Privacy Policy

Effective Date: January 12, 2026
Last Updated: January 12, 2026

This Privacy Policy explains how MOOD BOARD collects, uses, stores, and protects personal data of users visiting the website and using our services. By using this website, you agree to the practices described in this Policy.

Table of Contents

• 1. Scope and Definitions
• 2. Data We Collect
• 3. Purposes and Legal Bases for Processing
• 4. Sharing of Personal Data
• 5. Data Retention Period
• 6. Cookies and Tracking Technologies
• 7. User Rights
• 8. Data Security
• 9. Data Transfer Outside the EEA
• 10. Contact and Exercising Rights

1. Scope and Definitions

Controller – MOOD BOARD, operating in Budapest, Hungary.

User – any natural person using the website or contacting the Company.

Personal Data – any information relating to an identified or identifiable person such as name, e-mail address, phone number, IP address, or technical identifiers.

2. Data We Collect

1. Data provided voluntarily:
Name, e-mail address, phone number, booking information, and any information submitted through forms or direct communication.

2. Technical data collected automatically:
IP address, browser type and version, operating system, referral source, device information, and visit date/time.

3. Purposes and Legal Bases for Processing

• Handling bookings, inquiries, and customer communication.
• Providing customer support and improving services.
• Managing website functionality and security.
• Website analytics and performance measurement (subject to consent).
• Marketing and advertising activities where consent is required.

Personal data is processed based on legitimate interest, contractual necessity, legal obligations, or user consent in accordance with the GDPR.

4. Sharing of Personal Data

Personal data may be shared only where necessary with trusted third-party providers such as:

• Hosting and infrastructure providers
• Analytics services (e.g. Google Analytics)
• Marketing platforms
• Payment or booking providers

We ensure that all third parties process personal data in compliance with applicable data protection laws.

5. Data Retention Period

Personal data is retained only for as long as necessary to fulfill the purposes described in this Policy or to comply with legal obligations.

Contact form submissions and customer communications may be retained for up to 2 years unless a longer retention period is legally required.

6. Cookies and Tracking Technologies

We use essential cookies required for website functionality, as well as optional analytical and marketing cookies that are activated only after consent.

Users may manage cookie preferences at any time through the cookie banner or browser settings.

7. User Rights

Under the GDPR, users have the right to:

• Access their personal data
• Request correction or deletion of data
• Restrict or object to processing
• Withdraw consent at any time
• Request data portability
• Lodge a complaint with the Hungarian Data Protection Authority (NAIH)

8. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, disclosure, or destruction.

These measures include encrypted connections (HTTPS/TLS), access controls, and secure hosting infrastructure.

9. Data Transfer Outside the EEA

Some third-party providers may process data outside the European Economic Area (EEA).

Where such transfers occur, appropriate safeguards such as Standard Contractual Clauses (SCCs) are applied to ensure GDPR compliance.

10. Contact and Exercising Rights