Privacy Policy

Last updated: December 20, 2025

This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit our website, make a booking, or stay at our short‑term apartment rental located in Budapest, Hungary (the “Apartment”). We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and applicable Hungarian data protection laws.

1. Data Controller

The data controller responsible for processing your personal data is:

[Fireplace Holidays Budapest]
Registered address: 1077 Budapest, Almássy tér 13
Email: office@budapestapartmentsrent.com
Phone: +3630 231 1512

If you have any questions about this Privacy Policy or your personal data, you may contact us using the details above.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

2.1 Booking and Stay Information

• Full name
• Email address
• Phone number
• Billing address
• Dates of stay
• Number of guests
• Special requests or messages you send us

2.2 Identification Data (Legal Obligation)

In accordance with Hungarian law, we may be required to collect:

• ID or passport details (e.g. document type, number, nationality, date of birth)

This data is collected only where legally required and is reported through the official Hungarian guest registration system.

2.3 Payment Information

• Payment confirmation details

Note: We do not store full credit or debit card numbers. Payments are processed securely via third‑party payment providers.

2.4 Website Usage Data

When you visit our website, we may automatically collect:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes and legal bases:

4. Data Sharing and Disclosure

We may share your personal data only when necessary and only with:

• Payment service providers (for secure payment processing)
• Booking platforms (e.g. Airbnb, Booking.com, if applicable)
• Hungarian authorities (where legally required for guest registration)
• IT and hosting providers supporting our website and systems

All third parties are required to process your data securely and in compliance with GDPR.

3rd parties with whom personal information may be shared

IT, server services and e-mail delivery services closely related to data processing:

Name of the data processor: IONOS SE
Address: 56410 Montabaur, Elgendorfer Str. 57, Germany
Company register: Montabaur Local Court / HRB 24498
VAT number: DE815563912
Telephone: +49 (0) 721 170 5522
E-mail: info@ionos.de

The Data Processor does not know any personal data.
In doing so, the Data Processor processes the name and e-mail address of the data subject to the extent necessary for e-mailing, and deletes it immediately upon request of the data subject.

Social Media

We kindly ask you not to share any personal information when contacting us on social media platforms like Facebook, Instagram and Twitter.

Internal Policies

We have internal policies in place that prohibits employees from sharing and personal user data in internal communication tool.

Agreements with third parties on data processing

We limit the data we share with the above third parties to the absolute minimum to ensure your details and privacy are kept to a minimum. We have Data processor agreements in place where necessary, limiting the third party use of data.

5. International Data Transfers

If personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as:

• EU Standard Contractual Clauses, or
• Transfers to countries with an adequacy decision by the European Commission

6. Data Retention

We retain personal data only for as long as necessary:

• Booking and accounting data: as required by tax and accounting laws
• Guest registration data: as required by Hungarian law
• Communication data: up to [e.g. 12–24 months]

Once retention periods expire, data is securely deleted or anonymized.

7. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access
• Right to rectification
• Right to erasure (“right to be forgotten”)
• Right to restriction of processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details in Section 1.

8. Cookies

Our website may use cookies to ensure proper functionality and improve user experience.

You may manage or disable cookies through your browser settings. For more information, please see our Cookie Policy.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Secure hosting
• Encrypted communications (HTTPS)
• Limited access to personal data

Despite our efforts, no method of transmission over the internet is 100% secure.

10. Complaints

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the supervisory authority:

National Authority for Data Protection and Freedom of Information (NAIH)
Website: https://www.naih.hu

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website, with the updated date clearly indicated.

If you have any questions about this Privacy Policy, please contact us. We are happy to help.