{"id":561,"date":"2025-03-18T14:00:02","date_gmt":"2025-03-18T13:00:02","guid":{"rendered":"https:\/\/langrestaurant.hellodigitalstudio.dev\/adatkezelesi-tajekoztato\/"},"modified":"2025-06-16T12:56:50","modified_gmt":"2025-06-16T10:56:50","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/langrestaurant.hu\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

PRIVACY NOTICE <\/strong><\/p>\n\n\n\n

Last updated: 16.06.2025\u00a0<\/em><\/strong><\/p>\n\n\n\n

1. The Data Controller <\/strong> <\/strong><\/p>\n\n\n\n

Danubius Hotels Zrt.  <\/strong><\/p>\n\n\n\n

registered seat: 1051 Budapest, Szent Istv\u00e1n t\u00e9r 11. <\/p>\n\n\n\n

represented by: Bal\u00e1zs Kov\u00e1cs CEO  <\/p>\n\n\n\n

e-mail: adat@danubiushotels.com<\/strong> <\/strong><\/p>\n\n\n\n

website: www.langbistro.hu <\/p>\n\n\n\n

(hereinafter: the \u201cData Controller<\/strong>\u201d) <\/p>\n\n\n\n

2. Data processing <\/strong><\/p>\n\n\n\n

2.1. Table booking and restaurant service <\/strong> <\/strong><\/p>\n\n\n\n

You can reserve a table on the website, by phone or in person. When recording a table reservation, we process the personal data as follows. The  source of the data is the data subject himself\/herself or the person making the reservation. <\/p>\n\n\n\n

Data <\/strong><\/td>Purpose of the data  processing<\/strong><\/td>Retention time <\/strong><\/td>Legal basis of the data processing <\/strong><\/td>Rights<\/strong><\/td><\/tr>
Data required for the  reservation <\/strong>full name, e-mail  <\/em>address, telephone  number, personal data shared in the  <\/em>reservation notes field that becomes relevant  for special requests,  food allergies or other  necessary health  <\/em>information<\/em><\/td>Registering the  reservation and  related  communication (e.g.  sending an e-mail  confirming the  reservation, sending a  preliminary  notification SMS)<\/td>6 (six) months (except  for guest profiles)<\/td>Data processing for the performance of the contract<\/strong>. The  reservation is not possible without providing the data.  [GDPR Article 6(1)(b)] <\/td>3.2. 3.3. 3.4. 3.5. 3.6.<\/td><\/tr>
Complaints  management<\/td><\/td>Our legitimate interest <\/strong>associated with managing  complaints. You may object to the processing at any  time using either of the contact details listed in Section  1. <\/strong>[GDPR Article 6(1)(f)]<\/td>3.2. 3.3. 3.5. 3.7.<\/td><\/tr>
Guest profiles <\/strong>full name, e-mail  <\/em>address, telephone <\/em><\/td>To identify returning  guests and to offer a  personalised service <\/td>Until you request your  data to be deleted <\/td>Your express consent <\/strong>[GDPR Article 6(1)(a) and Article  9(2)(a)] The consent may be withdrawn at any time  using our contact details specified in point 1<\/strong>. <\/td>3.1. 3.2. 3.3.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

3 <\/p>\n\n\n\n

number, personal data shared in the  <\/em>reservation notes field that becomes relevant  for special requests,  food allergies or other  necessary health  <\/em>information, reviews,  reservation history,  order history, IP  <\/em>address<\/em><\/td>based on order and  reservation history.  More effective  complaint handling,  notifications about  upcoming events and  offers via newsletters  and remarketing  messages.<\/td><\/td>Withdrawal of consent does not affect the lawfulness of  the data processing that preceded it.<\/td>3.4. 3.5. 3.6.<\/td><\/tr>
Personal data that  may be included on  your bill: <\/strong>name, address<\/em><\/td>Fulfilment of a legal  obligation<\/td>For 8 years following  the reporting year<\/td>Fulfilment of a legal obligation. <\/strong>After billing, the data  retention is necessary due to tax and accounting  regulations.1 <\/sup><\/em><\/strong>Without providing the data, it is not  possible to issue a bill in the name of a private individual. [GDPR Article 6(1)(c)]<\/td>3.2. 3.3. 3.5.<\/td><\/tr>
Sending an e-mail  <\/strong>requesting an  <\/strong>evaluation after  <\/strong>leaving: <\/strong>name, e-mail address<\/em><\/td>Improving our services <\/td>The review is stored in  with your data until it  is deleted according to  the terms above<\/td>Our legitimate interest <\/strong>in service development and  sales. You may object to the processing at any time  using either of the contact details listed in Section 1. <\/strong>[GDPR Article 6(1)(f)]<\/td>3.2. 3.3. 3.5. 3.7.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

We use the system of a SEVENROOMS INC. (228 Park Avenue S; PMB 37706; New York, NY 10003) to record the table reservations and to send  newsletters. The adequacy of the transmission of data to Sevenrooms (https:\/\/sevenrooms.com\/en\/privacy-policy\/) is ensured by the General  Terms and Conditions (https:\/\/eur-lex.europa.eu\/legal-content\/HU\/TXT\/HTML\/?uri=CELEX:32021D0915&from=EN) <\/p>\n\n\n\n

In case of Guest profiles, your e-mail address and phone number is shared with Google <\/strong>[Google Ireland Limited (location: Gordon House, Barrow  Street, Dublin 4, Ireland; https:\/\/policies.google.com\/technologies\/product-privacy] and Facebook<\/strong>. The data processing in case of Facebook  advertisements is a joint processing between the Data Controller and Meta Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4, Ireland. The details of the joint data management agreement can be found in the data management appendix of the Facebook Page Analysis function. The  appendix is located here: https:\/\/www.facebook.com\/legal\/terms\/page_controller_addendum <\/p>\n\n\n\n

1 <\/sup><\/em>Under Section 169(2) of Act C of 2000 on Accounting, “Accounting documents directly and indirectly supporting the accounting settlements (including general  ledger accounts, subledgers and detailed records) must be kept in legible form for at least 8 years, in a way that allows for retrieval based on the reference to the  accounting records.”<\/em><\/p>\n\n\n\n

4 <\/p>\n\n\n\n

2.2. Location rental<\/strong> <\/strong><\/p>\n\n\n\n

It is possible to rent the location after requesting a quote by e-mail and after accepting the quote and concluding a contract. <\/p>\n\n\n\n

Data <\/strong><\/td>Purpose of the data  processing<\/strong><\/td>Retention time <\/strong><\/td>Legal basis of the data processing <\/strong><\/td>Rights<\/strong><\/td><\/tr>
The data included in  the contract  <\/strong>concluded with the  private individual and  those becoming  <\/strong>relevant in the  <\/strong>request for quote <\/strong>typically: full name, e mail address,  <\/em>telephone number,  home address,  <\/em>personal data that  becomes relevant for  special requests. <\/em><\/td>Provision of service  according to the  request<\/td>Until cancellation or  leaving<\/td>Data processing for the performance of the contract<\/strong>. It  is not possible to rent a location without providing the  data. [GDPR Article 6(1)(b)]<\/td>3.2. 3.3. 3.4. 3.5. 3.6.<\/td><\/tr>
Fulfilment of a legal  obligation<\/td>For 8 years following  the reporting year<\/td>Fulfilment of a legal obligation. <\/strong>After billing, the data  retention is necessary due to tax and accounting  regulations.2<\/sup><\/em><\/strong>It is not possible to rent a location without  providing the data. [GDPR Article 6(1)(c)]<\/td>3.2. 3.3. 3.5.<\/td><\/tr>
In the case of a  <\/strong>contract with a  <\/strong>company, the contact  person’s details: <\/strong>full name, e-mail  <\/em>address, telephone  number, position<\/em><\/td>Provision of service  according to the  request<\/td>Until cancellation or  leaving<\/td>Our legitimate interest <\/strong>in the performance of the  contract. You may object to the processing at any time  using either of the contact details listed in Section 1. <\/strong>[GDPR Article 6(1)(f)]<\/td>3.2. 3.3. 3.5. 3.7.<\/td><\/tr>
Fulfilment of a legal  obligation<\/td>For 8 years following  the reporting year<\/td>Fulfilment of a legal obligation. <\/strong>After billing, the data  retention is necessary due to tax and accounting <\/td>3.2. 3.3. 3.5.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

2 <\/sup><\/em>Under Section 169(2) of Act C of 2000 on Accounting, “Accounting documents directly and indirectly supporting the accounting settlements (including general  ledger accounts, subledgers and detailed records) must be kept in legible form for at least 8 years, in a way that allows for retrieval based on the reference to the  accounting records.”<\/em><\/p>\n\n\n\n

5 <\/p>\n\n\n\n

<\/td><\/td><\/td>regulations.3<\/sup><\/em><\/strong>It is not possible to rent a location without  providing the data. [GDPR Article 6(1)(c)]<\/td><\/td><\/tr>
Food allergies or  <\/strong>other necessary  <\/strong>health information<\/strong><\/td>Provision of service  according to the  request, handling of  complaints after  leaving<\/td>For 1 (one) month  after leaving<\/td>Your express consent <\/strong>[GDPR Article 6(1)(a) and Article  9(2)(a)] The consent may be withdrawn at any time  using our contact details specified in point 1<\/strong>.  Withdrawal of consent does not affect the lawfulness of  the data processing that preceded it.<\/td>3.1. 3.2. 3.3. 3.4. 3.5. 3.6.<\/td><\/tr>
Personal data that  may be included on  your bill: <\/strong>name, address<\/em><\/td>Fulfilment of a legal  obligation<\/td>For 8 years following  the reporting year<\/td>Fulfilment of a legal obligation. <\/strong>After billing, the data  retention is necessary due to tax and accounting  regulations.4 <\/sup><\/em><\/strong>Without providing the data, it is not  possible to issue a bill in the name of a private individual. [GDPR Article 6(1)(c)]<\/td>3.2. 3.3. 3.5.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

3 <\/sup><\/em>Under Section 169(2) of Act C of 2000 on Accounting, “Accounting documents directly and indirectly supporting the accounting settlements (including general  ledger accounts, subledgers and detailed records) must be kept in legible form for at least 8 years, in a way that allows for retrieval based on the reference to the  accounting records.” <\/em><\/p>\n\n\n\n

4 <\/sup><\/em>Under Section 169(2) of Act C of 2000 on Accounting, “Accounting documents directly and indirectly supporting the accounting settlements (including general  ledger accounts, subledgers and detailed records) must be kept in legible form for at least 8 years, in a way that allows for retrieval based on the reference to the  accounting records.”<\/em><\/p>\n\n\n\n

6 <\/p>\n\n\n\n

2.3. Complaint management and customer book (complaint book) <\/strong><\/p>\n\n\n\n

If you do not agree with how your verbal complaint was handled, or it is not possible to investigate the complaint immediately, we are obliged to  draw up a record the complaint and the related opinions.  <\/p>\n\n\n\n

In the case of a written complaint, it is not necessary to draw up a record, but we must keep the answer.  <\/p>\n\n\n\n

You can also record your complaint in the customer book (complaint book). We must remove the page containing the complaint or suggestion  after the entry was made and keep it separately so that other guests cannot see the previous entries and the data of the people making the  entries. <\/p>\n\n\n\n

Data <\/strong><\/td>Purpose of the data  processing<\/strong><\/td>Retention time <\/strong><\/td>Legal basis of the data processing <\/strong><\/td>Rights<\/strong><\/td><\/tr>
Record of a consumer  complaint and  <\/strong>response to a written  complaint <\/strong>name, address,  <\/em>signature, ID number<\/em><\/td>Fulfilment of a legal  obligation<\/td>3 years <\/td>Fulfilment of a legal obligation. <\/strong>Retention is necessary  5<\/sup><\/em><\/strong>due to the consumer protection laws. Providing the data  is a condition for recording the complaint. [GDPR Article  6(1)(c)]<\/td>3.2. 3.3. 3.5.<\/td><\/tr>
Customers\u2019 book  <\/strong>(complaints book) <\/strong>the  data provided<\/em><\/td>Fulfilment of a legal  obligation<\/td>3 years <\/td>Fulfilment of a legal obligation. <\/strong>Retention is necessary  due to the consumer protection laws.6<\/sup><\/em><\/strong>Providing the data  is a precondition for being able to respond. [GDPR Article  6(1)(c)]<\/td>3.2. 3.3. 3.5.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

2.4. Contact<\/strong> <\/strong><\/p>\n\n\n\n

If you contact us electronically or by post, we will handle your inquiry as follows. <\/p>\n\n\n\n

5 <\/sup>Under Section 17\/A(7) of Act CLV of 1997 on Consumer Protection, “The company must keep the record of the complaint and a copy of the response for three  years and present it to the inspection authorities upon request.” <\/em><\/p>\n\n\n\n

6 <\/sup>Under Section 25(5) of Government Decree 210\/2009 (IX 29) on the conditions for performing commercial activities, “Authorities authorised to inspect  commercial activities may inspect the entries made in the customer book retroactively for three years, as well as the duplicate of the response to the written  customer complaint.”<\/em><\/p>\n\n\n\n

7 <\/p>\n\n\n\n

Data <\/strong><\/td>Purpose of the data  processing<\/strong><\/td>Retention time <\/strong><\/td>Legal basis of the data processing <\/strong><\/td>Rights<\/strong><\/td><\/tr>
Personal data  <\/strong>provided in inquiries: <\/strong>name, e-mail address,  other personal data  provided<\/em><\/td>Answering inquiries  and handling  complaints <\/td>1 year <\/td>Consent<\/strong>, which you give by sending the request. The  consent may be withdrawn at any time using our  contact details specified in point 1. <\/strong>Withdrawal does not  affect the lawfulness of the data processing that  preceded it. [GDPR Article 6(1)(a)]<\/td>3.1. 3.2. 3.3. 3.4. 3.5. 3.6.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

2.5. Business relationship<\/strong> <\/strong><\/p>\n\n\n\n

If we have a business relationship with the company or organisation that you represent or that employs you and we have received your contact  information in order to maintain contact, we will process your personal data as follows. The source of the data is the data subject or the person  acting on behalf of the company. <\/p>\n\n\n\n

Data <\/strong><\/td>Purpose of the data  processing<\/strong><\/td>Retention time <\/strong><\/td>Legal basis of the data processing <\/strong><\/td>Rights<\/strong><\/td><\/tr>
Contact information  of the companies’  <\/strong>contact persons:  <\/strong>name, position, e-mail  address, telephone  number<\/em><\/td>Maintaining contact  with business clients<\/td>Until the business  relationship exists or  another contact  person is appointed<\/td>Our legitimate interest <\/strong>in fulfilling the contract and  maintaining contact. You may object to the processing  at any time using either of the contact details listed in  Section 1. <\/strong>[GDPR Article 6(1)(f)]<\/td>3.2. 3.3. 3.5. 3.7.<\/td><\/tr>
Data of the  <\/strong>signatories or contact  details included in the  contract: <\/strong>name, position, e-mail  address, telephone  number, signature<\/em><\/td>Fulfilment of a legal  obligation<\/td>For 8 years after  termination<\/td>Fulfilment of a legal obligation. <\/strong>We must keep the  contract as an accounting document due to tax law and  accounting regulations.7 <\/sup><\/em><\/strong>Without providing the data, it is  not possible to include the data in the contract. [GDPR  Article 6(1)(c)]<\/td>3.2. 3.3. 3.5.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

7 <\/sup><\/em>Under Section 169(2) of Act C of 2000 on Accounting, “Accounting documents directly and indirectly supporting the accounting settlements (including general  ledger accounts, subledgers and detailed records) must be kept in legible form for at least 8 years, in a way that allows for retrieval based on the reference to the  accounting records.”<\/em><\/p>\n\n\n\n

8 <\/p>\n\n\n\n

2.6. Social media sites<\/strong> <\/strong><\/p>\n\n\n\n

You can follow us on social media to be informed of news about us. <\/p>\n\n\n\n

Data <\/strong><\/td>Purpose of the data  processing<\/strong><\/td>Retention time <\/strong><\/td>Legal basis of the data processing <\/strong><\/td>Rights<\/strong><\/td><\/tr>
Data provided on  <\/strong>social media sites: <\/strong>profile data<\/em><\/td>Information about  current news <\/td>Until unfollowing  (unsubscribing)<\/td>Consent<\/strong>, which you give by following us. Consent can be  revoked at any time by unsubscribing. <\/strong>Withdrawal does  not affect the lawfulness of the data processing that  preceded it. [GDPR Article 6(1)(a)]<\/td>3.1. 3.2. 3.3. 3.4. 3.5. 3.6.<\/td><\/tr>
profile name, profile  picture, personal data  shared in the message<\/em><\/td>To respond to your  message<\/td>Until message is  deleted by the sender<\/td>Consent<\/strong>, which you give by messaging us. Consent can  be revoked at any time by unsubscribing. <\/strong>Withdrawal  does not affect the lawfulness of the data processing that  preceded it. [GDPR Article 6(1)(a)]<\/td>3.1. 3.2. 3.3. 3.4. 3.5. 3.6.<\/td><\/tr>
statistical data <\/em><\/td>Improve efficiency of  the page and ads<\/td>Until ads are turned  off in settings<\/td>Consent<\/strong>, which you give by ad settings. Consent can be  revoked at any time by changing the settings. <\/strong>Withdrawal does not affect the lawfulness of the data  processing that preceded it. [GDPR Article 6(1)(a)]<\/td>3.1. 3.2. 3.3. 3.4. 3.5. 3.6.<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

The operator of the Facebook and Instagram pages provides the Data Controller with the display of advertisements and the use of the page  analytics function. The page analytics function displays aggregated data, the purpose of which is to enable the Data Controller to understand  how visitors use the page and its advertisements and to draw conclusions for more efficient operation. No personal data is included in the  statistical analysis. The processing of advertising and statistical data on these pages is carried out jointly by the Data Controller and Meta  Platforms Ireland Limited, Serpentine Avenue, Block J, Dublin 4, Ireland. Details of the joint data processing agreement are set out in the Data  Controller Appendix of the Facebook Page Analytics function. The Addendum is available at the following link:  https:\/\/www.facebook.com\/legal\/terms\/page_controller_addendum<\/p>\n\n\n\n

9 <\/p>\n\n\n\n

The companies operating the social media sites <\/strong>are separate data controllers: <\/p>\n\n\n\n

– Facebook and Instagram <\/strong>Facebook Ireland Ltd. (registered office: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; https:\/\/www.facebook.com\/privacy\/explanation; https:\/\/www.facebook.com\/help\/instagram\/155833707900388\/) – YouTube, <\/strong>Google Ireland Limited (registered office: Gordon House, Barrow Street, Dublin 4, Ireland;  https:\/\/policies.google.com\/technologies\/product-privacy?hl=hu) <\/p>\n\n\n\n

– LinkedIn<\/strong>, LinkedIn Ireland Unlimited Company (registered office: Wilton Place, Dublin 2, Ireland; https:\/\/www.linkedin.com\/legal\/privacy policy) <\/p>\n\n\n\n

– Tripadvisor<\/strong>, Tripadvisor Ireland Limited (registered office: Bloodstone Building, Bloodstoney Road, Dublin 2, Ireland; https:\/\/tripadvisor.mediaroom.com\/HU-privacy-policy) <\/p>\n\n\n\n

3. Your rights<\/strong> <\/strong><\/p>\n\n\n\n

In connection with the data processing, you have the rights detailed in points 3.1-3.7. If you want exercise one of them, please write to us using  the contact details indicated in point 1. <\/p>\n\n\n\n

Identification <\/em><\/p>\n\n\n\n

In any case, we need to verify your identity before fulfilling your request. If we cannot verify your identity, unfortunately we cannot fulfil your  request.  <\/p>\n\n\n\n

Answering the request <\/em><\/p>\n\n\n\n

After we have verified your identity, we provide information about the request in writing, electronically, or \u2013 at your request \u2013 verbally. Please  note that if you submitted your request electronically, we will respond electronically. Of course, in this case too, you have the option to request  another method. <\/p>\n\n\n\n

Deadline for handling the matters <\/em><\/p>\n\n\n\n

We will inform you about the measures taken as a result of your request within 1 (one) month from the receipt of the request at the latest. If  necessary, taking into account the complexity of the request and the number of requests, this deadline can be extended by another 2 (two)  months, of which we will inform you within the 1 (one) month deadline for handling the matter.  <\/p>\n\n\n\n

We are also obliged to inform you of the failure to take action within the one-month deadline for handling the matter. You can file a complaint  against this with the Hungarian National Authority for Data Protection and Freedom of Information (point 6.1) and exercise your right to judicial  remedy (point 6.2). <\/p>\n\n\n\n

Administration fee <\/em><\/p>\n\n\n\n

The requested information and measures are free of charge. An exception is the case where the request is clearly unfounded or \u2013 especially due  to its repetitive nature \u2013 excessive. In this case, we may charge a fee or refuse to fulfil the request. <\/p>\n\n\n\n

10 <\/p>\n\n\n\n

3.1. You can withdraw your consent <\/strong> <\/strong><\/p>\n\n\n\n

In the case of data processing based on your consent, you can withdraw your consent at any time. In such a case, we will immediately erase your  personal data related to the given data processing. We would like to inform you that the withdrawal does not affect the lawfulness of the data  processing carried out on the basis of prior consent. <\/p>\n\n\n\n

3.2. You can request information (access) <\/strong><\/p>\n\n\n\n

You can request information on whether your personal data is being processed, and if so: <\/p>\n\n\n\n

– What is the purpose of processing? <\/p>\n\n\n\n

– What kind of data is being processed exactly? <\/p>\n\n\n\n

– To whom do we transfer this data? <\/p>\n\n\n\n

– How long do we store this data? <\/p>\n\n\n\n

– What rights and remedies do you have in this regard? <\/p>\n\n\n\n

– Who did we get your data from? <\/p>\n\n\n\n

– Do we make automated decisions about you using your personal data? In such cases, you can also request information about the logic (method)  we apply, the importance of such data processing, and the expected consequences. <\/p>\n\n\n\n

– If you have found that your data has been transferred to an international organisation or a third country (non-EU member state), you can  request a demonstration of what guarantees the adequate processing of your personal data. <\/p>\n\n\n\n

– You can request a copy of your personal data (for additional copies, we may charge a fee based on administrative costs) <\/p>\n\n\n\n

3.3. You can request a rectification <\/strong> <\/strong><\/p>\n\n\n\n

You can request that we rectify or supplement any of your inaccurate or incomplete personal data.  <\/p>\n\n\n\n

3.4. You can request the erasure of your personal data (“to be forgotten”) <\/strong><\/p>\n\n\n\n

You can request that we erase your personal data if: <\/p>\n\n\n\n

– The personal data are no longer needed for the purpose for which they were processed; <\/p>\n\n\n\n

– In the case of data processing based on your consent; <\/p>\n\n\n\n

– If it is established that personal data is being processed unlawfully; <\/p>\n\n\n\n

– If your objection is successful; <\/p>\n\n\n\n

– If required by EU or national laws; <\/p>\n\n\n\n

– The data was collected in the context of offering IT services to children. <\/p>\n\n\n\n

We cannot erase <\/strong>personal data if it is necessary:  <\/p>\n\n\n\n

– for exercising the right to freedom of expression and information;<\/p>\n\n\n\n

11 <\/p>\n\n\n\n

– for compliance with a legal obligation which requires processing according to Union or Member State law to which the Controller is subject or  for the performance of a task carried out in the public interest; <\/p>\n\n\n\n

– on the basis of public interest in the field of public health; <\/p>\n\n\n\n

– for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the request is likely to  render impossible or seriously impair the achievement of the objectives of deletion; or <\/p>\n\n\n\n

– for the establishment, exercise or defence of legal claims. <\/p>\n\n\n\n

3.5. You can request that we restrict the data processing <\/strong> <\/strong><\/p>\n\n\n\n

You can request that we restrict the data processing if one of the following applies: <\/p>\n\n\n\n

– You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data; – The data processing carried out is unlawful, but you do not agree to the erasure of the data and instead request the restriction of its use; – We no longer need the data for the purpose of data processing, but you require the data for the establishment, exercise or defence of legal  claims;  <\/p>\n\n\n\n

– You have objected to the data processing; in this case, the restriction applies to the period until it is established whether the Data Controller’s  legitimate reasons override your legitimate reasons. <\/p>\n\n\n\n

In the case of restriction, the personal data may only be processed with your consent, with the exception of storage, or to establish, exercise or  defend legal claims, or to protect the rights of another natural or legal person, or in the important public interest of the Union or a Member State.  We will inform you in advance about the possible lifting of the restriction.  <\/p>\n\n\n\n

3.6. You can ask us to transfer your personal data (right to data portability) <\/strong> <\/strong><\/p>\n\n\n\n

You have the right to receive your personal data that we process, in a machine-readable format, and you also have the right to transfer this data  to another data controller \u2013 or at your request \u2013 if the data processing is based solely on your consent or a contract concluded with you or in your  interest, and is automated.  <\/p>\n\n\n\n

The aforementioned right does not apply in the event that the data processing is necessary for the performance of a task in the public interest. It  cannot violate the right to erasure and cannot adversely affect the rights and freedoms of others. <\/p>\n\n\n\n

3.7. You can object to the processing of your personal data <\/strong><\/p>\n\n\n\n

You can object to the processing of your personal data if the data processing is based on a legitimate interest, is for direct marketing purposes  (e.g. sending a newsletter), or is necessary for the performance of a task of public interest. In this case, the personal data will be erased, unless its  processing is justified by compelling legitimate reasons that override your interests, rights and freedoms, or that are related to the establishment,  exercise or defence of legal claims. <\/p>\n\n\n\n

You can object to the processing of your personal data also if the personal data is processed for scientific and historical research purposes or for  statistical purposes. In this case, the personal data will be erased unless the data processing is necessary for the performance of a task carried out  in the public interest.<\/p>\n\n\n\n

12 <\/p>\n\n\n\n

4. Legal remedies available <\/strong><\/p>\n\n\n\n

4.1. Right to complain to a \u201cSupervisory Authority\u201d<\/strong> <\/strong><\/p>\n\n\n\n

If you believe that we have treated you unfairly or unlawfully under GDPR, you can complain to a Supervisory Authority for data protection. If you  are normally resident in an EU country other than Hungary, you have the right to raise a complaint with the Supervisory Authority of that country.  This link will give you the name and contact details: <\/p>\n\n\n\n

http:\/\/ec.europa.eu\/justice\/data-protection\/article-29\/structure\/data-protection-authorities\/index_en.htm <\/p>\n\n\n\n

If you are normally resident in Hungary or outside the EU, you can complain to the Hungarian Authority: <\/p>\n\n\n\n

The Hungarian National Authority for Data Protection and Freedom of Information <\/p>\n\n\n\n

1055 Budapest, Falk Miksa utca 9-11. <\/p>\n\n\n\n

Postal address: 1363 Budapest, Pf. 9. <\/p>\n\n\n\n

Telephone: +36 -1-391-1400 <\/p>\n\n\n\n

Fax: +36-1-391-1410 <\/p>\n\n\n\n

E-mail address for correspondence in English: privacy(at)naih.hu <\/p>\n\n\n\n

E-mail address for correspondence in Hungarian: ugyfelszolgalat(at)naih.hu <\/p>\n\n\n\n

Website: http:\/\/naih.hu <\/p>\n\n\n\n

4.2. Right to an effective judicial remedy against a controller or processor <\/strong><\/p>\n\n\n\n

If you believe that your rights under GDPR have been infringed as a result of the processing of your personal data in non-compliance with GDPR,  you have the right to an effective judicial remedy. <\/p>\n\n\n\n

Proceedings against a controller or a processor shall be brought before the courts of the EU Member State where the controller or processor has  an establishment. Alternatively, such proceedings may be brought before the courts of the EU Member State where your habitual residence is. <\/p>\n\n\n\n

In Hungary, regional courts shall have jurisdiction in handling the case. Data subjects can also choose to bring actions at regional courts of their  domicile or residence. Even individuals with no locus standi can be parties to the proceedings. The Authority has the option to intervene for the  data subject to succeed in the proceedings. <\/p>\n\n\n\n

Court proceedings shall be governed by GDPR, by the provisions of Act V of 2013 on the Civil Code, Book Two, Part Three, Title XII (Sections 2:51  to 2:54), as well as by other legislative provisions applicable to court proceedings. <\/p>\n\n\n\n

4.3. Damages and compensation for violation of personality rights<\/strong><\/p>\n\n\n\n

13 <\/p>\n\n\n\n

If the Data Controller causes damage or violates the personality rights of the data subject by unlawful processing of the data of the data subject,  a claim for compensation for violation of personality rights by the Data Controller may be raised. The Data Controller is released from responsibility  for the damage caused and from the obligation to pay compensation if it proves that the damage or the violation of the personality rights of the  data subject was caused by an unavoidable cause outside the scope of data processing. <\/p>\n\n\n\n

5. Data security<\/strong> <\/strong><\/p>\n\n\n\n

We will do our best to take the adequate technical and organisational measures \u2013 taking into account the current state of science and technology,  the costs of implementation, the nature of data processing, as well as the risk to the rights and freedoms of natural persons \u2013 in order to ensure  that we guarantee data security corresponding to the level of risk.  <\/p>\n\n\n\n

We always process the personal data confidentially, with limited access, encryption and the possible maximisation of resilience, ensuring that it  can be restored in the event of a problem. We regularly test our system to ensure security. When determining the appropriate level of security,  we take into account the risks arising from the data processing, which arise in particular from the accidental or unlawful destruction, loss,  alteration, unauthorised disclosure or unauthorised access to the personal data transmitted, stored or otherwise processed. <\/p>\n\n\n\n

We do our best to ensure that persons acting under our control and having access to the personal data can only process this data in accordance  with our instructions, unless they are required to deviate from this by EU or Member State law. <\/p>\n\n\n\n

6. Other<\/strong> <\/strong><\/p>\n\n\n\n

The Data Controller has the right to modify the contents of this Data Processing Notice at any time. Any modification will take effect at the same  time as it is published on the website.<\/p>\n\n\n\n

14 <\/p>\n\n\n\n

Annex 1: Explanation of terms used in the Data Processing Notice <\/strong><\/p>\n\n\n\n

\u201cpersonal data\u201d<\/strong>: Any information relating to the natural person (data subject) (e.g. name, number, location data, online ID or data relating to the  physical, physiological, genetic, mental, economic, cultural or social identity of the natural person); <\/p>\n\n\n\n

\u201cdata subject\u201d: <\/strong>identifiable natural person to whom the given personal data is related. (Such as: a website visitor, a person who subscribes to the  newsletter, a person who applies after a job advertisement) <\/p>\n\n\n\n

“data processing”<\/strong>: any operation or set of operations performed on personal data or data files in an automated or non-automated manner, such  as by way of collection, recording, organisation, structuring, storage, transformation or alteration, retrieval, access, use, disclosure, transmission,  distribution or otherwise making available, coordination or linking, restriction, erasure or destruction; <\/p>\n\n\n\n

“Data Controller”<\/strong>: the natural or legal person, public authority, agency or any other body that determines the purposes and means of processing  the personal data independently or together with others;  <\/p>\n\n\n\n

“data processing by processor<\/strong>“: performing technical tasks related to data processing operations; <\/p>\n\n\n\n

“data processor<\/strong>“: the natural or legal person, public authority, agency or any other body that processes personal data on behalf of the Data Controller (on behalf of, at the instruction of and based on the decision of the Data Controller); <\/p>\n\n\n\n

\u201cthird party\u201d: <\/strong>the natural or legal person, public authority, agency or any other body that is not the same as the data subject, the data controller,  the data processor or the persons who have been authorised to process personal data under the direct control of the Data Controller or data  processor; <\/p>\n\n\n\n

“consent of the data subject<\/strong>“: the voluntary, specific and clear declaration of the intent of the data subject, based on adequate information, with  which the data subject indicates by means of a statement or an act clearly expressing the confirmation that he or she gives his or her consent to  the processing of personal data concerning him or her; <\/p>\n\n\n\n

“recipient<\/strong>“: the natural or legal person, public authority, agency or any other body to whom or to which the personal data is communicated,  regardless of whether it is a third party. Public authorities that have access to personal data in accordance with EU or Member State law in the  context of an individual investigation are not considered recipients.<\/p>\n\n\n\n

15 <\/p>\n","protected":false},"excerpt":{"rendered":"

PRIVACY NOTICE  Last updated: 16.06.2025\u00a0 1. The Data Controller   Danubius Hotels Zrt.   registered seat: 1051 Budapest, Szent Istv\u00e1n t\u00e9r<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-561","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nPrivacy Policy - L\u00e1ng Restaurant<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/langrestaurant.hu\/en\/privacy-policy\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy Policy - L\u00e1ng Restaurant\" \/>\n<meta property=\"og:description\" content=\"PRIVACY NOTICE  Last updated: 16.06.2025\u00a0 1. The Data Controller   Danubius Hotels Zrt.   registered seat: 1051 Budapest, Szent Istv\u00e1n t\u00e9r\" \/>\n<meta property=\"og:url\" content=\"https:\/\/langrestaurant.hu\/en\/privacy-policy\/\" \/>\n<meta property=\"og:site_name\" content=\"L\u00e1ng Restaurant\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/restaurantlang\" \/>\n<meta property=\"article:modified_time\" content=\"2025-06-16T10:56:50+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"25 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/langrestaurant.hu\/en\/privacy-policy\/\",\"url\":\"https:\/\/langrestaurant.hu\/en\/privacy-policy\/\",\"name\":\"Privacy Policy - L\u00e1ng Restaurant\",\"isPartOf\":{\"@id\":\"https:\/\/langrestaurant.hu\/en\/#website\"},\"datePublished\":\"2025-03-18T13:00:02+00:00\",\"dateModified\":\"2025-06-16T10:56:50+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/langrestaurant.hu\/en\/privacy-policy\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/langrestaurant.hu\/en\/privacy-policy\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/langrestaurant.hu\/en\/privacy-policy\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/langrestaurant.hu\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy Policy\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/langrestaurant.hu\/en\/#website\",\"url\":\"https:\/\/langrestaurant.hu\/en\/\",\"name\":\"L\u00e1ng Restaurant\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/langrestaurant.hu\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/langrestaurant.hu\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/langrestaurant.hu\/en\/#organization\",\"name\":\"L\u00e1ng Restaurant\",\"url\":\"https:\/\/langrestaurant.hu\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/langrestaurant.hu\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/langrestaurant.hu\/wp-content\/uploads\/2025\/06\/favico.jpg\",\"contentUrl\":\"https:\/\/langrestaurant.hu\/wp-content\/uploads\/2025\/06\/favico.jpg\",\"width\":1024,\"height\":1024,\"caption\":\"L\u00e1ng Restaurant\"},\"image\":{\"@id\":\"https:\/\/langrestaurant.hu\/en\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/restaurantlang\",\"https:\/\/www.instagram.com\/lang_restaurant\/\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy Policy - L\u00e1ng Restaurant","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/langrestaurant.hu\/en\/privacy-policy\/","og_locale":"en_US","og_type":"article","og_title":"Privacy Policy - L\u00e1ng Restaurant","og_description":"PRIVACY NOTICE  Last updated: 16.06.2025\u00a0 1. The Data Controller   Danubius Hotels Zrt.   registered seat: 1051 Budapest, Szent Istv\u00e1n t\u00e9r","og_url":"https:\/\/langrestaurant.hu\/en\/privacy-policy\/","og_site_name":"L\u00e1ng Restaurant","article_publisher":"https:\/\/www.facebook.com\/restaurantlang","article_modified_time":"2025-06-16T10:56:50+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"25 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/langrestaurant.hu\/en\/privacy-policy\/","url":"https:\/\/langrestaurant.hu\/en\/privacy-policy\/","name":"Privacy Policy - L\u00e1ng Restaurant","isPartOf":{"@id":"https:\/\/langrestaurant.hu\/en\/#website"},"datePublished":"2025-03-18T13:00:02+00:00","dateModified":"2025-06-16T10:56:50+00:00","breadcrumb":{"@id":"https:\/\/langrestaurant.hu\/en\/privacy-policy\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/langrestaurant.hu\/en\/privacy-policy\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/langrestaurant.hu\/en\/privacy-policy\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/langrestaurant.hu\/en\/"},{"@type":"ListItem","position":2,"name":"Privacy Policy"}]},{"@type":"WebSite","@id":"https:\/\/langrestaurant.hu\/en\/#website","url":"https:\/\/langrestaurant.hu\/en\/","name":"L\u00e1ng Restaurant","description":"","publisher":{"@id":"https:\/\/langrestaurant.hu\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/langrestaurant.hu\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/langrestaurant.hu\/en\/#organization","name":"L\u00e1ng Restaurant","url":"https:\/\/langrestaurant.hu\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/langrestaurant.hu\/en\/#\/schema\/logo\/image\/","url":"https:\/\/langrestaurant.hu\/wp-content\/uploads\/2025\/06\/favico.jpg","contentUrl":"https:\/\/langrestaurant.hu\/wp-content\/uploads\/2025\/06\/favico.jpg","width":1024,"height":1024,"caption":"L\u00e1ng Restaurant"},"image":{"@id":"https:\/\/langrestaurant.hu\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/restaurantlang","https:\/\/www.instagram.com\/lang_restaurant\/"]}]}},"_links":{"self":[{"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/pages\/561","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/comments?post=561"}],"version-history":[{"count":3,"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/pages\/561\/revisions"}],"predecessor-version":[{"id":567,"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/pages\/561\/revisions\/567"}],"wp:attachment":[{"href":"https:\/\/langrestaurant.hu\/en\/wp-json\/wp\/v2\/media?parent=561"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}