Privacy Policy

Effective from: 2026.05.12.
This Privacy Policy (hereinafter: Information Sheet) the gipsyjourney.com provides information on data processing activities related to the gipsyjourney.com website.

1. Details of the data controller

Data controller: GypsyJourney Limited Liability Company („GypsyJourney Ltd.”)
Registered office / place of business / postal address: 1202 Budapest, 137 Nagykőrösi út.
Tax number: 33041889-2-43
Company registration number: 01-09-455975
Contact regarding data protection:

  • info@gypsyjourney.com
  • booking@gypsyjourney.com

Data Protection Officer (DPO): has not been designated.

2. Key terms (briefly)

  • Personal data: data relating to an identified or identifiable natural person.
  • Data processing: any operation carried out on personal data (collection, storage, transmission, etc.).
  • Data processor: who processes data on behalf of the data controller (e.g. hosting provider, billing provider, automation provider).

3. What principles do we follow when processing data?

We process personal data lawfully, fairly, transparently, for specific purposes, in a data-minimalist manner, accurately, with limited storage periods and with appropriate security measures.

4. Contact us / Request a quote (form, email)

The scope of the data processed: name, email address, the content of the message, and any other information provided voluntarily in the message.
Purpose of data processing: making contact, replying, making an offer, coordinating.
Legal basis: legitimate interest (responding to enquiries) and/or your consent by contacting us.
Data retention (proposal): 12 months, unless the enquiry leads to the establishment of a contractual relationship (in which case the relevant data may form part of the contractual documentation).

5. Bookings (Bókun) and payments (Stripe), invoicing (Számlázz.hu), tax authority data reporting

A key part of the booking process is the Bókun its booking system, which can be accessed via an interface embedded on the website.

5.1. Booking via the website (Bókun widget)

The scope of the data processed (typically):

  • name of the booking
  • email address
  • booking details (tour/activity, date/time, number of people, status)
  • billing details (at least name and address; optionally company name/tax number, if B2B transactions are involved)

Purpose of data processing: booking creation, confirmation, fulfilment, and customer communication.
Legal basis: performance of the contract / steps prior to the conclusion of the contract (handling of bookings).

5.2. Online payment (Stripe)

Payment on the website are processed online, in advance, by credit card via Stripe .
Important: GypsyJourney Kft. does not process credit card details; these are processed via the secure system of the payment service provider (Stripe).

Purpose of data processing: processing payments, managing transactions, and preventing fraud.
Legal basis: performance of the contract, or the legitimate interests of the payment service provider and/or GypsyJourney Kft. (fraud prevention, security).

5.3. Invoicing (Számlazz.hu) and NAV Online Invoice Data Reporting

Once payment has been successfully processed, the invoice will be issued and sent by email via the Számlázz.hu system, and furthermore data is automatically reported to NAV Online Invoice.

The scope of the data processed: billing name, address, (company name/tax number where applicable), email address, details of the service/item purchased, amount, currency (EUR), invoice details.
Purpose of data processing: issuing and delivering invoices, and fulfilling accounting and tax obligations.
Legal basis: compliance with legal obligations (accounting/tax obligations).

5.4. Automation (Make)

Certain steps in the booking and invoicing process can be automated (e.g. generating an invoice based on a paid booking) using the Make automation service.

Purpose of data processing: Integration of the booking and invoicing process, automation of data transfer, error handling and logging.
Legal basis: performance of a contract and legitimate interest (efficient, error-free administration).

5.5. Marketplace bookings (e.g. GetYourGuide, Viator, etc.)

Bookings and payments may be processed via an external platform. In such cases, the platform handles the data and payment in accordance with its own terms and conditions; GypsyJourney Kft. may receive the booking details necessary for fulfilment and capacity management (e.g. via Bókun).

6. Embedded content (YouTube) and external services

The website may contain YouTube videos embedded. When displaying embedded content, the external service provider may also process technical data (e.g. IP address, browser data, cookie identifiers) in accordance with its own data processing policies.

Suggestion (solution): embedded marketing/statistical content should only be activated after consent has been given LW Cookies settings.

7. Cookie management – LW cookies

This website may use cookies to ensure it functions properly and to improve your user experience. You can manage your cookie settings and record your preferences via the LW Cookies carries out.

Categories of cookies (typically):

  • Required cookies (essential for the website to function)
  • Statistical cookies (only with consent)
  • Marketing cookies (only with consent)

Cookie settings can be changed at any time via the cookie management interface.

8. Analytics (GA4) – conditional provision

GypsyJourney Ltd. reserves the right to measure the website’s operation and performance, and to improve the user experience web analytics tool (e.g. Google Analytics 4 / GA4) introduce.

In the event of an introduction:

  • The use of statistical cookies/identifiers is limited only with your consent (via LW cookies),
  • Purpose of data processing: to compile visitor and usage statistics, to improve the website,
  • The data processed typically includes: technical data, measurement events (the purpose is not direct identification),
  • this may occur due to the service provider's system Data transfers outside the EEA, in which case appropriate safeguards shall apply.

9. Newsletter / CRM (FluentCRM) – conditional provision

Should GypsyJourney Ltd. in the future newsletter starts, or FluentCRM is introducing a system:

  • the newsletter is sent exclusively prior consent is based on,
  • We provide an unsubscribe option in every newsletter,
  • Retention period: until the consent is withdrawn (unsubscription), or in accordance with legal obligations.

10. Data processors / recipients

The following service providers may be granted access to personal data to the extent necessary for the operation of the service:

  • Hosting provider: mhosting – online.mhosting.hu
  • Booking system: Bókun (embedded booking interface, booking management)
  • Payment provider: Stripe (online credit card payments)
  • Automation: Make (system integration, automated invoicing)
  • Invoicing: Számlázz.hu (invoice creation and dispatch)
  • Addressee: NAV Online Invoice (data reporting as required by law)
  • Embedded video: YouTube (technical data processed by a third-party provider)

(Note: some service providers may act as independent data controllers in accordance with their own data processing terms and conditions. In all cases, we endeavour to apply appropriate contractual and data protection safeguards.)

11. Data security

We implement appropriate technical and organisational measures to protect personal data (e.g. access restrictions, logging, backups, updates).

12. Rights of data subjects

In accordance with the relevant legislation, you have the following rights in relation to the processing of your personal data:

  • the right to information
  • request access
  • request for correction
  • request for erasure (subject to legal obligations)
  • restriction of data processing
  • Data portability (in the case of automated data processing based on a contract or consent)
  • objection to data processing based on legitimate interests
  • withdrawal of consent (where data processing is based on consent)

Please send your request to info@gypsyjourney.com or booking@gypsyjourney.com .

13. Legal remedies

If you feel that your personal data is not being processed correctly, you can lodge a complaint with the National Authority for Data Protection and Freedom of Information (NAIH), or take the matter to court.

14. Data retention periods (summary – proposal)

  • Contact/request a quote: 12 months
  • Enquiries regarding bookings: 5 years
  • Billing details/invoices: statutory period (accounting/tax obligations)
  • Server logs/security logs: 30 days
  • Cookies: depending on the cookie (typically 6–24 months, (as per the consent)

15. Amendments to the Prospectus

GypsyJourney Ltd. reserves the right to amend this Notice. The current version is available on the website.