Data protection
Privacy policy
This is an English translation of our privacy policy, provided for information. The legally binding version is the Hungarian original; in the event of any dispute or discrepancy, the Hungarian version (Adatkezelési tájékoztató) shall prevail.
In this policy we explain, as the operator of Gran Camping Esztergom, what personal data we process, for what purposes, on what legal basis and for how long, to whom we disclose it, and what rights you have. This policy has been prepared in accordance with the General Data Protection Regulation of the European Union (GDPR, Regulation (EU) 2016/679) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).
1. The data controller
- Name
- SZLTT Ipari és Kereskedelmi Kft.
- Registered office
- Deák Ferenc utca 20., 2500 Esztergom, Hungary
- Company registration number
- 11-09-005240
- Tax number
- 11198938-2-11
- Premises (accommodation)
- Nagy-Duna sétány 3., 2500 Esztergom, Hungary (Prímás Island)
- info@grancamping.com
- Phone
- +36 30 850 9525
- Website
- grancamping.hu
- Guesthouse NTAK registration number
- PA23079217
We are not required to appoint a data protection officer. For data protection matters you can reach us at the e-mail address and phone number above.
2. Use of the website
The grancamping.hu website is served from our own rented server (hosting: Hostinger, EU). No registration is needed to view the website. We do not use any advertising or social-media tracking tools (e.g. Google Analytics, Meta Pixel), and we do not set cookies – except for the cookie that remembers your language choice if you expressly select a language (see section 3). The home page is displayed in Hungarian, English or German based on the language setting sent by your browser (Accept-Language); we do not store this information. Fonts are also loaded from our own server, so your browser does not connect to any external provider when you open the website.
| Data processed | Technical data required to serve the website (time of the request, the page opened, browser type). The visitor’s IP address is not included in the web server log. |
|---|---|
| Purpose | Operating the website, troubleshooting, protecting the server against abuse. |
| Legal basis | Legitimate interest [Article 6(1)(f) GDPR]: secure and error-free operation of the website. |
| Retention period | Log files are overwritten through size-limited rotation, typically within a few weeks. |
2.1 Visitor statistics (without cookies)
To see which pages and accommodation types people look at, where visitors come from, and how usable the quote request form is, we use Umami, an open-source analytics tool running on our own server. Umami does not use cookies and does not identify visitors: it does not store the IP address (it uses it only to determine the country and city, and then discards it), and it counts visits using a regularly changing, irreversible identifier. The data is not disclosed to any third party.
| Data processed | The page opened, the referring page (e.g. Google, Facebook), the type of browser and operating system, screen size, language, country and city; actions taken on the website in aggregate form (e.g. which accommodation details were opened, whether the quote request was sent and for how many nights, clicks on the phone number). Names, e-mail addresses or other directly identifying data are not included in the statistics. |
|---|---|
| Purpose | Improving the website and our services, measuring visitor numbers. |
| Legal basis | Legitimate interest [Article 6(1)(f) GDPR]. As the measurement takes place without cookies and without any identifier stored on your device, we do not ask for consent; we respect your browser’s “Do Not Track” setting. |
| Retention period | Aggregate statistics are kept for a maximum of 3 years. |
3. Cookies and local storage
The website does not use tracking or advertising cookies. We set only one cookie of our own, and only if you expressly select a language using the language selector (HU · EN · DE): it remembers the selected language so that the home page opens in that language next time. In your browser’s local storage (localStorage) we only remember your decision about cookies and the map, so that we do not have to ask you on every visit. External content is loaded only with your consent.
| Name | Type, provider | Purpose | Duration | Legal basis |
|---|---|---|---|---|
gc_consent | local storage, own | remembering your cookie and map settings | until withdrawn or until your browser data is deleted | strictly necessary for providing the service [Section 155(4) of Hungarian Act C of 2003 on Electronic Communications (Eht.)] |
gc_lang | cookie, own | remembering the language (Hungarian, English, German) you expressly selected with the language selector; created only when you make a selection | 1 year, or until your browser’s cookies are deleted | strictly necessary for providing the service [Section 155(4) Eht.] |
| Google Maps | embedded content, Google Ireland Ltd. | showing the location of the campsite in the Contact section; in this case Google receives your IP address and may set its own cookies | according to Google’s rules (policies.google.com) | consent [Article 6(1)(a) GDPR] – only if you accept it in the banner or at the map |
You can change or withdraw your decision at any time:
The website contains simple links to our Facebook page and to our partners’ websites; these open only when clicked, and from then on the privacy rules of the site concerned apply.
4. Quote requests, getting in touch
4.1 Quote request form (school trips, groups)
| Data processed | Name of the institution, name, e-mail address and phone number of the contact person; arrival and departure; number of guests (students, of whom boys/girls, adults, accompanying staff); number of rooms for accompanying staff; bed linen requirements; interest in meals; comments. |
|---|---|
| Purpose | Preparing a quote, checking availability, recording a provisional (option) booking, communicating about the quote. |
| Legal basis | Steps taken at your request prior to entering into a contract [Article 6(1)(b) GDPR]. |
| Retention period | If no booking is made: for 3 years from the quote request, so that we can look it up in the following seasons (e.g. for returning groups); after that it is deleted. If a booking is made: see sections 6 and 8. |
| Who has access | Reception and management staff; the data is stored in our customer database (Google Sheets), our hotel system (Previo) and our e-mail account (Gmail), and is processed by an automation (n8n) running on our own server. |
We send a personalised link in the quote; we record when it is opened and when the quote is accepted, so that we know the status of the quote (e.g. we only send a reminder if you have not yet replied).
4.2 E-mail, phone
| Data processed | Name, e-mail address, phone number, the content of the message and the booking details provided. |
|---|---|
| Purpose, legal basis | Answering the enquiry, providing a quote [Article 6(1)(b) GDPR]; for other correspondence not related to a booking, legitimate interest [Article 6(1)(f)]. |
| Retention period | For correspondence without a booking, a maximum of 3 years; for bookings, as set out in sections 6 and 8. |
5. The AI assistant (Bob)
Quote requests are processed with the help of “Bob”, our digital concierge based on artificial intelligence (AI): it summarises the request and prepares a draft reply. For this purpose, the content of the quote request (the data listed in section 4.1) is transmitted to the provider of the large language model (Anthropic). Bob does not make any automated decision that produces legal effects concerning you: the quote and the e-mail are checked and approved by a member of our staff before being sent. Under our contract, the provider uses the data only to process the request and not to train its own models.
6. Accommodation bookings
| Data processed | Name and contact details of the person making the booking and of the guests, dates of stay, type of accommodation, number of guests, special requests, payment and deposit details. |
|---|---|
| Purpose | Concluding and performing the accommodation contract, communication, handling changes and cancellations. |
| Legal basis | Performance of a contract [Article 6(1)(b) GDPR]. |
| Retention period | Until the contract has been performed, then until any claims become time-barred (5 years under the Hungarian Civil Code, Ptk.); data supporting accounting documents as set out in section 8. |
For bookings made through booking portals (e.g. Booking.com, Szallas.hu) the portal is an independent data controller; we receive from it the data needed to fulfil the booking into our hotel system (Previo), and from then on we process the data under the conditions above.
7. Guest register, tourist tax, statistics
| Data processed | Guest data required by law in the field of tourism: surname and first name, name at birth, place and date of birth, sex, citizenship, mother’s maiden name, identification data of the identity document, visa or residence permit data (for non-Hungarian citizens), address of the accommodation, date of check-in and check-out; for the tourist tax, the grounds for any exemption. |
|---|---|
| Purpose | Fulfilling the guest registration obligation applicable to accommodation providers (accommodation providers’ register of documents, VIZA), assessing and declaring the tourist tax, mandatory statistical reporting to the National Tourism Data Supply Centre (NTAK). |
| Legal basis | Compliance with a legal obligation [Article 6(1)(c) GDPR]: Hungarian Act CLVI of 2016 on the State Tasks of Developing Tourism Regions (Section 9/H), Act C of 1990 on Local Taxes and the decree of the town of Esztergom on the tourist tax, Government Decree 235/2019 (X. 15.). |
| Recipients | VIZA data is transferred to the hosting provider designated by law, from which only the authorities specified by law may request data; we transmit statistical data that is not suitable for personal identification to NTAK; in connection with the tourist tax, the Municipality of Esztergom (tax authority). |
| Retention period | For the period specified by law (for VIZA data, in accordance with Section 9/H of Act CLVI of 2016); for tax-related data, until the tax liability becomes time-barred. |
8. Invoicing, payment
| Data processed | Billing name and address, tax number (for institutions), details of the service, amount, payment method, identification data of the bank transfer. |
|---|---|
| Purpose | Issuing payment requests and invoices, recording payments, bookkeeping. |
| Legal basis | Compliance with a legal obligation [Article 6(1)(c) GDPR]: Hungarian Act CXXVII of 2007 on Value Added Tax, Act C of 2000 on Accounting. |
| Retention period | Accounting documents are kept for at least 8 years in accordance with Section 169 of the Accounting Act. |
| Recipients | Operator of the invoicing software, accountant, the National Tax and Customs Administration (online invoice data reporting), the account-holding bank. |
9. Meal requirements
We provide meals (breakfast, lunch, dinner) for groups together with our catering partner, Krisztián Dobos, sole trader. For this purpose we process the name of the group, the dates, the number of portions and – if provided – any special dietary requirements, and pass them on to the partner providing the catering.
- Legal basis: performance of a contract [Article 6(1)(b) GDPR].
- Food allergies, intolerances and diets required for health reasons may qualify as health data. We process such data only if you expressly provide it, and use it solely to provide the catering [Article 9(2)(a) GDPR: explicit consent]. Where possible, please provide it without names, as a number of portions (e.g. “2 gluten-free portions”). Consent can be withdrawn at any time.
- Retention period: until the end of the stay; data required for settlement as set out in section 8.
10. Fault reporting (QR code in the shower blocks)
Using the QR code displayed in the shower blocks, you can report a fault anonymously. The report contains the identifier of the location and the short text you write; we do not ask for any personal data. Please do not include personal data in the text. Reports are kept until the fault has been fixed, for a maximum of 1 year.
11. CCTV surveillance
An electronic surveillance system (camera) operates at the entrance of the campsite, around the reception building. A sign draws the attention of those entering the monitored area to the camera.
| Data processed | The image and behaviour of persons in the vicinity of the reception (guests, visitors, staff, suppliers), and the place and time of the recording. No sound is recorded. |
|---|---|
| Purpose | Security monitoring of the campsite, preventing unauthorised persons from entering, protecting guests, staff and property, and providing evidence in the event of an infringement. |
| Legal basis | Legitimate interest [Article 6(1)(f) GDPR]: protection of guests, staff and property. Monitoring of staff takes place in accordance with Section 11/A of Hungarian Act I of 2012 on the Labour Code, with prior notice; the camera is not directed exclusively at work activities, nor at changing rooms, toilets or rest areas. |
| Retention period | If not used, recordings are automatically deleted (overwritten) no later than 3 working days after recording. If a recording has to be used in official, court or petty-offence proceedings, or to enforce our rights, it is kept until the proceedings have been finally closed. |
| Access, recipients | The live image and recordings can be viewed only by management and the staff member designated for this purpose. Recordings are released only at the request of an authority or a court. Anyone whose rights or legitimate interests are affected by a recording may request, within 3 working days of the recording, that it not be deleted. |
12. Processors and recipients
The following providers process data on our behalf and in accordance with our instructions (processors):
| Provider | Activity | Place of processing |
|---|---|---|
| Hostinger International Ltd. | server rental: website, automation (n8n), customer management interface | EU |
| Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) | e-mail (Gmail), customer database (Google Sheets); Google Maps only with consent | EU; transfer to the USA possible (see section 13) |
| Previo s.r.o. (Czech Republic) | hotel booking and guest registration system, channel management | EU |
| Anthropic | AI service for processing quote requests (section 5) | USA (see section 13) |
| KBOSS.hu Kft. (Számlázz.hu) | invoicing software | Hungary |
| Zsuzsanna Trexlerné Táborita (accountant) | bookkeeping, payroll | Hungary |
The following may receive data as independent controllers: our catering partner, Krisztián Dobos, sole trader (section 9), booking portals (section 6), and, as required by law, the National Tax and Customs Administration (NAV), NTAK, the VIZA hosting provider and the municipal tax authority (sections 7–8). Activities (e.g. canoeing, laser tag) are organised by our partner, osztalykirandulasesztergom.hu; we do not pass any data to them – you arrange the details with them directly.
13. Data transfers outside the European Union
Some of our providers (Google, Anthropic) may also process data in the United States. In such cases the transfer takes place on the basis of the European Commission’s adequacy decision (EU–US Data Privacy Framework) or the standard data protection clauses adopted by the European Commission (Article 46 GDPR), which require a level of protection essentially equivalent to that in the EU.
14. Data security
- The website and the automation are accessible only via an encrypted (HTTPS) connection.
- The customer management interface is protected by a password and an access key; only authorised staff have access to the data.
- Links to quotes contain a unique, unguessable identifier.
- The server and the settings are backed up regularly.
- In the event of a personal data breach, we act in accordance with Articles 33–34 GDPR (notification to NAIH within 72 hours and, where necessary, informing the data subjects).
15. Your rights
You can send your request to info@grancamping.com. We will reply without undue delay and at the latest within one month (this may be extended by two months where justified, in which case we will inform you). The reply is free of charge.
- Access (Article 15): you can ask for information about what data of yours we process and request a copy of it.
- Rectification (Article 16): you can ask for inaccurate data to be corrected and incomplete data to be completed.
- Erasure (Article 17): you can ask for your data to be deleted if the processing is no longer necessary, if you have withdrawn your consent, or if the processing is unlawful – unless we are required by law to retain it (e.g. invoices, guest register).
- Restriction (Article 18): you can ask that the data – e.g. for the duration of a dispute – only be stored but not used.
- Data portability (Article 20): you can request the data you provided that we process on the basis of a contract or consent in a machine-readable format, or ask for it to be transmitted to another controller.
- Objection (Article 21): you can object to processing based on legitimate interest.
- Withdrawal of consent: at any time, without affecting the lawfulness of prior processing (for cookies, using the “Cookie settings” button).
16. Remedies
If you believe that the processing of your data infringes the law, please contact us first so that we can remedy the problem. You may also lodge a complaint with the supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) – Hungarian National Authority for Data Protection and Freedom of Information
Address: 1055 Budapest, Falk Miksa utca 9–11. · Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400 · E-mail: ugyfelszolgalat@naih.hu · www.naih.hu
If your rights are infringed, you may also go to court; at your choice, you may bring the action before the regional court (törvényszék) competent for your place of residence or stay.
17. Changes to this policy
We update this policy when the law or our services change; the version currently in force is always available on this page. We will notify visitors of significant changes on the website.
Any questions? Write to info@grancamping.com or call us: +36 30 850 9525.