Privacy Policy
LAST UPDATED ON 26th of December 2021
President Management Ltd., identification number 01-09-208020, with its registered office at 1054 Budapest, Hold utca 3-5, Hungary (hereinafter: “Company”) respects the personal rights of its Guests, hence it prepared this Privacy Policy, which is available in electronic format at the Company's website as well as in print format on reception at HOTEL PRESIDENT.
This Privacy Policy describes how the Company, which is providing hotel services under the MOZART HOTEL GROUP trademark, and its Affiliates and Subsidiaries (“we” or “us”) collects, uses, consults or otherwise processes your Personal Data.
The Company operates in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data and repealing Directive 95/46/EC (EU GDPR) as well as the current national Data Privacy Acts. When using the Internet, we are committed to the protection of your Personal Data by the Act. CXII of 2011 on information self-determination and freedom of information (Data Protection Act).
This Policy is developed to explain our practices regarding the Personal Data we collect from you or about you at https://hotelpresident.hu (hereinafter: the “website”), through written or verbal communications with us, when you visit one of our hotels from the MOZART HOTEL GROUP, or from other sources. We use Personal Data primarily to administer, provide, develop and maintain the hotel services, process your reservations, optimize your experience with respect to the services and individualize the communication with you. Please read this Policy carefully to understand how and for what purposes we process your Personal Data.
By using this website or using any of our services and by agreeing to this Policy, you agree to the collection and use of Personal Data as described in this Policy.
Table of contents:
1. Definitions
Controller: A legal person, President Management Ltd., identification number 01-09-208020, with its registered office at 1054 Budapest, Hold utca 3-5, Hungary, who determines the purposes and means of the processing of Personal Data.
Consent of the Data Subject: means any freely given, specific, informed, and unambiguous indication of the Data Subject's wishes by which he or she, by a statement or by clear affirmative action, signifies agreement to the processing of Personal Data relating to him or her.
Processor: A natural or legal person, public authority, agency, or other body which processes Personal Data on behalf of the Controller.
Recipient: A natural or legal person, public authority, agency, or another body, to which the Personal Data is disclosed, whether a Third Party or not.
Third-Party: A natural or legal person, public authority, agency, or body other than the Data Subject, Controller, Processor, and persons who, under the direct authority of the Controller or Processor, are authorized to process Personal Data.
Supervisory Authority: An independent public authority that is established by a Member State pursuant to Article 51 of the GDPR. Specifically, Hungarian National Authority for Data Protection and Freedom of Information, H-1125 Budapest, Szilágyi Erzsébet fasor 22/C, Telefon: +36 -1-391-1400, E-mail: privacy@naih.hu
Personal Data: Any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing: Any operation or set of operations which is performed on Personal Data or on sets of Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
MOZART HOTEL GROUP: Companies from the MOZART HOTEL GROUP chain can be based worldwide.
HOTEL PRESIDENT (furthermore also as the hotel) is a hotel operated by the Controller and located at 1054 Budapest, Hold utca 3-5, Hungary
Standard Contractual Clauses: Sets of standard contractual clauses for transfers as adopted by the European Commission for the international transfer of Personal Data.
Personal Data Breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data transmitted, stored, or otherwise processed.
2. Personal Data that we collect and process. Data retention policy
The Company collects and processes your Personal Data only where permitted by law. We only collect Personal Data relevant to the purpose described in the separate terms and conditions of the Privacy Policy. This Personal Data may include:
In the case of online, personal (paper-based) or phone reservations and after the reservation, the Company requests/can request that the Guest makes the following data available:
- Contact details for purpose of price offer request or reservation: (title, first name, last name, address, phone number, e-mail address) based on point b) and c) section 1 Article 6 of EU GDPR (regarding the Act C of 1990);
- Contact details for purpose of marketing and online advertisements: first name, last name, e-mail address based on point a) section 1 Article 6 of EU GDPR (consent of the Guests);
- Personal information for purpose of reservation (ID card, passport details, place, and date of birth, citizenship) based on point b) and c) section 1 Article 6 of EU GDPR (regarding the Act C of 1990);
- Information relating to your children for purpose of reservation (for example, first name, date of birth, age) based on point b) and c) section 1 Article 6 of EU GDPR (regarding the Act C of 1990);
- Details of bank card for transaction and reservation purposes for the settlement of the consideration of the service, fulfillment of the invoicing obligation (type, number, expiry date, name of cardholder; CVC/CVV) based on point c) section 1 Article 6 of EU GDPR (regarding the Act C of 2000);
- Arrival and departure dates based on point b) section 1 Article 6 of EU GDPR;
- Visa number and certificate of registration (for non-EU or non-EEA residents) for purpose of reservation based on point b) section 1 Article 6 of EU GDPR;
- Technical and location data you generate as a result of using our websites (the start and end time of usage of the website, IP address, and other recorded browsing data (cookie) of the user of the website) and applications based on point a) section 1 Article 6 of EU GDPR (consent of the Guests).
Providing the required data by the Guests is a precondition for using hotel services. By signing the registration card, Guests consent to the Company managing and/or archiving the Personal Data provided by filling in the registration card in order to verify that the contract was concluded and/or performed, as well as to possibly enforce claims.
For room reservations, the Company can only use the given bank card, credit card, and bank account data to such an extent and period of time as necessary for the exercise of rights and fulfillment of obligations. Data is handled by the Company's contractual bank partners. Information about their data handling policies can be found on the websites of the competent Bank (K&H – www.khb.hu, OTP – www.otp.hu, Erste - www.erste.hu, MKB – www.mkb.hu).
Also, we may ask for information about your joint travelers, including their names and additional information.
The table below sets out why the Company processes the Personal Data of the Guests detailed above, the legal basis and legitimate purpose for the processing, and the associated retention period. The following retention periods are applicable to Personal Data which is stored both in electronic and paper forms.
| # | Activity | The legitimate purpose for processing and storage of Personal Data | Retention period |
|---|---|---|---|
| 1. | Managing the reservation of rooms, storage of legal documents in compliance with accounting standards. |
Performance of a contract with the customer. Necessary to comply with a legal obligation. |
10 years unless otherwise provided by the country’s special legislation. |
|
2. |
Managing your stay at the hotel:
|
Performance of a contract with the customer. Necessary for Company’s legitimate interest in running its business and providing our guests with high-quality services. |
For the duration of your stay at the hotel. |
| 3. |
Managing Company’s relationship with customers before, during, and after a stay at the hotel:
|
Performance of a contract with the customer. Necessary for the Company’s legitimate interests in promoting its services, performing direct marketing activities (taking into account your commercial relationship with one of MOZART HOTEL GROUP’s legal entities), and improving its services. |
3 years from the last date on which you have interacted with us in any way. |
|
4. |
Improving Company’s hotel services by:
|
Performance of a contract with the customer. Necessary for the Company’s legitimate interests in promoting its services, performing direct marketing activities (taking into account your commercial relationship with one of MOZART HOTEL GROUP’s legal entities), and improving our services. |
3 years from the last date on which you have interacted with us in any way. |
|
5. |
Use a trusted third party to cross-check, analyze and combine your collected data at the time of booking or at the time of your stay, in order to determine your interests and develop your customer profile, and to allow us to send you Personalized offers. |
Necessary for the Company’s legitimate interests in promoting its services, performing direct marketing activities (taking into account your commercial relationship with one of the MOZART HOTEL GROUP’s legal entities), and improving our services. |
3 years from the last date on which you have interacted with us in any way. |
| 6. |
Improving MOZART HOTEL GROUP services, in particular:
|
Performance of a contract with the customer necessary for Company’s legitimate interests in promoting hotel services, performing direct marketing activities (taking into account your commercial relationship with one of MOZART HOTEL GROUP’s legal entities), and improving its services. |
3 years from the last date on which you have interacted with us in any way. 6 years from the date of closure of your file in case of a claim or a complaint. |
| 7. |
Securing and enhancing your use of MOZART HOTEL GROUP websites and services by:
|
Necessary for Company’s legitimate interests in running its business, provision of administration and IT services and network security to prevent fraud |
3 years from the last date on which you have interacted with us in any way. |
| 8. |
Internal management of lists of customers having behaved inappropriately during their stay at the hotel (aggressive and anti-social behavior, non-compliance with safety regulations, theft, damage, and vandalism or payment incidents). |
Necessary for the Company’s legitimate interests in running its business and to prevent fraud and the abuse of hotel property and staff. |
Up to 3 years from the recording of an incident. |
|
9. |
Using services to search for persons staying in MOZART HOTEL GROUP hotels in the event of serious events affecting the hotel in question (natural disasters, terrorist attacks, etc.). |
Protection of the vital interests of the customers. |
For the duration of the event. |
|
10. |
Conforming to any applicable legislation (for example, storing of accounting documents), including: Managing requests to unsubscribe from newsletters, promotions, tourist offers, and satisfaction surveys; Managing Data Subject’s requests regarding their Personal Data. |
Necessary to comply with a legal obligation. |
10 years unless otherwise provided by the country’s special legislation. |
3. Personal Data collected from third parties
It is important for us to keep your Personal Data up to date and accurate at all times, that’s why we may import Personal Data about you from external sources such as public registers. When required by law, consent for the processing of certain types of Personal Data or for certain forms of processing will be obtained from you before processing takes place.
We may also collect information about you from third parties, including information from airlines, payment systems, and other partners; from online social services consistent with your settings on such services; and from other third-party sources that are lawfully entitled to share your data with us. The Company uses and shares this information only for the purposes described in the relevant contracts with the third parties which are contractually obligated to protect your Personal Data.
4. Personal Data we share
In order to offer you a high level of hotel services, we may share your Personal Data among members of the MOZART HOTEL GROUP, our service providers, and other third parties as set forth in detail below:
We share your data with a number of authorized employees and departments in the MOZART HOTEL GROUP in order to offer you the best experience in our hotels. The following teams may have access to your data:
- Hotel staff;
- Reservation staff using reservation tools;
- IT departments;
- Commercial partners and marketing services;
- Medical services if applicable;
- Legal services if applicable.
In particular, the data related to your stays, preferences, satisfaction are shared between the hotels operating under the MOZART HOTEL GROUP brand. This data is used to improve the quality of service and your experience in each of these hotels.
We may partner with other companies to provide you with services, or offers based upon your experiences at our hotel and may share your Personal Data with our business partners accordingly. We may also work with third parties, such as airlines and payment processing systems, to allow us and our partners to deliver advertisements to our shared customers;
We may share your Personal Data with third-party providers of hotel services such as reception services, spa treatments, or food delivery services.
We rely on third parties to provide services and products on our behalf and may share your Personal Data with them as appropriate. All our service providers are contractually obligated to protect your personal information and may not otherwise use or share your Personal Data, except as required by law or stated in the contract.
Your Personal Data will also be shared with government authorities and/or law enforcement officials if required for the purposes above, if mandated by law or if required for the legal protection of the Controller(s) legitimate interests in compliance with applicable laws.
5. International data transfers
For the purposes described in this Privacy Policy, we may transfer your Personal Data to internal or external recipients who may be in countries offering different levels of Personal Data protection.
By making a reservation, visiting, or staying at the hotel of MOZART HOTEL GROUP, you understand that the Company may transfer your Personal Data outside the EU and EEA. Consequently, in addition to the implementation of this Policy, the Company employs appropriate measures to ensure secure transfer of your Personal Data to other MOZART HOTEL GROUP hotels or to an external recipient located in a country offering a different level of privacy from that in the country where the Personal Data was collected.
Your data may be sent, in particular as part of the reservation process, to MOZART HOTEL GROUP hotels or divisions located outside of the European Union, in particular in the following countries: Russia, Ukraine.
Other than those that are required to carry out your reservation, data transfers to countries having different levels of Personal Data protection, are regulated by standard contractual clauses defined by the European Commission.
Personal Data can be transferred to the third parties outside the EU and EEA only with the explicit consent of the Guests based on point a) section 1 Article 49 of the EU GDPR which consent is not a precondition for using hotel services.
In case you wish to obtain more details about our data transfer safeguards and the mechanisms in place, you may contact us at gdpr@hotelpresident.hu.
6. Other information
When you visit and interact with the website and other mobile applications, the Company collects information that does not directly identify you about your use of the website, such as a catalog of the website pages you visit, and the number of visits to our website (“Other Information”). We use Other Information to deliver you email, online (on our websites and other websites), and mobile advertisements. The Company may also use Other Information to allow third-party partners to recognize you as a MOZART HOTEL GROUP’s client when you visit the partner’s website or app, or to recognize you as one of their customers when you visit MOZART HOTEL GROUP websites or apps so that they may provide more relevant offers to you.
The Site uses cookies and other technologies (such as “pixel tags,” “web beacons,” “clear GIFs”, links in emails, JavaScript, device IDs assigned by Google or Apple, or similar technologies) to relate to its digital services.
Overall, cookies help us provide you with a better website, by enabling us to monitor which pages you find useful and which you do not. Cookies in no way give us access to your computer or any information about you, other than the data you chose to share with us.
You can choose to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. This may prevent you from taking full advantage of the website. If you want to remove or block cookies from your device at any time, you can update your browser settings (consult your browser’s “help” menu to learn how to remove or block Cookies).
The Company may use collected information, or anonymized Personal Data received from third parties, to understand more about our users. This includes demographic data, such as date of birth, gender, and marital status, inferred commercial interests, such as favorite products or hobbies, and other information we may collect from you or from third parties.
Because Other Information does not personally identify you, such information may be disclosed for any purpose where permitted by law. In some instances, we may combine Other Information with personal information. If we do combine any Other Information with personal information, the combined information will be treated by us as personal information in accordance with this Statement.
8. Sensitive information
The term "sensitive information" refers to information related to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health, sex life, or sexual orientation, genetic information, criminal background, and any biometric data used for the purpose of unique identification. We do not generally collect sensitive information unless it is volunteered by you. We may use health data provided by you to serve you better and meet your particular needs (for example, information that you state in the “Notes” section during the reservation procedure).
9. Personal Data from minors
We do not knowingly collect personal information from individuals under 18 years of age. As a parent or legal guardian, please do not allow your children to submit personal information without your permission.
In the event we learn that we have collected Personal Data from a child under the age of 18 without verification of parental consent, steps will be taken promptly to remove that information. If you believe that we have or may have information from or about a child under 18 years of age, please contact us at gdpr@hotelpresident.hu.
10. Protection of Personal Data
The Company takes reasonable measures to: (i) protect Personal Data from unauthorized access, disclosure, alteration or destruction, and (ii) keep Personal Data accurate and up-to-date as appropriate. We also seek to require our partners and service providers with whom we share Personal Data to exercise reasonable efforts to maintain the confidentiality of Personal Data about you. The Company shall make every effort to ensure an adequate level of data protection during data transfers.
The Company uses SSL cryptography on its websites for online reservations. Any information shared by the Data Subject with the Company shall be encrypted automatically and be protected when transferred through the network. When the information is received by our server, it is decoded by using an individual private key. SSL enables the browser to connect to the website and establish a secure communication channel in a transparent manner. SSL is the most widely used and most successful cryptographic system. In order to use the system, the Data Subjects simply need to verify their browsers’ compatibility.
Other security-related activities The Company shall ensure transparency to control and establish how and what Personal Data is transferred by applying data transferring devices, who and when entered which data into the system, and shall also make sure that the system can be restored in the case of a failure. Reports are generated with regard to errors occurring in the course of automated processing. The Company shall manage Personal Data confidentially, and shall not disclose them to unauthorized persons. The Company shall particularly protect Personal Data from unauthorized access, modification, transfer, publication, deletion or destruction as well as from accidental destruction, harm, and inaccessibility due to modification of the applied technology. The Company shall take all security measures in order to ensure the technical protection of Personal Data.
For online transactions, we use reasonable technological measures to protect the Personal Data that you transmit to us via our website. Unfortunately, however, no security system or system of transmitting data over the Internet can be guaranteed to be entirely secure.
For your own privacy protection, please do not send payment card numbers or any other confidential personal information to us via email.
We will not contact you by mobile/text messaging or email to ask for your confidential personal information or payment card details. In case of receiving a request about your payment card information by e-mail or SMS, please, do not reply, most probably you are communicating with swindlers.
For the processing of payment card numbers and other financial data, we use services of TravelClick service. For more details, you may apply to TravelClick Privacy Policy.
For the collecting of information about your usage of the website, we use Google analytics services. For more details, you may apply to Google Privacy Policy.
For the purpose of processing emails, we use the services of MailChimp. For more details, you may apply to MailChimp Privacy Policy.
For the processing of your reviews and comments about hotels of MOZART HOTEL GROUP, we use the services of ReviewPro. For more details, you may apply to ReviewPro Privacy Policy.
11. Changing, accessing, and portability of your Personal Data
GDPR grants specific rights, summarized below, which you can in principle exercise free of charge, subject to statutory exceptions. These rights may be limited, for example, if fulfilling your request would reveal the Personal Data of another person, or if you ask us to delete information that we are required by law to keep or have compelling legitimate interests in keeping.
11.1. Right to withdraw consent
Wherever we rely on your consent, you will be able to withdraw that consent at any time you choose and at your own initiative on our website (if you have one) or by contacting us at unsubscribe@hotelpresident.hu. The withdrawal of your consent will not affect the lawfulness of the collection and processing of your data based on your consent up until the moment where you withdraw your consent. Please note that we may have other legal grounds for processing your data for other purposes, such as those set out in this Privacy Policy.
11.2. Right to access and rectify your data
You have the right to access, review, and rectify your Personal Data. You may be entitled to ask us for a copy of your information, to review or correct it if you wish to rectify any information like your name, email address, passwords, and/or any other preferences, you can easily do so by logging in to your account on our website (if you have one) or by contacting us at gdpr@hotelpresident.hu. You may also request a copy of your Personal Data processed as described in this Privacy Policy.
11.3. Right to erasure
In accordance with GDPR, you have the right to erasure your Personal Data processed by us as described in this Privacy Policy in case it is no longer needed for the purposes for which the Personal Data was initially collected or processed or in the event you have withdrawn your consent or objected to processing as described in this Privacy Policy and no other legal ground for processing applies. Should you wish to have your Personal Data erased, please file a request via email at unsubscribe@hotelpresident.hu.
11.4. Right to restriction of processing
Under certain circumstances described in GDPR, you may ask us to restrict the processing of your Personal Data. This is for example the case when you contest the accuracy of your Personal Data. In such an event, we will restrict the processing until we can verify the accuracy of your data.
11.5. Right to object to processing
Under certain circumstances described in GDPR, you may object to the processing of your Personal Data, including where your Personal Data is processed for direct marketing purposes. If you object to the processing for marketing purposes, the Company will not process your Personal Data anymore for this purpose.
11.6. Right to data portability
Where you have provided your data directly to us and where the processing is carried out by automated means and based on your consent or the performance of a contract between you and us, you have the right to receive the Personal Data processed about you in a structured, commonly used and machine-readable format, and to transmit this data to another service provider.
Should you have unresolved concerns, you have the right to lodge a complaint with a Supervisory Authority where you live or where you believe a breach may have occurred. We encourage you to come to us in the first instance but, to the extent that this right applies to you, you are entitled to complain directly to the relevant Supervisory Authority.
We will make all required updates and changes within the time specified by applicable law and, where permitted by law, may charge an appropriate fee to cover the costs of responding to the request. Such requests must be submitted by email at gdpr@hotelpresident.hu or in writing to the following postal address: Hotel President Budapest, 1054 Budapest, Hold utca 3-5, Hungary. To protect your confidentiality, we can only respond to such requests to the email address that you have registered or otherwise provided to us. Please remember that if you make such a request, we may not be able to provide you with the same quality and variety of services to which you are accustomed.
In addition, in some circumstances based on applicable law, you may request that we cease sharing personal information about you with our business partners or that the Company ceases using Personal Information about you by contacting us using email. We will seek to honor those requests consistently with applicable law.
12. Retaining Personal Data
The Company retains your Personal Data for the period necessary to fulfill the purposes outlined in this Policy unless a longer retention period is required or permitted by applicable law.
We will destroy your Personal Data as early as practicable and in a way that the information may not be restored or reconstructed.
If it is printed on paper, Personal Data will be destroyed in a secure manner, such as by cross-shredding or incinerating the paper documents or otherwise and, if saved in electronic form, the personal information will be destroyed by technical means to ensure the information may not be restored or reconstructed at a later time.
13. Choices of marketing communications
If you have given us your contact information (postal address, email address or phone number), we may want to inform you in accordance with any preferences you have expressed, and with your consent where required, about our products and services or invite you to our events via email, online advertising, social media, telephone, text message, push notifications, in-app alerts, our customer service call center, and other means.
If you have explicitly consented to receive our newsletters or marketing communications, including in relation to MOZART HOTEL GROUP, we may, from time to time, contact you with information about our services and latest offers and process your Personal Data for this purpose.
If you no longer want to receive our newsletters or marketing communications, please let us know by sending us an email at unsubscribe@hotelpresident.hu. You can also unsubscribe from our marketing emails by clicking on the unsubscribe link in the emails sent to you.
14. Modifications of present Privacy Policy
The Company may modify this Privacy Policy from time to time. When we make material changes to this Policy we will post a link to the revised Policy on the homepage of our website, and if you have registered for any of our products or services, will also inform you through communication channels that you have provided. You can tell when this Policy was last updated by looking at the link and at the date at the top of the Policy. Any changes to our Policy will become effective upon posting the revised Policy on the website. Use of the website, any of our products and services, and/or providing consent to the updated Policy following such changes constitutes your acceptance of the revised Policy then in effect.
15. Contact information
If you have any questions about this Policy or how the Company or MOZART HOTEL GROUP processes your Personal Data, please contact us by email at gdpr@hotelpresident.hu or by mail to President Management Ltd, 1054 Budapest, Hold utca 3-5, Hungary.
