Privacy
Policy

1. Details of the Data Controller

2. Principles of Data Processing

The Data Controller processes personal data lawfully, fairly and transparently, for specified and legitimate purposes, in accordance with the principles of data minimisation, accuracy, integrity and confidentiality.

3. Categories of Personal Data Processed

Contact Information

• name;
• telephone number;
• e-mail address.

Booking Information

• pick-up address;
• destination;
• date and time of travel;
• number of passengers;
• number of items of luggage;
• flight number in the case of airport transfers;
• comments and additional information provided by the Customer.

Billing and Technical Information

• billing name, billing address and, in the case of corporate customers, tax number;
• IP address, browser type and operating system;
• website usage information and cookie identifiers.

4. Purposes of Data Processing

Personal data may be processed for the purposes of responding to enquiries, preparing quotations, managing bookings, providing passenger transport services, maintaining customer relationships, fulfilling invoicing and accounting obligations, handling complaints, operating and securing the website, performing statistical analysis and, where the appropriate consent has been obtained, carrying out marketing activities.

5. Legal Bases for Processing

Performance of a Contract

Personal data may be processed pursuant to Article 6(1)(b) of the GDPR where processing is necessary for taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract, including in connection with quotation requests, bookings and the provision of services.

Compliance with a Legal Obligation

Personal data may be processed pursuant to Article 6(1)(c) of the GDPR where processing is necessary for compliance with a legal obligation to which the Data Controller is subject, including accounting, invoicing and taxation requirements.

Consent

Personal data may be processed pursuant to Article 6(1)(a) of the GDPR where the data subject has provided consent, including for marketing cookies, newsletters or remarketing activities.

Legitimate Interests

Personal data may be processed pursuant to Article 6(1)(f) of the GDPR where processing is necessary for the legitimate interests pursued by the Data Controller, including maintaining website and system security, preventing fraud and ensuring reliable system operation.

6. Data Retention Periods

7. Data Processors and Data Transfers

In connection with the operation and provision of its services, the Data Controller may engage data processors and third-party service providers, including accounting service providers, hosting providers, Microsoft 365 services, Google services and tools provided by Meta Platforms.

8. Google Analytics 4

The website may use Google Analytics 4 to compile website usage statistics, analyse website performance and improve the user experience. Where applicable, data collected through this service is processed in accordance with the relevant privacy and consent settings.

9. Google Tag Manager

The website may use Google Tag Manager to manage measurement codes, analytics tools and marketing technologies. Google Tag Manager itself is used primarily for deploying and managing such technologies.

10. Google Maps

Google Maps services may be used on the contact page and other parts of the website. When Google Maps is used, Google may process technical information and place cookies or similar technologies on the user's device in accordance with its own privacy practices and the user's consent settings.

11. Meta Pixel

The website may use Meta Pixel technology to measure advertising effectiveness, support remarketing activities and optimise advertising campaigns. Where consent is legally required, Meta Pixel is activated only after the visitor has provided the appropriate consent.

12. Cookies

The website uses cookies and similar technologies. Detailed information about the categories, purposes and use of cookies is provided in the separate Cookie Policy.

13. Rights of Data Subjects

Subject to the conditions set out in applicable data protection legislation, data subjects may exercise the following rights in relation to their personal data:

• the right to obtain information about the processing of their personal data;
• the right of access to their personal data;
• the right to rectification of inaccurate or incomplete personal data;
• the right to erasure of personal data where the applicable legal conditions are met;
• the right to restriction of processing;
• the right to object to processing where applicable;
• the right to data portability where applicable;
• the right to withdraw consent at any time where processing is based on consent.

14. Right to Lodge a Complaint

If you believe that the processing of your personal data infringes applicable data protection legislation, you have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information.

15. Amendments to this Privacy Policy

The Data Controller reserves the right to amend this Privacy Policy. Any amendments shall take effect on the date on which the updated Privacy Policy is published on the website.

16. Contact