Information & Privacy policy

Privacy Policy

Mandala Day Spa is observing the latest European Union law regarding data protection. In our operation we are strictly observing confidentiality all the private information what our customers gives us.

The information provided by our customer at Mandala Day Spa is:

• Honestly and legally treated.

• Only used for specific purposes.

• Only for the time that is strictly necessary.

• Handle the rights of the data subjects.

• Under no circumstances should they be allowed to leave the company's systems for a third party.

Your Contribution

When you sign up for a Mandala Day Spa’s webshop or purchase a voucher, you agree to use the given personal information to collect and process your personal information to provide you in the future further information about our Bath including commercial offers and newsletters.

In that case if we change our data management process, the changes will be immediately displayed in our webshop and we'll send you an informative email as well. As a result, you will always be aware of any changes to our privacy policy, including what data we collect, how to use it, and who will make the data available to you.

Mandala Day Spa will ensure that your data is handled confidentially in accordance with the applicable Personal Data Protection Act. Without your authorization, your data will not be disclosed to a third party.

Useful information

Upon receiving your Spa treatment
Our spa environment is the home of relaxation and harmony. In order to ensure a tranquil atmosphere we kindly request that spa guests refrain from using mobile phones and speak in a gentle voice. Please, arrive at least 30 minutes before your scheduled appointment to ensure the comfortable check in. Thank you for your understanding!

Client privilages
As a client of Mandala Day Spa you are invited to enjoy all our Spa facilities for two hours before or after your treatment. By purchasing one of the Spa packages, the entrance fee and all spa facilities are free of charge for two hours. You are also welcome as our guest for 2 hours without booking: 5500.- HUF (from Monday to Thursday) or 7500.- HUF (from Friday to Sunday) for jacuzzi, sauna, teahouse, changing room. We would like to note that Mandala Day Spa is not responsible for lost property. You can use our safe at Reception. You are also advised to check the treatment room immediatly after your treatment and your robe pockets while dressing for all personal property.

Booking

You can reserve and confirm your Mandala appointment via phone or e-mail. For booking you have to provide your phone number for contacting in any case regarding your booking. All appointments are confirmed the day before treatment. Please, return our confirmation call or text massage to guarantee your appointment. Please, consider the fact that all the appointment will be cancelled without confirmation. We require at least 24 hours notice to cancel one or two hour appointments, 48 hours for spa packages and 72 hours for groups. We appreciate your cooperation and understanding.

In case of group booking (from 3 people) or over 30.000.- HUF we would ask to settle 50 % deposit either by bank transfer, credit card via phone or personal at the reception at least 48 hours before the booking by credit card (Visa, MasterCard) or cash. For further information regarding the bank account details our reception is kindly at your disposal.

Bank transfer:

11600006-00000000-78617614, Spa Operator Kft.

ERSTE Bank Hungary ZRT.

SWIFT code: GIBAHUHB

IBAN: HU83 11 60 00 06 00 00 00 00 78 61 76 14

Cancellation

We understand that sometimes you may need to change your schedule. Because your spa appointments are reserved especially for you, we kindly ask that you give us a minimum of twelve hours notice so someone else may visit us.

In case of cancellation

within 24 hours of booking with voucher or deposit we charge 50 % of the voucher or the deposit amount.

within 12 hours of your booking we will charge 100% of your voucher or deposit amount.

Gift voucher policy

You can buy any of our treatments as a gift. Each gift voucher is valid for a maximum of 6 months from the date of issue unless otherwise stated. A voucher will be deemed to be invalid if it is out of date (the validity date is clearly stated on the voucher). If the customer or recipient is unable to utilise the voucher before the expiry date then, the customer should send a request to the info@mandaladayspa.hu.

If you are still inside the expiry date, it can be extended for 1 more week in amount of 50%.

If the activity in respect of which the voucher is to be redeemed has increased in price, the customer will also need to pay the difference in price. All vouchers are redeemed and experiences booked and taken before the expiry date on the voucher. For booking, please make a reservation via phone or email. We are not able to give you back the money according to the 151/2003. (IX. 22.) Gov. regulation, but all the cards are transferable to an other person and all the treatments can be changed to any other treatment within the same price. If you wish to have a more expensive treatment, you only need to pay the price difference.

GLS delivery serviss

• Fast and efficient door-to-door package delivery for Business-Parcel (0-40 kg) packages. In Hungary, in all cities and settlements, the packages will be delivered on the following working day following after the collection, during working hours (between 8 am and 5 pm). Second delivery attempt is free.

• Door-to-door delivery to all addresses

• Parcel delivery on the next working day in Hungary

• Free second delivery attempt

• Automatic value insurance for all packages up to HUF 50,000 / package

• Track & amp; Trace® technology, internet parcel tracking, receipt can be downloaded from the website

• For call center recipients from 07:00 to 20:00 Phone: (+36 29) 886 700

By using the Services, the Principals acknowledge and accept the GLS General Logistics Systems “General Terms and Conditions” and the “General Package Insurance Terms and Conditions”.

Prices are per package and do not include the current VAT.

Business package Package weight Freight / package (HUF) 0.1 - 2 kg 1250 2.1 - 3 kg 1400 3.1 - 5 kg 1500 5.1 - 10 kg 1600 10.1 - 15 kg 1700 15.1 - 20 kg 1800 20.1 - 25 kg 2000 25.1 - 30 kg 2200 30.1 - 40 kg 2400

Express package, Urgent, package with deadline delivery on the following working day after the collection, no later than 12 noon. Only in certain settlements, the list of settlements can be found on the GLS website. Product fee: freight + 50%.

WE RESERVE THE RIGHT TO CHANGE THE PRICES!

Accidents and injuries

The Mandala Day Spa shall not be liable for any accidents and injuries suffered by members or guests.

Health conditions

Every time you visit our Spa please provide us with your health conditions, allergies, injuries that could affect your spa experience. Please, notify us if you are pregnant, or if you have any concerns regarding your health or body. Please, consider in case of any kind of extant health problem you can apply for treatments that are recommended by the Reception. We recommend that alcohol not be consumed before, during or immediately after your spa treatments.

Valuables

You will be supplied with a locker but it is recommended that valuables are not brought with you, as all jewellery needs to be removed prior to spa treatments. No responsibility will be taken by the spa for any loss of valuables.

Privacy Policy
The privacy and security of your personal information is very important to us. We do not share your personal information with nobody. We value your trust very highly, and we strive to protect the confidentiality and appropriate use of any personal information you provide to us.

If there are questions or concerns regarding this statement, we ask that you first contact:
Mandala Day Spa
1133, Budapest, Ipoly utca 8.
Phone: +36 1 491 0078
Email: info@mandaladayspa.hu

What Personal Information We Collect

We collect personal information that you choose to provide voluntarily when using our web sites and mobile applications. You can use our site without creating an account, but you will need to create an account if you want to take advantage of certain features, such as "Member Club," "Subscribe for newsletter" and other personalized features. We may also ask for personal information when you contact our Customer Service department. This will allow us to protect your confidentiality by verifying your identity.

Following a visit in our spa, your spa stay information is collected and stored by our administration supervisor, and subsequently transferred to a centralized database. This facilitates aggregated trend analysis used for spa management purposes such as planning treatments, evaluating spa amenities, guest preferences, and advertisement planning. In addition, your business with us is valued and we may use the record of your visit to send you via email, communications such as guest surveys or promotional offers and benefits. For Customers who do not reside in Hungary, and who have not chosen to subsrice for our newsletter or Member Club, we may contact you regarding your satisfaction with your spa visit, but will not send you any sales promotional communications or special offers unless you have consented to receive such communications.

Our web sites do not intentionally solicit or collect personal information about children under the age of 13. If you are under 13 and would like to use our web site, please ask a parent or guardian for assistance.

Where Do We Collect Your Personal Information?

When you place a treatment, reservation, we request your name, email address, mailing address, phone number, and in case your if the value of the reserved treatment is more than 40.000 HUF we request a transfer of 50% of the amount. We use this information to process and fulfill your reservation.

How We Use Your Personal Information

Information we collect on our web sites and mobile applications may be used to enhance your experience in the following ways:
Confirm your treatment reservations
Request your evaluation of a visit via a satisfaction survey
Send you emails that relate to a spa visit
Respond to your customer-service inquiries or requests
Communicate special offers and featured items to you, if you choose to receive such notices
Customize your experience on our web sites

When and With Whom We Share Your Personal Information

We do not share your personal information with any other third parties unless we have your permission or under special circumstances, such as when we believe in good faith that the disclosure is required by law or to protect the safety of spa guests, employees, the public or Mandala Day Spa’s property. We reserve the right to disclose your personally identifiable information as required by law and when we believe that disclosure is necessary to protect our rights and/or comply with a judicial proceeding, court order or legal process served on our business entity.

Links to Other Sites

Please note that our site links to other sites and that the privacy policies of these sites may differ from ours. We advise you to check the privacy policies of other Web sites before disclosing any personal information. In any event, please note that these sites do not share your personal information with us.

Occasionally when linking to another site, you may still see our site's logo or frame. This is to provide you with a seamless experience when visiting our Web site. In these cases you are no longer on our site and are now on a different Web site whose information collection practices may differ from ours. The privacy policy of the site you are on will govern how information collected from you is used. You can always know what site you are on by checking the location bar within your browser.

How can I decide what communications I will receive?

Guest Satisfaction Surveys

We strive to maintain and continually improve the quality of our brand. Customer comments and feedback are valued and used as a quality tool. As part of the spa experience, we engage a third party to randomly survey guests and request an evaluation of the spa property and service. These surveys are sent via email. If you have a preference for either email or postal mail or if you do not wish to be contacted for satisfaction surveys, please advise the spa either at arrival or during your visit. You may also contact the reception of the spa.
Email Communications

If you choose to receive periodic communications from us, we may from time to time send you email messages describing new promotions and special offers. You can choose to stop receiving these emails at any time. If you are a member in out Member Club, we value your patronage and will send you special offers and promotions. If you do not wish to receive these offers, you may discontinue at any time by using the "Unsubscribe" feature included on each email message.

Email communications that we use are described in more detail as follows:

Membership Transactions: We may send you email confirmations of any member transactions that you conduct (redemption, promotion registration, points deposit). These confirmations will only be sent if a transaction is conducted.

Reservation/Visit Related Interactions: We may send you a reservation confirmation email or give you a phone call to confirm any reservation you make via phone or email. A similar confirmation may be sent if you modify or cancel a reservation. These confirmations will only be sent if a transaction is conducted.

Pre-Arrival Communications: We may use your email address used for your reservation to provide a reservation summary with hotel and local area information a few days prior to that particular stay.

Post-Visit Communications: We may use your email address used for a treatment reservation to thank you for that particular visit or to request your feedback on your visit.

Operational Notices: Email addresses may also be used to respond to your customer service inquiries and to answer any other questions you may have about our site. We may also need to send emails to inform you of any changes to our site that might affect your personal information or to notify you "of problems with your reservation.

Spa Operator Kft.

About the operation of the security camera system and the use of recorded images

Rules for electronic video surveillance in the area of Mandala Day Spa (1138 Budapest, Ipoly utca 8) - European Parliament and Council (EU) 2016/679 no. General Data Protection Regulation (GDPR), CXII of 2011 on the right to information self-determination and freedom of information. Act ("Infotv."), Act I of 2012 on the Labor Code ("Mt."), as well as Act CXXXIII of 2005 on the rules for personal and property protection and private investigative activities. Act ("Szvtv"), bearing in mind the guiding recommendations of the former data protection commissioners and the National Data Protection and Freedom of Information Authority - states as follows:

Purpose and content of the regulations
1.1. The purpose of these regulations (hereinafter: "Regulations") is to ensure that Mandala Day Spa, as a data controller and as an employer (hereinafter: "Spa"), uses the electronic image surveillance system installed at its headquarters by the persons concerned (including the Spa's employees and the Spa in accordance with the European Union and Hungarian legal regulations regarding the right to self-determination of persons affected by camera surveillance, transparently, fully respecting the constitutional and personal rights of the persons concerned. apply with respect.

The purpose of camera surveillance
The purpose of the operation and use of the asset protection chambers within the building is to: ∙ protect the life, physical integrity, and personal freedom of persons staying on the property of the data controller, ∙ protect business and payment secrets, ∙ property owned or used by the persons staying on the property or the property owned or used by the data controller protection (asset protection) The Data Controller operates an electronic monitoring system in the properties affected by its activities. It achieves the following goals: detection of violations of law, prosecution of the perpetrator, prevention of these illegal acts, and in addition, in connection with them, they are used as evidence in the framework of official proceedings. Scope of processed data: image and/or sound recording. Managed data includes the behavior of the person affected by the surveillance, as well as the data that can be obtained with the camera image (place of stay, time of stay).

The location of the cameras, monitoring and use of images are limited to the purpose
3.1 The Spa places each camera in a location and at a viewing angle that is in line with the personal and property protection goal set out in point 2.

Camera location

Observation range

Day Spa

1 - Cash register

2- Corridor 1

3 - Office

4 - Laundry

5 - Teahouse

6 - Door leading to the parking lot

7 - Reception

8 - Pedicure room

9 - Employee rest room

10 - Main entrance from the outside

11 - Kitchen

12 - Reception product department

13 – Tea house buffet

14 – Main entrance door inside

15 – Reception from the side

Swimming pool & Orient Even

1 – Hot pool

2 - Pool Kitchen

3 – Main pools 1

4 – Main pools 2

5 – Orient swing section

6 – Orient seating section

7 – Orient entrance

8 - Saunas

9 – VIP room

10 – Massage chairs

11 – Oriental cuisine

12 – Pool computer room 1

13 – Pool computer room 2

3.2 Cameras may not be installed in rooms or in a viewing angle designated for employees to spend their time between work, and it is also prohibited to place cameras in changing rooms, toilets, showers and any other place where visual surveillance may harm human dignity.

3.3 Camera surveillance and the use of recorded images may only be used for the purpose specified in the Regulations, provided that the use is essential and suitable for the realization of the purpose.

3.4 Proceedings related to the employee's work may not be initiated against the Employee on the basis of a photograph, unless the employment law dispute was based on the Employee's behavior that harms or endangers the property interests of the Spa, and the recorded photograph is suitable for proving this behavior.

The legal basis for camera surveillance
4.1 Camera surveillance of the Data Subjects in the legitimate interest of the Spa and - In the case of employees, data management as part of the control of behavior related to the employment relationship - Mt. 11/A. It is based on the statutory authorization contained in paragraph (1) of §

4.2 Consideration of interests: the purpose of data management based on legitimate interests is contained in point 2 of these Regulations. The Data Subjects' right limited by data management is the right to image and privacy. Spa determined the position of the cameras in such a way that the angle of view of the camera is always aimed at a person, event or asset to be protected. In the areas monitored by cameras, the goal of camera surveillance (point 2) could not be achieved with a less restrictive measure. Given that the Spa always informs the Data Subjects of the fact and essential circumstances of the camera surveillance, therefore the Data Processing does not affect the Data Subjects unexpectedly, the duration of the data processing is adjusted to the legal requirements (point 6), only the persons specified in these regulations can view the data authorized in the described procedure (point 5), review and use may only take place in the cases specified in these regulations (point 5), Spa assesses that the data management meets the requirement of proportionality of necessity.

4.3 The Data Subjects will receive written information about the fact of camera surveillance and image recording and the details of data management. As part of its obligation to provide information, the Spa is obliged to place a notice and the most important information in the monitored areas in a clearly visible place and manner about the operation of the cameras.

5. They are entitled to access and review

5.1 The Spa conducts real-time, direct monitoring.

5.2 In the presence of the police, the executive or Spa manager is entitled to review the recorded images. The recorded images can only be viewed afterwards in justified cases, in order to enforce the legitimate interests of the Spa (see Regulations, Clause 2) or to exercise the rights of the Employee or other Data Subject (see Regulations, Clause 8). If the reason for authorization ceases, access to stored images must be terminated immediately.

5.3 The Spa is obliged to record the fact, reason and time of non-automatic data management operations related to image recordings (review, saving to data carrier, forwarding, individual deletion), as well as the person performing the data management operation and familiar with the recordings. The electronic register containing this data in a verifiable manner is also considered a protocol.

6. Place and duration of storage of images

6.1 The images are stored on the Spa's own internal server.

6.2 If the recorded images are not used within 3 days, the Spa will store them for a maximum of 14 days from the date of recording, as the data controller does not have any special reasons for longer-term data retention compared to general personal and asset protection purposes. If there is no use, the recordings are automatically deleted on the 14th day after recording.

7. Data security regulations

7.1 The Spa manages the personal data of the Data Subjects in an IT system and environment that is capable of protecting the data against unauthorized access, change, transmission, disclosure, deletion or destruction, accidental destruction or damage, and against becoming inaccessible.

7.2 The IT contractual partner within the Spa organization is responsible for protecting the security of personal data handled in connection with the operation of the camera system. As part of the performance of this task, the IT contract partner ∙ takes the necessary network, hardware and software protection measures to create and maintain the security of the camera system (allocation, validation and registration of access rights, password protection, virus protection, etc.); ∙ ensures the continuous and uninterrupted functionality of the camera system.

7.3 The Spa will immediately inform the Data Subject if the integrity of the data file stored in or outside the IT system is damaged, and it is reasonable to assume that a third party may have had unauthorized access to the photographs taken of the Data Subject.

8. The Data Subject's rights and their enforcement

8.1 Upon request, the Spa provides the Data Subject with information about the personal data processed about him as a result of the camera surveillance. The Spa must provide the requested information immediately, but no later than within 30 days. The Data Subject is entitled to learn about Regulation 5.3. the contents of the protocol prepared based on point

8.2 Within 14 days of recording the image, the Data Subject may request that the Spa not delete the image, if the Data Subject wishes to exercise his right of access regulated in Article 15 of the GDPR, or if the non-deletion or limitation of data management is in accordance with Articles 17 and 18 necessary for the submission, enforcement or defense of the Data Subject's legal claim. Upon request of a court or other authority, the recorded image and other personal data must be sent to the court or authority immediately. If an inquiry is not made within three days of the request not to be deleted, the recorded image and other personal data must be destroyed or deleted. A record must be made of the handover, or of the deletion or destruction in such cases.

8.3 The Data Subject may request from the data controller access to personal data relating to him, their correction, deletion or restriction of processing, and may object to the processing of such personal data, as well as exercise his right to data portability in accordance with the provisions of the GDPR.

8.4 The Spa does not make decisions based on automated data management and does not perform profiling. The Spa does not transfer the data involved in the data management included in these regulations to third countries outside the EEA.

8.5 You can file a complaint with the National Data Protection and Freedom of Information Authority regarding the data management, data processing and data transmission described in this information. Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C. Mailing address: 1530 Budapest, PO Box: 5. Phone: +36 -1-391-1400 Fax: +36-1-391-1410 E-mail: ugyfelszolgalat@naih.hu

8.6 In addition to the above, in case of unlawful processing of your data, you may also refer to the competent court.

9. Contact information of the data controller Name: Spa Operator Kft, 1138 Budapest, Ipoly utca 8., . Phone: +3614910078, E-mail: marketing@mandaladayspa.hu

10. Data protection officer contact Data protection officer (DPO): Dr Veronika Hegedus, Phone: +36707722898, E-mail: veronika.hegedus@gmail.com.

11. Final Provisions

11.1 These Regulations enter into force on February 7, 2020.

11.2 In relation to the Employees, the Regulations shall enter into force with the signing of the contract establishing the legal relationship in the case of employment relationships created after its entry into force, and by notification by the Spa for legal relationships established before the entry into force.

11.3 In order to comply with the applicable legal environment at all times, the Spa regularly reviews the Regulations and, as necessary, ensures that changes are transposed into the Regulations. The managing director of the Spa is responsible for the maintenance of the Regulations, who is obliged to review these Regulations regularly (at least once a year) and update them if necessary.

11.4 The Spa reserves the right to amend its data management policy - within the legal framework in force at all times - and to enforce the resulting changes in the Regulations.

11.5 The Spa makes the Regulations continuously available to the Data Subjects and ensures that all Data Subjects actually become familiar with its content and changes.