Effective Date: Last updated: 10,11, 2025.
Al Habtoor Palace Budapest (“we”, “us” or “our”) is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, transfer and store your personal data when you visit or make a booking through our website alhabtoorpalacebudapest.com (the “Site”) or otherwise interact with us in the European Union (EU), in accordance with the General Data Protection Regulation (GDPR).
When you use our Site, please note that this Policy only applies to websites and related sub-sites operated by us and does not apply to websites controlled and operated by third parties. For websites controlled and operated by third parties, please check their privacy statements as these websites are not under our control and we are not responsible for their content or their privacy practices.
Al Habtoor Palace Budapest
Erzsébet tér 9–10, 1051 Budapest, Hungary
Phone: +36 1-429-5500
Email: frontoffice@ahpbudapest.com
If you have any questions about this policy or our privacy practices, please contact at – frontoffice@ahpbudapest.com
We process your personal data only in accordance with the data protection provisions in force at the time. When you contact us, for example, to book a room, make an appointment, subscribe to a newsletter or use a service, correspond with us or fill in a form on the Site, you acknowledge that we will process the data you provide voluntarily in the course of that contact for the purposes described in section 4 of this Policy.
When you visit our Site, cookies are used to automatically collect personal data. This is explained in more detail in section 7 of this Policy.
2.1 Data You Provide Voluntarily
Booking & Reservation: name, title, date of birth, email address, postal address, telephone number, arrival/departure dates, room preferences, payment card details (processed by our payment gateways).
Newsletter & Marketing Subscriptions: email address, marketing preferences.
Contact Forms & Communication: content of your inquiries, correspondence, and any personal data you choose to include.
Reviews & Feedback: name, email address, and content of your reviews or testimonials.
2.2 Data Collected Automatically
Technical & Usage Data: IP address, device and browser type, operating system, pages visited, referral URLs, time stamps, clickstream data and other analytics information.
Cookies & Tracking Technologies: as detailed in Section 8 below.
| Purpose | Legal Basis |
|---|---|
| To make, manage and fulfill your reservation | Performance of a contract |
| To process payments | Performance of a contract; Legitimate interest (fraud prevention) |
| To send booking confirmations and service notifications | Performance of a contract |
| To send newsletters, promotions and marketing offers | Consent (you may withdraw at any time) |
| To respond to your inquiries and provide customer care | Legitimate interest; Consent to communicate |
| To improve our Site, services and user experience(via cookies) | Consent (you may withdraw at any time) |
| To comply with legal obligations (e.g., tax, audit) | Legal obligation |
| Legitimate interest (security and fraud prevention) |
We only process your personal data for the purposes we collected it for. We will delete or anonymise your personal data when we no longer need it for the original purpose, when we are no longer legally required to keep it, or when you ask us to do so. We may also choose to stop processing and delete your data earlier if we no longer need it, except for data that is necessary to provide our services to you.
We retain your personal data only as long as necessary to fulfill the purposes outlined above, and in any event no longer than:
When processing personal data, we use professional partners, so-called data processors, who act on behalf of us.
The data processor is obliged to carry out its activities in accordance with the mandate given by us and the applicable legal requirements. We are liable to the data subject for any damage caused by the data processor.
Partners carrying out data processing activities on our behalf have been carefully selected and will take appropriate technical and organisational measures to ensure that your data is processed in accordance with data protection regulations and that your rights are protected. The partners must not use the personal data provided for their own business purposes and must not transfer the data to third parties.
We may share your personal data with:
All third-party processors are contractually bound to process your data only on our instructions, under GDPR-compliant data processing agreements.
Your data may be transferred to, and processed in, countries outside the EU, including service providers located in the United States. Whenever we transfer personal data outside the EU, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses adopted by the European Commission, to protect your rights and freedoms.
Our Site automatically collects data by cookies. A cookie is a small text file that stores internet settings. Almost all websites use this technology.
When you first visit our Site, the cookie is automatically downloaded from your browser. The next time you access our Site from the same device, the cookie – and the information it contains – is either sent back to the website that created it (known as a ‘private cookie’) or to another website to which it belongs (known as a ‘partner cookie’). This allows the website to recognise that the page has been accessed using this search engine and, in some cases, to modify the content it displays. 7410
You can manage your cookie preferences at any time via our cookie banner or through your browser settings.
7.1 Strictly necessary cookies
These cookies are essential for the Site to work properly and cannot be disabled in our systems. They are typically only placed when you perform actions that request our services, such as adjusting your privacy settings, signing in, or completing forms. You can configure your browser to block these cookies or warn you about them, but if you do, certain parts of the Site may not function correctly.
The legal basis for processing these cookies is that they are strictly necessary to provide the services you have requested. These cookies enable essential functions such as secure access to your account, processing your booking requests, and maintaining your session whilst you navigate our website. Without these cookies, we cannot deliver the core services you have requested.
7.2 Performance cookies
These cookies allow us to count visits and traffic sources so we can measure and improve our Site’s performance. They help us identify which pages are most and least popular and show us how visitors move around the site. All information these cookies collect is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited our site.
The legal basis for processing the data through these cookies is your consent. By accepting performance cookies, you allow us to collect anonymised data about how you use our website. This helps us understand which of our services are most popular and enables us to improve our website and services based on actual user behaviour. You can withdraw your consent at any time by adjusting your cookie preferences.
7.3 Functionality Cookies
These cookies enable enhanced functionality and personalisation. They may be set by us or by third-party providers whose services we have added to our pages. If you do not allow these cookies, some of the Site’s features may not function properly.
The legal basis for processing data through these cookies is your consent. By accepting functional cookies, you allow us to provide you with an enhanced user experience and enable features such as personalised content based on your preferences. This helps us deliver a seamless booking experience tailored to your needs. You can withdraw your consent at any time by adjusting your cookie preferences.
7.4 Targeting Cookies
These cookies are set by our advertising partners through our Site. They may be used by those companies to build a profile of your interests and show you relevant advertisements on other sites. They work by uniquely identifying your browser and device. If you do not allow these cookies, you will not receive targeted advertising across different websites.
7.5 Opt-out Cookie
To technically implement your rejection, an opt-out cookie is activated in your browser. This cookie is used solely to record your rejection. Please note that for technical reasons, an opt-out cookie only works in the browser from which it was activated. If you delete your cookies or use a different browser or device, you will need to set this opt-out preference again.
The legal basis for processing this opt-out cookie is our legitimate interest in ensuring compliance with your privacy preferences and demonstrating our adherence to data protection requirements.
7.6 Social Media Plugins
This Site uses so-called social media plugins (hereinafter “buttons”) from social networks such as Facebook, Twitter and Google+. When you visit our website, these buttons are deactivated by default, meaning they do not send any data to the respective social networks without your involvement. You can only use the buttons if you activate them by clicking on them. The button remains active until you deactivate it again or delete your cookies.
Once activated, a direct connection is established with the server of the respective social network. The content of the button is then transmitted directly from the social network to your browser and integrated into the Site. After you activate a button, the respective social network can collect data regardless of whether you interact with the button. If you are logged into a social network, it can link your visit to this site with your user account. The social network cannot link visits to other websites until you activate the respective button on those sites. If you are a member of a social network and do not want it to link the data collected during your visit to our Site, you must log out of that social network before activating the buttons. Unfortunately, we have no control over the scope of data collected by social networks through these buttons. Information about the purpose and scope of data collection by social networks and their further processing and use of data, as well as your rights and settings options to protect your privacy, can be found in the respective social network’s privacy policy.
8. Your rights
The following rights are provided for the data subject related to the processing of personal data defined in the Policy:
The data subject may exercise the rights listed above by sending a statement to the contact person at frontoffice@ahpbudapest.com.
You may request information from us about the processing of the personal data – we will respond in writing within 30 days. The information will be provided free of charge if you have not already submitted an information request in the same field in the current year. Otherwise, the information will be provided against reimbursement of the costs incurred.
We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, intrusion detection and regular security assessments.
We have reasonable security policies and procedures in place to protect personal information from unauthorized loss, misuse, alteration, or destruction. Despite our best efforts, however, security cannot be absolutely guaranteed against all threats. To the best of our ability, access to your personal information is limited to those who have a need to know. Those individuals who have access to the data are required to maintain the confidentiality of such information.
Our Site is not intended for use by children under 18. We do not knowingly collect personal data from children without parental consent. If you become aware that a child has provided us with personal data, please contact us at frontoffice@ahpbudapest.com; we will promptly delete such data.
We may update this Policy to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The “Effective Date” at the top will indicate when it was last revised. We encourage you to review this Policy periodically. Any changes to the processing of personal data as described in this Policy affecting you will be communicated to you through an appropriate channel, depending on how we normally communicate with you.
We are committed to protecting the online privacy of your personal data. If you have questions or comments about our administration of your personal information, please contact us at frontoffice@ahpbudapest.com. You may also use this address to communicate any concerns you may have regarding compliance with our Policy.
Data subjects may lodge complaints related to processing with the National Authority for Data Protection and Freedom of Information (NAIH), using the following contact detail:
Without prejudice to the above, you have the right to turn to the courts relating to the processing of your personal data if such is in violation of the GDPR; furthermore, if you have suffered material or non-material damage due to our conduct violating the GDPR, you have the right to enforce a claim for compensation against us. In the event of court proceedings, the competent court for your place of residence or place of abode shall have jurisdiction.
