Tieff Apartments & Holiday Homes Balaton
Data Controller: Tieffné Oláh Tóth Rozália
Address: 22 Kossuth Lajos Street, 8621 Zamárdi, Hungary
Email: tieffrozi@gmail.com
Phone: +36 70 946 1003
Website: tieffapartmann.hu
Tax Number: 76207556-1-34
The Data Controller operates the following holiday accommodation properties:
Tieff Apartments Zamárdi: 22 Kossuth Lajos Street, 8621 Zamárdi, Hungary – NTAK Registration No.: MA21026640
Tieff Holiday Home Balatonszárszó: 22 Kisfaludy Sándor Street, 8624 Balatonszárszó, Hungary – NTAK Registration No.: MA21026648
Tieff Holiday Home Balatonmáriafürdő: 2/A Temető Street, 8648 Balatonkeresztúr, Hungary – NTAK Registration No.: MA21026645
The Data Controller processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Hungarian legislation.
Guests can enquire about accommodation availability and rates through the WP Booking System enquiry form on the website.
Personal Data Processed: Name, email address, telephone number, selected accommodation, arrival and departure dates, number of guests, pricing and booking details relating to the enquiry, and any additional comments provided voluntarily.
Purpose of Processing: Handling booking enquiries, checking availability, preparing quotations, communicating with guests and managing reservations.
Legal Basis: Article 6(1)(b) of the GDPR – taking steps prior to entering into a contract or performing a contract.
Submitting a booking enquiry does not constitute a confirmed reservation. The accommodation provider will discuss and confirm the booking details separately with the guest.
Visitors may contact the Data Controller through the website’s contact forms, by email, telephone or WhatsApp.
Personal Data Processed: Name, email address, telephone number, message content and, in the case of group booking enquiries, the proposed dates and number of guests.
Purpose of Processing: Responding to enquiries, maintaining communication and preparing personalised accommodation offers.
Legal Basis: Article 6(1)(b) of the GDPR for booking-related enquiries; Article 6(1)(f) of the GDPR (legitimate interests) for other enquiries. The legitimate interest is to respond to incoming enquiries and handle related administrative matters.
The use of WhatsApp is voluntary. When using this service, WhatsApp’s own privacy policies also apply.
When processing payments and issuing invoices or other accounting documents relating to reservations, the Data Controller may process the payer’s name, transaction details and personal information required for invoicing.
Purpose of Processing: Identifying payments, maintaining financial records, issuing invoices and complying with legal obligations.
Legal Basis: Articles 6(1)(b) and 6(1)(c) of the GDPR.
The website does not offer direct online credit or debit card payments.
The accommodation provider uses property management software to comply with its statutory obligations.
Guests’ legally required identification details, including their names, birth details, nationality, identity document information and dates of stay, are processed in accordance with applicable regulations.
The required personal data is transferred to the VIZA system (Hungarian Guest Information Database), while the statistical data required by law is reported to the NTAK (Hungarian National Tourism Data Supply Centre).
Legal Basis: Article 6(1)(c) of the GDPR – compliance with a legal obligation.
The booking enquiry forms on the website do not request identity documents.
The Data Controller retains personal data only for as long as necessary for the purposes for which it was collected or for the periods required by law.
Unsuccessful booking enquiries: 6 months after the enquiry has been closed.
General contact enquiries: 6 months after the enquiry has been resolved.
Booking and contractual information: For the period necessary to establish, exercise or defend legal claims following the completion of the service, generally for no longer than 5 years.
Accounting documents: At least 8 years for documents subject to the Hungarian Accounting Act.
Guest identification data: For the period specified by the legal provisions governing data processing under the VIZA system.
Technical server logs: In accordance with the hosting provider’s actual data retention practices.
Longer statutory retention requirements or the need to establish, exercise or defend legal claims may affect these general retention periods.
When visitors use the website, certain technical information may be processed, including IP addresses, browser information and server log data.
The website may use cookies that are strictly necessary for its operation. The use of non-essential cookies, such as analytics or marketing cookies, requires prior consent where such cookies are implemented.
Cookie management is provided through the LW Cookie plugin.
Visitors can review information about the cookies used and manage or withdraw their consent through the website’s cookie settings interface.
The Data Controller may use the following service providers and categories of recipients when processing personal data.
Web Hosting and Email Service Provider
Websupport Magyarország Kft. (Magyar Hosting)
Registered office: 1119 Budapest, Fehérvári út 97–99, Hungary
Website: https://www.mhosting.hu/
Purpose: Providing web hosting services, technical operation of the website, operating the email account associated with the website, and sending automated notifications from the booking system.
Email Service Provider
Google – Gmail
Website: https://www.google.com/gmail/
Purpose: Email communication, correspondence with guests, and handling accommodation enquiries and bookings.
Additional Service Providers and Recipients
The service provider responsible for technical website maintenance, where access to personal data is required.
The providers of the invoicing software and property management system.
The service provider responsible for accounting.
Public authorities and systems legally authorised to receive the relevant data.
The Data Controller makes personal data available only to the extent necessary for the performance of the relevant tasks.
The use of Google services may involve international transfers of personal data. Such processing is subject to the provider’s published privacy terms and the applicable safeguards for international data transfers.
The website may contain links to Google Maps, WhatsApp and other external websites.
When visitors access these external services, they are directed to the respective service provider’s platform, where the provider’s own privacy policies apply.
Booking enquiries submitted through the website are not subject to decisions based solely on automated processing that produce legal effects or similarly significant effects concerning guests.
Under the conditions set out in the GDPR, individuals whose personal data is processed have the right to:
Request information about the processing of their personal data.
Access their personal data.
Request the rectification or erasure of their personal data.
Request the restriction of processing.
Object to processing based on legitimate interests.
Exercise their right to data portability.
Withdraw consent at any time where processing is based on consent.
Lodge a complaint with a data protection supervisory authority or seek a judicial remedy.
Requests relating to personal data protection may be submitted by email to tieffrozi@gmail.com.
The Data Controller will respond to requests without undue delay and, as a general rule, within one month.
Supervisory Authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
9–11 Falk Miksa Street, 1055 Budapest, Hungary
Website: https://www.naih.hu
Email: ugyfelszolgalat@naih.hu
The Data Controller implements appropriate technical and organisational measures proportionate to the risks involved in order to protect personal data against unauthorised access, loss and misuse.
In the event of a personal data breach, the Data Controller will fulfil the applicable legal obligations relating to remedial measures, notification and communication.
The Data Controller may update this Privacy Policy when necessary. The latest version will be available on the website.
Effective Date: 5 November 2026
