Magyar
English
Privacy Policy (GDPR)
Privacy Policy (GDPR)
Effective date: 16 September 2026
The purpose of this Privacy Policy is to provide transparent information on how Nagyvillám Panoráma Étterem Korlátolt Felelősségű Társaság processes the personal data of website visitors, enquirers, guests and prospective guests.
```
1. Data Controller Details
Name: Nagyvillám Panoráma Étterem Korlátolt Felelősségű Társaság
Registered office: 2025 Visegrád, Nagyvillám, cadastral no. 0125/3, Hungary
Company registration number: 13-09-155432
Tax number: 23876790-2-13
Representative: Titz Tamás, Managing Director
Email: info@nagyvillam.hu
Website: nagyvillam.hu
2. Principles of Data Processing
The Data Controller processes personal data lawfully, fairly and transparently, for specified purposes and only to the extent and for the period necessary. Data processing is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act CXII of 2011 on Informational Self-Determination and Freedom of Information, as well as other applicable Hungarian and European Union legislation.
3. Contact, Enquiries and Requests for Quotations
| Purpose of processing | Handling enquiries, answering questions and preparing quotations for events, weddings, restaurant services or accommodation. |
|---|---|
| Personal data processed | Name, email address, phone number, the content of the enquiry or message, and any additional information voluntarily provided by the data subject. |
| Legal basis | Article 6(1)(b) of the GDPR – taking steps at the request of the data subject prior to entering into a contract; in the case of general enquiries, Article 6(1)(f) of the GDPR – the legitimate interest of the Data Controller in responding to enquiries. |
| Retention period | As a general rule, no longer than 1 year after the matter has been closed, unless the data becomes part of contractual or accounting documentation subject to a longer statutory retention period. |
4. Table, Event and Accommodation Reservations
| Purpose of processing | Recording, confirming and modifying reservations, communicating with guests and providing the requested service. |
|---|---|
| Personal data processed | Name, contact details, date and time of the reservation, number of guests, requested service and any other information necessary for the reservation. |
| Legal basis | Article 6(1)(b) of the GDPR – performance of a contract or taking steps prior to entering into a contract. |
| Retention period | For as long as necessary to manage the reservation and provide the service; where invoicing or another legal obligation applies, until the end of the relevant statutory retention period. |
If an external online booking system is introduced on the website in the future, its service provider and its role in data processing must be specified separately in this Privacy Policy.
5. Invoicing and Accounting Obligations
The Data Controller processes the personal data required for issuing invoices in order to comply with a legal obligation (Article 6(1)(c) of the GDPR). Accounting documents must be retained for at least 8 years pursuant to Act C of 2000 on Accounting.
6. Telephone and Email Communication
During telephone and email communication with the data subject, the Data Controller processes contact details and the content of the communication for the purposes of handling the enquiry and preparing or providing the requested service.
7. Website Visits and Technical Log Data
When the website is accessed, certain technical data may be processed for technical reasons, including the IP address, browser and device type, time of the visit, address of the requested page and technical error information. The purpose of this processing is to ensure the secure and stable operation of the website, identify technical errors and prevent misuse. The legal basis is the legitimate interest of the Data Controller (Article 6(1)(f) of the GDPR).
8. Cookies and Similar Technologies
The use of cookies is governed by a separate Cookie Policy. Analytical, marketing and external-content cookies that are not strictly necessary for the operation of the website may only be activated after the data subject has given prior consent.
9. Data Processors
9.1. Hosting and Server Operation
Keyweb AG
Neuwerkstraße 45/46, 99084 Erfurt, Germany
Purpose: provision of the website's technical hosting and server infrastructure.
The Data Controller may also use accounting, invoicing, IT, email, booking or other service providers where this is necessary for the relevant processing purpose. Data processors may act only on the instructions of the Data Controller and on the basis of the agreement concluded with them.
10. Transfers of Personal Data to Third Countries
As a general rule, the Data Controller does not transfer personal data outside the European Economic Area. If the use of an external service subject to consent involves such a transfer, the transfer may only take place subject to the applicable data protection safeguards and on the basis of the information provided in relation to the relevant service provider.
11. Rights of the Data Subject
Under the GDPR, the data subject has the right to:
- request information about and access to their personal data;
- request the rectification of inaccurate personal data;
- request the erasure of their personal data where the statutory conditions are met;
- request restriction of processing;
- exercise the right to data portability;
- object to processing based on legitimate interests;
- withdraw consent at any time where processing is based on consent.
Requests relating to data subject rights may be submitted by email to info@nagyvillam.hu. The Data Controller will respond to such requests without undue delay and, as a general rule, within one month.
12. Legal Remedies
If the data subject believes that the processing of their personal data infringes the GDPR or other data protection legislation, they may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal address: 1363 Budapest, P.O. Box 9, Hungary
Email: ugyfelszolgalat@naih.hu
Website: naih.hu
Phone: +36 1 391 1400
The data subject also has the right to seek judicial remedy.
13. Data Security
The Data Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, deletion, destruction, loss or damage. Access is restricted to authorised persons, and appropriate IT security measures are applied in connection with the operation of the website.
14. Automated Decision-Making and Profiling
The Data Controller does not carry out decisions based solely on automated processing of personal data processed through the website. Profiling for marketing purposes may only take place where an appropriate legal basis – typically prior consent – is available.
15. Amendments to this Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy, in particular in the event of changes in legislation, the introduction of new services or data processors, or changes to the functions of the website. The current version is always available on the website.
```