Privacy Policy

Last updated: [Insert Date]

1. Data Controller

This website, Private Consul, is operated by a private individual based in Hungary.

Private Consul provides premium travel planning and concierge services in Budapest, offering two service packages: Basic and Premium.

As the operator of this website, we act as the Data Controller in accordance with the General Data Protection Regulation (GDPR) and applicable Hungarian data protection laws.

For any privacy-related inquiries, you may contact us at:
[Insert contact email address]

2. What Personal Data We Collect

Depending on how you interact with our website and services, we may collect:

Name
Email address
Phone number (if provided)
Billing details (if applicable)
Travel preferences and related information
IP address
Browser and device information
Any information submitted through contact forms

We collect only data that is necessary to provide our premium travel services and to ensure proper website functionality.

3. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

Service Provision

To prepare customized travel experiences in Budapest under our Basic or Premium packages.

Legal basis: Performance of a contract (Article 6(1)(b) GDPR)

Communication

To respond to inquiries and provide client support.

Legal basis: Legitimate interest or pre-contractual steps (Article 6(1)(f) and (b) GDPR)

Website Security and Spam Protection

To maintain website security and prevent spam.

Legal basis: Legitimate interest (Article 6(1)(f) GDPR)

Legal Compliance

To comply with Hungarian accounting and tax obligations where applicable.

Legal basis: Legal obligation (Article 6(1)(c) GDPR)

4. Comments

When visitors leave comments on the website, we collect the data shown in the comment form, as well as the visitor’s IP address and browser user agent string to help detect spam.

An anonymized string created from your email address may be provided to the Gravatar service if used. After approval, your comment and profile picture (if applicable) will be publicly visible.

Visitor comments may be checked through an automated spam detection service.

5. Cookies

Our website uses cookies to:

Ensure proper website functionality
Store user preferences
Enable login sessions (if applicable)
Improve user experience

You may disable cookies in your browser settings; however, some parts of the website may not function properly.

Where legally required, a cookie banner will request your consent before non-essential cookies are placed.

6. Embedded Content

Articles on this website may include embedded content (e.g., videos, images, articles). Embedded content behaves as if you visited the external website directly. These third-party sites may collect data about you, use cookies, and monitor your interaction.

7. Data Sharing

We do not sell or rent personal data.

We may share data only when necessary with:

Payment service providers
Accounting service providers (for legal compliance)
IT and hosting providers
Spam detection services

All third parties process data under appropriate confidentiality and data protection obligations.

8. International Data Transfers

Some service providers (e.g., hosting or analytics providers) may process data outside the European Economic Area (EEA). In such cases, appropriate safeguards are implemented in accordance with GDPR requirements.

9. Data Retention

We retain personal data only as long as necessary:

Client data: for the duration of the service relationship and in accordance with Hungarian accounting laws (typically 8 years for invoices)
Website comments: retained indefinitely unless deletion is requested
Contact inquiries: retained as long as necessary to respond

10. Your Rights Under GDPR

Under the General Data Protection Regulation, you have the right to:

Access your personal data
Request correction
Request deletion
Request restriction of processing
Object to processing
Request data portability
Lodge a complaint with a supervisory authority

In Hungary, the supervisory authority is the National Authority for Data Protection and Freedom of Information (NAIH).

To exercise your rights, please contact:
[Insert contact email]

11. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration.