BON VILLA GUESTHOUSE – PRIVACY NOTICE

Effective from: 18 September 2026

Data Controller
Joós Adél, Sole Proprietor

Registered Office
8372 Cserszegtomaj, Szivárvány u. 6., Hungary

Tax Number
58975402-2-40

Accommodation Establishment
Bon Villa Guesthouse

Address of the Accommodation Establishment
8790 Zalaszentgrót, Mitterdomb utca 3., Hungary

NTAK Registration Number
MA22040512

E-mail
info@bonvilla.hu

Telephone
+36 30 619 7631

Website
www.bonvilla.hu

2. Purpose of this Privacy Notice and Legal Background

The purpose of this Privacy Notice is to provide guests and prospective guests of Bon Villa Guesthouse, as well as visitors to its website, with transparent information regarding the processing of personal data, including the purposes and legal bases of processing, retention periods, recipients of personal data, and the rights of data subjects.

Data processing is governed in particular by Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR), Act CXII of 2011 on Informational Self-Determination and Freedom of Information, Act CLVI of 2016 on the State Responsibilities for the Development of Tourism Regions and its implementing regulations, as well as the applicable legislation concerning taxation, invoicing, accounting and local taxes.

3. Reservations, Requests for Quotations and Communication

Personal data processed: name, e-mail address, telephone number, reservation details (arrival and departure dates, number of guests, requested services), information required for invoicing, and any other information voluntarily provided by the data subject in the course of an enquiry.

The purposes of processing are to respond to requests for quotations, prepare, create, modify or cancel reservations, communicate with guests, and provide accommodation services.

The legal basis for processing is Article 6(1)(b) of the GDPR, namely taking steps at the request of the data subject prior to entering into a contract and the performance of a contract. Where the retention of certain data is required by law, further processing is based on Article 6(1)(c) of the GDPR.

General enquiries that do not result in a reservation are retained by the Data Controller only for as long as necessary to properly conclude the matter concerned. Data relating to completed reservations, accounting documents and legal claims are processed in accordance with the applicable retention periods prescribed by tax, accounting, tourism and civil law.

4. Guest Registration, Document Scanning and VIZA

The accommodation service provider records the guest data required by law in the accommodation management software. Where required by law, data contained in the guest's identity document must be recorded using a document scanner, and the data prescribed by law must be transmitted to the Closed Guest Information Database (VIZA – Vendég Információs Zárt Adatbázis).

The purpose of processing is to comply with statutory obligations concerning guest identification, record keeping and public security. The legal basis for processing is Article 6(1)(c) of the GDPR.

This processing is not based on the guest's consent and therefore cannot be terminated by withdrawing consent.

The categories of data processed, the rules governing their transmission and the applicable retention periods are determined by the tourism and VIZA regulations in force at any given time. Bon Villa Guesthouse processes and transmits only the data required by law.

5. VENDÉGEM Accommodation Management Application

Bon Villa Guesthouse uses the VENDÉGEM accommodation management application. The application may be used to manage reservations and guest data required by law, as well as to prepare and fulfil mandatory tourism data reporting obligations.

Use of the VENDÉGEM application does not exempt the accommodation service provider from its obligations relating to its own data processing activities. Bon Villa Guesthouse remains independently responsible for ensuring the lawful processing of guest data under its control.

6. NTAK Data Reporting

The NTAK registration number of Bon Villa Guesthouse is MA22040512. In accordance with applicable legislation, the accommodation establishment fulfils its NTAK reporting obligations through its accommodation management software.

The accommodation management software transmits anonymous statistical data to NTAK that does not contain guests' personal data. The legal basis for the processing and reporting of such data is compliance with a legal obligation applicable to the Data Controller.

7. Local Tourist Tax (IFA)

The Data Controller processes the data necessary to determine, collect and declare the local tourist tax (IFA), as well as to verify any applicable tax exemption.

The legal basis for processing is Article 6(1)(c) of the GDPR. The applicable retention period is determined by the legislation on taxation and local taxes in force at any given time.

8. Invoicing and NAV Online Invoicing Software

Bon Villa Guesthouse uses the NAV Online Invoicing software for issuing invoices. For the purpose of issuing invoices, the Data Controller processes the data required by law, including in particular the billing name and address, the tax number in the case of business entities, and information relating to the service provided and payment.

The legal basis for processing invoice data is Article 6(1)(c) of the GDPR. Invoice data required by law are transmitted to the Hungarian National Tax and Customs Administration (Nemzeti Adó- és Vámhivatal – NAV).

The Data Controller retains accounting documents and the related personal data in accordance with the applicable accounting and tax-law retention requirements.

9. Payments by Bank Transfer

In the case of payment by bank transfer, the Data Controller may receive information including the payer's name, bank account number, amount transferred, date of transfer and payment reference/message.

The purposes of processing are to identify the payment, perform the contract, and comply with accounting and tax obligations. The bank acts as an independent data controller in accordance with its own data processing and privacy rules.

10. Third-Party Booking Platforms

Where a guest makes a reservation through an external accommodation intermediary or booking platform, the platform processes personal data relating to its own services in accordance with its own privacy notice.

Bon Villa Guesthouse receives and processes from the platform only those data necessary to fulfil the reservation, communicate with the guest and comply with its statutory obligations.

11. The www.bonvilla.hu Website

The website www.bonvilla.hu is intended to provide information about the accommodation establishment, its services, surroundings, activities and contact details.

Before the website goes live, the data processing practices of the hosting provider, contact forms, analytics services, map services, social media services and other external services used by the website must be reviewed. Where necessary, this Privacy Notice must be supplemented accordingly.

During the technical operation of the website, technical log data – such as IP address, time of access, browser information and device information – may be processed due to the nature of web hosting and web server services. Such data may be processed for the purposes of ensuring the secure operation of the website, troubleshooting and IT security.

Cookies that are strictly necessary for the operation of the website may be used without consent. Statistical, preference or marketing cookies and similar technologies may only be used on the basis of prior consent in accordance with the applicable rules.

When the website goes live, a separate Cookie Notice and, where required, a consent management interface must be implemented based on the cookies and external services actually used.

12. Recipients of Personal Data and Access

Personal data may be accessed by the Data Controller and, solely to the extent necessary for the performance of their respective tasks, by service providers engaged by the Data Controller and by authorities acting pursuant to applicable law.

Such recipients may include, in particular, organisations involved in operating the VENDÉGEM system, the VIZA system, NAV, the competent municipal tax authority responsible for the local tourist tax, the account-holding bank, and, once the website is launched, the hosting and IT service providers.

With regard to NTAK, it is important to note that the daily accommodation data reporting contains anonymous statistical data and does not include guests' personal data.

13. Data Security

The Data Controller implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, deletion, loss or damage.

Access is restricted to those persons and permissions necessary for the relevant tasks. Electronic systems used for processing personal data are protected by passwords and by the security solutions provided by the respective services.

14. Rights of Data Subjects

Subject to the conditions set out in the GDPR, data subjects may request access to their personal data, rectification or erasure of their personal data, or restriction of processing. Where the applicable conditions are met, they may also exercise their right to data portability and their right to object to processing.

The right to erasure does not apply to data whose processing or retention is required by law. Similarly, processing relating to statutory guest registration, VIZA, taxation or invoicing obligations cannot be terminated merely by withdrawing consent, as such processing is not based on consent.

The Data Controller shall provide information regarding requests submitted by data subjects without undue delay and, as a general rule, within one month of receipt of the request. In the cases specified in the GDPR, this period may be extended by a further two months.

15. Legal Remedies

Data subjects may first contact the Data Controller with any questions or requests concerning the processing of their personal data at info@bonvilla.hu or via the other contact details specified in this Privacy Notice.

Data subjects have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH – Nemzeti Adatvédelmi és Információszabadság Hatóság) and may seek judicial remedy where their rights have been infringed.

The current contact details of NAIH are available on the Authority's official website.

16. Personal Data Breaches

If unauthorised access to, loss, destruction, alteration or unauthorised disclosure of personal data occurs, the Data Controller shall investigate and document the incident and, where the conditions laid down in the GDPR are met, make the required notification to the competent supervisory authority and inform the affected data subjects.

17. Amendments to this Privacy Notice

The Data Controller reserves the right to amend this Privacy Notice, particularly in the event of changes in legislation, the introduction of new data processing activities or service providers, or changes to the functionality of the website.

The current version of this Privacy Notice will be made available by the Data Controller on the www.bonvilla.hu website.

The website is currently not yet publicly accessible. Before its launch, the hosting provider, cookies, any contact or booking forms, and the use of Google, Meta/Facebook, map, analytics or other external services must be specifically reviewed. This Privacy Notice must be updated accordingly where necessary.

18. Main Official Sources

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council

Hungarian National Authority for Data Protection and Freedom of Information (NAIH) – Data Subject Rights

National Tourism Data Supply Centre (NTAK) – Accommodation Data Reporting

VENDÉGEM – Official Application and Data Processing Documentation

Hungarian National Tax and Customs Administration (NAV) – Online Invoice and Online Invoicing

National Legislation Database – Act CLVI of 2016 and related implementing regulations

Bon Villa Guesthouse – Privacy Notice | 2026