Privacy Policy

providing information about our data management and protection practices for website visitors and service users.

1. What principles do we follow in our data management practices?

Our company follows the following principles in its data management practices:

  • We process personal data lawfully, fairly, and transparently for you.
  • We collect personal data only for specified, explicit, and legitimate purposes, and we do not process it in ways incompatible with those purposes.
  • The personal data we collect and process are adequate, relevant, and limited to what is necessary for the purposes of the processing.
  • Our company takes all reasonable measures to ensure that the data we process is accurate and, where necessary, up-to-date. Inaccurate personal data is promptly deleted or corrected.
  • We store personal data in a way that allows you to be identified only for as long as it is necessary to achieve the purposes of data processing.
  • We ensure the proper security of personal data through appropriate technical and organizational measures to protect against unauthorized or unlawful processing, accidental loss, destruction, or damage.
  • Our company handles your personal data:
  • We process your personal data based on your prior information and voluntary consent, and only to the extent necessary and always for specific purposes, meaning we collect, record, organize, store, and use it.
  • In certain cases, the processing of your data is based on legal requirements and is mandatory, in such instances, we will specifically draw your attention to this fact.
  • Additionally, in certain cases, the processing of your personal data is based on the legitimate interest of our company or a third party, such as the operation, development, and security of our website.

2. Who are we?

Company name: MINARIC Bt.
Registered office:: 1052 Budapest, Károly körút 24. II/3.
Website: https://mn-travel.hu
Mailing Address: 1052 Budapest, Károly körút 24. II/3.
Email Address: info@mn-travel.hu
Tax Number: 28711304-2-41

Our company is not required to appoint a Data Protection Officer under Article 37 of the GDPR.

Our company's hosting provider is:

Hosting provider's name: Rackhost Zrt.

The hosting provider's registered office: 6722 Szeged, Tisza Lajos körút 41.

Hosting provider's website: www.rackhost.hu

The email address of the hosting provider: info@rackhost.hu

Our company uses the following data processors in the course of data processing – in order to provide high-quality service to our customers:

Data Controller (1): MINARIC Bt.

Address (1): 1052 Budapest, Károly körút 24. II/3.

Responsibilities: All activities

If we modify the scope of our data processors, we will update the changes in this notice.

The data we process:

We only request personal data from visitors to our website if they wish to register, log in, or participate in a contest.

The personal data provided for registration or the use of our marketing services will not be linked, and identifying our visitors is not our primary goal.

For any questions related to data processing, you can request further information via the email address info@mn-travel.hu or by mail. We will send our response to the contact details you provided within 15 days (but no later than 1 month).

3. What are cookies and how do we handle them?

Cookies are small data files (hereinafter: cookies) that are placed on your computer through the use of a website. They are saved and stored by your internet browser. Most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow cookies to be downloaded and used by default. However, it is up to you to refuse or disable cookies by adjusting your browser settings, and you can also delete cookies that are already stored on your computer. For more information on the use of cookies, you can refer to the "Help" section of the respective browser.

There are certain cookies that do not require your prior consent. We provide brief information about these cookies when you first visit our website. These include authentication, multimedia player, load balancing, session cookies that help customize the user interface, and user-centric security cookies.

For cookies that require consent—if data processing begins as soon as the page is accessed—our company will inform you when you first visit the site and request your consent.

Our company does not use and does not allow cookies that enable third parties to collect data without your consent.

Accepting cookies is not mandatory, but our company does not take responsibility if the website does not function as expected due to the absence of cookie permission.

What cookies do we use?

Name: _ga
Service provider: https://mn-travel.hu/
Goal: Registers the unique identifier that generates statistical data regarding how the visitor uses the website.
Expiration: 2 év
Type: HTTP

Name: _gat
Service provider https://mn-travel.hu/
Goal: Stores the rate according to the throttle request used by Google Analytics.
Expiration: Session
Type: HTTP

Name: _gid
Service provider https://mn-travel.hu/
Goal: Registers the unique identifier that generates statistical data regarding how the visitor uses the website.
Expiration: Session
Type: HTTP

Name: _fbp
Service provider https://mn-travel.hu/
Goal: Used by Facebook to provide advertising products to a third party (e.g., real-time ads).
Expiration: 3 months
Type: HTTP

Name: fr
Service provider facebook.com
Goal: This cookie is used by Facebook to offer a range of advertising products (such as real-time bidding for ads from third-party advertisers).
Expiration: 3 months
Type: HTTP

You can read more about third-party cookies in detail on this page: here.

4. What else should you know about the data processing related to our website?

You voluntarily provide your personal data during registration and when contacting our company, so we kindly ask that you ensure the accuracy, correctness, and completeness of the information you provide, as you are responsible for it. Incorrect, inaccurate, or incomplete data may prevent you from accessing our services.

If you provide personal data of another person, we assume that you have the necessary authorization to do so.

You can withdraw your consent to data processing at any time free of charge.

  • by deleting the registration,
  • by withdrawing consent to data processing, and
  • by withdrawing consent to the processing or use of any data that must be provided during registration, or by requesting its blocking.

We commit to processing the withdrawal of consent within a 30-day period for technical reasons. However, please note that certain data may still be processed after the withdrawal of consent for the fulfillment of legal obligations or the enforcement of our legitimate interests.

In the case of deceptive use of personal data, or if any of our visitors commits a criminal act or attacks our company's system, we will immediately delete their data along with the termination of their registration. If necessary, we will retain the data for the duration of civil liability determination or criminal proceedings.

5. What you need to know about our data processing for direct marketing and newsletter purposes?

You can give your consent for your personal data to be used for marketing purposes by declaring your intention during registration or later by modifying the personal data stored in the newsletter and/or direct marketing registration area (i.e., by explicitly expressing your consent). In this case, until the consent is withdrawn, we will process your data for direct marketing and/or newsletter purposes and send you promotional and other communications, as well as informational materials and offers, and/or forward newsletters to you (Grtv. § 6).

You can give your consent for direct marketing and the newsletter either jointly or separately, and you can withdraw it/them at any time, free of charge.

We consider the deletion of registration as the withdrawal of consent in all cases. The withdrawal of consent for data processing related to direct marketing and/or newsletters does not automatically imply the withdrawal of consent for data processing related to our website. How does this work? What and on what basis do we retain if the newsletter consent is withdrawn? In the case of consents, each consent is given for a specific purpose, so registration on the website and signing up for the newsletter are two separate purposes, two separate databases, and the two cannot be linked.

The registration of the withdrawal or cancellation of each consent – for technical reasons – will be processed within a 15-day deadline.

6. What should you know about prize draws?

Our company may organize prize draws on a campaign basis, the specific conditions of which are outlined in separate regulations. The rules for the current promotion can always be found on the homepage of our website, via a prominently placed link.

7. Other Data Processing Questions

We can only transfer your data within the framework defined by law, and in the case of our data processors, we ensure through contractual terms that they cannot use your personal data for purposes contrary to your consent. For more information, please refer to point 2.

Our company does not transfer data abroad.

The court, the prosecutor's office, and other authorities (e.g., police, tax authority, National Authority for Data Protection and Freedom of Information) may contact our company for the provision of information, disclosure of data, or the provision of documents. In such cases, we are obligated to comply with the data provision requirement, but only to the extent necessary to fulfill the purpose of the request.

The collaborators and employees involved in our company's data processing and/or data management are authorized to access your personal data to a predefined extent, subject to a confidentiality obligation.

We protect your personal data with appropriate technical and other measures, ensuring data security, availability, and protection against unauthorized access, alteration, damage, disclosure, and any other unauthorized use.

As part of organizational measures, we control physical access to our buildings, continuously train our employees, and store paper-based documents with appropriate protection. In terms of technical measures, we use encryption, password protection, and antivirus software. However, please note that data transmission over the internet cannot be considered fully secure. Our company makes every effort to ensure the safety of processes, but we cannot assume full responsibility for data transmission via our website. However, we strictly adhere to regulations regarding the security of data received by our company to prevent unauthorized access.

Regarding security matters, we kindly ask for your assistance in carefully safeguarding your existing access password to our website and not sharing this password with anyone.

8. What are your rights and remedies?

About the data processing

  • You may request information,
  • You may request the correction, modification, or completion of your personal data processed by us,
  • You may object to the processing of your data and request the deletion or blocking of your data (except for mandatory data processing),
  • You have the right to seek legal remedy before a court,
  • You can file a complaint with the supervisory authority or initiate proceedings at the following link: (https://naih.hu/panaszuegyintezes-rendje.html)

Supervisory Authority: National Authority for Data Protection and Freedom of Information

  • Headquarters: 1055 Budapest,
    Falk Miksa street 9-11.
  • Mailing address: 1363 Budapest, P.O. Box 9.
  • Phone: +36 (1) 391-1400
  • Fax: +36 (1) 391-1410
  • E-mail: ugyfelszolgalat@naih.hu

Website: https://naih.hu/

Upon your request, we will provide information about the personal data we handle, as well as the data processed by us or by our appointed:

  • data,
  • their source,
  • the purpose and legal basis of processing,
  • the duration of processing, and if this is not possible, the criteria for determining this duration,
  • the names and addresses of our data processors,
  • their activities related to data processing, the circumstances of data protection incidents, their impact, and the measures taken to mitigate and prevent them,
  • Additionally, if your personal data is transferred, we will provide the legal basis for the data transfer and the recipient of the data.

We will provide information within 15 days from the submission of the request (but no later than within 1 month). The information is provided free of charge, except when you have already submitted a request for information about the same data category in the current year. If you have already paid a fee, it will be refunded if the data was processed unlawfully or if the request for information led to a correction. We can only deny the information in cases specified by law, with reference to the legal provision, and by informing you about the possibility of judicial remedy or filing a complaint with the Authority.

Our company will notify you, as well as those to whom the data was previously transferred for data processing purposes, regarding the correction, blocking, marking, or deletion of personal data, except when the failure to notify does not harm your legitimate interests.

If we do not fulfill your request for correction, blocking, or deletion, we will notify you in writing, or electronically with your consent, within 15 days of receiving the request (but no later than within 1 month), providing the reasons for the rejection and informing you about the possibility of judicial review and contacting the Authority.

If you object to the processing of your personal data, we will review the objection within 15 days of receiving the request (but no later than within 1 month) and inform you of our decision in writing. If we determine that your objection is justified, we will cease the data processing – including further data collection and data transfer – and block the data. Additionally, we will inform those to whom we have previously transferred the personal data affected by the objection and who are required to take action to enforce the right to object.

We will refuse to fulfill the request if we can demonstrate that the data processing is justified by compelling legitimate grounds that override your interests, rights, and freedoms, or if it is related to the submission, enforcement, or defense of legal claims. If you disagree with our decision or if we fail to meet the deadline, you may turn to the court within 30 days from the communication of the decision or from the last day of the deadline.

The court of first instance has jurisdiction over data protection lawsuits. The lawsuit – at the discretion of the data subject – may also be filed before the court of the data subject's place of residence or stay. A foreign citizen may file a complaint with the supervisory authority responsible for their place of residence.

We kindly ask you to contact our company before approaching the supervisory authority or the court with your complaint, in order to facilitate consultation and the prompt resolution of the issue.

9. What are the main regulations governing our activities?

  • the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
  • the Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Info Act)
  • the Civil Code Act V of 2013 (Civil Code)
  • the Act CVIII of 2001 on certain issues of electronic commerce services and information society services (Eker Act)
  • the Act C of 2003 on electronic communications (Ehtv)
  • the Act CLV of 1997 on consumer protection (Fogyv tv.)
  • the Act CLXV of 2013 on complaints and public interest disclosures (Pktv.)
  • the Act XLVIII of 2008 on the basic conditions and certain limitations of economic advertising activities (Grtv.)

10. Modification of the Data Processing Notice

Our company reserves the right to modify this Privacy Notice, and will inform the data subjects accordingly. Information regarding data processing will be published on the website https://mn-travel.hu/.