skip to content
daytrips.hu daytrips.hu

Privacy Policy

Effective date: 31 July 2026

This Privacy Policy describes how personal data is collected, used and protected when you visit daytrips.hu (the “Website”) or book any of our tours. We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and applicable Hungarian data protection and e-commerce legislation.

1. Data controller

The data controller responsible for the processing of your personal data is:

  • Name: Mazák Balázs Gyula, sole proprietor (egyéni vállalkozó)
  • Registered seat: Gabona utca 4. 1/5., 1095 Budapest, Hungary
  • Tax number: 58113376-1-43
  • Registration number: 62507262
  • E-mail: hello@daytrips.hu
  • Phone / WhatsApp: +36 70 209 9111

(hereinafter: “we”, “us” or the “Controller”).

2. Scope

This Policy applies to all personal data processed in connection with the Website, our online booking process, payments, invoicing, customer communication and website analytics. It does not apply to third-party websites that may be linked from the Website; please review the privacy notices of those providers separately.

3. What data we process, why, and on what legal basis

3.1 Booking data (Bokun)

Bookings are handled through the booking platform Bokun (operated by Bókun ehf., an Iceland-based TripAdvisor company). When you book a tour, the booking form collects: your name, e-mail address, phone number, country, billing address (where requested), the selected tour, date, number and age category of participants, and any special requests you choose to share (e.g. dietary or accessibility notes).

  • Purpose: concluding and performing the tour contract — confirming your booking, organising the trip, contacting you about departure details or changes.
  • Legal basis: performance of a contract (GDPR Article 6(1)(b)); for optional special requests, your consent (Article 6(1)(a)).
  • Retention: for the general limitation period of civil law claims (5 years under the Hungarian Civil Code), except where a longer statutory retention applies (see invoicing below).

3.2 Payment data (Stripe)

Online payments are processed by Stripe (Stripe Payments Europe, Ltd., Ireland, and its affiliates). Your card details are entered directly into Stripe’s secure payment interface and are never stored on our servers. We receive only confirmation of the payment, the amount, and limited card metadata (such as card type and the last four digits) necessary to match the payment to your booking.

  • Purpose: collecting payment for your booking, refunds, fraud prevention.
  • Legal basis: performance of a contract (GDPR Article 6(1)(b)); fraud prevention is based on legitimate interest (Article 6(1)(f)).
  • Retention: payment records are kept as part of our accounting documentation (see below). Stripe processes your data under its own privacy policy: stripe.com/privacy.

3.3 Invoicing data (Billingo)

We are legally required to issue an invoice for every purchase. Invoices are created and stored with the Billingo online invoicing service (Billingo Technologies Zrt., Hungary). For this purpose we process your name, billing address, e-mail address and the details of the purchased service. Invoice data is also transmitted to the Hungarian tax authority (NAV) as required by law.

  • Purpose: issuing and storing invoices, complying with tax and accounting obligations.
  • Legal basis: compliance with a legal obligation (GDPR Article 6(1)(c); Hungarian Act C of 2000 on Accounting; Act CXXVII of 2007 on VAT).
  • Retention: 8 years, as required by Section 169 of the Hungarian Accounting Act.

3.4 Website analytics (Google Tag Manager, Google Analytics 4)

With your consent, we use Google Tag Manager and Google Analytics 4 (Google Ireland Ltd. and Google LLC) to understand how visitors use the Website (pages viewed, approximate location at city level, device and browser type, traffic source, interactions). IP addresses are not logged or stored by Google Analytics 4. Analytics identifiers are pseudonymous and are not combined with your booking data by us.

  • Purpose: measuring website traffic and improving our services and marketing.
  • Legal basis: your consent (GDPR Article 6(1)(a)), given via the cookie banner. You may withdraw consent at any time via the “cookie settings” link in the footer.
  • Retention: analytics event data is retained for a maximum of 14 months.

3.5 Direct contact

If you contact us by e-mail, phone, WhatsApp or social media, we process the contact details you provide and the content of your message in order to respond to you.

  • Legal basis: our legitimate interest in responding to enquiries (GDPR Article 6(1)(f)), or steps taken prior to entering into a contract (Article 6(1)(b)).
  • Retention: until the enquiry is resolved, or for up to 1 year thereafter, unless the correspondence becomes part of a contract.

4. Cookies

The Website uses the following categories of cookies and similar technologies:

  • Essential cookies — required for the operation of the Website, including the cookie that stores your consent choice and the session cookies of the booking widget. Legal basis: our legitimate interest in operating the Website; these cannot be switched off.
  • Analytics cookies (Google Analytics 4, set via Google Tag Manager) — placed only if you click “accept” on the cookie banner. They collect pseudonymous usage statistics as described in Section 3.4.
  • Third-party booking and payment technologies (Bokun, Stripe) — when you open the booking window, Bokun and Stripe may set cookies that are strictly necessary for the booking and secure payment process.

You can change or withdraw your cookie consent at any time by clicking “cookie settings” in the footer of the Website, and you can also delete cookies in your browser settings.

5. Recipients and data processors

We use the following service providers, who process personal data on our behalf or as independent controllers for the given service:

  • Bókun ehf. (Iceland, part of the TripAdvisor group) — online booking engine. Privacy notice: bokun.io/privacy-policy
  • Stripe Payments Europe, Ltd. (Ireland) and affiliates — payment processing. Privacy notice: stripe.com/privacy
  • Billingo Technologies Zrt. (Hungary) — electronic invoicing. Privacy notice: billingo.hu
  • Google Ireland Ltd. / Google LLC — Google Tag Manager and Google Analytics 4. Privacy notice: policies.google.com/privacy
  • Rackforest Zrt. (Hungary) — website hosting.

In addition, personal data may be disclosed to the tax authority (NAV), other authorities or courts where we are legally obliged to do so, and to our accountant for the purposes of statutory bookkeeping.

6. International data transfers

Bókun ehf. is established in Iceland, which is part of the European Economic Area, so no third-country transfer takes place. Stripe and Google may transfer personal data to the United States; such transfers are based on the European Commission’s adequacy decision for the EU–US Data Privacy Framework and, where applicable, on Standard Contractual Clauses with supplementary safeguards.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Article 15);
  • rectification of inaccurate or incomplete data (Article 16);
  • erasure (“right to be forgotten”), where no legal ground requires further processing (Article 17);
  • restriction of processing (Article 18);
  • data portability for data processed on the basis of contract or consent (Article 20);
  • object to processing based on legitimate interest (Article 21);
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at hello@daytrips.hu. We will respond without undue delay and in any event within one month of receiving your request.

8. Complaints

If you believe your personal data has been processed unlawfully, please contact us first so that we can resolve the matter. You also have the right to lodge a complaint with the supervisory authority:

Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11., Hungary
Postal address: 1363 Budapest, Pf. 9.
Phone: +36 1 391 1400
E-mail: ugyfelszolgalat@naih.hu
Website: naih.hu

You may also bring the matter before the competent Hungarian court.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including HTTPS encryption on the entire Website, access control on our systems, and the use of established, security-audited service providers (Bokun, Stripe, Billingo, Google) for booking, payment, invoicing and analytics. Card data is handled exclusively by Stripe, a PCI DSS Level 1 certified payment provider.

10. Children

The Website and our services are directed at adults. Bookings may only be made by persons aged 18 or over; personal data of minors participating in a tour is provided to us by their parent or legal guardian as part of the booking.

11. Changes to this Policy

We may update this Privacy Policy from time to time, for example when our services or legal requirements change. The current version, together with its effective date, is always available on this page.

back to daytrips.hu