Privacy policy

Effective: from the date of publication on the website until revoked.

In this policy, Vogue Wave Kft. (“Vogue”, “we”) explains what personal data we process on the restaurantvogue.hu website and its subdomains (e.g. szilveszter.restaurantvogue.hu, ajandek.restaurantvogue.hu, christmasdinner.restaurantvogue.hu, corporateevents.restaurantvogue.hu), and in connection with table reservations, purchases, accommodation and events.

This policy has been prepared under Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).

1. The data controller

Vogue is not required to appoint a data protection officer (GDPR Article 37). For data protection questions, contact us at office@restaurantvogue.hu.

2. What data we process, why, and for how long

2.1. Enquiries and messages through the website

This covers the event, apartment, sightseeing cruise and corporate enquiry forms.

• Data: name, email address, phone number; for corporate enquiries, the company name; the planned date, number of people, selected services, the text of your message, and the time of your consent.
• Purpose: answering your request, preparing an offer, preparing the booking or event.
• Legal basis: your consent (GDPR Article 6(1)(a)), given with the checkbox when you send the form.
• Retention: until you withdraw your consent, but no longer than 1 year from the enquiry. If the enquiry leads to a contract, the related data are kept for the period described in 2.3.
• Processors: Cloudflare, Inc. (storage), Plus Five Five, Inc. — Resend (notification email to our staff), Google Ireland Limited (receiving the email).

2.2. Table reservations

Table reservations are made through the booking system of NeerY Solutions Kft., in the window embedded in our website or on places.neery.net.

• Data: name, email address, phone number, date, time and party size of the reservation, and any note you add.
• Purpose: recording and fulfilling the reservation, notifications about it, changes and cancellations.
• Legal basis: performance of a contract (GDPR Article 6(1)(b)).
• Retention: 1 year after the date of the reservation.
• Processor: NeerY Solutions Kft., which stores the data with its own hosting provider (Amazon Web Services).

2.3. Buying gift vouchers and event tickets (online shop)

• Data: name, billing name and address, email address, phone number, order details (product, amount, time), the voucher’s serial number and redemption details.
• Purpose: fulfilling the order, sending the voucher or ticket, invoicing, recording voucher redemption, handling complaints.
• Legal basis: performance of a contract (GDPR Article 6(1)(b)); issuing and keeping invoices is a legal obligation (Article 6(1)(c), Hungarian Act C of 2000 on Accounting).
• Retention: invoices and accounting records for 8 years (Accounting Act, Section 169); other order data for the limitation period of 5 years (Hungarian Civil Code, Section 6:22).
• Card payments: card details are not processed by us but by the payment provider, Teya Iceland hf. We have no access to card details; we are only notified whether the payment succeeded.
• Invoicing: KBOSS.hu Kft. (Számlázz.hu).

2.4. Apartment bookings and guest registration

• Data: the data needed for the booking (name, contact details, arrival and departure dates, number of guests), and the data required by law for accommodation services: surname and given name, birth name, place and date of birth, sex, nationality, mother’s birth name, identity document details, visa or residence permit details, the address of the accommodation, and the start and expected end of the stay.
• Purpose: providing the accommodation, statutory reporting (VIZA, NTAK), determining the tourist tax.
• Legal basis: performance of a contract (GDPR Article 6(1)(b)); for guest registration, a legal obligation (Article 6(1)(c)) under Section 9/H of Hungarian Act CLVI of 2016 on the State Tasks of Developing Tourism Areas.
• Retention:
  • identification data are kept in the accommodation management software only until the reporting obligation has been fulfilled (Section 9/H(3));
  • data sent to the closed guest information database (VIZA) are stored by its hosting provider until the last day of the first year after recording, then deleted (Section 9/H(5));
  • invoices and tourist tax records for 8 years (Accounting Act, Section 169);
  • other booking data for 5 years (Civil Code, Section 6:22).
• For bookings made through Booking.com, Booking.com B.V. is an independent controller; its own privacy policy applies to the data provided there.

2.5. Contact by email and phone

• Data: what you provide: name, contact details, the content of your message.
• Purpose: answering your enquiry.
• Legal basis: Vogue’s legitimate interest in answering enquiries addressed to it (GDPR Article 6(1)(f)); if the enquiry is aimed at concluding a contract, steps prior to entering into a contract (Article 6(1)(b)).
• Retention: 1 year from the enquiry; if it leads to a contract, for the period described in 2.3.
• Processor: Google Ireland Limited (Google Workspace email).

2.6. Newsletter

• Data: email address, name (if provided), time of subscription.
• Purpose: telling you about our offers and events.
• Legal basis: your consent (GDPR Article 6(1)(a); Hungarian Act XLVIII of 2008 on Commercial Advertising, Section 6).
• Retention: until you unsubscribe. Every email contains an unsubscribe link.
• Processor: The Rocket Science Group LLC (Mailchimp), United States — transfers take place under the EU–US Data Privacy Framework.

3. Cookies and measurement

3.1. On the website (restaurantvogue.hu and the campaign pages)

The website automatically uses only the cookie needed for it to work. Any other cookie is placed in your browser only with your consent, which you can give in the cookie window and change or withdraw at any time using the “Cookie settings” link at the bottom of the page. Without consent, no measurement code is loaded.

• Legal basis: your consent (GDPR Article 6(1)(a); Hungarian Act C of 2003 on Electronic Communications, Section 155(4)).

3.2. On the online shop and checkout pages

The online shop (cart, checkout, product pages) runs on a separate system. There — likewise only with your consent — the following tools are used:

3.3. Embedded content

• YouTube video on the home page: loaded from youtube-nocookie.com. When the video plays, Google may receive data about the visit (e.g. IP address, browser details).
• Google Maps: when the map loads, Google may receive data about the visit (e.g. IP address).
• Neery booking window: when opened, NeerY Solutions Kft. may use cookies needed for it to work.

4. Processors

Transfers outside the EU. Transfers to processors operating in the United States (Cloudflare, Resend, Mailchimp; the parent companies of Google and Meta) take place under the European Commission’s adequacy decision on the EU–US Data Privacy Framework or under standard contractual clauses (GDPR Article 46). Iceland is a member of the European Economic Area, so transfers there are permitted without additional safeguards.

5. Your rights

Under Articles 15–22 of the GDPR, you may request:

• access to your data and a copy of it,
• rectification of your data,
• erasure of your data,
• restriction of processing,
• portability of your data (in a structured, machine-readable format),
• and you may object to processing based on legitimate interest.

Where processing is based on consent, you may withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal.

Send your request to office@restaurantvogue.hu. We respond within one month; where justified, this may be extended by two further months, in which case we will let you know.

6. Complaints and remedies

If you feel that your data are not being handled properly, please contact us first. You may also lodge a complaint with the supervisory authority:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

• address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
• postal address: 1363 Budapest, Pf. 9.
• phone: +36 1 391 1400
• email: ugyfelszolgalat@naih.hu
• web: www.naih.hu

You may also go to court if your rights are infringed; at your choice, proceedings may be brought before the regional court of your place of residence or stay.

7. Data security

• We receive data over an encrypted (HTTPS) connection.
• Form, booking and purchase data are accessible only to staff who need them for their work, through their own user accounts.
• The number of login attempts on administration interfaces is limited.
• Card details never reach us.

8. Changes to this policy

We update this policy when our operations or the law change. The version currently in force is always available on this page.