data we process, why, and for how long

2.1. Enquiries and messages sent through the website

This covers our forms for events, apartments, sightseeing cruises and corporate enquiries.

• Data: name, email address, phone number; for corporate enquiries, the company name; the planned date, number of guests, the services you select, your message, and the time you gave your consent.
• Purpose: to answer your request, prepare an offer, and prepare your booking or event.
• Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the box when you send the form.
• Retention: until you withdraw your consent, and for no longer than 1 year after your enquiry. If the enquiry leads to a contract, the data related to that contract is kept for the periods set out in section 2.3.
• Processors: Cloudflare, Inc. (storing the data), Plus Five Five, Inc. — Resend (notification email to our team), Google Ireland Limited (receiving the email).

2.2. Table reservations

Table reservations are handled by the booking system of NeerY Solutions Kft., either in the booking window on our website or on places.neery.net.

• Data: name, email address, phone number, the date, time and party size of the reservation, and any note you add.
• Purpose: to record and honour your reservation, and to send you notices about it, including changes and cancellations.
• Legal basis: performance of a contract (Article 6(1)(b) GDPR).
• Retention: 1 year after the date of the reservation.
• Processor: NeerY Solutions Kft., which stores the data with its hosting provider, Amazon Web Services.

2.3. Gift vouchers and event tickets (online shop)

• Data: name, billing name and address, email address, phone number, order details (product, amount, time), the voucher number and redemption details.
• Purpose: to fulfil your order, send you the voucher or ticket, issue the invoice, record voucher redemption, and handle complaints.
• Legal basis: performance of a contract (Article 6(1)(b) GDPR); issuing and keeping the invoice is a legal obligation (Article 6(1)(c) GDPR, Hungarian Act C of 2000 on Accounting).
• Retention: invoices and accounting records for 8 years (Section 169 of the Accounting Act); other order data for the 5-year limitation period (Section 6:22 of the Hungarian Civil Code).
• Card payments: your card details are handled by our payment provider, Teya Iceland hf., not by us. We never see your card details; we are only told whether the payment succeeded.
• Invoicing: KBOSS.hu Kft. (Számlázz.hu).

2.4. Apartment bookings and guest registration

• Data: what we need for the booking (name, contact details, arrival and departure dates, number of guests), and the data Hungarian law requires accommodation providers to record: surname and given name, birth name, place and date of birth, sex, nationality, mother’s birth name, identity document details, visa or residence permit details, the address of the accommodation, and the start and expected end of your stay.
• Purpose: to provide the accommodation, to meet our statutory reporting duties (VIZA, NTAK), and to calculate the tourist tax.
• Legal basis: performance of a contract (Article 6(1)(b) GDPR); for guest registration, a legal obligation (Article 6(1)(c) GDPR) under Section 9/H of Hungarian Act CLVI of 2016 on the State Tasks of Developing Tourism Regions.
• Retention:
  • identification data is kept in our property management software only until our reporting duty is fulfilled (Section 9/H(3));
  • data sent to the Guest Information Closed Database (VIZA) is stored by its host until the last day of the year following its recording, then deleted (Section 9/H(5));
  • invoices and tourist tax records for 8 years (Section 169 of the Accounting Act);
  • other booking data for 5 years (Section 6:22 of the Hungarian Civil Code).
• Bookings made through Booking.com: Booking.com B.V. is a separate controller, and its own privacy notice applies to the data you give there.

2.5. Email and phone

• Data: whatever you share with us: name, contact details, the content of your message.
• Purpose: to answer you.
• Legal basis: our legitimate interest in answering messages sent to us (Article 6(1)(f) GDPR); where your message is about entering into a contract, taking steps before that contract (Article 6(1)(b)).
• Retention: 1 year after your message; if it leads to a contract, the periods set out in section 2.3.
• Processor: Google Ireland Limited (Google Workspace email).

2.6. Newsletter

• Data: email address, name (if you give it), and the time you signed up.
• Purpose: to tell you about our offers and events.
• Legal basis: your consent (Article 6(1)(a) GDPR; Section 6 of Hungarian Act XLVIII of 2008 on Commercial Advertising).
• Retention: until you unsubscribe. Every newsletter has an unsubscribe link at the bottom.
• Processor: The Rocket Science Group LLC (Mailchimp), United States — data is transferred under the EU–US Data Privacy Framework.

3. Cookies and measurement

3.1. Cookies on our website, online shop and campaign pages

This section covers restaurantvogue.hu (including the online shop) and our campaign pages. The same cookie banner and the same rules apply on all of them.

By default the website only uses the cookies it needs to work. Any other cookie is set only with your consent: you can give it in the cookie banner, and change or withdraw it at any time through the “Cookie settings” link. On restaurantvogue.hu, Google’s measurement code loads before you choose and also if you reject cookies, but in that case it neither sets nor reads cookies: Google only receives a cookieless signal that a page was viewed (for example the time, the page title, the browser type and — as with any web request — your IP address), which it uses for aggregate statistics and to estimate how our ads perform (Google Consent Mode). On our campaign pages, no measurement code loads at all without your consent.

If you book a table in the booking window on our website, we tell Google the reservation ID, date and party size so that we can measure how our ads perform. We do not pass on your name, email address or phone number.

• Legal basis: for necessary cookies, the operation of the website (the exemption in Section 155(4) of Hungarian Act C of 2003 on Electronic Communications); for statistics and marketing cookies, your consent (Article 6(1)(a) GDPR; Section 155(4) of Act C of 2003).
• You can also delete cookies in your browser settings at any time.

3.2. Online shop and payment

The online shop (product pages, cart, checkout) is part of restaurantvogue.hu: the same cookie banner and the same cookies apply as listed in section 3.1, including the ones the cart needs to work. Card payments are processed in the system of Teya Iceland hf., which may use its own cookies to carry out the payment securely.

3.3. Embedded content

• YouTube video on the home page: loaded from youtube-nocookie.com. When it plays, Google may receive data about your visit (for example your IP address and browser details).
• Google Maps: when the map loads, Google may receive data about your visit (for example your IP address).
• Neery booking window: when you open it, NeerY Solutions Kft. may use the cookies it needs to run its service.

4. Processors

Transfers outside the EU. Data sent to processors based in the United States (Cloudflare, Resend, Mailchimp; and the parent companies of Google and Meta) is transferred under the European Commission’s adequacy decision on the EU–US Data Privacy Framework, or under standard contractual clauses (Article 46 GDPR). Iceland is part of the European Economic Area, so no additional safeguard is needed for transfers there.

5. Your rights

Under Articles 15–22 GDPR you can ask us for:

• access to your data and a copy of it,
• correction of your data,
• erasure of your data,
• restriction of processing,
• portability of your data (in a structured, machine-readable format),
• and you can object to processing based on our legitimate interest.

Where processing is based on your consent, you can withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal.

Send your request to office@restaurantvogue.hu. We will reply within one month; where justified, this can be extended by a further two months, in which case we will let you know.

6. Complaints and remedies

If you feel we have not handled your data properly, please contact us first. You can also complain to the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

• address: Falk Miksa utca 9–11., 1055 Budapest, Hungary
• postal address: 1363 Budapest, Pf. 9., Hungary
• phone: +36 1 391 1400
• email: ugyfelszolgalat@naih.hu
• web: www.naih.hu

If you live in another EU country, you can also complain to the data protection authority there. You can also go to court if your rights have been infringed; you may bring the case before the regional court of your place of residence or stay.

7. Security

• We receive data over an encrypted connection (HTTPS).
• Only staff who need it for their work can access form, reservation and order data, each with their own user account.
• Login attempts to our admin interfaces are limited.
• Card details never reach us.

8. Changes to this notice

We update this notice when our operations or the law change. The current version is always available on this page.