PRIVACY POLICY

THE DATA CONTROLLER

SCOPE OF PROCESSED DATA

When booking, we process the following data:

• •
  First and last name – for booking identification
• •
  Email address – for sending confirmation
• •
  Phone number – for contact purposes
• •
  Number of people – for game arrangement
• •
  Billing details (address) – only for business (B2B) invoicing
• •
  Booking date – for service fulfillment

PURPOSE AND LEGAL BASIS OF DATA PROCESSING

We process data for the following purposes:

• •
  Booking management and service fulfillment (GDPR Article 6(1)(b) – performance of contract)
• •
  Invoicing (GDPR Article 6(1)(c) – legal obligation)
• •
  Communication regarding questions or changes (GDPR Article 6(1)(b))

DATA RETENTION PERIOD

We retain booking and invoicing data for 8 years pursuant to Section 169 of Act C of 2000 on Accounting.

The data subject may request the deletion of their data at any time using the contact details below. Deletion will be carried out within 30 days of receipt of the request, except for accounting data subject to the above legal obligation.

DATA PROCESSORS

Your data may be processed by the following data processors:

• •
  Google LLC – Google Calendar booking system
• •
  Rackhost Zrt. – hosting service

DATA SECURITY

The Service Provider applies appropriate technical and organizational measures to protect personal data against unauthorized access, modification, disclosure, or destruction. The website is accessible via HTTPS encrypted channel, so the data provided is transmitted in encrypted form.

RIGHTS OF THE DATA SUBJECT

During data processing, you have the following rights:

• •
  Right to be informed – this policy provides the necessary information (GDPR Articles 13–14)
• •
  Right of access – you may request information about the data processed about you (Article 15)
• •
  Right to rectification – you may request the correction of inaccurate data (Article 16)
• •
  Right to erasure ("right to be forgotten") – you may request the deletion of your data (Article 17)
• •
  Right to restriction of processing – you may request restriction of the processing of your data (Article 18)
• •
  Right to data portability – you may request the release of your data in a machine-readable format (Article 20)
• •
  Right to object – you may object to data processing at any time (Article 21)

You may exercise these rights using the contact details above.

REMEDIES

For data processing matters, you may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):

You may also enforce your rights in court — claims may be filed with the court of your place of residence or domicile.

COOKIES AND SIMILAR TECHNOLOGIES

Our website uses third-party cookies (Google Calendar, Google Maps) necessary for the operation of the booking calendar and map. These cookies are only loaded with your explicit consent.

Detailed information about the cookies, the data processed, data transfers, and how to withdraw your consent can be found in the Cookie Policy.

DATA TRANSFER TO THIRD COUNTRIES

When using Google services (Calendar, Maps), data may be transferred outside the European Economic Area — to the United States — for processing on Google servers.

Google LLC is a certified participant in the EU-U.S. Data Privacy Framework, which — pursuant to the European Commission's adequacy decision 2023/1795/EU — provides appropriate data protection safeguards under Article 45 of the GDPR.

DATA PROTECTION OFFICER

Considering the criteria set out in Article 37 of the GDPR, the Data Controller does not appoint a Data Protection Officer (DPO), as their activities do not require one. For data protection-related questions, please contact the Data Controller directly using the contact details above.

AUTOMATED DECISION-MAKING AND PROFILING

The Data Controller does not carry out automated decision-making or profiling on personal data (GDPR Article 22). Booking and contact processes are carried out exclusively with human intervention.

DATA BREACH

In the event of a data breach, the Data Controller will notify the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) within 72 hours of becoming aware of it, and — if the breach is likely to result in a high risk to the rights and freedoms of data subjects — will inform the data subjects without undue delay (GDPR Articles 33-34).

AMENDMENT OF THIS POLICY

The Data Controller reserves the right to unilaterally modify this policy without prior notice. Modifications take effect upon publication on the website. We recommend that you review this policy from time to time.

RELATED DOCUMENTS