Booking privacy notice

1.1. The controller is the business you book with or buy a pass from (hereinafter: the Business). The Business's name and contact details are on its booking page and in the confirmation email. The Business may also publish its own privacy notice, which supplements this one. 1.2. The booking system is operated by Filyó Dominik, sole proprietor (registered office: Rózsa utca 3., 3561 Felsőzsolca, Hungary; tax number: 90270336-1-25; registration number: 59428721; email: kapcsolat@filyodev.hu) (hereinafter: Revino). Revino handles your booking data on the Business's behalf, as a processor, under the data processing agreement with the Business (https://revino.hu/en/foglalas/dpa/), and does not use it for its own purposes. 1.3. If you book in the Revino app or in Discover, Revino handles your Revino account and the in-app handling of your bookings (for example the My bookings list and notifications) as an independent controller, under the app's Privacy Policy (https://revino.hu/en/privacy/). The Business receives the data needed for the booking, but not the rest of your account (for example points collected at other businesses).

- Name, phone number, email address (the Business decides which are required); - booking details: date, time, party size, service, staff member, table or class, occasion, answers to additional questions asked by the Business, notes; - allergy or dietary needs, if you provide them (health data); - payment method, amount and status (your card details are handled only by Stripe); - invoicing details, if you ask for an invoice; - passes and memberships: type, validity, entries used, entry times; - the photo uploaded for pass entry, if the Business uses it; - for buyers aged 14 to 17, the fact and time of parental consent; - in case of a no-show, the fact of it at that Business; - confirmations, reminders and notifications sent to you, and their delivery status.

3.1. Performance of a contract (Article 6(1)(b) GDPR): recording and confirming the booking, reminders and notices of changes, managing passes and entry, online payment, photo entry. 3.2. Explicit consent (Article 9(2)(a) GDPR): handling allergies or dietary needs. Providing this is voluntary, and you can withdraw your consent at any time. 3.3. Legal obligation (Article 6(1)(c) GDPR): issuing and keeping invoices under Act C of 2000 on Accounting. 3.4. Legitimate interest (Article 6(1)(f) GDPR): recording no-shows at that Business, so the Business can deal with repeated no-shows. This data is never shared with any other business. 3.5. Your booking data is not used for advertising. You only receive business offers if you have separately consented to them (for example in the Revino app for that business).

- Guest data and bookings: for 2 years after your last visit (the Business can set this between 6 and 36 months); - no-show flags: 12 months; - allergies or dietary needs: until the 30th day after the visit; - invoices: 8 years; - pass photos: until the pass or membership ends; - delivery data of notifications: 30 days.

5.1. The Business and those of its staff who need it to manage bookings. 5.2. Revino as processor, and the sub-processors it uses: Convex, Inc. (USA, database and cloud), Resend, Inc. (USA, emails), Expo (USA, push notifications to the app), Functional Software, Inc. (Sentry, USA, EU data storage, crash reporting in the app), Rackhost Zrt. (Hungary, website hosting), Cloudflare, Inc. (USA, checking that a booking does not come from a bot when you are not signed in). 5.3. Stripe, Inc. handles online payments and your card details as an independent controller. 5.4. The Business's invoicing software (Számlázz.hu or Billingo), which issues the invoice. 5.5. For transfers outside the European Economic Area, we apply the safeguards of Chapter V GDPR (the European Commission's standard contractual clauses or an adequacy decision).

6.1. You can ask for access to your data, its correction or erasure, restriction of its processing, or a copy to take elsewhere (data portability); you can object to processing based on legitimate interest, and you can withdraw your consent at any time. 6.2. Send requests about your booking data to the Business. If you contact Revino (kapcsolat@filyodev.hu), we forward the request to the Business without delay and help fulfil it. Revino handles requests about your Revino account. 6.3. We reply to your request within one month; where justified, this can be extended by two further months. 6.4. You can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, Falk Miksa utca 9-11., 1055 Budapest, ugyfelszolgalat@naih.hu, https://naih.hu), and you can also go to court.

7.1. There is no automated decision-making. The system assigns tables and appointment slots automatically, which has no legal effect on you. 7.2. Passes and memberships cannot be bought online under the age of 14; between 14 and 17, parental consent is required. 7.3. Changes to this notice are published on this page. Published: 2026-10-31.