Privacy Statement

When creating the present Privacy Statement we highly considered Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation ‘GDPR’) as well as the provisions of Act CXII of 2011 on information, self-determination
and freedom of information (hereinafter referred to as ‘Privacy Act’)

1. SCOPE OF PROCESSED PERSONAL DATA

Visiting (browsing on) our website does not require registration in general, but for using certain services on the website (e-mailing, request for an offer and reservation) it is necessary to give some personal data.

When subscribing for the newsletter, requesting for an offer, booking and requesting for information and brochure, it is voluntary to give certain part of the required data, while the data lines marked with a star (*) are obligatory, which also means that by refusing to give these data one accepts the possibility that parts of the portal and certain services of MAHART Ltd. will not be accessible as well as reservation will not be possible to make.

The scope of personal data processed by MAHART Ltd.:

• for subscribing for newsletters: name, e-mail address
• for registration: name, user ID, e-mail address
• for reservation and using services: name, phone number, e-mail address, invoice address, postal address, number of passengers, name of passengers, gender of passengers, passengers’ date and place of birth, their age, nationality, numbers of identification documents, number of valid inland boating licence
• for information and requesting for brochure: name, e-mail address, postal address
• for staying on board: route covered, distance, location of passengers concerned
• for staying at mooring points: self-image
  
  

2. LEGAL BASE, PURPOSE AND DURATION OF DATA PROCESSING

In the case of subscription for newsletters, data processing is based on the consent of the data subjects, and the data are used and stored exclusively for delivering MAHART Ltd.’s newsletter service as well as promoting certain services and discounts of MAHART Ltd. (marketing). In this case the legal base of data processing will be as defined in GDPR article 6 paragraph (1) a). These data are processed until unsubscribing from the newsletter, and if you unsubscribe, your data will be erased. Unsubscribing can be carried out via the ‘unsubscribe’ link embedded in the newsletter or by sending a corresponding request to info@nyaralohajozas.hu .

In the case of registration, data processing is based on the consent of the ones in concern, and the data are used and stored exclusively for creating a user account that enables reservation relating MAHART Ltd. services and stores reservation data of the account holder. In this case the legal base of data processing will be as defined in GDPR article 6 paragraph (1) a). These data are processed until deletion of the account by the account holder.

In the case of reservation the legal base of data processing will be the fulfilment of the contract, that is, data processing is needed for the fulfilment of a contract in which one of the Parties is the data subject, or it is needed for measures requested by the data subject before contracting. In this case the legal base of data processing will be as defined in GDPR article 6 paragraph (1) point b). Data of the data subject are processed exclusively in order to fulfil the service defined in the reservation submitted by filling in the reservation form available on the website of controller (www.nyaralohajozas.hu) or of data processor (www.boat-renting-nicols.co.uk) or by sending it to the postal address of controller, or by submitting it personally on paper at the mooring points operated by controller, or arranged by phone or sent by e-mail. Data of the people concerned will be managed until the termination of the contract.

Please note that certain personal data of the people on board obtained during the reservation process (name, gender, age, nationality) may be forwarded by MAHART Ltd. to emergency services, local waterways authorities, rescue services or any other legal entities or authorities for the purpose of searching and rescuing. In this case the legal base of data processing will be as defined in GDPR article 6 paragraph (1) point b), namely, in this case, data processing is necessary for the protection of the vital interests of the data subjects or of other natural persons.

In the case of information and requesting for brochure, data processing is based on consent of the data subjects, and these data will be processed exclusively for the information of data subject and for fulfilling the request for brochure sent to the e-mail address (info@nyaralohajozas.hu) available at the website of controller (www.nyaralohajozas.hu) or sent to the postal address of MAHART Ltd.. In this case the legal base of data processing will be as defined in GDPR article 6 paragraph (1) point a). If the appropriate information was given to the data subject and he/she does not require any other information, his/her data will be deleted. If you decide to withdraw your approval of our data processing, we kindly ask you to send your relating declaration via e-mail to info@nyaralohajozas.hu.

In the case of staying on board the legal base of data processing is the vindication of MAHART Ltd.’s lawful interests (GDPR article 6 paragraph (1) point f)). For the purpose of property and personal protection as well as for controlling the route of the boat out of concerns of nature protection, and for the purpose of searching and rescuing, MAHART Ltd. applies GPS navigation system on its boats. Lawful interests of MAHART Ltd. are ones relating protection of its highly valuable boats and of the physical integrity of passengers as well as ones relating nature conservation. GPS data will be deleted within 15 (fifteen) days after returning the rented boat.

In the case of staying at mooring points the legal base of data processing is the vindication of MAHART Ltd.’s lawful interests (GDPR article 6 paragraph (1) point f)). For the purpose of property and personal protection, MAHART Ltd. applies electronic monitoring system (camera system). Lawful interests of MAHART Ltd. are ones relating protection of its highly valuable mooring points and boats as well as of the physical integrity of passengers and working personnel. Recordings of the electronic monitoring system will be preserved for up to 3 (three) days from recording. Preservation of the recordings for a longer period than 3 days may only occur closely related to a specific purpose, the reason for which must be verified by the Controller.

Please note that – within legal boundaries – for the purpose of vindicating MAHART Ltd.’s lawful interests, your data may be processed without any further consent, even after the termination of the above legal bases as well as after the withdrawal of your approval until the end of the general civil law limitation period at the latest, which is 5 (five) years after the termination of the contract. In this case the legal base of data processing will be as defined in GDPR article 6 paragraph (1) point f).

Please also note that in accordance with the provisions of Act C of 2000 on accounting (“Szt.”) and of Act CL of 2017 on the rules of taxation (“Art.”) relating document preservation, the invoice of service issued and sent to the client (and thus the personal data in the invoice) will be preserved by MAHART Ltd., according to its liability to preserve documents, until the duration set in Szt. paragraph 169, that is 8 (eight) years. Within this period MAHART Ltd. does not do any operation with these data except from preserving them.

 

3. DATA AND ACCESSIBILITY OF CONTROLLER

MAHART Hungarian Shipping Company with Limited Shares

• Head Office: 1211 Budapest, Weiss Manfréd út 5-7.
• Registration number: 01 10 040095
• Fiscal code: 10008999-2-43
• Representative: Sztilkovics Szávó Chief Executive Officer
• E-mail address: info@nyaralohajozas.hu
• Homepage: www.nyaralohajozas.hu

Personal data of clients are accessible for the PR manager, for sales employees, for the staff of the base ports as well as for employees dealing with services claimed by the client (dispatcher, customer service), and they can access to these data only in relation to carrying out the services, and only to the necessary extent.

4. DATA OF DATA PROCESSOR, FORWARDING DATA

1. MAHART Ltd. utilizes storage provider in relation with subscribing for the newsletter, requesting for offer, reservation, asking for information and brochure on the webpage (nyaralohajozas.hu) Task of the storage provider are operating the webpage, operating and filling in the messaging and reservation form and recording personal data given in order to subscribe for the newsletter.

Data of storage provider / data processor:

• Pozitivo Digital Kft.
• Head Office: 1135 Budapest, Szent László út 28-30. 7/89.
• Fiscal code: 13356466-2-41
• Registration number: 01-09-731103 - 109731103
• Postal address, office: 1065 Budapest, Lázár u. 18. 2/18.
• Website: pozitivo.hu

1. We also utilize a data processor concerning reservation via boat-renting-nicols.co.uk webpage, for registering data obtained during the registration process and for forwarding them to MAHART Ltd.

Data of data processor:

• CONSTRUCTIONS NAUTIQUES NICOL’S YACHT
• Head Office: F-49300 Cholet, Le Puy Saint Bonnet, Route de Cholet, France
• Registration number: 338 576 374 RCS Angers
• Fiscal code: FR 36 338 576374
• Website:www.boat-renting-nicols.co.uk
• E-mail address:info@nicols.com

1. In order to fulfil its legal liability of book keeping and accountancy, MAHART Ltd. forwards to its accountant those data of the clients which must be presented on the invoice issued in relation with a contract for a service (name, address).

Data of data processor:

• Csörögi Gábor entrepreneur
• Address: 1106 Budapest, Vadszőlő utca 21.
• Fiscal code: 66061463-1-42 / HU66061463
• Registration number: 31374090 

1. Certain personal data of the people on board (name, gender, age, nationality) may be forwarded by MAHART Ltd. to emergency services, local waterways authorities, rescue services or any other legal entities or authorities for the purpose of searching and rescuing.
   
   

5. COOKIES

A ‘cookie’ is a small data file (small-size data exchange between server and user), which is sent by the website to the hard disk of the user’s computer. MAHART Ltd. and its providers send cookies if you visit our website, or other websites displaying our advertisements, if you ask for or customize information as well as if you register for certain services.

MAHART Ltd. uses search and Flash cookies for example to find out whether you have already visited our website, and these cookies help us identify functions/services that you are the most interested in. Search and Flash cookies enhance the on-line experience by recording information preferred by you while visiting a webpage. Neither search nor Flash cookies are able to identify you personally.

Cookies are generally distinguished as ‘persistent’ and ‘non-persistent’ ones valid only for one session. The latter only stay on the computer until the closing the browser. Persistent cookies remain on the computer until their deletion or expiration. Most browsers automatically accept cookies as default, but by modifying the security settings of your search engine, you can refuse or select them.

In the Help and Support section of your browser you can find information about the most popular browsers and cookies.

Cookies used by MAHART Ltd.:

Analyser cookies:

When visiting MAHART Ltd.’s website an anonym cookie generated by a web analysing software helps to define whether the user has already visited the website. These kind of cookies help to define the number and location of visitors and the webpages they have checked. The data obtained this way are used to survey the popularity of the pages and finally to improve the quality of these pages. Analyser cookies are suitable for gathering statistic data, but not for identifying users.

Cookies targeting the operation of websites:

Certain cookies store data about which tools and functions the users use on a website. For example the cookie used for the Partner Gateway stores the user name which the user signed in with, so that this field can be automatically filled in at the next sign-in. These cookies do not store personal data of any kind.

Cookies storing geographical data:

Location related information is displayed with the help of cookies storing geographical data. These cookies find out the location of the user analysing data from the browser.

Can I turn off cookies?

Certainly. You can set your browser not to accept cookies or to accept cookies only from certain websites.

6. DATA PROCESSING RELATED RIGHTS AND LEGAL REMEDIES

The data subject can claim Controller for:

(a) information about processing own personal data;

(b) access to personal data;

(c) correction of personal data;

(d) restriction of processing personal data according to GDPR article 18.paragraph (1);

(e) erasure or blocking of personal data – except for obligatory data processing.

In accordance with GDPR article 7 paragraph (3) – provided that the legal base of data processing is the consent of the data subject – he/she is entitled to withdraw his/her consent concerning data processing. Withdrawal however does not affect the lawfulness of data processing before withdrawal. The data subject can withdraw his/her consent by sending an express declaration to Controller’s accessibility displayed in the present Statement (info@nyaralohajozas.hu).

Data subject’s claim for information, correction, blocking or erasure is expected to our electronic address info@nyaralohajozas.hu. Upon written claim of the data subject, within 15 days, we provide written information about the processing of his/her personal and other data at our disposal, his/her data will be immediately corrected, and, on request, they will be erased with no delay.

In accordance with GDPR article 18, on request of the data subject, Controller is liable to restrict processing data in any of the following cases:

 

1. the data subject challenges the accuracy of data, in this case restriction applies to the period of time which enables Controller to check the accuracy of personal data;
2. data processing is unlawful, the data subject objects to the erasure of data, and requests for the restriction of processing data instead;
3. Controller does not need the personal data for processing any longer but the data subject does for submitting, vindicating or protecting legal claims; or
4. the data subject, in accordance with GDPR article 21 paragraph (1), has objected to data processing; in this case, restriction applies to the period of time until it is concluded that Controller’s lawful justification is prior to that of the data subject.

In accordance with GDPR article 20 paragraph (1), the data subject has the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided. The data subject has the right – where technically feasible – to have the personal data transmitted directly from one controller to another.

In accordance with GDPR article 11 paragraph (1) the data subject has the right – for personal reasons – to object to the management of his or her personal data according to GDPR article 6 paragraph (1), including profiling in accordance with the provisions mentioned. In this case, controller cannot process the personal data any longer, unless they prove that data processing is justified by such enforcing lawful reasons which are prior to the interests, rights and liberties of the data subject, or by ones which are related to submitting, vindicating or protecting legal claims.

The data subject can initiate an investigation by reporting to the Hungarian National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/C; telefon: +36-1-391-1400; fax: +36-1-391-1410; e-mail: ugyfelszolgalat@naih.hu) with reference to judicial injury, or to imminent peril of judicial injury in relation with processing personal data.

In the case of violation of his or her rights, the data subject can turn to court in relation with data processing, allowing that the court process can begin at the court of his or her residence or place of stay.

Data processing related rights and judicial remedies are contained in detail in GDPR chapters III and VIII as well as in Privacy Act chapters II/A and VI.

7. ALL OTHER FACTS AND DATA IN RELATION WITH DATA PROCESSING

MAHART Ltd. utilizes every technical and other tool available to securely store and guard data as well as to prevent abuse of data. In order to avoid unauthorized use and abuse of the processed personal data, MAHART Ltd. applies extensive technical and operational security measures.