Privacy Notice

Personal data: any information relating to an identified or identifiable natural person.

Data subject: the natural person to whom the personal data relates, including an enquirer, booking guest or accommodation guest.

Processing: any operation performed on personal data, including collection, recording, storage, use, disclosure or deletion.

Processor: a person or organisation processing personal data on behalf of the Data Controller.

GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council.

Data Controller: Zombori Andrea, private individual with a tax number.

• Telephone: +36 30 421 5644
• E-mail: westbudapestapartman@gmail.com
• Tax number: 57396932-1-41
• Accommodation: West Budapest Apartment, 1132 Budapest, Váci út 46/A, Hungary
• NTAK registration: MA24091467

Questions or requests concerning personal data may be submitted using the contact details above.

Personal data may be processed for purposes including:

• responding to enquiries;
• processing booking requests and preparing offers;
• concluding and performing the accommodation contract;
• communication before, during and, where necessary, after the stay;
• issuing invoices and accounting documents;
• complying with statutory NTAK and VIZA reporting obligations;
• compliance with other legal obligations;
• establishing, exercising or defending legal claims.

The applicable legal basis depends on the purpose of the processing.

• Article 6(1)(b) GDPR: processing necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract, including booking requests.
• Article 6(1)(c) GDPR: processing necessary for compliance with a legal obligation, including invoicing and statutory accommodation reporting obligations.
• Article 6(1)(a) GDPR: consent, where a specific processing activity is based on the data subject's consent.

Where processing is based on consent, consent may be withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

In connection with enquiries and reservations, we may process information including:

• name of the booking guest;
• e-mail address;
• telephone number;
• billing name and address;
• company and tax information where a business invoice is requested;
• number of guests;
• arrival and departure dates;
• expected arrival time;
• other information voluntarily provided where necessary for managing the booking.

Personal data are retained only for as long as necessary for the applicable processing purpose or as required by law.

• Telephone and e-mail contact data: during the booking and accommodation process and, where no other lawful retention reason applies, generally for no longer than 90 days after departure.
• Enquiries that do not result in a booking: generally for no longer than 90 days after the enquiry has been closed, unless further retention is required.
• Accounting and invoice information: for the statutory accounting retention period, generally 8 years.
• Statutory accommodation data: retained for the periods specified by applicable Hungarian legislation and the rules governing the VIZA system.

Where personal data are required in connection with a legal dispute, authority procedure or legal claim, they may be retained until the relevant matter has been finally resolved.

The Data Controller seeks to use appropriate technical and organisational measures to protect personal data processed in connection with the accommodation service.

Access to personal data is limited to the extent necessary for providing the accommodation service, complying with legal obligations or enabling an authorised processor to perform its tasks.

Reasonable measures are taken to protect personal data against unauthorised access, alteration, disclosure, loss or destruction.

Personal data are disclosed to another organisation only where there is an appropriate purpose and legal basis for doing so.

Relevant recipients or systems may include:

• Webnode: in connection with hosting, technical operation and website functionality;
• NTAK / VIZA: where required for statutory accommodation-sector reporting;
• Hungarian tax authorities: where required in connection with invoicing or taxation;
• financial service providers: to the extent required for payments made by bank transfer;
• courts or public authorities: where disclosure is required or authorised by applicable law.

Guest personal data are not sold to third parties.

Subject to the conditions set out in the GDPR, data subjects may have the following rights:

These rights are subject to the conditions and limitations set out in applicable law. For example, personal data cannot be erased where the Data Controller is legally required to retain them.

Requests concerning personal data may be submitted to the Data Controller by e-mail or telephone using the contact details provided above.

The Data Controller will assess the request and, as a general rule, provide information on the action taken within one month of receiving the request, subject to the rules of the GDPR.

If you believe that the processing of your personal data infringes your rights, you may lodge a complaint with the Hungarian supervisory authority or seek judicial remedy.

This Privacy Notice may be amended where necessary, including following changes in legislation, regulatory practice, website functionality or data-processing activities.

The current version of this Privacy Notice is published on this website.

Last updated: 13 September 2026.