Privacy Policy
A KAROSINVEST Idegenforgalmi és Szolgáltató Zrt.
seat: 8749 Zalakaros, Alma utca 1.,
Company reg. Nr: 20-10-04269), as the content provider of www.karos-spa.hu website - henceforth: Content Provider – hereby publishes its principles of the copyright and handling, which is acknowledged as mandatory for itself.
While developing these current rules, the Content Provider has taken the Hungarian act of year 2011 Nr. CXII. about the right to the informational self-determination and information freedom into special consideration, as well as the disposure of the VI. act from 1998., which is the proclamation of the agreement created in Strasbourg on 28. January 1981. about the protection of the individuals during the data processing, so the recommendatives of “ONLINE PRIVACY ALLIANCE”.
The purpose of this current announcement to get the rights and elemental folkrights of the individ-ual, especially the right to the private life during the data processing respected on all domains of the facilities of the Content Provider- regardless of any nation or domicile.
1. Handler of the data
The handler of the data is the Content Provider.
2. The circuit of the handled data
When visiting the webpage, the beginning and finishing time of the user’s visiting, respectively in some case- depending on the setting of the user’s computer- the type of the browser and operating system will be automatically recorded. From these data the system generates statistical data auto-matically. The operator of the system does not relate these data with personal data. In case of log-ging on to the website, the website sends a session ID which will be cancelled automatically after logging off.
The handling of the data given for the use of the webpage happens with the free will admittance of the user.
3. The purpose of the data handling
It serves the contiguous connection between the data handler and the registered website users, as well as the public survey.
Recording and memorizing the time of the visit, the type of the browser and the operating system serve solely statistical purposes.
The data handler does not use the personal data differing from the defined purposes. The handling of the given data happens with the free will admittance of the user. www.karos-spa.hu handles all data and facts of the users confidentially, and uses them only for developing its service, selling ad-vert places and making own searching and statistic. Publishing of statements made from these data is not suitable for identifying the users.
4. Circuit of the data, data analysers
The personal data given by the users can be seen by the collaborators of the data operator.
Apart from the defined ones the personal data will not be delivered to a third party. This does not apply to the occurent in law prescribed obligatory data forwarding which can happen only in excep-tional case. The data operator checks the right of the data forwarding in each case before fulfilling the official data request.
5. Rights of the users regarding to handling their data
Users decide about giving the data marked in Part 2. The argument of handling the data is the free will admittance of the users.
Users can ask for information about the handling of their personal data. The data operator gives in-formation on request about the data, the purpose, the argument, the duration of the data handling, about the name, the seat (H-8749 Zalakaros, Alma u. 1.) of the data operator and the activity refer-ring to the data handling, as well as who and on what purpose the data were given to. Information can be requested by post (H-8749 Zalakaros, Alma u. 1.) or via email on marketing@karos-spa.hu. The user can inaugurate the correction or cancellation of the personal data at the same contact de-tails.
In case of not suitable use of the facilities of the website or following to the own request of the user, the data belonging to the user can be cancelled. Cancellation must be proceeded in 24 hours after the next working day of the recorded cancellation request.
The technological background of the storage space necessary for the operation of www.karos-spa.hu is provided by MORGENS Design Kft. (Headquarters: 8800 Nagykanizsa, Csányi László street 2, Tax number: 23964710-2-20).
Data management activities and its naming:
TITLE OF DATA MANAGEMENT ACTIVITIES |
ONLINE BOOKING |
Name of the controller |
KAROSINVEST Idegenforgalmi és Szolgáltató Zrt. |
Accessibility of the data controller |
8749 Zalakaros, Alma utca 1. |
The purpose of data management |
simplify the booking process, make the online booking smoother and more comfortable |
The legal basis for data handling |
the express and voluntary consent of the person initiating the online reservation |
Name of treated personal data |
Personal information of the buyer as follows: - name - e-mail address - phonenumber - address (country, postal code, city, street, house number) - IP-address (online ID) |
The estimated duration of the processing of personal data |
until the consent is withdrawn or until the day following the day of the online reservation |
Need for personal data provided by the person concerned |
the online reservation process initiated by the affected party, or the execution of the transaction in case of online payment |
Data processing requires the use of data processors |
yes |
TITLE OF DATA PROCESSORS |
|
The name of the data processor |
MORGENS Design Kft. |
Address of the data processor |
8800 Nagykanizsa, Csányi László utca 2. |
The purpose of data processing on behalf of the data controller |
the operation of the online reservation module on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4.X. 241.), the possibility of storing incoming online reservations in a closed system, to allow bookings to be confirmed |
|
|
The name of the data processor |
Rocket Science Group |
Address of the data processor |
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 |
The purpose of data processing on behalf of the data controller |
Mandrill software provides an electronic mail service for booking an online booking, making a confirmation, using a guest rating feature |
|
|
The name of the data processor |
OTP Bank Nyrt. |
Address of the data processor |
1051 Budapest, Nádor Street 16. |
The purpose of data processing on behalf of the data controller |
Provision of data communication for the online payment transaction between the accommodation company / enterprise and the electronic system of OTP Bank Nyrt. (Payment service provider), confirmation of transaction status |
|
|
The name of the data processor |
OTP Mobil Kft. |
Address of the data processor |
1093 Budapest, Közraktár Street 30-32. |
The purpose of data processing on behalf of the data controller |
Provision of data communication for the online payment transaction between the accommodation company / enterprise and SimplePay by OTP Mobil (payment service provider) electronic system, the status of the transaction status |
|
|
The name of the data processor |
CIB Bank Zrt. |
Address of the data processor |
1027 Budapest, Medve Street 4-14. |
The purpose of data processing on behalf of the data controller |
Provision of the data communication required for the online payment transaction between the company (s) holding the establishment (s) and the electronic system of CIB Bank Zrt. (Payment service provider), the status of the transaction status |
|
|
The name of the data processor |
BIG FISH Internet-technológiai Kft. |
Address of the data processor |
1066 Budapest, Nyugati tér 1-2. |
The purpose of data processing on behalf of the data controller |
Provision of data communication for the online payment transaction between the payment system provider of the accommodation company / enterprise and the payment service provider of the Payment Gateway online payment system, the status of the transaction status |
TITLE OF DATA MANAGEMENT ACTIVITIES |
ONLINE REQUEST |
Name of the controller |
KAROSINVEST Idegenforgalmi és Szolgáltató Zrt. |
Accessibility of the data controller |
8749 Zalakaros, Alma Street 1. |
The purpose of data management |
simplifying the call for proposals without obligation, viewing the personalized offer made by the data controller |
The legal basis for data handling |
the express and voluntary consent of the person initiating the online call for proposals |
Name of treated personal data |
Personal information of the contracting authority as follows: - name - e-mail address - phonenumber - address (country, postal code, city, street, house number) - IP-address (online ID) |
The estimated duration of the processing of personal data |
until the consent has been withdrawn and until the day after the validity of the online offer |
Need for personal data provided by the person concerned |
the implementation of the online call for tenders initiated by the interested party, the making of a subsequent online booking process smooth, efficient and quicker in case of compliance of the bid |
Data processing requires the use of data processors |
yes |
TITLE OF DATA PROCESSORS |
|
The name of the data processor |
MORGENS Design Kft. |
The address of the data processor |
8800 Nagykanizsa, Csányi László Street 2. |
The purpose of data processing on behalf of the data controller |
the operation of the online request inquiry module on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4th X. floor 241.), the storage of incoming online call requests in a closed system and the possibility of answering requests for quotations |
|
|
The name of the data processor |
Rocket Science Group |
The address of the data processor |
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 |
The purpose of data processing on behalf of the data controller |
Mandrill's software provides electronic mailing service for recording the online call for proposals, making a bid, validity |
TITLE OF DATA MANAGEMENT ACTIVITIES |
ONLINE GIFT TENDER ORDER |
Name of the controller |
KAROSINVEST Idegenforgalmi és Szolgáltató Zrt. |
Accessibility of the data controller |
8749 Zalakaros, Alma Street 1. |
The purpose of data management |
making the online gift voucher ordering process simpler and more comfortable |
The legal basis for data handling |
the express and voluntary, prior consent of the person making the online payment in the process of ordering an online gift voucher |
Name of treated personal data |
Personal Information Handled for Gift Order as follows: - buyer's name - buyer's address - buyer's phonenumber - customer mailing address (country, postal code, city, street, house number) - customer billing address (country, postal code, city, street, house number) - buyer's IP address (online identifier) - the name of the gifted (s) |
The estimated duration of the processing of personal data |
until the withdrawal of the consent or until the day after the use of the gift certificate ordered |
Need for personal data provided by the person concerned |
the possibility of a simple and convenient implementation of the order process of the gift voucher initiated by the interested party |
Data processing requires the use of data processors |
yes |
TITLE OF DATA PROCESSORS |
|
The name of the data processor |
MORGENS Design Kft. |
Address of the data processor |
8800 Nagykanizsa, Csányi László Street 2. |
The purpose of data processing on behalf of the data controller |
operation of the online gift voucher module on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4.X. 241.), the possibility to send incoming gift vouchers in a closed system and to send gift vouchers online |
|
|
The name of the data processor |
Rocket Science Group |
Address of the data processor |
675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 |
The purpose of data processing on behalf of the data controller |
through the Mandrill software, an electronic mail delivery feature is provided for recording an online gift voucher order |
|
|
The name of the data processor |
OTP Bank Nyrt. |
Address of the data processor |
1051 Budapest, Nádor Street 16. |
The purpose of data processing on behalf of the data controller |
Provision of data communication for the online payment transaction between the accommodation company / enterprise and the electronic system of OTP Bank Nyrt. (Payment service provider), confirmation of transaction status |
|
|
The name of the data processor |
OTP Mobil Kft. |
Address of the data processor |
1093 Budapest, Közraktár Street 30-32. |
The purpose of data processing on behalf of the data controller |
Provision of data communication for the online payment transaction between the accommodation company / enterprise and SimplePay by OTP Mobil (payment service provider) electronic system, the status of the transaction status |
|
|
The name of the data processor |
CIB Bank Zrt. |
Address of the data processor |
1027 Budapest, Medve Street 4-14. |
The purpose of data processing on behalf of the data controller |
Provision of the data communication required for the online payment transaction between the company (s) holding the establishment (s) and the electronic system of CIB Bank Zrt. (Payment service provider), the status of the transaction status |
|
|
The name of the data processor |
BIG FISH Internet-technológiai Kft. |
Address of the data processor |
1066 Budapest, Nyugati tér 1-2. |
The purpose of data processing on behalf of the data controller |
Provision of data communication for the online payment transaction between the payment system provider of the accommodation company / enterprise and the payment service provider of the Payment Gateway online payment system, the status of the transaction status |
TITLE OF DATA MANAGEMENT ACTIVITIES |
SIGN UP FOR NEWSLETTER |
Name of the controller |
KAROSINVEST Idegenforgalmi és Szolgáltató Zrt. |
Accessibility of the data controller |
8749 Zalakaros, Alma Street 1. |
The purpose of data management |
contact, information |
The legal basis for data handling |
the explicit and voluntary, prior consent of the person who initiated the newsletter subscription |
Name of treated personal data |
Personal information handled for subscribing to the Newsletter as follows: - subscriber's name - subscriber's e-mail address - subscriber's IP-address (online ID) - subscription date - subscribe source - subscription status - subscription status date |
The estimated duration of the processing of personal data |
until the consent is withdrawn, until the newsletter is unsubscribed |
Need for personal data provided by the person concerned |
learn about the special offers of your accommodation, your current programs, and the opportunity to get information on possible individual promotions |
Az adatkezelési tevékenységhez adatfeldolgozók igénybevétele szükséges |
yes |
TITLE OF DATA PROCESSORS |
|
The name of the data processor |
MORGENS Design Kft. |
Address of the data processor |
8800 Nagykanizsa, Csányi László Street 2. |
The purpose of data processing on behalf of the data controller |
Providing a secure, secure, online, identi- ficated and password-protected Zadir MailR system on the server of DotRoll Computing Kft. (1148 Budapest, Fogarasi út 3-5.) to the data controller for the account of the account |
|
|
The name of the data processor |
E.N.S. Zrt. |
Address of the data processor |
1106 Budapest, Fehér Street 10. 2. ép. 2. em. |
The purpose of data processing on behalf of the data controller |
az E.N.S. Zrt. Via mail server servers to send e-mail to send newsletters |
6. Validation of the rights
Users who think the operator of www.karos-spa.hu has broken their rights to the protection of the personal data, they can validate their demand at the jury or they can ask for help from the officer of data protection. Detailed statutory provision regarding to this and to the obligations of the data han-dler can be found in the CXII. act of the 2011. year about the right to the informational self-determination and information freedom.
7. Information about risking the privacy
By using Internet there are different dangers risking the privacy.
Please be warned, your personal opinion written on our website is considered as personal data from which consequences can be taken regarding even to your social background, political affiliations, etc, and might seen by anyone.
8. Making a record:
Designation of data handling: 'Data base updates, extant customer and marketing data updates in our data base.'
Register number of the data base: NAIH-62238/2013
Designation of data handling: 'Sending regular electronic newsletter; information about the products and facilities of the company sent for the addresses of the Hungarian marketing data base and for the customers of the company the via electronic mails'
Register number of the data base: NAIH-62238/2013
Designation of data handling: 'Online registration, signing up for electronic newsletter, online order; information about the products and facilities of the company sent for the addresses of the marketing data base and for the customers of the company the via electronic mails'
Register number of the data base: NAIH-62238/2013