{"id":4386,"date":"2026-06-19T14:17:35","date_gmt":"2026-06-19T12:17:35","guid":{"rendered":"https:\/\/dev.medoszhotel.hu\/privacy-policy\/"},"modified":"2026-07-27T06:43:04","modified_gmt":"2026-07-27T04:43:04","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/dev.medoszhotel.hu\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

MEDUZA Commercial, Tourism, and Hospitality Limited Liability Company<\/strong><\/a> (registered office: 1061 Budapest, J\u00f3kai t\u00e9r 9<\/a>; tax number: 10592229-2-42<\/a>; hereinafter: “Company”<\/strong>)<\/em> has created and made available this Privacy Policy (hereinafter: “Policy<\/strong>“<\/em>) to ensure the realization of the right to information for data subjects as defined in Regulation (EU) 2016\/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95\/46\/EC (General Data Protection Regulation) (hereinafter: “GDPR<\/strong>“<\/em>), as well as in Act CXII of 2011 on Informational Self-Determination and Freedom of Information (hereinafter: “Infotv.<\/strong>“<\/em>). <\/p>\n\n

The material scope of the Policy extends to all processes carried out in all organizational units of the Company where personal data processing takes place.<\/p>\n\n

The temporal scope of the Policy remains in effect until its revocation. The Company reserves the right to amend this Policy and will provide notice of such amendments by publishing the revised Policy on its website. <\/p>\n\n

I. Data Controller<\/a><\/h1>\n\n

The data controller is: MEDUZA Commercial, Tourism, and Hospitality Limited Liability Company<\/strong><\/p>\n\n

Registered office of the company: 1061 Budapest, J\u00f3kai t\u00e9r 9.<\/p>\n\n

Company registration number: 01-09-919221<\/p>\n\n

Tax number: 10592229-2-42<\/p>\n\n

Phone number: +36(34)342304<\/p>\n\n

Email address: info@medoszhotel.hu<\/a> <\/p>\n\n

II. General Definitions<\/a><\/h1>\n\n
    \n
  1. data subject: <\/em><\/strong>any natural person who is identified or identifiable on the basis of any information (a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person<\/em>);<\/li>\n\n\n\n
  2. personal data: <\/em><\/strong>any information relating to an identified or identifiable natural person (data subject<\/em>) (such data that can be linked to the data subject includes, in particular, the data subject’s name, identification number, and one or more pieces of information characteristic of their physical, physiological, mental, economic, cultural, or social identity, as well as conclusions drawn from the data concerning the data subject<\/em>);<\/li>\n\n\n\n
  3. special category data:<\/strong> all data belonging to special categories of personal data, namely personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data for the purpose of uniquely identifying a natural person, health data, and data concerning a natural person’s sex life or sexual orientation;<\/li>\n\n\n\n
  4. data controller: <\/em><\/strong>the natural or legal person, or organization without legal personality, which \u2013 within the framework defined by law or by a binding legal act of the European Union<\/em> \u2013 alone or jointly with others determines the purposes of data processing and makes and implements decisions concerning data processing (including the means used<\/em>), or has them implemented by a data processor;<\/li>\n\n\n\n
  5. data processing:<\/strong> any operation or set of operations performed on data, regardless of the procedure applied, such as collection, recording, registration, organization, storage, alteration, use, retrieval, transmission, disclosure, alignment or combination, blocking, deletion, and destruction, as well as preventing the further use of data, taking photographs, audio or video recordings, and recording physical characteristics suitable for identifying a person (e.g., fingerprints or palm prints, DNA samples, iris images<\/em>);<\/li>\n\n\n\n
  6. data processor:<\/strong> the natural or legal person, or organization without legal personality, which \u2013 within the framework and under the conditions defined by law or by a binding legal act of the European Union<\/em> \u2013 processes personal data on behalf of or under the instructions of the data controller;<\/li>\n\n\n\n
  7. data breach:<\/strong> a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.<\/li>\n<\/ol>\n\n

    Additional referenced legislation:<\/strong><\/p>\n\n