PRIVACY NOTICE

Concerning the Rights of the Data Subject Regarding the Processing of Personal Data

---

Table of Contents

• Introduction
• Chapter I - Identification of the Data Controller

• Chapter II - Identification of Data Processors

  • 1. IT Service Provider
  • 2. Accounting Service Provider
  • 3. Postal Services, Delivery, Parcel Shipping
  • 4. Security Service Provider

• Chapter III - Data Processing Related to Employment

  • 1. Employment and Personnel Records
  • 2. Data Processing for Suitability Examinations
  • ...

• Chapter IV - Data Processing Related to Contracts

  • 1. Processing of Contracting Partners’ Data
  • 2. Contact Information of Corporate Client Representatives
  • ...
• Chapter V - Data Processing Based on Legal Obligations
• Chapter VI - Summary of Data Subject Rights
• Chapter VII - Detailed Information on Data Subject Rights
• Chapter VIII - Submission of Data Subject Requests and Actions by the Data Controller

---

Introduction

The European Parliament and Council’s Regulation (EU) 2016/679, hereafter referred to as the Regulation, mandates the Data Controller to ensure that all information provided regarding personal data processing is concise, transparent, understandable, and accessible.

The Company fulfills its statutory obligations by providing this notice.

---

Chapter I - Identification of the Data Controller

• Company Name: Homoky Hotels Tiliana Hotel Kft.
• Headquarters: 1021 Budapest, Hárshegyi út 1-3
• Company Registration Number: 01-09-296382
• Tax Number: 25921580-2-41
• Representative: László Endre Homoky
• Phone Number: +36 1 391 0027
• Email Address: info@hoteltiliana.hu
• Website: www.tiliana.hu

---

Chapter II - Identification of Data Processors

1. IT Service Provider

• Company Name: Dobom Alkotó Tér Kft.
• Headquarters: 8296 Hegyesd, Petőfi utca 28.
• Phone Number: +36 30 276 2485
• Email Address: info@dobom.hu

2. Accounting Service Provider

• Company Name: BÁNFFY-HÁZ Bt.
• Headquarters: 6000 Kecskemét, Árok utca 39 FSZ/5
• Phone Number: +36 70 60 43329

3. Postal Services, Delivery, Parcel Shipping

These providers receive data necessary for product delivery and use this information for delivery purposes.

4. Security Service Provider

Conducts workplace video surveillance and access control, alongside associated data processing activities.

---

Chapter III - Data Processing Related to Employment

1. Employment and Personnel Records

   • Data Processed: name, birth name, date of birth, mother’s name, address, nationality, etc.
   • Legal Basis: Legitimate interest.
   • Retention Period: 3 years post-employment.

2. Suitability Examinations

   • Data Processed: Suitability and required conditions.
   • Purpose: Employment maintenance and suitability determination.

3. Applicant Data

   • Data Processed: name, qualifications, phone number, etc.
   • Retention Period: Until assessment completion, or upon applicant request.

---

Chapter IV - Data Processing Related to Contracts

1. Processing of Contracting Partners' Data

   • Purpose: Contract formation, performance, termination.
   • Retention Period: 5 years post-termination.

2. Corporate Client Representative Data

   • Purpose: Business communication.
   • Retention Period: 5 years after business relationship ends.

3. Customer Service Call Recording

   • Retention Period: 5 years.

4. Website Visitor Data

   • Cookies: Temporary and persistent for website functionality.
   • User Choice: Can adjust browser settings to manage cookie use.

---

Chapter V - Data Processing Based on Legal Obligations

1. Tax and Accounting

   • Retention Period: 8 years post-legal relationship termination.

2. Archival Law Compliance

   • Purpose: To preserve documents of permanent value.
   • Retention: Until transfer to a public archive.

---

Chapter VI - Summary of Data Subject Rights

1. Right to Prior Information
2. Right of Access
3. Right to Rectification
4. Right to Erasure ("Right to be Forgotten")
5. Right to Restriction of Processing
6. Right to Data Portability
7. Right to Object
8. Right Not to be Subject to Automated Decision-Making

---

Chapter VII - Detailed Information on Data Subject Rights

Right to Prior Information

The data subject is entitled to information regarding the processing of their data before it begins.

Right of Access

The data subject may request access to their data and relevant information.

Right to Rectification

The data subject may request corrections to inaccurate personal data.

Right to Erasure

The data subject may request data deletion if it is no longer necessary for processing.

Right to Restriction of Processing

The data subject may request processing restrictions under certain conditions.

---

Chapter VIII - Submission of Data Subject Requests and Actions by the Data Controller

1. Response Time: Within one month, extendable by two months if necessary.
2. Electronic Requests: Responses are generally provided electronically, if requested.
3. Fees: Free of charge unless requests are unfounded or excessive.
4. Identification: The Data Controller may request additional identification if needed.

Homoky Hotels Tiliana Hotel - 2018