The recording of bookings on booking.danubiushotels.com is managed by Sceptre Hospitality Resource (“SHR”), a USA company. Our contractual arrangements with SHR incorporate suitable safeguards over your personal data in order to protect the rights you have under EU legislation. In particular, SHR is registered for the “EU U.S. Privacy Shield”. This is an intergovernmental agreement between the EU and the USA and is recognised by the EU Commission as ensuring enforceable protection of personal data equivalent to data protection standards in the EU. The EU Commission decision can be seen on their official website, for example their press release of 18 October 2017 at https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/eu-us-privacy-shield .
Where we transfer your personal data to a country outside the EU, the appropriate safeguards we have in place to protect your rights.
Sceptre is certified for the “EU – US Privacy Shield”. This is an intergovernmental agreement between the EU and the USA and is recognised by the EU Commission as ensuring protection of data equivalent to data protection standards in the EU.
In order to provide the requested services (accommodation, wellness etc.) (on a contractual basis) we also process the following data: contact details, loyalty programme registration number, and mode of payment, debit card details, room number, and number of guests.
The Company’s Corporate Programme is an exclusive service provided for the hotels’ corporate partners—legal persons—with the purpose of providing discounts to returning guests.
The personal data shall be processed for as long as the data subject participate in the given programme. The data given on the application form shall be processed until your child’s 18th birthday. Membership status in the Loyalty Programme shall become inactive within 3 (three) years after the date of the last hotel service used. Membership status of natural/legal persons in the Corporate Programme shall become inactive within 2 (two) years after the date of the last hotel service used. The Company shall retain the members’ personal data for the period of time defined in the provisions of the relevant tax and accounting laws, and shall delete them after that period.
You can inquire about the balance and the expiry date of the Gift Card at our websitewww.danubiushotels.com/hu/online-ajandekkartya-vasarlas, at www.gift-card.hu/index.php/kartyaadatok, at Accepting hotels, at Danubius Customer Service, or via Cardnet Zrt.’s Call Center (+36 1 346-0500) any time.
Debit card data shall be encrypted, and shall be revealed exclusively for transaction purposes and only to authorized persons. After the departure from the hotel, these data shall not be revealed, access to these data is prevented. The data shall be deleted after 8 years.
“Session cookies” are only stored on the computer or smart device temporarily while the visitor is using the website; these cookies allow the system to “remember” certain information, so the visitor will not have to provide them every time they open the website. The validity period of session cookies is limited to the duration of the use of the website; the purpose of the use of session cookies is to prevent the loss of data (for example when filling in a longer form). At the end of each use of the website – each session – as well as when the browser is closed cookies of this type are automatically deleted.
“Persistent cookies” will remain stored on the computer or smart device after the website is closed. Cookies of this kind are used to allow the website to identify returning visitors. Persistent cookies identify returning visitors by associating the server-side ID with the user, therefore they are an essential part of the functionality of websites which require the users to be authenticated – for example on web stores, netbanking websites and webmail sites. The persistent cookies do not contain personal data, they can only be used for the unique identification of users by associating them with the proper item in the database stored on the web server of the website. The inherent risk of using persistent cookies is that they can only identify the web browser as opposed to the user themselves, so if a user uses a public access point – such as a computer in an Internet café or a public library – to log in to a web store and fails to log out of the store at the end of their session another person can have unauthenticated access to the web store, being falsely identified by the system as the original (and therefore authenticated) user.
– We ask, via e-mail, a system notification or in a letter, the applicants we did not select for the job whether they wish their application to be retained in our applicant database for a period of one year. Upon receiving a negative or no answer within 30 days of the inquiry the application and data of the applicant is deleted from the system.
– We transfer the data of the applicant selected for the job, to our employee database, and delete them from the applicant database.
The only personal data held by Danubius Hotels Zrt. is, in its function as employer, for a small number of senior staff. Dr. Helga Sztanó also has responsibility for data protection for Danubius Hotels Zrt.
For the purpose of profile cleaning, Danubius hotels have been divided into two divisions: City Division comprises of city hotels while SPA Division manages health spa & wellness hotels. City hotels are continued to be operated by Danubius Zrt, while the operation of health spa & wellness hotels has been taken over by Arisende s.r.o. of Prague. As a result, Danubius Zrt and Arisende s.r.o. act as joint controllers for the hotels indicated below as per the provisions of this Policy. Dr Helga Sztanó is responsible for issues of data protection arising in the course of joint data processing.
Pseudonymisation Encrypting or otherwise holding personal data in a way in which it cannot be linked to a specific data subject without additional information. The additional information has to be kept separately and protected by technical and organisational measures to prevent its unauthorised use.