Data Protection
Information on the processing of personal data provided on the website www.piccolo.hu
Dear Visitor,
Piccolo Vendéglő pays particular attention to ensuring that, in the course of its data processing activities, it acts in accordance with Act CXII of 2011 on Informational Self-Determination and Freedom of Information, other applicable data protection legislation, and the data protection practices developed in the course of the activities of the Hungarian National Authority for Data Protection and Freedom of Information.
1. Details of the data controller:
- Name of the data controller: Piccolo Vendéglő, Takács Pál e.v.
- Registered office: H-8900 Zalaegerszeg, Petőfi S. u. 16.
- E-mail:
This email address is being protected from spambots. You need JavaScript enabled to view it. - Website: https://piccolo.hu
2. Details of the data processor:
- Name of the data processor: Pix-L Kiadványszerkesztő és Kiadó Betéti Társaság
- Registered office: 8900 Zalaegerszeg, Hosszú-Jánka u. 110.
- E-mail:
This email address is being protected from spambots. You need JavaScript enabled to view it.
3. Purpose of data processing
The website allows visitors to make room reservations, table reservations and requests for quotations. In order to use these services, visitors are required to provide certain personal data.
The purpose of data processing is to identify incoming reservations and requests for quotations and to enable communication with prospective customers.
The personal data provided through the room reservation form, table reservation form and request-for-quotation form are processed for the purpose of handling the relevant reservation or request for quotation, maintaining contact with the data subject, and providing the related service.
In the case of online bank card payment related to a room reservation, the Saferpay payment system also participates in the processing necessary to complete the payment. Piccolo Vendéglő does not process or store bank card details.
The form entitled “Check-in” is completed electronically on site by guests arriving at the accommodation. The processing of the data provided on the form serves the purpose of carrying out the administration related to accommodation check-in, as well as fulfilling the related record-keeping and statutory obligations electronically.
4. Legal basis of data processing
The processing of personal data described in this Privacy Notice is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, GDPR), as well as by the provisions of Act CXII of 2011 on Informational Self-Determination and Freedom of Information.
The legal basis for processing data related to room and table reservations is primarily the processing necessary for the performance of a service requested by the data subject or for taking steps at the request of the data subject prior to entering into a contract.
The processing of personal data provided in a request for quotation is necessary for preparing the quotation and maintaining contact with the person requesting it.
Where the legal basis for processing personal data is the consent of the data subject, the processing is based on the data subject’s voluntary, specific and informed consent. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
The legal basis for processing required by law is compliance with a legal obligation to which the data controller is subject.
5. Categories of data processed
The personal data processed may vary depending on the individual forms and the services used.
These may include, in particular:
- name,
- telephone number,
- e-mail address,
- address details, where their provision is necessary,
- data related to the reservation,
- data provided in the request for quotation,
- other information voluntarily provided by the data subject through the form.
During a room reservation, additional data necessary for fulfilling the reservation may also be processed, in particular the dates of arrival and departure, the number of persons included in the reservation, the selected room and any additional services.
During online bank card payment, the data necessary to process the payment are handled by the Saferpay payment system. Piccolo Vendéglő does not have access to or store the full bank card details.
Use of e-mail addresses: The Data Controller pays particular attention to the lawful use of the e-mail addresses it processes and uses them only in the manner specified below. E-mail addresses are primarily processed for identifying the data subject and for establishing contact.
Based on the data submitted and the e-mail address provided, the Data Controller is entitled to contact the data subject.
6. Retention period
The retention period of personal data depends on the purpose of processing.
Personal data provided in connection with room reservations, table reservations and requests for quotations are processed until the relevant transaction, reservation or request for quotation has been completed, or for as long as necessary to enforce any claims arising from them.
Guest data recorded during accommodation check-in that are processed as required by law must be retained by Piccolo Vendéglő for the period prescribed by law, until the last day of the first year following the date on which the data came to the attention of the data controller. During this period, such data cannot be deleted upon the data subject’s request.
After the mandatory retention period has expired, the data subject may request the deletion of their personal data. The data controller does not apply automatic deletion; data are deleted at the request of the data subject or when the purpose of processing ceases to exist.
If another law requires certain data to be retained for a longer period, the data controller shall retain such data for the period prescribed by that law and shall act accordingly.
Where the legal basis for processing is the data subject’s consent, it may be withdrawn at any time by e-mailing
7. Access to data
The submitted data are processed exclusively by employees of Piccolo Vendéglő who are authorized to do so.
Except where required by law, Piccolo Vendéglő does not disclose the received data to third parties for statistical or other purposes and does not make the data known to the public.
In the case of online bank card payment related to a room reservation, the data necessary for processing the payment may be transmitted to the Saferpay payment system. Piccolo Vendéglő does not process or store bank card details.
The data controller shares personal data with data processors and service providers only to the extent necessary for providing the relevant service.
8. Data security
Piccolo Vendéglő takes particular care to store and safeguard the data received. The electronic database is protected by passwords, and access to it is protected against unauthorized access, alteration, disclosure, deletion or destruction through appropriate access authorization levels.
To ensure data security, the data controller restricts access to the IT systems and personal data used by means of appropriate authorization levels and strives to ensure that personal data can only be accessed by persons authorized to process them.
9. Rights of the data subject and legal remedies
9.1. Under the conditions laid down by applicable law, you have the right to:
- request information from the data controller and access to your personal data;
- request the rectification of your personal data;
- request the deletion of your personal data where the statutory conditions are met;
- request restriction of the processing of your personal data;
- exercise your right to data portability under the applicable legal conditions;
- object to the processing of your personal data where the statutory conditions are met.
9.2. Where processing is based on the consent of the data subject, the data subject may withdraw their consent at any time by e-mailing
9.3. If you believe that the processing of your personal data has violated or is violating applicable data protection legislation, you have the right to lodge a complaint with the supervisory authority.
The data subject may contact the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Hungarian National Authority for Data Protection and Freedom of Information
Registered office: 1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, P.O. Box 9.
Website: www.naih.hu
E-mail:
The data subject may also enforce their rights before a court.
10. Use of cookies
The Website may use cookies to ensure proper operation, improve the user experience, measure visitor traffic, and support advertising and marketing activities.
Some cookies are strictly necessary for the operation of the Website, while others are used to measure visitor traffic, analyze user behavior, and support advertising and marketing activities.
Third-party services may also be used in the operation of the Website, in particular Google Analytics, Google Ads and Google Maps. In certain cases, these services may use cookies and other online identifiers.
For the use of cookies that are not strictly necessary, and for the data processing carried out through such cookies, the Website provides prior information and, where required, requests consent in accordance with applicable legislation.
The User may allow or refuse the use of cookies through the settings provided for this purpose on the Website and may modify previously given consent.
11. Miscellaneous provisions
11.1. Piccolo Vendéglő processes the personal data provided to it to the extent necessary and for lawful purposes. The person providing the data is responsible for the adequacy, accuracy and validity of the information provided.
11.2. Protection of minors: The information available on our Website is not intended for minors. In the course of our data processing activities, we do not knowingly collect data from persons who are minors.
11.3. Piccolo Vendéglő reserves the right to amend this Privacy Notice in the event of changes in applicable legislation or changes to the operation of the Website or the data processing activities. The currently applicable Privacy Notice is available at https://piccolo.hu/adatvedelem.