GDPR

FORSTER HUNTING LODGE HOTEL

AND

FORSTER HUNTING LODGE PENSION

AND

FORSTER HUNTING LODGE

Privacy Policy

2347 Bugyi, Rádai utca 01601/14.

Hotel:

Mobile: +36-30-916-4002

E-mail: hotel@forsterkastely.hu

Web: www.forsterkastely.hu

Pension:

Mobile: +36-30-724-3450

E-mail: forsterpanzio@gmail.com

Web: www.forsterkastely.hu

Hunting lodge:

Mobile: +36-30-542-0472

E-mail: forstercsarda@gmail.com

Web: www.forsterkastely.hu

Last update: 2023.01.02.

I. Introduction to the prospectus

This Privacy Policy describes how Forster Rendezvény Kft., the operator of the Forster Hunting Lodge Hotel and Forster Hunting Lodge Pension, uses and protects your personal data. Forster Rendezvény Kft. is the data controller of the personal data that our guests or prospective guests provide to us when they use the www.forsterkastely.hu website, as well as for other groups of persons identified as guests in this prospectus who contact us through various channels, targeted e-mails or through our staff.

Forster Events Ltd. requests, obtains and processes personal information from guests, prospective guests, business partners, employees and others in the course of its business. Our main goal is to process as little personal data as possible in order to provide the right service. We acknowledge and respect the legal rights and reasonable expectations of individuals with respect to their personal data and privacy. We will provide information on the personal data that we need to process in accordance with applicable law, both on our website and in our Reception Areas.

This Privacy Notice explains how we ensure the protection of personal data. Many of the principles we follow are derived from the EU General Data Protection Regulation (GDPR). However, we comply with all applicable legal requirements relating to the protection of personal data and data privacy.

If you have any questions about the content of this notice, or if you have comments or suggestions on how we can improve this notice, please contact us using the details below:

• hotel@forsterkastely.hu, +36-30-916-4002
• forsterpanzio@gmail.com, +36-30-724-3450
• forstercsarda@gmail.com, +36-30-542-0472

II. Legal rights of natural persons (“data subjects”) under the GDPR

• Under the GDPR, “data subjects” are natural persons living anywhere in the EU who have a relationship with a “controller”, or persons living in the EU who have a relationship with a controller outside the EU.
• A “controller” is the legal entity that determines the way in which personal data are processed.
• “Personal data” means any data that can be linked to the data subject.

Data subjects have the following specific rights under the GDPR:

• Transparent information
• Access to personal data
• Correction of inaccurate data
• Right to erasure (forgetting) in certain circumstances
• Withdrawal of consent
• Request restriction of processing
• Objection to processing
• Not to be subject to automated decisions
• Data portability
• Complain to the “Supervisory Authority”
• Effective judicial remedy against a controller or processor

This notice applies to all rights in their entirety. Under any of these rights, we will respond to your request without undue delay, but within a maximum of one month, and we will do our best to resolve even complex cases within three months. We will send you a reply by electronic means or by any other means you request. We do not charge a fee for the first request, but we reserve the right to charge an administrative fee for dealing with a repeat request within one year or a request that is clearly unfounded or excessive.

Please note! We need to verify your identity before we can process your request.

If we do not think it is necessary to act on your request, we will inform you in writing of the reasons for our decision and of the legal remedies available to you.

Notwithstanding these rights, if you believe that Forster Events Ltd has acted inappropriately in relation to your personal data or the protection of your data, please contact us so that we can rectify the situation and improve the service we provide to our guests. You can make a formal complaint by e-mail or by post using the contact details provided. We will endeavour to reply to you without undue delay and at the latest within one month.

II/1. Transparent information

All the information required by the GDPR is provided in a concise, transparent, comprehensible and easily accessible form, in clear and plain language. The information will be provided in writing or by electronic means. We may also provide you with oral information at your request.

II/2. Consent to own data

You have the right to ask Forster Events Ltd for confirmation of whether we process personal data concerning you and, if so, to request access to the data and the following information:

• The purpose of the processing.
• The purpose of the processing and the purpose for which the personal data are processed.
• The recipients to whom we have disclosed or will disclose the personal data, in particular to recipients in non-EU Member States.
• The period for which the personal data are stored.
• Whether you have the right to obtain from us rectification or erasure of your personal data or restriction of the processing of your personal data or to object to such processing.
• Your right to lodge a complaint with the Supervisory Authority.
• Where personal data is not collected directly from you, the source of that data.
• Whether automated decision making has been carried out on the basis of the data and, if so, the logic used and clear information about the significance of such processing and its likely consequences for you.
• Where your personal data is transferred to a country outside the EU, we will provide you with adequate safeguards to protect your rights.

II/3. Correction of inaccurate data

If we hold inaccurate or incomplete personal data about you, we will correct it without undue delay after receiving your request.

II/4. Right to erasure (right to be forgotten)

You have the right to have your personal data erased and to request us to comply with your request without undue delay if one of the following grounds applies:

• Your personal data are no longer necessary for the purposes for which they were originally processed.
• You have withdrawn your consent and we no longer have a legal basis for processing the data.
• We no longer have a legitimate interest in the processing and you claim that there is no legitimate ground for the processing which overrides your interests, rights and freedoms.
• The processing is for direct marketing purposes and you object to this.
• We have unlawfully processed your data.
• Your data must be deleted to comply with a legal obligation imposed on us by EU or Member State law.

Please note! We may not delete your personal data where processing is necessary for the following reasons:

• for the exercise of the right to freedom of expression and information;
• to comply with a legal obligation that requires the processing of personal data;
• on grounds of public interest in the field of public health;
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, where such a request would be unlikely to permit or seriously jeopardise such processing; or
• for the establishment, exercise or defence of legal claims. Your data will temporarily remain backed up after such deletion, but we will use IT security techniques to ensure that these backups are only accessible for the purpose of restoring the database in the event of data loss and cannot be copied for the purpose of data disclosure. Backups will be destroyed on a rotational basis within [12 MONTHS].

II/5. Withdrawal of consent

If you have given your consent to our processing of your data, you may withdraw your consent at any time. You can do so by sending your request to the e-mail address provided. Please note: the withdrawal of your consent does not affect the processing we have already carried out.

II/6.

You may request that Forster Events Ltd. restrict the processing of your personal data if one of the following conditions is met:

• You contest the accuracy of the personal data.
• If you object to the erasure of the data and instead request the restriction of their use.
• We no longer need the personal data for the purposes for which they were originally collected, but you require them for the establishment, exercise or defence of legal claims.
• You object to our processing of your data on the basis that we have identified our “legitimate interests” as the legal basis, but you claim that your “interests, rights and freedoms” override them.

Where processing is restricted on the basis of your objection, such personal data may only be processed, except for storage, with your consent, or:

• for the establishment, exercise or defence of legal claims,
• to protect the rights of another person; or
• important public interest of the Union or of a Member State. In the event of a restriction of processing, you will be informed in advance of the lifting of this restriction. Practical operational considerations may prevent us from restricting processing in exactly the way required by the GDPR, but in such cases we will work with you to find a satisfactory solution.

II/7 Objection to processing

You have the right to object to our processing of your personal data where:

• We have our own “legitimate interests” as the basis for the lawfulness of the processing, but you claim that your “interests, rights and freedoms” override them.
• We process your data for direct marketing purposes, including profiling where it is related to direct marketing. In the event of such an objection, we may no longer process your personal data for those purposes.

II/8.

You have the right not to be subject to a decision based solely on automated processing that would have legal effects concerning you or similarly significantly affect you. However, this does not apply if:

• the decision is necessary for the conclusion or performance of a contract between you and us; or
• the automated process is permitted by EU or Member State law which also lays down appropriate measures to protect your rights and freedoms and legitimate interests.

In the first case, we must implement appropriate measures to protect your rights, freedoms and legitimate interests, including at least your right to request human intervention on our part, to express your views and to object to the decision.

I/9. Data portability

Under the GDPR, the data subject is entitled to receive personal data relating to him or her in “structured, commonly used, machine-readable formats” in certain circumstances. The data subject also has the right to have data transmitted directly between controllers, where technically feasible.

If you request access to your personal data as described above, we will generally provide it to you in a commonly used electronic format, unless you explicitly request that we send you the data in written form.

II/10. To lodge a complaint with a supervisory authority

If you believe that we have acted unfairly or unlawfully against you under the GDPR, you can complain to the Data Protection Supervisory Authority. If you do not reside in Hungary but in another EU Member State, you have the right to lodge a complaint with the supervisory authority of that country. You can find the names and contact details of the data protection authorities at the link below:

http://ec.europa.eu/justice/data-protection/article-29/structure/data-protection-authorities/index_en.htm

If you are resident in Hungary or in a country outside the EU, you can lodge a complaint with the Hungarian authority:

National Authority for Data Protection and Freedom of Information

H-1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Postal address: 1530 Budapest, PO Box 5.

Phone: +36 -1-391-1400

Fax: +36-1-391-1410

E-mail address in Hungarian: ugyfelszolgalat@naih.hu

E-mail address in English: privacy@naih.hu

Web: http://naih.hu

II/11. Right to an effective judicial remedy against a controller or processor

If you believe that your rights under the GDPR have been infringed as a result of the processing of your personal data in a way that does not comply with the GDPR, you have the right to an effective judicial remedy. Proceedings against the controller or processor must be brought before the courts of the EU Member State where the controller or processor is established. Such proceedings may also be brought before the courts of the EU Member State where you are habitually resident.

In Hungary, the courts have jurisdiction to hear the case. The lawsuit may also be brought before the court of the place of residence or domicile of the data subject, at the choice of the data subject.

A person who does not otherwise have legal capacity may also be a party to the proceedings. The Authority may intervene in the proceedings in order to ensure that the person concerned is successful.

In addition to the provisions of the GDPR, the court proceedings shall be governed by the provisions of Act V of 2013 on the Civil Code, Book II, Part Three, Title XII (§ 2:51 – § 2:54) and other legal provisions applicable to court proceedings.

II/12.

In order to exercise the rights described above, or in the case of a complaint addressed directly to Forster Rendezvény Kft, or in the case of a general enquiry concerning the GDPR or data protection, the e-mail and postal addresses for contact are as follows:

E-mail: forster@forsterkastely.hu

Mailing address:

• Forster Rendezvény Kft. – Forster Vadászkastély Szálloda – 2347 Bugyi, Pf. 54.
• Pension: Forster Rendezvény Kft. – Forster Vadászkastély Pension – 2347 Bugyi, Pf. 54.
• Forster Rendezvény Kft. – Forster Hunting Lodge – 2347 Bugyi, Pf. 54.

III.

III/1. Reservation

When making a reservation online, in person at the hotel or by telephone, we may request any or all of the following personal data:

• Full name
• Contact
• Arrival date
• Date of departure
• Number of adults per room
• Number of minors per room
• Room type
• Service package requested
• E-mail address, telephone number
• Full permanent address and, where applicable, postal address
• Arrival time
• Credit or debit card details in some cases
• Comments – you can enter any preferences here

Purpose of processing:

The purpose of our data collection is to be able to identify the guest who has made the reservation, to give the room to the right person upon check-in, and to keep a record of the payment method, which avoids the financial risk if the guest does not check in. Your e-mail address will be used if we need to notify you of changes to your booking or other important information.

Legal basis for processing:

The lawfulness of the processing is based on the fact that we need this data to fulfil a contract for a room reservation. Your e-mail address is processed in order to send you an e-mail after your stay, as “processing is necessary for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject”. Our legitimate interests in this case include providing a high quality service. If you do not provide the requested information, we will not be able to book a room for you or contact you in case of a problem.

According to the legislation in force, after 1 September 2021, all guests using accommodation services in Hungary, as defined in Act CLVI of 2016 on the State Tasks of the Development of Tourist Areas, must have their personal data recorded by the accommodation provider in the accommodation management software at the latest on arrival, through a document scanner or during the transitional period by manual entry, and then transfer these data to a storage space, the Closed Guest Information Database (VIZA). According to the law, to record the data, the guest using the accommodation service must present to the accommodation provider his/her ID card, driving licence or travel document, which can be used for identification purposes. Failing this, the accommodation provider is obliged to refuse to provide the accommodation. The accommodation provider is authorised by law to request the guest’s identity document and the guest is obliged to present it.

The period of data processing:

Personal data is kept at the level of individual data fields, not at the level of all data relating to a particular guest. For example, we may keep your name and check-in date longer than your email address. The data processed to provide our services will be kept for 2-8 years, depending on the data.

In some cases we are legally obliged to keep personal data for longer.

The main categories are:

• Where the data is required for invoicing or other tax records, we are legally obliged to keep the data for 8 years from the end of the calendar year. Therefore, for example, if we issue an invoice to you when you check out on 30 June 2018, we must keep the data until 31 December 2026.
• The hotel/guesthouse has a legal obligation to report to the relevant authority all guests who check in, and must also report to the police all guests from outside the EU. We have a legal obligation to keep the data contained in these reports for 6 years from the date of registration. We delete the data after the longest of these relevant retention periods.

If you wish to exercise any of your rights under paragraph 1 above in relation to the data collected in connection with the above, or if you wish to contact us for any other reason in relation to the above, please let us know by emailing us at forster@forsterkastely.hu.

III/2:

Scope of data and legal basis for processing:

Obligatory personal data (Provision of this data by the Guest is a condition for the use of the hotel service):

• The processing of the following data is a legal obligation e.g.: first name, surname, mother’s name, billing data;
• Your mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, mother’s name, etc. We also process the following data (based on contract) in order to provide the requested service (accommodation, half board, etc.): contact details, payment method, credit card details, room number, number of guests, etc. Purpose of processing: to provide hotel services, including contact and service development.

The period of data processing:

Personal data is retained at the level of individual data fields, not at the level of all data relating to a particular guest. For example, we may keep your name and the date of your login for longer than your email address. The data we process to provide our services will be kept for 2-8 years, depending on the data.

In some cases we are legally obliged to keep personal data for longer.

The main categories are:

• Where the data is required for invoicing or other tax records, we are legally obliged to keep the data for 8 years from the end of the calendar year. Therefore, if we issue an invoice to you when you check out on 30 June 2018, we must keep the data until 31 December 2026.
• The hotel/guesthouse is legally obliged to report all guests checking in to the relevant authority and must also report all guests arriving from outside the EU to the police. We have a legal obligation to keep the data contained in these reports for 6 years from the date of registration.

We delete the data after the longest of these relevant retention periods. If you wish to exercise any of your rights under paragraph 1 above in relation to the data collected in connection with the above, or if you wish to contact us for any other reason in relation to the above, please let us know by emailing us at forster@forsterkastely.hu.

II/3. Guest questionnaire and evaluation system

As part of the quality assurance process applied by Forster Events Ltd., guests can express their opinions on the services provided by the hotel and the guesthouse by means of a paper guest questionnaire and the evaluation system. When filling in the questionnaire, you can provide the following personal data:

• Name
• Name and date of visit
• Room number
• Contact details (e-mail, telephone, address)

The information you provide is optional and is only required to ensure that any complaints are investigated accurately and a response is provided.

Forster Rendezvény Kft. may also use the opinions received in this way and any related data that cannot be traced back to the Guest in question and cannot be linked to the Guest’s name for statistical purposes.

If you provide us with your opinion anonymously, we will not process any personal data. If you request feedback from us, our staff will contact you within 30 days at the latest using one of the contact details provided (e-mail, telephone number, address).

Purpose of the processing:

Contacting the reviewer and handling complaints.

Legal basis for processing:

Your voluntary consent. Please note that if you do not consent to the processing of your data or withdraw your consent, we will not be able to reply to your query. If you withdraw your consent, this will not affect the lawful processing of your data prior to the withdrawal.

The period of processing:

Messages and personal data received will be deleted after one year from the date of the reply to the request, question or complaint.

The e-mail address and username provided for the use of the rating system will be deleted upon your request to that effect. If you wish to exercise any of your rights under paragraph 1 above in relation to the data collected in connection with the above, or if you wish to contact us for any other reason in relation to the above, please let us know by sending an email to forster@forsterkastely.hu.

III/4. Camera system

The Forster Rendezvény Kft. operates cameras in the Forster Hunting Lodge Hotel and Forster Hunting Lodge Pension, which record and store images, in order to ensure the personal and property safety of guests. Camera surveillance is indicated by a pictogram and warning text at the entrance to the hotel and guesthouse.

Purpose of data processing:

The purpose of the camera surveillance is to protect the property, i.e. the assets of significant value and the personal assets of the Guests, given that the detection of infringements, the detection of the perpetrator in the act, the prevention of these infringements is not possible otherwise or cannot be proven by any other method.

Legal basis for processing:

The legal basis for this processing is your voluntary consent. If you enter the monitored area of the Forster Hunting Lodge Hotel or Forster Hunting Lodge Pension despite the warning at the entrance, your consent is deemed to have been given for the purpose of taking the picture. Please do not enter if you do not wish to give your consent.

For more information about the camera system, please contact the reception staff at the Forster Hunting Lodge Hotel and the Forster Hunting Lodge Pension. We will forward the information on the camera system to you on request. Please indicate your request by sending an e-mail to forster@forsterkastely.hu or by sending a letter to the postal address of the hotel and/or guesthouse.

The data processing period is:

The camera system will store the recordings for a limited period of time. For security reasons, no further information is provided in this brochure. If you have any questions about the camera recordings, please contact the reception desk at the Forster Hunting Lodge Hotel and/or the Forster Hunting Lodge Pension.

III/5. Newsletter, event-related direct information

In order to send you a newsletter and/or event-related direct information (e.g. Wedding Open Day), we will process your name, e-mail and, in some cases, your address. Please note that you can unsubscribe from the newsletter and/or event-related direct communication by sending us an e-mail.

Purpose of the processing:

To inform you about current promotions and news.

Legal basis for processing:

Your voluntary consent. Please note that if you do not consent to the processing of your data, we will not be able to send you a newsletter.

The period of processing:

We will only send our newsletter to you for as long as you request. If you no longer wish to receive our newsletter, you can unsubscribe at any time by sending an e-mail to forster@forsterkastely.hu. Such withdrawal of consent does not affect the lawful processing of the data prior to such withdrawal.

If you wish to exercise any of your rights under paragraph 1 above in relation to the data collected in the course of the above, or if you wish to contact us for any other reason in relation to the above, please let us know by sending an e-mail to forster@forsterkastely.hu.

III/6. Forster Gift Voucher

Forster Gift Vouchers can only be purchased in person at the reception of the Forster Hunting Lodge Hotel and the Forster Hunting Lodge Pension and at the Forster Hunting Lodge. When purchasing in person, you will provide the following personal data:

• Name
• Name
• Billing address
• Phone number

Purpose of processing:

To issue an invoice when a gift voucher is purchased and to track usage.

Legal basis for processing:

Providing the data is mandatory for issuing the invoice and is also a condition for providing the service.

Processing period:

The personal data received in this way will be stored by Forster Rendezvény Kft. for a period of 8 years in accordance with the applicable tax and accounting regulations.

If you wish to exercise any of your rights under point 1 above in relation to the data collected in the course of the above, or if you wish to contact us for any other reason in relation to the above, please let us know by sending an e-mail to forster@forsterkastely.hu.

III/7. Bank card details

When booking a room, please provide the following bank card details:

• Name on card
• Card number
• Expiry date

Purpose of processing:

To secure the reservation and to draw down the total amount of the reservation or part of it, subject to cancellation.

Legal basis for processing:

Performance of the contract for the reservation of the room as a service. The provision of data is mandatory, a condition for the provision of the service.

Period of processing:

Credit card data will be encrypted, their disclosure is only possible for the purpose of the transaction and only to the authorised person. After leaving the hotel, the data can no longer be disclosed, access is not possible. The data will be deleted after 8 years.

If you wish to exercise any of your rights under clause 1 above in relation to the data collected in the course of the above, or if you wish to contact us for any other reason in relation to the above, please let us know by sending an e-mail to forster@forsterkastely.hu.

III/8. Social portals (Facebook and Instagram)

The Forster Hunting Lodge Hotel and Forster Hunting Lodge Pension operated by Forster Rendezvény Kft. are available on the Facebook and Instagram community portals. The Facebook/Instagram user can subscribe to the news feed published on the message board by clicking on the “like” link on the respective page, and unsubscribe by clicking on the “dislike” link on the same page, or delete unwanted news on the message board by using the message board settings. The Company has access to the profile of “followers” but does not record or manage it in its internal system.

Purpose of data processing:

Sharing content, other news, promotions and contact information on the website of the Forster Vadászkastély Hotel and Forster Vadászkastély Pension (www.forsterkastely.hu) operated by Forster Rendezvény Kft. Facebook pages allow you to participate in prize draws and keep up to date with the latest promotions, programmes and events.

Legal basis for processing:

Your voluntary consent, which you can withdraw at any time by unsubscribing. Withdrawal does not affect the lawful processing that preceded it. In the case of withdrawal, you will not be notified of our news feed, our news will not appear in your feed, but you will still have access to the feed as our site is public.

The processing period:

Data processing lasts until you unsubscribe. Facebook and Instagram are separate data controllers, independent of us. For information on the processing of data on the site, please refer to the privacy policy and the policy on the Facebook website at the following links: – https://www.facebook.com/policies/cookies/ – https://www.facebook.com/about/privacy/update For information on the processing of data on Instagram, please refer to the following link: – https://www.help.instagram.com The Company also publishes images/movies of various events/hotels/boarding houses etc. on its Facebook page.

If you wish to exercise any of your rights under point 1 above in relation to the data collected in the above context, or if you wish to contact us for any other reason in relation to the above, please let us know by sending an e-mail to forster@forsterkastely.hu.

III/9.

You may contact us using any of our contact details (by e-mail, Facebook, telephone, post or by using the forms designed for this purpose (e.g. request for quote)). In such cases, we will assume that you have given your consent to the processing of the personal data you share with us.

Purpose of processing:

To contact the enquirer and answer or resolve the question/request.

Legal basis for processing:

Since you are contacting us, the legal basis for processing is your (presumed) voluntary consent. You can withdraw your consent at any time, but in this case we will not be able to reply to your enquiry. The withdrawal does not affect the legitimate processing that preceded it.

Please note that the data fields indicated in each form are based on our experience of collecting the information most necessary to respond to your request.

The processing time:

The messages and the personal data received will be deleted after one year from the date of the reply to the request, question or complaint.

However, if, due to the nature of the correspondence, it is necessary for tax or accounting reasons, or to protect the rights or interests of the Company or the person requesting it, it will be archived and kept for the period necessary, which will be assessed on a case-by-case basis.

III/10 Complaints handling record

During the consumer complaint handling process, if you disagree with the handling of the complaint or if it is not possible to investigate the complaint immediately, Forster Events Ltd. shall promptly record a record of the complaint and its position on the complaint.

The record shall contain the following information:

• Name and address of the consumer.
• The place, time and manner of lodging the complaint.
• A detailed description of the consumer’s complaint, a list of the documents, records and other evidence presented by the consumer.
• Forster Events Ltd.’s statement of its position on the consumer’s complaint, if an immediate investigation of the complaint is possible.
• Signature of the person who took the minutes and, except in the case of an oral complaint by telephone or electronic means, of the consumer.
• The place and time of recording the report.
• In the case of an oral complaint made by telephone, the unique identification number of the complaint.

The purpose of the processing:

Investigating the complaint and contacting the complainant.

Legal basis for processing:

Article 17/A (7) of Act CLV of 1997 on Consumer Protection, which makes the above processing mandatory.

Processing time:

5 years from the recording of the report.

If you wish to exercise any of your rights under point 1 above in relation to the data collected in the course of the above, or if you wish to contact us for any other reason in relation to the above, please let us know by sending an e-mail to forster@forsterkastely.hu.

III/11. Job advertisements

You have the opportunity to apply for job vacancies at Forster Rendezvény Kft. by e-mail on paper.

Purpose of data processing:

The purpose of the processing is to provide jobseekers with information about the advertised vacancies, to select suitable candidates and to contact them when they apply for a job vacancy.

Legal basis for processing:

Your consent, which is presumed in the case of an application sent by e-mail or on paper. You can withdraw your consent at any time by e-mail or letter. The withdrawal does not affect the lawful processing that took place prior to the withdrawal. Please note that the provision of data is voluntary, but we will not be able to process your application if you withdraw your consent or if we do not have any of the documents or data requested by us.

The processing period:

The CVs of applicants for a specific job vacancy and the personal data and documents uploaded/submitted in connection with the application will be processed after the selection of the person to fill the vacancy as described below:

• the unsuccessful applicant will be asked if he/she wishes to keep his/her application in our database for a further period of one year. If the answer is no or no reply is received, the application and the applicant’s details will be deleted from the system.
• the successful applicant’s details will be transferred to the employee’s details and deleted from the database of applicants.

Processing of applications for general non-specific job vacancies:

• Applications sent by post or e-mail will be kept in our database for one year. After one year, the CV and data thus provided will be deleted.

If you wish to exercise any of the rights set out in point 1 above in relation to the data collected in the course of the above, or if you wish to contact us for any other reason in relation to the above, please let us know by sending an e-mail to forster@forsterkastely.hu.

III/11. Staff

The information contained in this notice and the rights described above also apply to the employees of Forster Rendezvény Kft. and to the processing of their data.

Our employees will be informed directly of the information contained in our Privacy Policy.

III/12.

Like most companies, our company maintains business contacts with certain employees of other organisations, whose names, business positions and contact details are stored.

The purpose of the processing:

In all cases, such data storage is carried out with the consent of the person concerned, in order to enable our companies to communicate for the purposes of cooperation.

Legal basis for processing:

The legal basis for our data processing activities is “legitimate interest in the performance of a contract or in maintaining contact between our companies”. We store contact details of these business contacts for the sole purpose of facilitating the establishment and maintenance of business cooperation with companies. For example, we do not carry out marketing activities towards these contacts using their data and we do not pass it on to third parties.

Data processing time:

We review the contact details of our business contacts at least annually and remove from the system those that are no longer relevant.

We will follow the same procedure as above for the processing of personal data of members of the press.

IV. Legal references

As the data controller of the personal data it uses, Forster Events Ltd. is obliged, under the GDPR, to publish information about its official name, contact details and other data. This section contains all the information required by the GDPR.

The full, official name of the legal entities operating the Hotel Forster Hunting Lodge and the Forster Hunting Lodge Pension:

Full legal name: Forster Rendezvény Korlátolt Felelősségű Társaság

Short name: Forster Rendezvény Kft.

Registered office: 2347 Bugyi, Teleki utca 17.

Postal address: 2347 Bugyi, Pf. 54.

Tax number: 25415841-2-13

Company registration number: 13-09-177971

Represented by: Csaba Zoltán Lőrincz, Managing Director

Responsible for data protection: Csaba Zoltán Lőrincz, Managing Director and Anita Kocsis-Kátai, HR Manager

E-mail address: forster@forsterkastely.hu

Activity: restaurant, mobile food service activities; accommodation service activities

Hotel operated by Forster Rendezvény Kft:

Hotel name: Hotel Forster Vadászkastély

Address: 2347 Bugyi, Rádai utca 01601/14.

Phone: +36-30-916-4002

E-mail: hotel@forsterkastely.hu

Forster Rendezvény Ltd:

Hotel name: Forster Hunting Lodge Pension

Address: 2347 Bugyi, Rádai utca 01601/14.

Phone: +36-30-724-3450

E-mail: forsterpanzio@gmail.com

Forster Rendezvény Ltd:

Hotel name: Forster Hunting Lodge

Address: 2347 Bugyi, Rádai utca 01601/14.

Phone: +36-30-542-0472

E-mail: forstercsarda@gmail.com

V. Terms and abbreviations used in this brochure

The majority of the definitions are based on the EU General Data Protection Regulation (GDPR), which is a legal document and therefore the same content cannot be simply and concisely reproduced. Our aim here is to provide a clear explanation that will make the text easier to understand; this sometimes precludes the need to explain the full legal definition in detail. We believe that we fully comply with the requirements of the GDPR and that your rights are not prejudiced by the fact that we have simplified the explanation provided here.

Expression or abbreviation

Explanation

Controller: the legal entity that determines the processing of personal data.

Data Subject: A person in or outside the EU who is associated with an organisation operating in the EU. Such an individual is considered a “data subject” and has rights under the GDPR to the processing of their own data.

EU: The European Union.

GDPR: The EU General Data Protection Regulation, which came into force on 25 May 2018.

Personal Data: any information about an individual that allows identification by a variety of means, including but not limited to: the individual’s name, identification number, address, mother’s maiden name, or one or more factors that are specific to the individual’s physical, physiological, genetic, mental, economic, cultural or social identity.

Any operation or set of operations that is performed on personal data, whether or not automatically, including, but not limited to:

Data processing: the collection, recording, organisation, structuring, storage, transformation or alteration, retrieval, consultation, use, disclosure, transmission, dissemination, alignment, restriction, erasure or destruction of data.

Data Processor: a legal person that processes personal data on behalf of the controller.

Profiling: Automated processing that uses personal data to analyse or make predictions about an individual’s work performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

Pseudonymisation: encoding or otherwise maintaining personal data in a way that does not link it to a specific data subject without providing additional information. Additional information must be stored separately and protected from unauthorised use by technical and organisational measures.

Very strict limitations apply to the processing of personal data belonging to “special categories”.

These include:

Special categories of data:

• Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership,
• Processing of genetic data and biometric data for the purpose of uniquely identifying an individual, processing of data relating to health, religion or belief, political or religious affiliation, religion or belief, or to the processing of personal data, or to the processing of personal data relating to the protection of individuals with regard to the processing of personal data.
• or concerning the sexual life or sexual orientation of the person, or
• Data relating to the establishment of criminal liability

Supervisory Authority.

Third country: any country outside the EU.

Transfer: the transfer of personal data from the controller or processor to a legal entity outside the EU.