Home Apartments Tree house chalet Family Resort Activities Contact
Book now

EHM Resort Privacy Policy

1. Purpose of this privacy notice

The www.ehm-resort.com (hereinafter referred to as the provider, data controller) as the data controller, recognizes the contents of this legal notice as binding. It undertakes to ensure that any processing of data relating to its activities complies with the requirements of this policy and the applicable national legislation and European Union acts.

The privacy policy relating to the processing of data by www.ehm-resort.com is permanently available at www.ehm-resort.com/en/privacy-policy.

www.ehm-resort.com reserves the right to change this policy at any time. It will of course inform its audience of any changes in due time.

If you have any questions about this notice, please contact us and our team will answer them.

www.ehm-resort.com is committed to protecting the personal data of its customers and partners, and attaches the utmost importance to respecting the right to information privacy of its customers. www.ehm-resort.com treats personal data confidentially and takes all security, technical and organisational measures to guarantee the security of the data.

www.ehm-resort.com describes its data management practices below.

2. Data controller's data

If you contact us, you can contact the controller at ehmresort@gmail.com.

  • Name: EHM Vendégház Kft.
  • VAT number: 26788250-2-18
  • Address: Mesteri, Kossuth Lajos u. 42, 9551
  • E-mail: ehmresort@gmail.com

2.1 Data Protection Officer

  • Name: Kimmerstorfer Elfriede
  • E-mail: ehmresort@gmail.com

3.1 Technical data

www.ehm-resort.com selects and operates the IT tools used to process personal data in the provision of the service in such a way that the data processed:

  • accessible to those authorised to access it (availability)
  • its authenticity and authentication are guaranteed (authenticity of processing)
  • its integrity can be verified (data integrity)
  • protected against unauthorised access (data confidentiality)

www.ehm-resort.com takes appropriate measures to protect the data against unauthorised access, alteration, disclosure, disclosure, deletion or destruction and against accidental destruction.

www.ehm-resort.com ensures the security of data processing through technical, organisational and organisational measures that provide a level of protection appropriate to the risks associated with the processing.

In the course of the processing, www.ehm-resort.com shall retain

  • confidentiality: it protects the information so that only those who are entitled to access it have access to it
  • integrity: to protect the accuracy and completeness of the information and the method of processing
  • availability: ensures that the information required is actually accessible to the authorised user when he or she needs it and that the means to access it are available.

3.2 Cookies

3.2.1 The function of cookies
  • collect information about visitors and their devices
  • remember visitors' individual preferences, which are used, for example, when they make online transactions, so that they do not have to be re-entered
  • facilitate the use of the website
  • provide a quality user experience

To provide a personalised service, a small piece of data called a cookie is placed on the user's computer and read back during a subsequent visit. If the browser returns a previously saved cookie, the cookie provider has the possibility to link the user's current visit to previous visits, but only for its own content.

3.2.2 Strictly necessary session cookies

The purpose of these cookies is to enable visitors to browse the www.ehm-resort.com website and use its functions and services smoothly and without interruption. These types of cookies are valid until the end of the session (browsing), and are automatically deleted from the computer or other device used for browsing when the browser is closed.

3.2.3 Third-party cookies (analytics)

www.ehm-resort.com also uses Google Analytics as a third party cookie. Google Analytics uses this service for statistical purposes to collect information about how visitors use the website. The data is used to improve the website and the user experience. These cookies will also remain on the visitor's computer or other browsing device, their browser until they expire or until they are deleted by the visitor.

4. Purpose, method and legal basis of data processing

4.1 General data processing policy

The data processing of www.ehm-resort.com's activities is based on voluntary consent or on legal authorisation. In the case of processing based on voluntary consent, data subjects may withdraw their consent at any time during the processing.

In certain cases, the processing, storage and transmission of some of the data provided is required by law and we will inform our customers separately.

Please note that if you provide data to www.ehm-resort.com other than your own personal data, it is the responsibility of the data provider to obtain the consent of the data subject.

Our data management principles are in accordance with the applicable data protection legislation, in particular the following:

  • Act CXII of 2011 - on the Right to Informational Self-Determination and Freedom of Information (Infotv.)
  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC (General Data Protection Regulation, GDPR)
  • Act V of 2013 - on the Civil Code (Civil Code)
  • Act C of 2000 - on Accounting (Accounting Act)
  • Act LIII of 2017 - on the Prevention and Combating of Money Laundering and Terrorist Financing (AML/CFT)
  • Act CCXXXVII of 2013 - on Credit Institutions and Financial Undertakings (Hpt.)

5. Physical storage locations of data

Your personal data (i.e. the data that can be associated with you personally) may be processed by us in the following ways: on the one hand, technical data relating to the computer, browser program, Internet address and pages visited by you in connection with the maintenance of the Internet connection are automatically generated in our computer system, and on the other hand, you may provide your name, contact details or other data if you wish to contact us personally when using the website.

Data technically collected during the operation of the system: the data of the computer of the person concerned who logs in, which is collected as an automatic result of technical processes. This data cannot be linked to other personal user data, except in cases required by law. The data can only be accessed by www.ehm-resort.com.

6. Data subject's rights and means of redress

The data subject may request information about the processing of his/her personal data, request the rectification, erasure or withdrawal of his/her personal data, except for mandatory processing, exercise his/her right to data portability and objection as indicated when the data were collected or by contacting the controller at the above contact details.

6.1 Right to information

www.ehm-resort.com shall take appropriate measures to provide data subjects with all the information referred to in Articles 13 and 14 of the GDPR and all the information referred to in Articles 15 to 22 and 34 of the GDPR concerning the processing of personal data in a concise, transparent, intelligible and easily accessible form, in clear and plain language.

6.2 Right of access of the data subject

The data subject shall have the right to obtain from the controller feedback as to whether or not his or her personal data are being processed and, where such processing is taking place, the right to access to the personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom or with which the personal data have been or will be disclosed, including in particular recipients in third countries or international organisations; the envisaged period of storage of the personal data; the right to rectification, erasure or restriction of processing and the right to object; the right to lodge a complaint with a supervisory authority; information on the data sources; the fact of automated decision-making, including profiling, and clear information on the logic used and the significance of such processing and its likely consequences for the data subject. The controller shall provide the information within a maximum of one month from the date of the request.

6.3 Right of rectification

The data subject may request the correction of inaccurate personal data concerning him or her processed by www.ehm-resort.com and the completion of incomplete data.

6.4 Right to erasure

The data subject shall have the right to obtain, upon request, the erasure of personal data concerning him or her by www.ehm-resort.com without undue delay where one of the following grounds applies:

  • the personal data are no longer necessary for the purposes for which they were collected or otherwise processed
  • the data subject withdraws the consent on the basis of which the processing was carried out and there is no other legal basis for the processing
  • the data subject objects to the processing and there is no overriding legitimate ground for the processing
  • the personal data have been unlawfully processed
  • the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject
  • the personal data have been collected in connection with the provision of information society services

The erasure of the data may not be initiated if the processing is necessary: for the exercise of the right to freedom of expression and information; for compliance with an obligation under Union or Member State law to process personal data or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller; for public health purposes or for archiving, scientific or historical research purposes or statistical purposes in the public interest; or for the establishment, exercise or defence of legal claims.

6.5 Right to restriction of processing

At the request of the data subject, www.ehm-resort.com will restrict processing if one of the following conditions is met:

  • the data subject contests the accuracy of the personal data, in which case the restriction shall be for a period of time which allows the accuracy of the personal data to be verified
  • the processing is unlawful and the data subject opposes the erasure of the data and requests instead the restriction of their use
  • the controller no longer needs the personal data for the purposes of the processing but the data subject requires them for the establishment, exercise or defence of legal claims
  • the data subject has objected to the processing; in this case, the restriction shall apply for a period of time until it is established whether the legitimate grounds of the controller override those of the data subject

Where processing is subject to restriction, personal data, other than storage, may be processed only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for important public interests of the Union or of a Member State.

6.6 Right to data portability

The data subject has the right to receive personal data relating to him or her which he or she has provided to the controller in a structured, commonly used, machine-readable format and to transmit such data to another controller.

6.7 Right to object

The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to processing of his or her personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or necessary for the purposes of the legitimate interests pursued by the controller or by a third party, including profiling based on those provisions. In the event of an objection, the controller may no longer process the personal data, unless there are compelling legitimate grounds for doing so which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

6.8 Automated decision-making in individual cases, including profiling

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

6.9 Right of withdrawal

The data subject has the right to withdraw his or her consent at any time.

6.10 Right to apply to the courts

The data subject may take legal action against the controller in the event of a breach of his or her rights. The court shall rule on the matter out of turn.

6.11 Procedure before the data protection authority

A complaint may be lodged with the National Authority for Data Protection and Freedom of Information:

  • Name: National Authority for Data Protection and Freedom of Information
  • Registered office: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.
  • Postal address: 1530 Budapest, PO Box 5.
  • Phone: 0613911400
  • Fax: 0613911410
  • E-mail: ugyfelszolgalat@naih.hu
  • Website: http://www.naih.hu

7. Other provisions

Information on data processing not listed in this notice will be provided at the time of collection. We inform our customers that the court, the prosecutor, the investigating authority, the law enforcement authority, the administrative authority, the National Authority for Data Protection and Freedom of Information, the Hungarian National Bank, or other bodies authorised by law may contact the data controller to provide information, to disclose or transfer data, or to provide documents.

www.ehm-resort.com shall disclose personal data to public authorities only to the extent and to the extent strictly necessary for the purpose of the request, provided that the public authority has indicated the precise purpose and scope of the data.