Name: Sun & Fun Holidays Limited Liability Company
(hereinafter: “Data Controller” or “Company”)
Registered Office: 1138 Budapest, Meder u. 8/D, ground floor
Company Registry No.: Cg. 01‑09‑890130
Contact Person: Lilla Kovács
Complaint Handling:
E‑mail: marketing@sunfun.hu
Phone: +36 1 354 2939
The purpose of this Notice is to define the rules on the processing, disclosure and deletion of personal data by the Data Controller, ensuring compliance with applicable GDPR and related Hungarian laws.
Definitions based on the GDPR:
Data Controller: Entity determining purposes and means of personal data processing.
Processing: Any operation on personal data.
Processor: Entity processing data on Controller’s behalf.
Supervisory Authority (NAIH): Hungarian Data Protection Authority.
Personal Data: Any information relating to an identified or identifiable natural person.
Client: Natural person inquiring about or entering into travel or related service contracts with the Company.
Data: Name; date of birth if minor; e‑mail; travel preferences...
Purpose: Sending quote, contact before contract.
Legal basis: GDPR Art. 6(1)(b)
Retention: Until contract conclusion or expiry.
Processors: SAN Tourism Software Group, travel agents.
Recipients: Travel service providers, insurers.
Data: Personal ID and travel details, contacts...
Purpose: Travel service delivery.
Legal basis: GDPR Art. 6(1)(b)
Retention: 5 years from contract fulfilment.
Processors: SAN Tourism, SPARKLE.
Recipients: Airlines, accommodation, insurers, etc.
Data: Name, address, tax ID.
Purpose: Billing and accounting.
Legal basis: GDPR Art. 6(1)(c)
Retention: 8 years (Accounting Act).
Processors: SAN Tourism, SPARKLE.
Recipients: Accountant Duo Balance Kft.; Hungarian Tax Authority (NAV).
Data: Name, contact, complaint details, dates.
Purpose: Investigating complaints.
Legal basis: GDPR Art. 6(1)(f)
Retention: 5 years if client; otherwise 1 year.
Processors: SAN Tourism, SPARKLE.
Recipients: Authorities when legally required.
Data: Name, e‑mail, preferences.
Purpose: Marketing newsletter.
Legal basis: GDPR Art. 6(1)(a)
Retention: Until consent withdrawal.
Processors: SAN Tourism, SPARKLE.
Data may be shared with:
Clients may request details at marketing@sunfun.hu or +36 1 354 2939.
Personal data may be transferred to non‑EEA countries if:
If no adequacy decision exists, transfer is allowed only if:
Transfers to other countries require contract necessity or explicit consent.
Clients may request confirmation whether their personal data is processed, as well as access to it. This includes pseudonymized data. A copy will be provided, and reasonable fees may apply for repeated requests.
Clients can request correction or supplementation of inaccurate personal data. Recipients notified unless impossible or disproportionate.
Clients may request deletion of their personal data if processing is no longer necessary, consent withdrawn without other legal bases, processing unlawful, legal obligation to delete, or for information society services. Recipients notified unless impossible or disproportionate.
Clients may request limitation of processing where accuracy is disputed, unlawful processing, data needed for legal claims, or objection to processing. While restricted, data may only be processed for storage, with consent, legal claims, or defense. Direct marketing and profiling disallowed.
Clients can receive their data in a structured, commonly used, machine-readable format and have it transferred to another controller (when processing is automated and based on consent or contract).
| Type of Request | Deadline |
|---|---|
| Right to information | At data collection or within 1 month |
| Access | 1 month |
| Rectification | 1 month |
| Erasure | Without undue delay |
| Restriction | Without undue delay |
| Data portability | 1 month |
| Objection | Upon receipt |
If a client believes their rights were violated, they should contact Lilla Kovács first. If unsatisfied, they may turn to a court or NAIH. NAIH contact: 1125 Budapest, Szilágyi Erzsébet fasor 22/C; Tel: +36 1 391 1400; Fax: +36 1 391 1410; E‑mail: ugyfelszolgalat@naih.hu; Website: www.naih.hu.
This Notice entered into effect on 25 May 2018. The Data Controller reserves the right to amend it unilaterally. Clients will be notified by e‑mail and all updates will be published on www.sunfun.hu.