Privacy Policy

Last Updated: January 15, 2026 | Effective Date: January 1, 2026

At Viblycuriouscrw Hungary Kft. ("Viblycuriouscrw", "Company", "we", "us", or "our"), registered under company registration number Cg. 01-09-948124 with registered corporate offices at Andrássy út 22, 1061 Budapest, Hungary, we place paramount importance on safeguarding the privacy, confidentiality, and data autonomy of our guests, website visitors, and corporate clients. This Privacy Policy sets forth in clear, granular detail the categories of personal data we collect, how such data is handled, stored, protected under the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - "GDPR"), and the Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information ("Infotv.").

1. Data Controller Identification

For the purposes of applicable data protection legislation, the entity acting as the Data Controller is:
Viblycuriouscrw Hungary Kft.
Andrássy út 22, 1061 Budapest, Hungary
Company Registration Number: Cg. 01-09-948124 (Budapest Metropolitan Court)
EU Tax Identification: HU24918274
Designated Data Protection Officer (DPO): [email protected]

2. Categories of Personal Data Collected

We process personal data only when strictly necessary for the fulfillment of our luxury passenger transport services, booking confirmations, compliance with Hungarian transport authority mandates, and digital security:

Identification & Contact Data: Full legal name, preferred salutation, email address, telephone contact (including WhatsApp identifiers), nationality, and emergency contact details for principal bookers.
Charter & Booking Specifications: Selected dates, hours of hire, passenger counts, specialized catering orders, beverage preferences, drop-off/pick-up addresses, itinerary waypoints, and guest music playlists.
Billing & Financial Data: Billing addresses, corporate registration details for B2B invoices, payment verification tokens, and transaction timestamps. (Note: Full cardholder numbers are processed via certified, encrypted Level 1 PCI-DSS payment gateways and are never retained on our physical servers).
Digital & Telemetry Data: IP address, browser type and version, language settings, device hardware specifications, referrer URLs, pages viewed, and session interaction metrics collected through essential and analytical cookies.
Safety & Onboard Security Telemetry: In compliance with Hungarian road transport passenger security laws, our exterior perimeter dash-cameras record forward and rear traffic conditions. No permanent audio recording is maintained inside private VIP guest passenger salons unless requested for documentary purposes.

3. Legal Bases for Processing Under GDPR

We rely on the following explicit legal bases under Article 6 of the GDPR:

Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary to negotiate, confirm, and execute your luxury party bus rental agreement, route planning, and onboard concierge provisions.
Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Retention of invoicing and tax records pursuant to Hungarian Act C of 2000 on Accounting, and compliance with the Hungarian National Transport Authority guidelines.
Legitimate Interests (Art. 6(1)(f) GDPR): Protecting company assets, fleet vehicles, preventing fraudulent transactions, optimizing website performance, and ensuring the physical security of our chauffeurs and passengers.
Explicit Consent (Art. 6(1)(a) GDPR): Processing non-essential telemetry via our cookie consent mechanism or dispatching marketing communications regarding Budapest nightlife access.

4. Third-Party Processors & International Transfers

Your data is shared solely with trusted sub-processors who adhere to rigorous technical and organizational safeguards. These include cloud infrastructure hosts within the EU (Frankfurt / Dublin data centers), payment tokenization vendors, and certified accounting firms within Hungary. We do not sell, rent, or trade your personal information to marketing syndicates or unauthorized third parties under any circumstances. In the rare event data is transferred outside the European Economic Area (EEA), such transfers are governed by the European Commission's Standard Contractual Clauses (SCCs).

5. Data Retention Schedules

We retain personal data only for the period necessary to fulfill the specific purposes outlined herein:

Booking inquiries that do not result in a confirmed charter are permanently purged after 180 days.
Confirmed charter details and client communication records are retained for three (3) years to address any post-charter customer service inquiries or warranty claims.
Fiscal invoices and accounting documentation are maintained for eight (8) years in accordance with Section 169 of the Hungarian Accounting Act.

6. Your Statutory Rights Under the GDPR

As a data subject, you maintain enforceable rights regarding your personal information:

Right of Access (Art. 15 GDPR): The right to request copies of all personal data held concerning you.
Right to Rectification (Art. 16 GDPR): The right to request correction of inaccurate or incomplete information.
Right to Erasure / "Right to be Forgotten" (Art. 17 GDPR): The right to request deletion of your data where statutory retention grounds no longer apply.
Right to Restriction of Processing (Art. 18 GDPR): The right to limit data handling during verification disputes.
Right to Data Portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used, machine-readable format.
Right to Object (Art. 21 GDPR): The right to object at any time to processing based on legitimate interests.

To exercise any of these rights, contact our Data Protection Officer at [email protected]. You also maintain the right to lodge a formal complaint with the supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), Falk Miksa utca 9-11, 1055 Budapest, Hungary (www.naih.hu).