Home / Privacy Policy
Privacy Policy
What we collect, why we collect it, and the short list of people who ever see it. Last reviewed 12 January 2026.
Home / Privacy Policy
What we collect, why we collect it, and the short list of people who ever see it. Last reviewed 12 January 2026.
Who we are
This website is published by Dunaszél Media Kft., a Hungarian limited company registered at Váci utca 47, 3rd Floor, 1056 Budapest, Hungary, company number 01-09-427318. For all data protection matters, write to [email protected] with “Data request” in the subject line.
We are subject to Regulation (EU) 2016/679 (the GDPR) and Hungarian Act CXII of 2011 on informational self-determination and freedom of information. The supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), Falk Miksa utca 9-11, 1055 Budapest.
We are a travel publication, not an advertising business. We do not run ad networks, we do not operate a tracking pixel for third-party marketing, and we have never sold, rented or brokered a reader's personal data. The only reason we hold anything at all is to answer your emails and to know which guides people actually read.
| Data | Why | Legal basis | Kept for |
|---|---|---|---|
| Name, email, message content from the contact form | To reply to your enquiry or correction | Consent (Art. 6(1)(a)) | 24 months from last contact |
| Email correspondence sent directly to the desk | Editorial follow-up and correction records | Legitimate interest (Art. 6(1)(f)) | 24 months |
| Aggregated page views, referrer, approximate country, device type | To understand which guides are useful | Consent — analytics cookies | 14 months |
| Server access logs, including truncated IP address | Security, abuse prevention, error diagnosis | Legitimate interest | 30 days |
| Your cookie preference | To remember your choice and not ask again | Legal obligation / essential | 12 months, in your browser |
| Invoicing details for licensing customers | Contract performance and Hungarian tax law | Contract & legal obligation | 8 years (statutory) |
We do not collect special category data, we do not knowingly collect data from children under 16, and we do not carry out automated decision-making or profiling of any kind.
Third parties
The list is deliberately short. Each of the following acts as a processor on our instructions, under a data processing agreement, and none is permitted to use your data for its own purposes.
| Processor | Function | Location |
|---|---|---|
| Hosting provider | Serving this website and storing server logs | European Union (Frankfurt region) |
| Email provider | Receiving and storing desk correspondence | European Union |
| Privacy-focused analytics provider | Aggregated, cookie-based traffic statistics | European Union |
| Image CDN | Delivering photography used in guides | Global edge network |
| Accountant | Statutory bookkeeping for licensing invoices | Hungary |
Where an image or map is loaded from an external network, that network necessarily sees your IP address in order to deliver the file. Where a transfer outside the European Economic Area is unavoidable, it is covered by the European Commission's standard contractual clauses.
Your rights
Requests are free of charge and answered within 30 days. We may ask one clarifying question to be certain we are giving data to the right person — we will never ask you to send a scan of an identity document by email.
The site is served over HTTPS only. Desk email is protected by two-factor authentication and stored on encrypted volumes inside the EU. Access is limited to the two editors and, for invoices alone, our accountant. In the unlikely event of a breach affecting your rights, we will notify NAIH within 72 hours and write to you directly.
If we change how we handle data, we will update the review date at the top of this page and, for any material change, display a notice on the home page for thirty days. Earlier versions are available from the desk on request.
Questions