Privacy policy

Last updated: 16 July 2026.

The purpose of this Privacy Policy is to inform visitors of the Konyha-Kert Bistro and Bar website (the "Website") in detail about the processing of their personal data. Protecting your personal data is a top priority for us when you visit our Website.

Below we describe the technical operation, the measurement codes (cookies) used, and information related to third parties in accordance with the General Data Protection Regulation (GDPR), the ePrivacy rules on electronic communications, and applicable Hungarian legislation (including in particular the Information Act and the Civil Code).

1. DATA CONTROLLER

Name: Schindele Botond e.v.
Address: 8252, Balatonszepezd, HRSZ. 480.
Tax ID: 68656340-2-39
Registration no.: 52058798
Email: botondschindele@gmail.com
Website: www.konyhakertbalatonszepezd.hu

2. DATA PROCESSORS

The IT infrastructure of the Website, server supervision, maintenance, and the operation of measurement codes and the cookie management system are provided by our appointed technical partners (Data Processors).

Technical operator

Name: Boabo Webstudio
Address: London, United Kingdom
Email: info@boabowebstudio.com
Website: www.boabowebstudio.hu

Hosting provider

Name: Hostinger International Ltd.
Address: 61 Lordou Vironos Street, 6023 Larnaca, Cyprus
Privacy policy: https://www.hostinger.com/legal/privacy-policy

Cookie management platform (Consent Management Platform)

Name: CookieYes (Yes Web Hosting Ltd.)
Role: Recording and storing visitor consents and displaying the cookie banner
Privacy policy: https://www.cookieyes.com/privacy-policy/

Operator of Google measurement tools

Name: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland)
Services: Google Analytics (GA4), Google Tag Manager, Google Search Console
Privacy policy: https://policies.google.com/privacy

3. PURPOSE AND LEGAL BASIS OF DATA PROCESSING

3.1 Contact

• Purpose: Communication with visitors (e.g. table reservations, event enquiries, general questions).
• Categories of data processed: Name, email address and/or phone number, as well as other information provided in the message.
• Legal basis: The data subject's voluntary consent (GDPR Article 6(1)(a)), or steps prior to entering into a contract, for example in the case of table reservations (GDPR Article 6(1)(b)).
• How contact is made: Enquiries received via the contact details published on the Website (email, phone) are sent directly to the Data Controller without the involvement of a third-party service provider (e.g. external form handler).
• Retention period: Until the purpose is fulfilled (until the reservation or communication is closed), or until the data subject requests deletion.

3.2 Website usage and statistical data (Google Analytics, Google Tag Manager, Google Search Console)

• Purpose: Statistical analysis of Website traffic, usage and user behaviour, improvement of Website operation, content and search visibility, and detection of technical errors.
• Categories of data processed: Anonymised/pseudonymised IP address, device and browser type, approximate geographic location (country/region level), navigation within the Website (pages visited, time spent, clicks), referring page, and in the case of Google Search Console, search queries, impression and click statistics showing how the Website appears in Google Search.
• Legal basis: The data subject's explicit prior consent (GDPR Article 6(1)(a)), which the visitor gives in the CookieYes cookie banner. These services are activated only after consent is given (so-called consent-gated / cookie-less-by-default loading).
• Retention period: Until consent is withdrawn, but for no longer than the default data retention period in Google Analytics (currently 14 months), which can be customised in the Data Controller's Google Analytics account.
• Important: Google Ireland Limited may also use the above data as an independent data controller in accordance with Google's privacy policy (https://policies.google.com/privacy). Data may be transferred outside the European Economic Area (to the United States); the legal basis for such transfer is the European Commission adequacy decision under the EU–U.S. Data Privacy Framework, or – if a given Google service does not fall under that framework – the Standard Contractual Clauses approved by the European Commission.

3.3 Detailed list of cookies used on the Website

The list above is for information purposes; the precise, up-to-date list of actually active cookies is available in the CookieYes cookie banner under "Manage cookies / Details", which is updated automatically based on the measurement codes running on the Website.

CookieYes stores the visitor's consent statement (fact and time of acceptance/rejection) for the purpose of demonstrating lawful processing until consent is withdrawn, but for no longer than 12 months, after which the record is automatically renewed on the next visit.

4. DATA TRANSFER AND MARKETING

• Marketing cookies: With the visitor's prior consent, our Website uses statistical measurement tools (Google Analytics, Google Tag Manager). We do not currently use cookies for advertising purposes (remarketing, conversion tracking); if this changes in the future, we will list this as a separate category in the CookieYes banner and request separate consent.
• Profiling: The Website operator does not carry out automated decision-making or profiling with legal effect for visitors. Statistics produced by Google Analytics serve exclusively aggregated analysis for Website development.
• Data transfer: We do not transfer personal data to third parties other than the technical partners named above (Hosting provider, CookieYes, Google), except in the case of an official request.
• Redirection: Our Website – apart from requests arising from the technical operation of Google services – does not contain redirects to externally operated third-party websites.

5. DATA SECURITY

The Data Controller takes all reasonably expected technical and organisational measures to ensure that personal data provided remain secure and protected from unauthorised access, alteration or deletion. The Website has an SSL certificate, and measurement codes are loaded exclusively through the CookieYes system, in accordance with the visitor's consent.

6. COOKIES AND COOKIE BANNER

Our Website uses the CookieYes cookie management platform (Consent Management Platform) to inform visitors about the use of cookies and to request the necessary consents in accordance with the EU ePrivacy Directive and the GDPR.

6.1 Technical (strictly necessary) cookies

When viewing the Website, technical data packages (cookies) that are essential for the operation of basic Website functions, server stability, secure connection, and remembering the cookie banner settings (e.g. CookieYes's own consent cookie) are always placed. Under the law, no separate consent is required for these cookies; they cannot be disabled.

6.2 Statistical (analytical) cookies – with consent only

With the visitor's explicit consent, the Website places the following statistical cookies / measurement codes:

• Google Analytics (GA4): for measuring traffic and user behaviour.
• Google Tag Manager: for the technical loading of the above measurement codes (currently: Google Analytics); it does not collect personal data itself, it only controls the execution of other codes.
• Google Search Console: for measuring the Website's performance in Google Search; this service primarily provides aggregated statistics for the Website owner, may not necessarily place cookies in the visitor's browser, but is subject to Google's privacy principles.

6.3 Giving and withdrawing consent

On the first visit to the Website, the CookieYes cookie banner appears, where the visitor can:

• accept or reject the use of cookies by category (technical / statistical),
• customise consent in detail by clicking the "Settings" button,
• withdraw or modify consent at any time without restriction by clicking the "Cookie settings" link at the bottom of the Website.

Before consent is given, no statistical cookies are placed and Google Analytics / Google Tag Manager codes are not loaded.

7. RIGHTS OF THE DATA SUBJECT

If you contact us or consent to the use of statistical cookies, under the GDPR you are entitled to:

• request information about the processing of your data,
• request correction or deletion of your data,
• request restriction of processing (GDPR Article 18),
• object to the processing of your personal data,
• exercise your right to data portability,
• withdraw consent given for statistical cookies at any time, without justification, with the same ease as giving consent.

If you believe that our data processing has violated your rights, please contact us first using one of the contact details above.

You may also lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH), or – if you do not have your habitual residence or workplace in Hungary – with the data protection supervisory authority competent in your Member State:

Address: 1055 Budapest, Falk Miksa utca 9-11.
Postal address: 1363 Budapest, Pf.: 9.
Website: www.naih.hu
Email: ugyfelszolgalat@naih.hu