This page is a web-edited summary of the privacy policy currently in force. The full, authentic document: Privacy policy (PDF) ↓
In accordance with the rules of the EU General Data Protection Regulation 2016/679 (GDPR), this notice sets out what activities Day Holiday Kft., as data controller, carries out with the data of natural persons in the course of performing its tasks, the rules it follows, and the rights to which data subjects are entitled.
1. Details of the data controller
- Data controller
- Day Holiday Kft.
- Registered office
- 1024 Budapest, Keleti Károly utca 9.
- Tax number
- 12053407-2-41
- Company registration number
- 01-09-460365
- Registering court
- Fővárosi Törvényszék Cégbírósága (Company Registry Court of the Budapest-Capital Regional Court)
- Email
- info@dayholiday.hu
- Phone
- +36 1 315 1666
2. Principles of data processing
As data controller, we act in accordance with the principles of purpose limitation, data minimisation and accuracy: we process data for a specified purpose and only to the extent necessary, and we rectify or erase inaccurate data without delay. We obtain personal data directly from the data subjects. We cease processing as soon as its purpose has been fulfilled or has ceased to exist.
3. Purposes of processing in detail
Contact and newsletter sending
- Data subjects
- Natural persons, or representatives of legal persons, who contact us with the intention of getting in touch
- Data processed
- name, email address, phone number
- Legal basis
- GDPR Article 6(1)(a) — the data subject's consent
- Retention period
- Until consent is withdrawn, but for no more than 5 years
Concluding contracts with partners, clients and suppliers
- Data subjects
- Natural persons, or representatives of legal persons, who enter into a contract with the data controller
- Data processed
- name, sole trader registration number, registered office, tax number, name of contact person and signatory, signature, email address, phone number
- Legal basis
- GDPR Article 6(1)(b) — performance of a contract
- Retention period
- For 5 years after the expiry or termination of the contractual relationship
Job applicants, applications, CVs
- Data subjects
- Persons applying for job opportunities
- Data processed
- name, place and date of birth, address, information on qualifications and work experience, signature, email address, phone number, and in some cases a photograph
- Legal basis
- GDPR Article 6(1)(a) — the data subject's consent
- Retention period
- Until consent is withdrawn, but for no more than 12 months
Processing related to employment
- Data subjects
- Persons in an employment relationship with the data controller
- Data processed
- name, birth name, mother's name, permanent address, place and date of birth, name and address of workplace or school, identity card number and other data required by law
- Legal basis
- GDPR Article 6(1)(c) — legal compliance (Act I of 2012, Act CL of 2017, Act C of 2000 and Act LXXXI of 1997)
- Retention period
- Data relating to employment and pension entitlement may not be disposed of; payroll and tax data are kept for 8 years, as required by law
Handling of complaints concerning data processing
- Data subjects
- Data subjects who feel their rights have been infringed
- Data processed
- name, mother's name, email address, phone number, information on the data processing complained of
- Legal basis
- GDPR Article 6(1)(c) — compliance with a legal obligation
- Retention period
- For 5 years after the case is closed
Handling invoices, accounting
- Data subjects
- Partners, clients: sole traders or natural persons representing a business organisation
- Data processed
- name, and in some cases tax number
- Legal basis
- GDPR Article 6(1)(c) — legal obligation (Act C of 2000 on Accounting)
- Retention period
- For 8 years following the year of the invoice date
Photos of employees on the website (marketing)
- Data subjects
- Our colleagues who appear with a photo on our website
- Data processed
- photograph, name, job title
- Legal basis
- GDPR Article 6(1)(f) — the data controller's legitimate interest (a balancing test has been carried out)
- Retention period
- No longer than until the end of the data subject's employment
Please do not enter personal data in the “message” text field of the forms on this website. We are not entitled to process data received in this way — unsolicited — and therefore delete it immediately and permanently.
4. Data processors
We use the partners below to carry out our tasks. No data is transferred to third countries or to international organisations.
5. Data security
Only those of our colleagues who need access to personal data to perform their tasks have access to it. When designing and operating our IT system, we assess and take into account the possible risks, monitor emerging threats and vulnerabilities, and protect the data against unauthorised access and environmental hazards.
6. Your rights
Under Articles 15–20 of the GDPR, you are entitled to the rights below. You can exercise your rights by sending a request to info@dayholiday.hu.
- Right to information
- At your request, within no more than 30 days, we will inform you in writing and in a clear, easily understandable form about the data processed, the purpose, legal basis and duration of the processing, and who has received the data.
- Right of access
- You can ask whether your personal data is being processed, and you can access the data and the conditions of the processing.
- Right to rectification
- At your request, we will correct your inaccurate personal data and complete any incomplete data without delay.
- Right to erasure
- We will erase your data without undue delay if it is no longer needed, if consent has been withdrawn and there is no other legal basis, if the processing was unlawful, or if erasure is required by law.
- Right to restriction of processing
- At your request, we will restrict the use of your personal data — in which case we will use it only within a defined scope.
- Right to data portability
- We will send you your data in a structured, commonly used, machine-readable format, or, at your request, transmit it directly to another data controller.
- Right to object
- We will examine your objection within no more than 15 days of the submission of the request, make a decision and inform you of it in writing.
7. Complaints and remedies
You can lodge a complaint by writing to info@dayholiday.hu or to our registered office. We will investigate the complaint within 30 days of receipt and give a reasoned written reply in the same way as the complaint was submitted. If we reject your complaint, we will inform you that you may turn to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or to a court.
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa u. 9–11.
Email: ugyfelszolgalat@naih.hu
Phone: +36 1 391 1400
naih.hu
8. Personal data breaches
If you detect a personal data breach in connection with our activities, please report it as soon as possible at info@dayholiday.hu or on +36 1 315 1666. We will record the report, start the investigation without delay and, as required by law, notify the supervisory authority within 72 hours.
The applicable legislation does not require us to appoint a data protection officer, as we do not process large volumes of personal data or particularly sensitive personal data, and we are not a public authority.
Date of this notice: Budapest, March 2025 · Day Holiday Kft. The data controller reserves the right to amend this notice unilaterally in line with changes in legislation; the version in force at any given time is available on this page.
