Inquiry
EN

DATA PROCESSING POLICY

  • Name of Data Controller: Equital Kft.
  • Incorporation No.: Cg.19-09-506887
  • Registered office: 8311 Nemesvita, hrsz. 06/2.
  • e-contact: info@equital.hu
  • Represented by: Egri Tamás, Managing Director

Equital Ltd. (hereinafter referred to as Equital) processes personal data in connection with this interface under its Privacy Policy. The scope of the policy applies to all processes of the organizational units of Equital during which personal data processing takes place as specified in Section 3(2) of Act CXII of 2011 ("Privacy Act").
Personal data may only be processed for the purpose of exercising a right or fulfilling an obligation. The use of personal data processed by Equital for private purposes is prohibited. Data processing must at all times comply with the principle of purpose limitation.

Equital processes personal data only for a specific purpose, for the purpose of exercising rights and fulfilling an obligation to minimum extent and only for the time necessary to achieve the purpose. Every stage of the data processing must meet the purpose - and if the purpose of data processing is ceased or otherwise illegal, the data will be deleted.

Equital processes personal data only after the prior consent (in the case of special personal data this consent must be in writing) of the data subject or on the basis of law or statutory authorization.

Prior to the data recording, Equital always informs the data subject about the purpose and legal basis of the data processing.

Employees of the organizational units of Equital who perform data processing and employees participating in the data processing on behalf of Equital and employees of any of its organizations performing data processing operations are obliged to retain the personal data they have known as business secrets.

If the person subject to the policy becomes aware that the personal data processed by Equital is incorrect, incomplete or inaccurate, he or she must correct it or ask for rectification by the person responsible for recording the data.

Data protection obligations for natural or legal persons or organizations without legal personality performing data processing on behalf of Equital shall be enforced in an agency agreement with the data processor.

NAME OF THE DATA PROCESSING ACTIVITY ONLINE BOOKING
Name of Data Controller Equital Kft.
Contact of Data Controller 8311 Nemesvita, hrsz. 06/2.
Purpose of Data Processing simplifying the booking process, making online booking smooth and comfortable
Legal basis for data processing explicit and voluntary prior consent of the person initiating the online booking
Name of personal data handled

Personal data of the person initiating the booking as follows:

  • name
  • e-mail address
  • phone number
  • address (country, zip code, city, street, house number)
  • IP address (online ID)
Estimated Duration of Personal Data Processing until the consent is withdrawn and 365 days after the date of departure belonging to the online booking
Necessity for providing personal data by the data subject online booking process initiated by the data subject and the fulfilment of transaction in case of online payment
Data processing requires the use of data controllers yes
NAME OF DATA CONTROLLER
Name of Data Controller MORGENS Design Kft.
Address of Data Controller 8800 Nagykanizsa, Csányi László utca 2.
Purpose of data processing on behalf of data controller operating the online booking module, storing incoming online bookings in a closed system, enabling booking confirmation on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4. X. emelet 241.)
Name of Data Controller Rocket Science Group
Address of Data Controller 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308
Purpose of data processing on behalf of data controller enabling electronic mailing function related to online booking, creating confirmation and using guest reviews function through the software of Mandrill,
Name of Data Controller OTP Mobil Kft.
Address of Data Controller 1093 Budapest, Közraktár u. 30-32.
Purpose of data processing on behalf of data controller Providing data communication required for online payment transactions between Equital and the electronic system of SimplePay by OTP Mobile, confirmation of transaction status
Name of Data Controller Sopron Bank Zrt.
Address of Data Controller 9400 Sopron, Kossuth Lajos u. 19.
Purpose of data processing on behalf of data controller Providing data communication related to the booking between Equital Kft. and the electronic system of Sopron Bank Zrt., confirmation of transaction status

The executive officer of Equital, taking into account the specialties of Equital, defines the organization of data protection, the scope of duties and competences related to data protection and its related activities, and appoints the person who supervises data processing.

Employees of Equital ensure during their work that unauthorized persons do not have access to personal data and that the storage and placement of personal data is not accessible, recognizable, alterable or destructible by an unauthorized person.

The supervision of the data protection system of Equital is carried out by a data protection officer appointed or authorized by the executive officer.

The website operated by Equital can be accessed by anyone, without disclosing their identity and providing their personal data, information can be obtained freely and without restriction on the website and on the linked pages. Nevertheless, non-personal data is collected unrestrictedly and automatically from the website. Personal data, however, cannot be obtained from these data, thus data processing subject to the Privacy Act does not occur.

Equital uses the web analytics services of Google Analytics on its website. Google Analytics uses cookies, text files placed on the computer of the visitor of the website in order to help analyze the use of the website. The information generated by the cookies about the use of the website (the IP address of the visitor of the website) is transmitted to and stored on the servers of Google in the United States. Google does not associate the information generated by cookies with other data, and therefore, does not perform personal data processing under the applicable privacy policy. By choosing the appropriate settings for their browser, visitors of the website can refuse the use of cookies. By using the website, the visitor of the website agrees to the processing of their data in the manner and for the purposes defined above.

Google uses the information obtained to evaluate and analyze the use of the website by the data subject, as well as to compile reports on the activities performed on the website and to provide other services related to the activities performed on the website and the use of internet.

Data processing activities and controllers

NAME OF THE DATA PROCESSING ACTIVITY ONLINE REQUEST
Name of Data Controller: Equital Kft.
Contact of Data Controller 8311 Nemesvita, hrsz 06/2.
Purpose of Data Processing simplifying the process of requesting offer without obligations, viewing the personalized offer made by the data controller
Legal basis for data processing explicit and voluntary prior consent of the person initiating the online request
Name of personal data handled

Personal data of the person initiating the request as follows:

  • name
  • e-mail address
  • phone number
  • address (country, zip code, city, street, house number)
  • IP address (online ID)
Estimated Duration of Personal Data Processing until the consent is withdrawn or 365 days after the validity of the online offer
Necessity for providing personal data by the data subject implementation of online request process initiated by the data subject, making future online booking process smooth, more efficient and faster if the offer is appropriate
Data processing requires the use of data controllers yes
NAME OF DATA CONTROLLER
Name of Data Controller MORGENS Design Kft.
Address of Data Controller 8800 Nagykanizsa, Csányi László utca 2.
Purpose of data processing on behalf of data controller operating online request module, storing incoming online requests in a closed system, enabling answering requests on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4. X. emelet 241.)
Name of Data Controller Rocket Science Group
Address of Data Controller 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308
Purpose of data processing on behalf of data controller enabling electronic mailing function through the software of Mandrill related to recording online requests, preparing offers and to their validity
NAME OF THE DATA PROCESSING ACTIVITY ONLINE GIFT CARD ORDER
Name of Data Controller: Equital Kft.
Contact of Data Controller 8311 Nemesvita, hrsz. 06/2.
Purpose of Data Processing simplifying the process of online gift card order and making it more convenient
Legal basis for data processing the explicit and voluntary prior consent of the person initiating the online payment during the process of online gift order
Name of personal data handled

Personal data processed for ordering gift card as follows:

  • name of customer
  • email of customer
  • phone number of customer
  • mailing address (country, zip code, city, street, house number) of customer
  • billing address (country, zip code, city, street, house number) of customer
  • IP address (online ID) of customer
  • name of person(s) receiving the gift card
Estimated Duration of Personal Data Processing until the consent is withdrawn or 365 days after the use of the ordered gift card
Necessity for providing personal data by the data subject the possibility of a simple, convenient implementation of the gift card order process initiated by the data subject
Az adatkezelési tevékenységhez adatfeldolgozók igénybevétele szükséges yes
NAME OF DATA CONTROLLER
Name of Data Controller MORGENS Design Kft.
Address of Data Controller 8800 Nagykanizsa, Csányi László utca 2.
Purpose of data processing on behalf of data controller operating online gift card ordering module, storing incoming gift card orderings in a closed system, enabling sending gift cards online on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4. X. emelet 241.)
Name of Data Controller Rocket Science Group
Address of Data Controller 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308
Purpose of data processing on behalf of data controller enabling electronic mailing function through the software of Mandrill to order online gift cards and to record orders
Name of Data Controller OTP Mobil Kft.
Address of Data Controller 1093 Budapest, Közraktár u. 30-32.
Purpose of data processing on behalf of data controller Providing data communication required for online payment transactions between Equital and the electronic system of SimplePay by OTP Mobile, confirmation of transaction status
Name of Data Controller Sopron Bank Zrt.
Address of Data Controller 9400 Sopron, Kossuth Lajos u. 19.
Purpose of data processing on behalf of data controller Providing data communication related to the booking between Equital Kft. and the electronic system of Sopron Bank Zrt., confirmation of transaction status
NAME OF THE DATA PROCESSING ACTIVITY NEWSLETTER SIGN-UP
Name of Data Controller: Equital Kft.
Contact of Data Controller 8311 Nemesvita, hrsz. 06/2.
Purpose of Data Processing communication, information
Legal basis for data processing explicit and voluntary prior consent of the person initiating the newsletter sign-up
Name of personal data handled

Personal data processed for newsletter sign-up as follows:

  • name of subscriber
  • email address of subscriber
  • IP address (online ID) of subscriber
  • subscription date
  • source of subscription
  • subscription status
  • date of subscription status
Estimated Duration of Personal Data Processing until the consent is withdrawn, until unsubscribing from the newsletter
Necessity for providing personal data by the data subject getting to know special offers and current programs of the accommodation of interest of the data subject, and the possibility of obtaining information about individual promotions
Data processing requires the use of data controllers yes
NAME OF DATA CONTROLLER
Name of Data Controller MORGENS Design Kft.
Address of Data Controller 8800 Nagykanizsa, Csányi László utca 2.
Purpose of data processing on behalf of data controller on the server of DotRoll Számítástechnikai Kft. (1148 Budapest, Fogarasi út 3-5.) hosting the closed online system of Zadír MailR protected by identifier and password for the data controller with the purpose of newsletter sending from his or her account.
Name of Data Controller Mailgun Technologies, Inc
Address of Data Controller 21750 Hardy Oak Blvd Ste 104 #43099 San Antonio, TX 78258 US
Purpose of data processing on behalf of data controller providing electronic mailing function through the mailing servers of Mailgun Technologies Inc. with the purpose of sending newsletters

Asserting the Rights of Data Subjects

The data subject may request information on the processing of his or her personal data and may request the rectification or the deletion of his or her personal data with the exception of the data processing required by the law using the contact details provided by Equital.

Equital is obliged to forward the received request or objection to the head of the organizational unit responsible for data processing within three days of the receipt.

The head of the organizational unit with the scope of responsibilities shall reply the request related to the data processing of the data subject in writing, in a comprehensible form, not later than 25 days from the receipt, or in the case of exercising the right to object to the processing of personal data within 15 days.

The information shall apply to information specified in Section 15(1) of the Privacy Act, if informing the data subject cannot be refused under the law.

Information is generally free of charge, Equital can only charge a fee in cases specified in Section 15(5) of the Privacy Act.

Requests can only be rejected by Equital for reasons specified in Section 9(1) or Section 19 of the Privacy Act, and this can only take place by information specified in Section 16(2) of the Privacy Act with specifying a reason in writing.

Unrealistic data is corrected by the head of the organizational unit processing the data, if the necessary data and the public records proving them are available, and he or she arranges the deletion of the processed personal data in cases specified in Section 17(2) of the Privacy Act.

For the duration of the data subject's objection to the processing of personal data, but for a maximum of 5 days, data processing is suspended by the head of organizational unit responsible for the data processing, he or she examines the justification of the objection and makes a decision about which the applicant is informed as specified in Section 21(2) of the Privacy Act.

If the objection is justified, the head of the organizational unit responsible for the data processing shall act as specified in Section 21(3) of the Privacy Act.