Privacy Policy

Controller: Foglaljszepseget Kft.
Registered office: 2461 Tarnok, Szolohegyi ut 10., Hungary
Company registration number: 13-09-246845
Tax number: 33038935-1-13
Email: info@foglaljszepseget.hu
Phone: +36 30 422 2018
Website: https://www.foglaljszepseget.hu

This Policy applies to visitors, registered clients, service providers, provider staff, newsletter subscribers, purchasers of vouchers or passes, and users who contact our support team.

Service providers listed on the platform may also act as independent data controllers for their own services, customer communication, accounting, legal obligations and marketing activities.

• Account and login data, such as name, email address, phone number, account identifiers and authentication data.
• Provider profile data, such as business details, contact details, service descriptions, opening hours, prices, images and billing details.
• Booking data, such as client name, email address, phone number, appointment time, selected service, price, booking status and notes.
• Payment and transaction data, such as payment status, amount, transaction identifiers and billing data. We do not store full card details.
• Voucher and pass data, such as purchaser details, recipient details, value, validity and redemption status.
• Reviews, support messages, technical logs, device data, cookie identifiers and consent records.

• To provide accounts, bookings, provider profiles, payments, vouchers, passes and customer support.
• To send transactional emails, reminders, booking confirmations and service-related notifications.
• To operate, secure, maintain and improve the platform.
• To comply with legal, accounting, tax, consumer protection and dispute-resolution obligations.
• To send marketing communications only where we have a valid legal basis, such as consent.

Providers may choose to connect their own Google Account and Google Calendar to FoglaljSzepseget.hu. This integration is optional and is used only to synchronize provider appointments and to help calculate bookable availability.

When a provider connects Google Calendar, we may collect and process the Google Account identifier or email address, OAuth access and refresh tokens, the selected calendar identifier, Google Calendar event identifiers, event times, event titles and statuses, and free/busy availability intervals needed for appointment scheduling.

We use this Google user data only to create, update or delete appointment events in the connected Google Calendar, refresh the Google Calendar connection, display synchronization status to the connected provider, and prevent bookings from conflicting with existing busy times.

Access tokens and refresh tokens are stored with restricted access and used only to operate the Google Calendar integration. Providers can disconnect the integration at any time from the platform or from their Google Account security settings. After disconnection, we stop performing Google Calendar operations and delete or invalidate the tokens needed for the connection, unless temporary retention is required for security, debugging or legal purposes.

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

We may use external service providers or disclose personal data to recipients where necessary to operate the platform, provide requested services or comply with law.

Where required for platform operation, we may also use additional hosting, backup, security, error monitoring, analytics, push notification, support or other technical providers. We disclose data to authorities, courts, accountants and legal advisers only where required by law, an authority request or legal claims.

Detailed rules on sharing, transferring and making Google user data received from Google APIs accessible are set out in Section 5 of this Privacy Policy.

Some providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as European Commission adequacy decisions, standard contractual clauses and additional technical or organizational measures where required.

• Account data is kept while the account exists, unless legal obligations or legitimate interests require longer retention.
• Booking data is generally kept for 5 years from the appointment date for legal claim management.
• Accounting and invoice data is generally kept for 8 years under Hungarian accounting rules.
• Support and complaint data is generally kept for 2 to 5 years, depending on the nature of the case.
• Technical logs are generally kept for up to 12 months unless a security incident or dispute requires longer retention.
• Google Calendar tokens are kept only while the integration is active and are deleted or invalidated after disconnection.

We use technical and organizational measures designed to protect personal data, including encrypted transmission, access controls, authentication, logging, backups, provider access restrictions, incident handling procedures and contractual safeguards with processors.

Depending on the circumstances and applicable law, you may request access, correction, deletion, restriction, portability, objection to processing and withdrawal of consent. You can submit requests at info@foglaljszepseget.hu. We may need to verify your identity before fulfilling a request.

You may contact us first at info@foglaljszepseget.hu. You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), website: https://www.naih.hu.

We may update this Privacy Policy if our services, legal obligations, providers or data practices change. The updated version becomes effective when published on the platform, unless a different date is stated.