Privacy policy

How we handle your personal data on the website and during online booking.

Effective from 1 November 2026. This notice covers the processing of personal data on the Hotel Barbizon website (barbizon.hu). Information about data processing related to your stay (check-in, guest register) is available at the reception.

1. Data controller

Name: Barna Körtvélyfáy, sole trader
Registered office: Szódaház u. 14., 4431 Nyíregyháza-Sóstófürdő, Hungary
Tax number: 73848264-2-35
Accommodation: Hotel Barbizon, Szódaház u. 14., 4431 Nyíregyháza-Sóstófürdő, Hungary
E-mail: mail@barbizon.hu, phone: +36 30 273 6646

2. What data we process and why

Contacting us by e-mail or phone

If you e-mail or call us, we use the data you provide (name, e-mail, phone number, content of the message) to answer your enquiry and send an offer. Legal basis: steps prior to entering into a contract (GDPR Art. 6(1)(b)) or your consent. Retention: up to 1 year after the matter is closed; if a contract is concluded, until the end of the accounting and contractual limitation periods.

Online room booking

Online bookings are handled by the Hotelsystem booking engine embedded in the website. We process the data provided for the booking (name, contact details, billing details, dates of stay, number of guests, comments) to fulfil the booking. Legal basis: performance of a contract (GDPR Art. 6(1)(b)); for billing data, legal obligation (GDPR Art. 6(1)(c), Hungarian Accounting Act). Retention: accounting records for 8 years, other data until contractual claims expire (5 years). Card data for online payments is processed by the payment provider; we have no access to it.

Cookies and similar technologies

Necessary storage: your chosen language, when the pop-up was shown and your cookie settings are stored in your browser (localStorage). These are needed for the site to work, require no consent and send no personal data to us.
Statistics - Google Analytics 4 (Google Ireland Ltd.): anonymised usage data (pages viewed, device, approximate location). Loaded only with your consent. Retention: 14 months.
Marketing - Meta (Facebook) Pixel (Meta Platforms Ireland Ltd.): measures your visit and the start or completion of a booking, and allows targeted ads to visitors on Facebook/Instagram. Loaded only with your consent.

Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time via the "Cookie settings" link at the bottom of the page. Withdrawal does not affect the lawfulness of earlier processing.

Our Facebook page

Communication on our Facebook page (facebook.com/hotel.barbizon) is also subject to Meta's own data policy. We are joint controllers with Meta for the page insights.

3. Processors

Hosting provider: UNAS Online Kft., Kőszegi út 14., 9400 Sopron, Hungary - operation of the website and admin.
Hotelsystem booking engine: Hotelsystem Kft., Őz köz 37. fszt. 1., 4400 Nyíregyháza, Hungary - online booking, hotel management.
Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland) - Google Analytics (with consent only).
Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland) - Meta Pixel (with consent only).

Google and Meta may transfer data to the United States on the basis of the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

4. Your rights

You may request access to, rectification or erasure of your data, restriction of processing and data portability. You may object to processing based on legitimate interest and withdraw your consent at any time. Please send your request to mail@barbizon.hu; we reply within one month.

5. Remedies

If you believe your data protection rights have been infringed, you may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9-11., 1055 Budapest, ugyfelszolgalat@naih.hu, +36 1 391 1400, naih.hu) or with the supervisory authority of your country of residence, or go to court. Please contact us first so that we can resolve the issue directly.

6. Data security

The website is served over an encrypted (HTTPS) connection; the admin area is password-protected and accessible only to authorised staff.