www.thermalvillaberekfurdo.hu website Privacy Policy
Effective from 1 September 2026
Contents
PRIVACY POLICY
Introduction
Data processing related to the use of the website
1. Name of the Data Controller
2. Legislation forming the basis of data processing
3. Data processing related to completing the contact form
4. Use of Hotjar
- Use of Google Analytics
- Use of Google Ads
- Use of Meta (Facebook) Pixel
Promotions
- Sending advertising SMS messages
- Sending newsletters and direct marketing (DM) messages
- Use of cookies
11. Technical and organisational measures related to data processing
12. Rights of data subjects
PRIVACY POLICY
Introduction
This notice provides information on data processing in connection with the use of the website (www.thermalvillaberekfurdo.hu) of Thermal Villa Berekfürdő (5309 Berekfürdő, Bagoly utca 1/c, info@thermalvillaberekfurdo.hu, +36 70 282 2042). The website allows visitors to obtain information about the services offered and to contact the website operator by completing the contact form.
I. Data processing related to the use of the website
1. Name of the Data Controller
Data Controller: Thermal Villa Berekfürdő
Registered office: 5309 Berekfürdő, Bagoly utca 1/c
E-mail: info@thermalvillaberekfurdo.hu
Phone: +36 70 282 2042
2. Legislation forming the basis of data processing
Regulation (EU) 2016/679 of the European Parliament and of the Council (27 April 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).
Act CVIII of 2001 on certain issues of electronic commerce services and information society services.
Act C of 2003 on Electronic Communications.
Act XLVII of 2008 on the Prohibition of Unfair Commercial Practices against Consumers.
Act XLVIII of 2008 on the Basic Requirements and Certain Restrictions of Commercial Advertising Activities.
Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
3. Data processing related to completing the contact form
By completing the contact form, the user can contact the Data Controller.
3.1. Purpose of data processing
Identification of persons completing the contact form and enabling communication with them.
PROMOTIONS
Sending advertising SMS messages
Sending advertising EMAILS
Making advertising TELEPHONE CALLS to data subjects
3.2. Legal basis for data processing
Article 6(1)(a) GDPR: the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
3.3. Data processed and the purpose of processing
Categories of data processed when completing the contact form
|
Name |
identification of the data subject |
|
E-mail address |
communication |
|
Phone number |
communication and more efficient coordination of questions related to the enquiry. |
Please note that an e-mail address does not necessarily have to contain personal data. For example, the e-mail address does not need to include the name of the data subject. The data subject is free to decide whether to provide an existing e-mail address that contains information indicating their identity.
3.4. Use of a data processor
Website operator:
data processor: Aktiv Digital Media Kft.
registered office: 5600 Békéscsaba, Lencsési út 35-37. 8. em. 46.
company registration number: 04-09-014773
tax number: 26629827-2-04
e-mail: office@aktivdigital.hu
phone: +36 30/360 9350
Data processors used as hosting service providers:
data processor: Tárhely.eu Kft.
registered office: 1144 Budapest, Ormánság utca 4. 10. em. 241.
company registration number: 01-09-909968
tax number: 14571332-2-42
e-mail: support@tarhely.eu
phone: +36 1 789 2 789
External SMS service provider:
data processor: LINK Mobility Hungary Kft.
registered office: 1062 Budapest, Andrássy út 68 C ép. 1 1 a.
company registration number: 01-09-694287
tax number: 12598582-2-42
e-mail: gabor.tamas@linkmobility.com
phone: +36 70 245 3625
3.5. Categories of data subjects affected by data processing
Persons who complete the contact form and consent to the processing of their data.
3.6. Duration of data processing
Until consent is withdrawn.
3.7. Method of data processing
Data processing is carried out automatically in electronic form on the Data Controller’s IT systems and on the IT systems of the Partners used.
4. Use of Hotjar
Our website uses the Hotjar analytics tool to better understand the needs of our visitors and optimise their user experience. Hotjar uses cookies and other tracking technologies to collect information about user behaviour (for example, which pages they visit, how much time they spend on the site and what interactions they perform). The data collected by Hotjar is processed anonymously and cannot be used to identify individual users.
5. Use of Google Analytics
Our website uses the Google Analytics service operated by Google Ireland Limited (registered office: Gordon House, Barrow Street, Dublin 4, Ireland).
Google Analytics uses cookies to analyse the use of the website, including, for example, the number of visits, the pages viewed by visitors and the time spent on the website.
The information collected is stored on Google servers (typically in the United States). The data is used for anonymous statistical analyses without personally identifying the data subject.
6. Use of Google Ads
The website also uses the Google Ads advertising service, which enables remarketing. This means that visitors to the website may later see advertisements in the Google advertising network that are based on their browsing behaviour on the website.
Google Ads places remarketing cookies on the user’s device in order to display relevant advertisements tailored to their interests.
7. Use of Meta (Facebook) Pixel
Our website uses the Facebook Pixel service provided by Meta Platforms Ireland Ltd. (“Meta”, registered office: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland).
The Facebook Pixel allows us to measure the effectiveness of our advertisements and to display targeted advertisements to users on the Facebook and Instagram platforms.
The Meta Pixel uses cookies and other tracking technologies to collect data about the activities visitors perform on our website.
8. Sending advertising SMS messages
You consent to us periodically sending advertising SMS messages to the phone number you provide, informing you about our current offers, promotions and other news that may be of interest to you. SMS messages are sent only with your prior consent, which you may withdraw at any time by sending a message to the (e-mail address) e-mail address.
Unsubscription may take a minimum of 30 calendar days; during this period you may continue to receive advertising messages or calls. Please disregard them.
9. Sending newsletters and direct marketing (DM) messages
If, after reviewing this Privacy Policy, the data subject gives their explicit and voluntary consent by ticking the relevant checkbox, the Data Controller may send them marketing communications.
By giving consent, the data subject accepts that the Data Controller may send direct marketing (DM) messages electronically (in particular by e-mail), by direct message through social media platforms (e.g. Facebook, Instagram), and – where separate consent is given – by post, concerning current discounts, promotions, new products, services and other marketing offers.
10. Use of cookies
Cookies are small data files that are placed on your computer when you visit a website; they are created, saved and stored by the websites you visit. The most commonly used browsers (Chrome, Firefox, etc.) generally accept and allow the downloading and use of cookies by default; however, users can reject or disable them by changing their browser settings, and cookies stored on the computer can also be deleted. More detailed information on the use of cookies is available in the “Help” menu of the respective browser.
We basically distinguish between two types of cookies. One group consists of cookies that do not require user consent. We provide information about these when the first visit to our website begins; examples include “user input” cookies, authentication cookies, user-centric security cookies, multimedia player session cookies, load-balancing session cookies and cookies that help customise the user interface.
The other group consists of cookies for which user consent is required. If data processing begins when the website is accessed, we inform the user and request their consent at the start of the first visit. Examples include social content-sharing tracking cookies, cookies related to external advertising and our own visitor analytics cookies.
Acceptance of cookies is not mandatory; however, we inform users that failure to enable cookies may affect the operation of the website. Therefore, we accept no responsibility if our website does not function as expected due to cookies not being enabled.
10.1. Cookies used
Type: Session cookies
Name: Cookies essential for providing the service
Consent: Not required
Description: These cookies are necessary to enable users to use the website.
Purpose: Ensuring the operation of the website
Validity: Until the browsing session ends.
Type: Functional cookies
Name: Cookies used to store previous settings (e.g. remembering passwords, custom settings, etc.)
Consent: Required
Description: These cookies allow the browser to remember certain user settings on the website, for example which cookies the user accepted during their first visit.
Purpose: Remembering user settings
Validity: Depends on the setting, but a maximum of 2 years
Type: Tracking cookie for visitor analytics (third-party)
Name: Google Analytics (_gat and _ga)
Consent: Required
Description: They collect information about the use of the website and the user’s activity
Purpose: Related to services of third parties (e.g. Google) during visits to the website
Validity: 2 years
Type: Marketing cookies (third-party)
Name: Facebook Pixel, Google Ads remarketing, Tiktok and other social media and software tracking tools
Consent: Required
Description: Marketing cookies are used to track visitors’ activity on the website.
Purpose: To publish relevant advertisements for individual users and encourage them to take action.
Validity: 2 years
Detailed information about third-party cookies (third-party cookies) is available at the following links:
Google Analytics - https://policies.google.com/technologies/types?hl=hu
Google Remarketing–https://policies.google.com/technologies/types?hl=hu
Facebook Pixel - https://www.facebook.com/policies/cookies/
Google Conversion Tracking - https://policies.google.com/technologies/types?hl=hu
Tiktok: https://www.tiktok.com/legal/page/global/tiktok-website-cookies-policy/en
11. Technical and organisational measures related to data processing
The Data Controller ensures and facilitates the exercise of the rights of data subjects in connection with data processing, with particular regard to the rights to information and to object.
The Data Controller undertakes to include safeguards in its data protection policy that guarantee the protection of the rights of data subjects.
12. Rights of data subjects
The data subject may exercise the rights described below at the address specified in Section 1. All requests relating to the exercise of rights will be assessed within 25 days of receipt.
12.1. Right to information
The principle of fair and transparent data processing requires us to inform data subjects, before processing begins, of the fact and purpose of the processing, the identity of the data controllers and data protection officers, the categories of data processed, the legal basis, duration and method of processing, and the data processors used during processing. Based on the right to information, data subjects may request information about the processing of their data, in which case they will receive personalised information.
12.2. Withdrawal of consent
The data subject has the right to withdraw their consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
12.3. Right to rectification
The data subject has the right to request the rectification or completion of data concerning them that we process.
12.4. Right to erasure / right to be forgotten
Data subjects have the right to request the deletion of their data processed by us. Please note that a request for deletion will be rejected if there is a legal obligation to retain the data.
12.5. Right to restriction/blocking
The data subject has the right to request that we restrict/block the processing of their data (by clearly indicating the restricted nature of the processing and ensuring that it is handled separately from other data). The blocking remains in place for as long as the reason specified by the data subject makes it necessary.
12.6. Right to object
The data subject has the right to object and may therefore, on grounds relating to their particular situation, object at any time to the processing of their personal data where such processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller, or where the processing is necessary for the purposes of the legitimate interests pursued by the Data Controller or by a third party.
12.7. Right to data portability
The data subject has the right to receive the personal data concerning them that they have provided to the Data Controller in a structured, commonly used and machine-readable format, and has the right to transmit those data to another data controller without hindrance from the Data Controller to which the personal data were provided, where the processing is based on consent or on a contract and the processing is carried out by automated means.
12.8. Right to lodge a complaint and right to initiate proceedings
The data subject has the right to lodge a complaint with a supervisory authority or initiate proceedings before it, and to an effective judicial remedy if they consider that an infringement has occurred in connection with the processing of their data or the exercise of their rights relating to data processing. In the event of judicial remedy, the data subject may bring a civil action, which falls within the jurisdiction of the regional court. At the data subject’s choice, the action may also be brought before the regional court of their place of residence (the list and contact details of the regional courts can be viewed at the following link: http://birosag.hu/torvenyszekek).
Contact details of the competent supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information
address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C
postal address: 1530 Budapest, Pf.: 5
e-mail: ugyfelszolgalat@naih.hu
phone: +36 (1) 391-1400
We ask data subjects to contact the Data Controller before submitting a complaint to the supervisory authority or a court, in order to discuss the matter and resolve the issue as quickly as possible.