Data Protection and Privacy Policy

Name of service provider as data controller: Parád Park Hotel Kft.
Erzsébet Park Hotel Parádfürdő***Superior

Name: Parád Park Hotel Kft.
Address: 3244 Parád (Parádfürdő), Kossuth Lajos út 372.
Registration number: Cg.10-09-025820
VAT number: 13195364-2-10
Phone: +36 36 444 044
E-mail:

(Hereinafter referred to as the "controller")

The main activities: 5510'08 Hotel services

Erzsébet Park Hotel***Superior as the data controller informs its clients, guests and website visitors that we respect your privacy and as part of our commitment to meeting your expectations, we have set up a customer privacy protection policy. This policy formalizes our commitments to you and describes how we use your personal data.

AOur Privacy Policy is always available on the hotel website www.erzsebetparkhotel.hu, as well as at the reception desk in printed form.

I. PURPOSE OF THE POLICY

1. The primary purpose of this Policy is to protect the privacy of all individuals in accordance with applicable legal requir.

2. Legal requirements in force:
- Law CVIII of 2001 on certain aspects of electronic commerce services and information society services,
- Law XLVII of 2008 on the prohibition of unfair commercial practices against consumers,
- Law XLVIII of 2008 on economic advertising activities basic conditions and certain limitations,
- Law CXII of 2011 on Informational Self-Determination and Freedom of Information Law.

II. APPLICABLE RULES

1. This policy is valid as of 25th November 2015 to further notice.

2. The scope of this policy extends to the hotel, to persons who give their data, as well as those persons whose rights or interests are affected by the data processing.

3. This Code extends the scope of data processing including all personal data in all hotel departments.

III. DEFINITIONS

Guest/ User/ Involved person: either directly or indirectly identifiable natural person;

Personal data: especially names, identification number, data specific to his physical, physiological, mental, economic, cultural or social identity - and any conclusions of these data;

Hotel: Erzsébet Park Hotel Parádfürdő***Superior (address H-3244 Parád (Parádfürdő), Kossuth út 372), operated by the data controller;

Website: www.erzsebetparkhotel.hu the portal and any sub-page, which is operated by the controller;

Facebook Page: https://www.facebook.com/Erzsebetparkhotel the portal page, which is handled by Data Controller.

IV. DATA MANAGEMENT PRINCIPLES

1. Proportionality, necessity: We use only such personal data that is essential to achieve the necessary goals with it.

2. Purpose limitation: personal data can only be used for specified purposes. At every stage of the data processing we must comply with the objective of data management, data recording and data management should be fair and lawful.

3. Personal data shall retain that status during the data processing, as long as the data connection can be restored.

4. Data accuracy, completeness must be guaranteed during data processing.

V. WHEN AND WHERE PERSONAL DATA IS COLLECTED

1. Booking/Inquiry

In the case of sending a booking or inquiry through the hotel website http://erzsebetparkhotel.hu/en/general-inquiry the data controller asks for the following personal data:

Name*
E-mail*
Phone number*
Arrival date*
Departure date*
Number of adults*
Number of children
Room type*
Comment

The data marked by* are mandatory.

Sending an inquiry is voluntary.

Data controller will handle the data in its FLEXYS PMS and send the offer or confirmation to the guest in an email.

2. Check-in and registration card.

When checking-in at the hotel, guests must fill a registration card with the following personal data (for immigration and local tax legislation purposes):

Last name*
First name*
Company name
Vehicle registration number
Home address*
Nationality*
Date of birth*
Check-in date *
Departure date *
ID number*
E-mail address

"How did you hear about the hotel?"
The data marked by* are mandatory.

By signing the registration card the guest agrees that the data submitted in the reg.card can be handled by the data controller.
The guest can subscribe to an email newsletter by marking the appropriate field on the reg.card.
Hotel uses the data provided by the guest on the reg.card for all hotel services (e.g. bike rental, tennis court, etc.).

3. Newsletter

It is possible to subscribe to the hotel newsletter via the website, in e-mail, or at the hotel reception desk.

The following date are handled:

Last name*
First Name *
E-mail address*

The data marked by* are mandatory.

Subscription to the hotel newsletter is voluntary.
It is possible to unsubscribe from the newsletter at any time, at the bottom of e-mails or sending a cancellation request in email to info@erzsebetparkhotel.hu.
Data controller checks its newsletter subscription list every five years, by sending a newsletter asking for confirmation after five years. The data controller will delete all unconfirmed email addresses from the list within thirty (30) days after the delivery of such an e-mail.
Data controller makes statistics about the clicks on the links in the newsletters.
Guests can like or dislike the news and comments on the data controller's Facebook page or message board.

4. Wellness, medical, spa, pool, mofetta

The health record needed for any health service can only be accessed by a physician. Any other person (masseur, assistant) can only handle health records according to the physician's instructions.

The inclusion of medical records is part of the treatment. The doctor administering the treatment will decide, in accordance with professional standards the need of registration of health records. The aim of data management is to ensure the safety and proper treatment.

The health records shall only be transmitted to another doctor, or a third party for the guest's request. The saved data can not be transmitted to the guest's personal physician, only in case of the guest's expresses protest.

Guest's health records must be kept confidentially as medical secrets.

Data Controller or its agent shall be exempt from the obligation of confidentiality when

a. transmission of medical and personal identification data is asked in written form by the person or his legal representative;
b. transmission of medical and personal identification data is a legal requirement.

Guest/ Patient is entitled to receive relevant data and information in the context of his medical treatment.

The data controller has a contractual relationship with the following company:

VAT-VÍZ Egészségügyi, Kereskedelmi és Szolgáltató Kft.
3996 Füzér, Rákóczi út 20.
Cg: 05-09-017391
Representative: Dr. Suskó Mihály ügyvezető

Guests using seasonal swimming entry tickets give the following data:

a) Name
b) Address
c) Room number
d) Validity of ticket

5. Credit card data

The data controller will only use the relevant debit/ credit card / bank account data to the extent and for the duration of the period as necessary in order to exercise their rights and fulfill its obligations. The data are used by the contracted banking partners of the data controller. Further information can be found in the Privacy Policy of the relevant Bank's website.

Hotel is entitled to make credit/ debit card pre-authorization as a guarantee of the payment of booked services.

6. Guest Loyalty program

Guest Loyalty Program is a regular guest program for the hotel guests - for natural persons - providing exclusive discounts for returning guests.

In this loyalty program, participants give their express consent to use their personal data for operating the system and sending out newsletters.

The Data Controller is entitled to transmit the defined data to its agents, subcontractors and foreign subsidiaries.

If the guest does not accept the transmission of data he makes it impossible to participate in the given program, so entails the cancellation of the program.

Frequent Guest Program membership status is automatically deactivated after three (3) years from the last date of stay at the hotel. The member's personal information is stored for a specified period of current tax and accounting regulations and will be deleted after the expiry of that period.

Personal data of the participants are handled as contact data.

Personal data are given at the time of check-in and can be handled separately from the general data store. This file may be recognized only by authorized employees of the Data Controller.

Hotel employees cannot transmit these data to third parties, and take all security measures to ensure that no unauthorized person can have access to these data.

If additional data are required for participation in the program, the data controller will give information about the purpose, method and duration of the data processing.

Regular guest's (natural persons) data can be used for market research purposes, but in this case regular guests should be informed in advance and their prior consent must be obtained.

The data will be deleted if the involved regular guest sends his request in an email to .

7. Gift Vouchers

Hotel offers the guest to buy various gift certificates, which can be used at the hotel. Buying a gift certificate is voluntary.

The following data are requested to order a gift certificate in person or by phone or email at .

In case of a personal reservation

name*
billing name and address *

In the case of a reservation by telephone or in e-mail:

name*
e-mail address*
phone*
billing name and address*
Delivery name and address*

The data marked by* are mandatory.

Data controller will issue an invoice and a numbered voucher to the delivery address given by the buyer.

8. Guest questionnaires, complaint management, evaluation system

1. The data controller has its quality assurance policy and process in place, for which they use online, e-mail and paper-based questionnaires.

2. By filling out a guest questionnaire or complaint the Guest will specify the following personal information:

name
date of stay
room number
contact details (address, email address, phone number)

3.Giving the above data is not compulsory, they only insure a more accurate investigation of possible complaints or give the possibility to the data controller to response.

9. Security Camera System

1. The data controller operates cameras in the hotel because of personal and property safety of the guests.

2. The cameras are recording voice and pictures.

10. Facebook page

The hotel and its service units are presented on the Facebook social media site.

The Facebook page allows the guest to learn about the latest promotions.

Visitors can like/ dislike the news and infromation by clicking the link in question and can publish content on their own message board.

Data controller publishes photos and videos of certain events on its facebook site. If it is not a public admission, data controller will consult the person and ask for his written consent before publishing the pictures.

11. Website visitors data

References and links

Data Controller's website may contain links to other websites, that are not operated by the controller only serves to inform visitors. Data Controller has no influence on the content and safety of and therefore cannot be liable for websites operated by partner companies.

Analytics, cookies

We collect information automatically when you visit the Website, using cookies.

The cookies allow us to identify your computer and find out details about your last visit.

You can choose, not to allow cookies. If you do, we can't guarantee that your experience with the Website will be as good as if you do allow cookies.

The information collected by cookies does not personally identify you; it includes general information about your computer settings, your connection to the Internet e.g. operating system and platform, IP address, your browsing patterns and timings of browsing on the Website and your location.

Most internet browsers accept cookies automatically, but you can change the settings of your browser to erase cookies or prevent automatic acceptance if you prefer.

12. Guestbook

Our guests can share their experiences in the website guestbook by entering the following data:

Name
E-mail address

VII. STORAGE OF PERSONAL DATA, INFORMATION SECURITY

1. We retain your personal data only for the period necessary for the purposes set out in this Chapters or in accordance with the provisions of applicable law.

2. The objective of data management: contact with the guests for marketing reasons, market research and consumer surveys.

3. Data Management IT system operator, under the contract concluded with the
FLEXYS Computer System House Kft.
1037, Máramaros utca 23/a
CG: 01-09-464081
Representative: Orsovai László ügyvezető

VIII. REMEDIES

1In case of violation of the right to self-determination you can contact:
National Authority for Data Protection and Freedom of Information
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22 / c
Phone: +36 (1) 391-1400
Fax: +36 (1) 391-1410
www: http://www.naih.hu
e-mail: