Privacy policy

Who is the data controller?

The data controller is Aura Gastronomy Kft., 1051 Budapest, Dorottya utca 8.. Company registration number: 01-09-987654. Tax number: 34567890-2-41. Represented by Szabó Lilla.

For questions about your data, write to reservation@aurabudapest.hu or call +36 1 555 4433.

What do the forms collect?

Only what you type. The site has several forms (table booking, private dining, gift vouchers, job applications and general messages) and they handle the following fields.

• Name, email address, phone number
• For bookings, the date, the time and the number of guests
• Dietary needs or allergies, if you tell us. This may count as health data, so only the kitchen and floor staff concerned see it, and we delete it after the dinner.
• The text of your message

Why do we process this?

Booking and event data is processed to prepare and perform a contract with you. This is Article 6(1)(b) of the General Data Protection Regulation.

General messages and job applications are processed on the basis of your consent, given through the checkbox on the form. You can withdraw consent at any time.

Invoicing data is kept because the law requires it.

How long do we keep it?

• Booking data: up to thirty days after the dinner, so we can handle any complaint
• Dietary needs and allergies: deleted on the day of the dinner, after service
• General messages: up to one year after the matter is closed
• Job applications: six months, then deleted, unless we ask separately for your consent to keep them longer
• Invoicing data: eight years, as required by accounting law

Who has access?

Only those members of our team whose work requires it. Beyond them, two outside providers work in the background.

• Web3Forms: delivers the forms. Everything you type on a form travels through it to the restaurant inbox.
• Cloudflare: hosting and content delivery for the website. Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA

Is data transferred outside the European Union?

Yes, it can happen. The providers above are based in the United States, so some processing may take place outside the European Economic Area. In that case the transfer relies on the standard contractual clauses adopted by the European Commission.

What measurement runs on the site?

By default the cookieless Cloudflare visitor measurement, which does not identify individual visitors and sets no cookies.

Google Analytics is not running at present. If we switch it on later, it will only load after you accept the cookie banner, and this document will be updated.

What are your rights?

You can ask us what data we hold, ask us to correct or delete it, restrict how we use it, or hand it over in a portable form. You can also object to the processing. Where it is based on consent, you can withdraw that at any time.

Send your request to reservation@aurabudapest.hu and we reply within one month at the latest.

Where can you complain?

If you think we handled something badly, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11, ugyfelszolgalat@naih.hu) or take the matter to court.