← Back to the homepage
MagyarEnglishDeutsch

Privacy Notice

Effective from 24 October 2026

This notice explains what personal data Tópart 308 processes when you use the website (topart308.hu), get in touch with us, make a booking, or stay at the property — for what purpose, for how long, and what rights you have. Data is processed in accordance with the EU General Data Protection Regulation (GDPR) and Hungarian law.

1. The data controller

Data controller (accommodation provider)
Accommodation
Tópart 308 — 8640 Fonyód, Tópart utca 3., Hungary
NTAK registration number
Email
topart308apartman@gmail.com
Phone
+36 30 267 7300

For any question or request about data processing, please contact us using the details above.

2. What data we process, why, and for how long

2.1. Visiting the website

When the website is opened, the hosting provider's server logs technical data (IP address, time of visit, page opened, browser type). This is needed to operate the website securely. Legal basis: legitimate interest (GDPR Art. 6(1)(f)). Logs are kept by the hosting provider for as long as its own policy provides.

The website loads its fonts (Google Fonts) from Google's service — this may send technical data (e.g. IP address) to Google when the page is opened. The website does not use any analytics or advertising tracking code.

2.2. Getting in touch

If you contact us by phone or email, we process the data you provide (e.g. name, phone number, email address, the content of your message) to respond to your enquiry and to arrange a booking. Legal basis: steps taken prior to entering into a contract, and/or legitimate interest (GDPR Art. 6(1)(b) and (f)). Retention: up to 1 year after the enquiry is closed, unless a booking is made.

2.3. Booking and invoicing

When you book, we process the name and contact details of the person booking, the dates of stay, the number of guests, and the data needed for payment/invoicing. Purpose: performance of the accommodation service contract. Legal basis: performance of a contract (GDPR Art. 6(1)(b)), and, for accounting documents, legal obligation (Art. 6(1)(c)). Retention: booking data for the general civil-law limitation period (5 years), accounting documents for 8 years as required by Hungarian accounting law.

2.4. Mandatory guest registration (VIZA)

Under Hungarian law, accommodation providers are required to record every guest's data from an identity document on arrival and submit it to the national Guest Information Closed Database (VIZA). The data recorded includes: family and given name, birth name, place and date of birth, gender, nationality, mother's birth name, the identity/travel document's identifying data, the address of the accommodation, and the start and end dates of the stay; for third-country nationals, also the visa or residence permit number and the date and place of entry.

Legal basis: legal obligation (GDPR Art. 6(1)(c)), under Section 9/H of Act CLVI of 2016 on the State Tasks Related to the Development of Tourism Regions and Government Decree 235/2019 (X. 15.). Retention: until the last day of the year following the year the data was recorded. The accommodation service cannot be provided without presenting the identity document. The data is stored encrypted by the hosting provider designated by law, and may be accessed by the police only for purposes defined by law.

We also comply with statistical (NTAK) and tourism-tax-related reporting obligations required by law; these do not contain data suitable for identifying the guest.

3. Cookies and external services

The website does not set its own cookies, and does not use analytics or advertising tracking.

Google Fonts — the website loads its fonts from Google's service, see section 2.1.

Google Maps — the map in the Location section only loads if you choose "Accept" on the cookie banner, or click "Load map" where the map would be (consent, GDPR Art. 6(1)(a)). At that point Google may receive technical data (e.g. your IP address) and set its own cookies. Your choice is remembered in your browser's local storage (localStorage) — it stays on your device, never reaches us, and can be withdrawn at any time via the "Cookie Settings" link in the footer. Google Maps is operated by Google Ireland Limited; see policies.google.com/privacy for how it processes data.

Other than the map, the website does not use any other external embed or tracking code.

4. Who has access to the data?

Your data is processed by the operators of the accommodation. We use the following providers to run the service:

We only disclose data to authorities where required by law. We never pass on personal data for marketing purposes, and we do not send newsletters.

5. Your rights

You may at any time request information about the data we hold on you, request its rectification, erasure or restriction of processing, object to processing based on legitimate interest, and request your data in a portable format. Where processing is based on a legal obligation (e.g. data recorded in VIZA), erasure cannot be carried out before the retention period ends. You can send your request using the contact details above; we respond within one month at the latest.

6. Remedies

If you believe we are not handling your data properly, please contact us first. You may also file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) (1055 Budapest, Falk Miksa utca 9–11.; ugyfelszolgalat@naih.hu; www.naih.hu), or turn to a court.