Privacy Policy
Thank you for using the GUESTRO services! The protection of your data is of paramount importance to us.
1 Introduction and scope
The purpose of this Privacy Policy is to inform the visitors and registered users of the website, as well as the representatives of hospitality venues, in detail about the personal data processed by Webfészek Kft. (name of the service: GUESTRO, hereinafter: "Service Provider" or "Controller"), the source of that data, the purpose, legal basis and duration of the processing, the processors involved in the processing, as well as the rights of data subjects and their legal remedies.
Our data processing principles are fully in line with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and with Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Infotv.).
2 Details of the Controller
3 Categories of data processed and purpose of processing
A. Registration and User Account
Data processed: Name, email address, password (stored only as an irreversible cryptographic hash), date of registration.
Purpose: Identifying the user, providing the account, managing discount cards and club membership.
Legal basis: Performance of a contract [GDPR Article 6(1)(b)].
B. Data of venue representatives and partners
Data processed: Contact person's name, email address and phone number, billing name and address, venue details.
Purpose: Providing the partnership service, fulfilling administrative and invoicing obligations.
Legal basis: Performance of a contract and compliance with a legal obligation [GDPR Article 6(1)(b) and (c)].
C. Transaction and Billing Data
Data processed: Type of card/subscription purchased, transaction ID, payment status, billing name, billing address, tax number (for companies).
Note: The Controller does not store bank card data in any form. Payment transactions are carried out directly by Stripe in a PCI DSS certified secure environment. The statutory electronic documents are issued by the Számlázz.hu (KBOSS.hu Kft.) system.
Legal basis: Compliance with a legal obligation (retention of documents under the Hungarian Accounting Act) [GDPR Article 6(1)(c)].
D. Contact and Customer Support
Data processed: Name, email address, content of the message.
Purpose: Answering user questions, support requests and reports, fixing errors.
Legal basis: Legitimate interest [GDPR Article 6(1)(f)].
4 Cookies and technical data processing
The website places small data files (cookies) in your browser to ensure proper operation and to improve the user experience.
Essential (Necessary) Cookies
These cookies are essential for the basic functions of the website (session, security tokens, saving your cookie settings). If they are disabled, the website will not work properly.
Analytics and Statistics Cookies
They help us understand how visitors use the website (e.g. popular pages, visit duration). The data is collected in anonymised form.
5 Processors and data transfers
In the course of our data processing activities, we use the following trusted processors:
-
Hosting and cloud infrastructure provider:
Laravel Holdings Inc. (Laravel Cloud)
Address: 60 Broad Street, 24th Floor, #1559, New York, NY 10004, USA • Email: privacy@laravel.com • Web: https://cloud.laravel.com
Task: Hosting the website and the database, providing cloud-based application infrastructure. -
Online payment provider:
Stripe Payments Europe Ltd.
Address: 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland • Web: https://stripe.com
Task: Processing secure online card payment transactions. -
Electronic invoicing provider:
KBOSS.hu Kft. (Számlázz.hu)
Registered office: 1031 Budapest, Záhony utca 7. • Company registration number: 01-09-303201 • Tax number: 13421739-2-41 • Web: https://www.szamlazz.hu
Task: Issuing electronic invoices and accounting documents and retaining them as required by law. -
Map and analytics services:
Google Ireland Limited
Address: Gordon House, Barrow Street, Dublin 4, Ireland
Task: Location search data (Google Places API) and website traffic statistics.
6 Your rights
7 Legal remedies
If you feel that your rights have been violated in connection with the processing of your personal data, please contact us first at adatvedelem@guestro.hu.