BudaSmile Apartment
Privacy notice
Effective from 11 October 2026
This notice explains which personal data we process on budasmile.hu and when hosting you, for what purpose, for how long, and what your rights are. Processing complies with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011. If the Hungarian version differs, the Hungarian version prevails.
1. Data controller
- Name: Emese Etelka Mosóczi, private accommodation provider (BudaSmile Apartment)
- Address: Lovas út 37, 1012 Budapest, Hungary
- E-mail: budasmile@hotmail.com
- Phone: +36 20 380 2572
- NTAK registration number: MA23079105
2. What we process, why and for how long
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Booking requests and enquiries (form, e-mail, phone, WhatsApp) | name, phone number, e-mail address, number of guests, requested dates, estimated price, message | steps prior to entering into a contract – GDPR Art. 6(1)(b) | if no booking is made: up to 1 year after the request is closed |
| Providing the accommodation | name, contact details, dates of stay, number of guests, payment details | performance of a contract – GDPR Art. 6(1)(b) | 5 years after the contract ends (civil-law limitation period) |
| Mandatory guest registration | the identity or travel document data required by law, start and end of stay | legal obligation – GDPR Art. 6(1)(c); Hungarian Act CLVI of 2016, Section 9/H | for the period required by law |
| Tourist tax records | name, length of stay, data needed to establish exemptions | legal obligation – GDPR Art. 6(1)(c); Hungarian Act C of 1990 on local taxes | until the tax limitation period expires |
| Invoicing and accounting | name, address, invoice data | legal obligation – GDPR Art. 6(1)(c); Hungarian Act C of 2000 on accounting, Section 169 | 8 years |
We do not use your data for newsletters, advertising or profiling, and we never sell it.
3. Who can access the data (processors)
- Netlify, Inc. (San Francisco, USA) – hosts the website and forwards and stores booking form submissions. Transfers outside the EU rely on appropriate safeguards (the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses).
- Microsoft Ireland Operations Ltd. – provider of the e-mail account (Outlook / Hotmail) that receives booking requests.
- WhatsApp Ireland Ltd. – only if you choose to contact us on WhatsApp; your messages are then handled under WhatsApp’s own privacy policy. The website itself sends nothing to WhatsApp unless you tap the WhatsApp link.
- Supabase, Inc. – database of the booking calendar. It stores only dates and prices, never guests’ personal data.
As required by law, guest registration data is stored with the hosting provider designated by the Hungarian National Tourism Data Service Centre (NTAK); authorities may access it only in cases defined by law.
4. Cookies and how the website works
This website uses no cookies, analytics or advertising trackers. Fonts are served from our own server, so no data is passed to third parties when you open the site. If you dismiss the language suggestion, your browser’s local storage (localStorage) remembers this choice; it is never sent to the server.
For operation and security, the hosting provider may keep short-lived technical logs (e.g. IP address, time, page requested) – legal basis: legitimate interest, GDPR Art. 6(1)(f).
Map: Google Maps loads only if you click “Show map”. Google Ireland Ltd. may then collect data (such as your IP address) as an independent controller – see the Google Privacy Policy.
5. Your rights
You may at any time ask us to
- tell you which of your data we hold (access),
- correct inaccurate data,
- erase your data where it is no longer needed or lawful,
- restrict processing,
- provide your data in a machine-readable format (portability),
- and you may object to processing based on legitimate interest.
Send your request to budasmile@hotmail.com; we reply within one month. Data we must keep by law (e.g. guest registration, invoices) cannot be erased before the retention period ends.
6. Complaints
If you feel your rights have been infringed, please contact us first – we will try to resolve it quickly. You may also lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9–11, 1055 Budapest; postal address: 1363 Budapest, Pf. 9.; www.naih.hu; ugyfelszolgalat@naih.hu) or with the data protection authority of your EU country of residence, or go to court.
← Back to the home page