Privacy Policy

Privacy Policy

KAROSINVEST Idegenforgalmi és Szolgáltató Zrt. (seat: 8749 Zalakaros, Alma utca 1, Company reg. Nr: 20-10-04269), as the content provider of www.karos-spa.hu website - henceforth: Content Provider – hereby publishes its principles of the copyright and handling, which is acknowledged as mandatory for itself.

While developing these current rules, the Content Provider has taken the Hungarian act of year 2011 Nr. CXII. about the right to the informational self-determination and information freedom into special consideration, as well as the disposure of the VI. act from 1998., which is the proclamation of the agreement created in Strasbourg on 28. January 1981. about the protection of the individuals during the data processing, so the recommendatives of “ONLINE PRIVACY ALLIANCE”.

The purpose of this current announcement to get the rights and elemental folkrights of the individ-ual, especially the right to the private life during the data processing respected on all domains of the facilities of the Content Provider- regardless of any nation or domicile.

1. Handler of the data

The handler of the data is the Content Provider.

2. The circuit of the handled data

When visiting the webpage, the beginning and finishing time of the user’s visiting, respectively in some case- depending on the setting of the user’s computer- the type of the browser and operating system will be automatically recorded. From these data the system generates statistical data auto-matically. The operator of the system does not relate these data with personal data. In case of log-ging on to the website, the website sends a session ID which will be cancelled automatically after logging off.

The handling of the data given for the use of the webpage happens with the free will admittance of the user.

3. The purpose of the data handling

It serves the contiguous connection between the data handler and the registered website users, as well as the public survey.

Recording and memorizing the time of the visit, the type of the browser and the operating system serve solely statistical purposes.

The data handler does not use the personal data differing from the defined purposes. The handling of the given data happens with the free will admittance of the user. www.karos-spa.hu handles all data and facts of the users confidentially, and uses them only for developing its service, selling ad-vert places and making own searching and statistic. Publishing of statements made from these data is not suitable for identifying the users.

4. Circuit of the data, data analysers

The personal data given by the users can be seen by the collaborators of the data operator.

Apart from the defined ones the personal data will not be delivered to a third party. This does not apply to the occurent in law prescribed obligatory data forwarding which can happen only in excep-tional case. The data operator checks the right of the data forwarding in each case before fulfilling the official data request.

5. Rights of the users regarding to handling their data

Users decide about giving the data marked in Part 2. The argument of handling the data is the free will admittance of the users.

Users can ask for information about the handling of their personal data. The data operator gives in-formation on request about the data, the purpose, the argument, the duration of the data handling, about the name, the seat (H-8749 Zalakaros, Alma u. 1.) of the data operator and the activity refer-ring to the data handling, as well as who and on what purpose the data were given to. Information can be requested by post (H-8749 Zalakaros, Alma u. 1.) or via email on marketing@karos-spa.hu. The user can inaugurate the correction or cancellation of the personal data at the same contact de-tails.

In case of not suitable use of the facilities of the website or following to the own request of the user, the data belonging to the user can be cancelled. Cancellation must be proceeded in 24 hours after the next working day of the recorded cancellation request.

The technological background of the storage space necessary for the operation of www.karos-spa.hu is provided by MORGENS Design Kft. (Headquarters: 8800 Nagykanizsa, Csányi László street 2, Tax number: 23964710-2-20).

Data management activities and its naming

TITLE OF DATA MANAGEMENT ACTIVITIES

ONLINE BOOKING

Name of the controller

Karosinvest Zrt.

Accessibility of the data controller

8749 Zalakaros, Alma Street 1.

The purpose of data management

simplify the booking process, make the online booking smoother and more comfortable

The legal basis for data handling

the express and voluntary consent of the person initiating the online reservation

Name of treated personal data

Personal information of the buyer as follows:

-          name

-          e-mail address

-          phonenumber

-          address (country, postal code, city, street, house number)

-          IP-address (online ID)

The estimated duration of the processing of personal data

until the consent is withdrawn or until the day following the day of the online reservation

Need for personal data provided by the person concerned

the online reservation process initiated by the affected party, or the execution of the transaction in case of online payment

Data processing requires the use of data processors

yes

TITLE OF DATA PROCESSORS

The name of the data processor

MORGENS Design Kft.

Address of the data processor

8800 Nagykanizsa, Csányi László Street 2.

The purpose of data processing on behalf of the data controller

the operation of the online reservation module on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4.X. 241.), the possibility of storing incoming online reservations in a closed system, to allow bookings to be confirmed

 

The name of the data processor

Rocket Science Group

Address of the data processor

675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308

The purpose of data processing on behalf of the data controller

Mandrill software provides an electronic mail service for booking an online booking, making a confirmation, using a guest rating feature

 

The name of the data processor

OTP Bank Nyrt.

Address of the data processor

1051 Budapest, Nádor Street 16.

The purpose of data processing on behalf of the data controller

Provision of data communication for the online payment transaction between the accommodation company / enterprise and the electronic system of OTP Bank Nyrt. (Payment service provider), confirmation of transaction status

 

The name of the data processor

OTP Mobil Kft.

Address of the data processor

1093 Budapest, Közraktár Street 30-32.

The purpose of data processing on behalf of the data controller

Provision of data communication for the online payment transaction between the accommodation company / enterprise and SimplePay by OTP Mobil (payment service provider) electronic system, the status of the transaction status

 

The name of the data processor

CIB Bank Zrt.

Address of the data processor

1027 Budapest, Medve Street 4-14.

The purpose of data processing on behalf of the data controller

Provision of the data communication required for the online payment transaction between the company (s) holding the establishment (s) and the electronic system of CIB Bank Zrt. (Payment service provider), the status of the transaction status

 

The name of the data processor

BIG FISH Internet-technológiai Kft.

Address of the data processor

1066 Budapest, Nyugati tér 1-2.

The purpose of data processing on behalf of the data controller

Provision of data communication for the online payment transaction between the payment system provider of the accommodation company / enterprise and the payment service provider of the Payment Gateway online payment system, the status of the transaction status

 

TITLE OF DATA MANAGEMENT ACTIVITIES

ONLINE REQUEST

Name of the controller

Karosinvest Zrt.

Accessibility of the data controller

8749 Zalakaros, Alma Street 1.

The purpose of data management

simplifying the call for proposals without obligation, viewing the personalized offer made by the data controller

The legal basis for data handling

the express and voluntary consent of the person initiating the online call for proposals

Name of treated personal data

Personal information of the contracting authority as follows:

-          name

-          e-mail address

-          phonenumber

-          address (country, postal code, city, street, house number)

-          IP-address (online ID)

The estimated duration of the processing of personal data

until the consent has been withdrawn and until the day after the validity of the online offer

Need for personal data provided by the person concerned

the implementation of the online call for tenders initiated by the interested party, the making of a subsequent online booking process smooth, efficient and quicker in case of compliance of the bid

Data processing requires the use of data processors

yes

TITLE OF DATA PROCESSORS

The name of the data processor

MORGENS Design Kft.

The address of the data processor

8800 Nagykanizsa, Csányi László Street 2.

The purpose of data processing on behalf of the data controller

the operation of the online request inquiry module on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4th X. floor 241.), the storage of incoming online call requests in a closed system and the possibility of answering requests for quotations

 

The name of the data processor

Rocket Science Group

The address of the data processor

675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308

The purpose of data processing on behalf of the data controller

Mandrill's software provides electronic mailing service for recording the online call for proposals, making a bid, validity

 

 

 

TITLE OF DATA MANAGEMENT ACTIVITIES

ONLINE GIFT TENDER ORDER

Name of the controller

Karosinvest Zrt.

Accessibility of the data controller

8749 Zalakaros, Alma Street 1.

The purpose of data management

making the online gift voucher ordering process simpler and more comfortable

The legal basis for data handling

the express and voluntary, prior consent of the person making the online payment in the process of ordering an online gift voucher

Name of treated personal data

Personal Information Handled for Gift Order as follows:

-          buyer's name

-          buyer's address

-          buyer's phonenumber

-          customer mailing address (country, postal code, city, street, house number)

-          customer billing address (country, postal code, city, street, house number)

-          buyer's IP address (online identifier)

-          the name of the gifted (s)

The estimated duration of the processing of personal data

until the withdrawal of the consent or until the day after the use of the gift certificate ordered

Need for personal data provided by the person concerned

the possibility of a simple and convenient implementation of the order process of the gift voucher initiated by the interested party

Data processing requires the use of data processors

yes

TITLE OF DATA PROCESSORS

The name of the data processor

MORGENS Design Kft.

Address of the data processor

8800 Nagykanizsa, Csányi László Street 2.

The purpose of data processing on behalf of the data controller

operation of the online gift voucher module on the server of Tárhely.Eu Szolgáltató Kft. (1144 Budapest, Ormánság utca 4.X. 241.), the possibility to send incoming gift vouchers in a closed system and to send gift vouchers online

 

The name of the data processor

Rocket Science Group

Address of the data processor

675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308

The purpose of data processing on behalf of the data controller

through the Mandrill software, an electronic mail delivery feature is provided for recording an online gift voucher order

 

 

The name of the data processor

OTP Bank Nyrt.

Address of the data processor

1051 Budapest, Nádor Street 16.

The purpose of data processing on behalf of the data controller

Provision of data communication for the online payment transaction between the accommodation company / enterprise and the electronic system of OTP Bank Nyrt. (Payment service provider), confirmation of transaction status

 

The name of the data processor

OTP Mobil Kft.

Address of the data processor

1093 Budapest, Közraktár Street 30-32.

The purpose of data processing on behalf of the data controller

Provision of data communication for the online payment transaction between the accommodation company / enterprise and SimplePay by OTP Mobil (payment service provider) electronic system, the status of the transaction status

 

The name of the data processor

CIB Bank Zrt.

Address of the data processor

1027 Budapest, Medve Street 4-14.

The purpose of data processing on behalf of the data controller

Provision of the data communication required for the online payment transaction between the company (s) holding the establishment (s) and the electronic system of CIB Bank Zrt. (Payment service provider), the status of the transaction status

 

The name of the data processor

BIG FISH Internet-technológiai Kft.

Address of the data processor

1066 Budapest, Nyugati tér 1-2.

The purpose of data processing on behalf of the data controller

Provision of data communication for the online payment transaction between the payment system provider of the accommodation company / enterprise and the payment service provider of the Payment Gateway online payment system, the status of the transaction status

TITLE OF DATA MANAGEMENT ACTIVITIES

SIGN UP FOR NEWSLETTER

Name of the controller

Karosinvest Zrt.

Accessibility of the data controller

8749 Zalakaros, Alma Street 1.

The purpose of data management

contact, information

The legal basis for data handling

the explicit and voluntary, prior consent of the person who initiated the newsletter subscription

Name of treated personal data

Personal information handled for subscribing to the Newsletter as follows:

-         subscriber's name

-          subscriber's e-mail address

-          subscriber's IP-address (online ID)

-          subscription date

-          subscribe source

-          subscription status

-          subscription status date

The estimated duration of the processing of personal data

until the consent is withdrawn, until the newsletter is unsubscribed

Need for personal data provided by the person concerned

learn about the special offers of your accommodation, your current programs, and the opportunity to get information on possible individual promotions

Az adatkezelési tevékenységhez adatfeldolgozók igénybevétele szükséges

yes

TITLE OF DATA PROCESSORS

The name of the data processor

MORGENS Design Kft.

Address of the data processor

8800 Nagykanizsa, Csányi László Street 2.

The purpose of data processing on behalf of the data controller

Providing a secure, secure, online, identi- ficated and password-protected Zadir MailR system on the server of DotRoll Computing Kft. (1148 Budapest, Fogarasi út 3-5.) to the data controller for the account of the account

 

The name of the data processor

E.N.S. Zrt.

Address of the data processor

1106 Budapest, Fehér Street 10. 2. ép. 2. em.

The purpose of data processing on behalf of the data controller

E.N.S. Zrt. Via mail server servers to send e-mail to send newsletters

6. Validation of the rights

Users who think the operator of www.karos-spa.hu has broken their rights to the protection of the personal data, they can validate their demand at the jury or they can ask for help from the officer of data protection. Detailed statutory provision regarding to this and to the obligations of the data han-dler can be found in the CXII. act of the 2011. year about the right to the informational self-determination and information freedom.

7. Information about risking the privacy

By using Internet there are different dangers risking the privacy.

Please be warned, your personal opinion written on our website is considered as personal data from which consequences can be taken regarding even to your social background, political affiliations, etc, and might seen by anyone.

8. Making a record:

Designation of data handling: Data base updates, extant customer and marketing data updates in our data base.

Register number of the data base: NAIH-62238/2013

Designation of data handling: Sending regular electronic newsletter; information about the products and facilities of the company sent for the addresses of the Hungarian marketing data base and for the customers of the company the via electronic mails

Register number of the data base: NAIH-62238/2013

ADesignation of data handling: Online registration, signing up for electronic newsletter, online order; information about the products and facilities of the company sent for the addresses of the marketing data base and for the customers of the company the via electronic mails

Register number of the data base: NAIH-62238/2013

Registration to newsletter

Be informed first about the special offers of our hotel.