Privacy policy

In force from 30 September 2026. This notice covers the processing that happens through the ahaz.eu website.

1. Who processes your data?

Miya Bt.
Registered seat: 3535 Miskolc, Tóth Árpád u. 17.
Tax number: 20544777-2-05
Company registration number: 05-06-010227 (Miskolci Törvényszék Cégbírósága)
E-mail: info@ahaz.eu · Phone: +36 70 318 3709
Website: ahaz.eu

We are not required to appoint a data protection officer and have not appointed one. Please send any data protection question to the e-mail address above.

2. What we collect, why, and on what legal basis

2.1. Booking request

The booking form asks for: day of arrival and departure, number of adults, number and ages of children, the room type you prefer, whether a dog is coming with you, a note, your name, e-mail address, phone number, address and — optionally — billing details. Alongside these we store the time of submission, the language of the page, the fact and time of your consent, and an indicative total calculated from the prices valid at that moment.

The data is stored in our own database, on the server of DigitalOcean (Frankfurt, EU). A booking request is not a booking: the contract comes into being when we confirm the request by e-mail.

Legal basis: steps prior to entering into a contract, and the performance of that contract (GDPR Art. 6(1)(b)). Without this data we cannot process the request.

About the "Note" field: you can write anything there, and some guests mention a food allergy or another health-related detail. If you do, we process it on the basis of your explicit consent (GDPR Art. 9(2)(a)), purely for your own comfort, and we delete it once the stay is over. If you would rather we did not hold such data, simply leave it out — it is not needed for the booking.

2.2. Correspondence

We reply to a booking request by e-mail and keep you informed about its status; we also notify ourselves about every new request. If you write or call us, we process what you tell us until your query has been answered.

Legal basis: performance of the contract, and our legitimate interest in answering enquiries (GDPR Art. 6(1)(b) and (f)).

2.3. The FAQ assistant on the website

The question-and-answer helper on this site works from the frequently asked questions stored in our own database: it is not artificial intelligence, it calls no third-party service, and the conversation never leaves the website. The conversation is kept in your browser's sessionStorage and disappears when you close the tab; no cookie is used for it.

If the helper finds no answer, it offers to send us a message. In that case — and only then — we store your name, e-mail address and question so that we can reply. We also log the question itself (without personal data) so that we can see what we have not answered yet.

The message form — like the booking form — is protected from bots by Cloudflare Turnstile; for that, technical data of your browser reaches Cloudflare (see section 3).

Legal basis: your consent, given by sending the message (GDPR Art. 6(1)(a)).

2.4. Cookies and browser storage

We use cookies that are strictly necessary for the site to work (session, form protection, remembering your cookie choice). Statistics and marketing cookies are set only if you agree to them in the cookie bar; with no consent not a single measurement script runs. The full list is in our Cookie policy.

2.5. Server logs

Like every web server, the server behind this site logs requests (IP address, time, the page requested, browser identifier). These logs exist for operational security and for detecting abuse; we do not use them for marketing and do not link them to booking data.

Legal basis: our legitimate interest in operating the site securely (GDPR Art. 6(1)(f)).

3. Who has access to the data?

We do not sell your data and do not pass it to any third party for marketing. The following processors act on our behalf so that the service can run:

WhoWhat they doWhat data they see
DigitalOcean, LLC — 101 Avenue of the Americas, 10th Floor, New York, NY 10013, Amerikai Egyesült Államok (the server is in Frankfurt, in the EU)Hosting for the website and its databaseEverything stored on the website
Mailgun Technologies, Inc. (EU datacenter)Sending the confirmation and notification e-mailsName, e-mail address, the contents of the message
Cloudflare, Inc. — 101 Townsend St, San Francisco, CA 94107, Amerikai Egyesült ÁllamokBot protection on the booking form and the FAQ assistant’s message form (Cloudflare Turnstile). Legal basis: legitimate interest. It sets no advertising cookie.Technical data of your browser while you use the form (IP address, browser type)

Providers used for statistics and marketing (Google, Meta) receive data only if you agree to it in the cookie bar. Our Cookie policy explains that in detail.

The accommodation's NTAK (Hungarian National Tourism Data Service Centre) registration number is EG19018898. Hungarian law requires accommodation providers to record certain guest data at check-in (name, date and place of birth, nationality, identity document number, dates of stay) and to forward it to NTAK and to the closed guest database (VIZA). This is a legal obligation, it needs no separate consent, and it happens at check-in on site — not on this website.

4. How long we keep it

  • Data of a booking that took place: for 5 years from the end of the year of the stay (civil law claims).
  • Invoices and accounting records: 8 years, under the Hungarian Accounting Act (Act C of 2000).
  • A booking request that did not become a booking, and other enquiries: 12 months.
  • A message sent through the FAQ assistant: 12 months from our reply.
  • Proof of cookie consent: 5 years from the consent (we must be able to prove it was given). It contains no IP address, only an irreversible hash of one.

5. Your rights

You may ask us at any time to

  • tell you what data of yours we process, and give you a copy;
  • correct inaccurate data;
  • erase your data, unless a legal basis or obligation requires us to keep it;
  • restrict processing while a disputed question is settled;
  • hand over the data you gave us in a portable format;
  • object to processing based on legitimate interest.

Where processing is based on consent (special-category data written into the note field, a message sent through the chat, statistics and marketing cookies) you may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing before it.

Write to info@ahaz.eu and we will answer within 30 days at the latest.

6. If you disagree with us

Please come to us first: most questions are settled in one exchange of letters. You may also lodge a complaint with the supervisory authority or go to court (you may bring the action before the court of your own place of residence).

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) (Hungarian data protection authority)
Address: 1055 Budapest, Falk Miksa utca 9-11. (postal: 1363 Budapest, Pf. 9.)
Phone: +36 1 391 1400 · E-mail: ugyfelszolgalat@naih.hu · Web: https://naih.hu

7. Automated decision-making

We take no decision about you by automated means alone, and we do not profile you. Every booking request is read and approved by a person.

8. Changes to this notice

If the way we process data changes, we update this notice and change the date above. For a material change the cookie bar appears again as well.