Effective Date: 10.08.2026

1. Data Controller

The Data Controller responsible for the processing of personal data is:

Bankó-Erdősi Viktória
(Self-employed individual with a tax number)

Address:

2536 Nyergesújfalu
Tavasz utca 23.
Hungary

Tax Number:

67429703-1-31

E-mail:

frankapartman02@gmail.com

(hereinafter referred to as the “Data Controller”)

2. Purpose of this Privacy Notice

This Privacy Notice explains how Frank Apartment collects, uses, stores and protects the personal data of visitors to its website and guests using its accommodation services.

Personal data are processed in accordance with:

• Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR); 
• applicable Hungarian legislation; and 
• other relevant legal requirements governing accommodation providers. 

3. Principles of Data Processing

The Data Controller processes personal data:

• lawfully, fairly and transparently; 
• only for specified and legitimate purposes; 
• limited to what is necessary; 
• accurately and kept up to date where required; 
• securely and confidentially; 
• by applying appropriate technical and organisational measures. 

4. Purposes of Data Processing

Personal data are processed for the following purposes:

• handling accommodation bookings; 
• communicating with guests; 
• providing accommodation services; 
• fulfilling statutory guest registration obligations; 
• issuing invoices; 
• handling complaints; 
• complying with legal obligations; 
• establishing, exercising or defending legal claims. 

5. Categories of Personal Data Processed

5.1 During the booking process

The following data may be processed:

• full name; 
• e-mail address; 
• telephone number. 

5.2 During check-in

In accordance with Hungarian legislation applicable to accommodation providers, the following data may be processed:

• full name; 
• birth name; 
• place of birth; 
• date of birth; 
• nationality; 
• residential address; 
• type of identity document; 
• identity document number. 

These data are collected on the basis of the guest’s official identification document where required by law.

5.3 For invoicing purposes

Where applicable:

• name; 
• billing address; 
• tax number (for business customers). 

6. Legal Basis for Processing

Personal data are processed on the following legal grounds:

• Article 6(1)(b) GDPR
  Performance of a contract. 
• Article 6(1)(c) GDPR
  Compliance with a legal obligation. 
• Article 6(1)(a) GDPR
  Consent of the data subject (for example regarding certain cookies). 

7. Source of Personal Data

Personal data are obtained:

• directly from the guest; or 
• from the identification document presented during the check-in process where required by law. 

8. Data Retention

Personal data are retained only for as long as necessary to fulfil the purposes described above or for the period required by applicable legislation.

In particular:

Accounting records: 8 years

Other statutory records:

For the period prescribed by applicable Hungarian law.

9. Disclosure of Personal Data

Personal data may only be disclosed where required by law.

This may include:

• National Tourism Data Supply Centre (NTAK); 
• Closed Guest Information Database (VIZA); 
• Hungarian National Tax and Customs Administration (NAV); 
• other public authorities where legally required. 

10. Data Processors

The Data Controller uses the following data processors:

The website is operated directly by the Data Controller.

11. Cookies and Third-Party Services

The website uses technically necessary cookies.

Google Maps is currently embedded on the website and will only be activated following the user’s consent.

The Data Controller reserves the right to introduce additional third-party services in the future, including:

• Google Analytics; 
• Meta Pixel; 
• embedded YouTube videos; 
• other analytical and marketing services. 

These services will only be activated after the visitor has given explicit consent.

Detailed information is available in the separate Cookie Policy.

12. Rights of Data Subjects

Data subjects have the right to:

• request information regarding the processing of their personal data; 
• access their personal data; 
• request rectification; 
• request erasure where legally permissible; 
• request restriction of processing; 
• receive their personal data in a portable format; 
• object to processing; 
• withdraw consent at any time where processing is based on consent. 

13. Data Security

The Data Controller applies appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of personal data and to protect them against unauthorised access, disclosure, alteration, destruction or accidental loss.

14. Complaints and Legal Remedies

If a data subject believes that their personal data have been processed unlawfully, they may lodge a complaint with:

Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

1055 Budapest

Falk Miksa utca 9–11.

Postal address:

1363 Budapest, Pf. 9.

E-mail:

ugyfelszolgalat@naih.hu

Website:

https://www.naih.hu

Data subjects also have the right to seek judicial remedy before the competent courts.

15. Amendments to this Privacy Notice

The Data Controller reserves the right to amend this Privacy Notice at any time.

The current version is always available on the official website of Frank Apartment.