Our Objective:

To facilitate cultural exchange by connecting locals offering activities with travelers craving unique and authentic experiences. On our platform you will find locals offering a variety of activities including, but not limited to: hikes, day/evening trips, sightseeing, nature tours, and many other local adventures that you would miss by sticking to the traditional way of traveling.

Localme processes your personal data as follows:

Localme Kft. (registered office: 1054 Budapest Hold Street 15. 4/8 hereinafter referred to as " Localme") informs data subjects in this Notice about the processing of personal data in connection with its activities, including the www.localmetravel.com website ("Website") and the www.facebook.com/localmetravel and www.instagram.com/localmetravel sites ("social media").

At all times, Localme processes the personal data that it accesses in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Infotv.) only to the extent strictly necessary for the purpose for which the data is processed.

Our Privacy Policy may be amended from time to time, so we encourage you to visit this page regularly to ensure that you are fully aware of its terms. If we change our Privacy Policy in any way that will affect you (for example, if we want to process your personal information in a way that is different from the purposes previously disclosed), we will notify you of those changes before we begin any new activities. We will notify you of changes by means of a short notice on the Website or directly, depending on the nature of the change. If you continue to use our services following such notice, you will be deemed to have accepted the amended provisions of this Notice.

This Policy does not cover the processing of data from websites to which a link on the Website leads. This Policy also does not cover the processing of personal data by users ("local" and "traveler") who, in their sole discretion and of their own volition, communicate, transmit or share their personal data with each other, by means of a message or any other means, on www.localmetravel.com.

Definitions:

Local: designates a person who registers on www.localmetravel.com for the purpose of providing activities for travelers in a given geographical location.

Traveler: designates people who register on www.localmetravel.com with the aim of contacting locals in a given geographical area who can offer them activities.

Localme will also process personal data collected directly from data subjects and received from other data controllers in accordance with this Notice.

Terms used in this Notice shall have the same meaning as in the GDPR. Accordingly, the following terms have the following meanings:

Personal data means any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. The personal data shall retain that quality during processing for as long as the natural person can be identified on the basis of that information.

Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Controller (Localme) is a natural or legal person, public authority, agency or any other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

A data processor is a natural or legal person, public authority, agency or any other body that processes personal data on behalf of the controller.

1. Data of the Data Controller (Localme)

Name: Localme Kft.. Headquarters: 1054 Budapest Hold Street 15. 4/8 Availability: info@localmetravel.com Tax number: 27397318-2-41 Cg..: 01-09-388369 Represented by: Kisgyura Eszter

2. Storage of personal data processed by the Data Controller (Localme)

The Controller stores the personal data it processes on the servers of the following hosting providers:

Google Ireland Ltd. Gordon House, Barrow Street Dublin 4 Ireland https://firebase.google.com/support

3. Data Processors:

MakerLoop, Inc. (Netlify) https://www.netlify.com/

Mailgun Inc. https://mailgun.com

GraphCMS GmbH https://graphcms.com

Google LLC https://firebase.google.com/

Google Ireland Ltd. https://firebase.google.com/

Plausible https://plausible.io

Functional Software Inc. (Sentry) https://sentry.io

4. Scope of personal data we process, purpose of processing, legal basis and storage period

4.1 Personal data provided in connection with requests sent to the Data Controller

We will process personal data provided to us orally or in writing by the data subject in response to a request (including any employee of Localme and any person acting on our behalf) in accordance with this Notice.

Data processed: the name of the data subject, contact details (e-mail address, telephone number, address), other personal data necessary for the processing of the matter requested.

The purposes of the processing are: to identify the data subject, to contact the data subject, to fulfil the request or to deal with the matter requested. To connect the data subjects

The legal basis for processing is the data subject's freely given, specific and informed consent (Article 6(1)(a) GDPR), which he or she gives by communicating the request.

You have the right to withdraw your consent to the processing of all or part of the personal data referred to at any time by sending an e-mail to info@localmetravel.com Such consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal.

If you do not provide us with the data requested by Localme for the purposes of the processing, we may not be able to comply with your request.

Duration of processing: until consent is withdrawn or, in the absence of consent, for 1 year after the closure of the case in which the request was made. In the former case, the deletion of personal data will take place within 30 days of the receipt of the withdrawal of consent by the Data Controller. Even in the case of withdrawal of consent, Localme is entitled to process the personal data of the data subject where we have another legal basis for processing (e.g. processing is necessary for compliance with a legal obligation or for the purposes of the exercise of a legitimate interest).

4.2 Personal data of contractors and their collaborators

We process the personal data of our contractual partners and their employees, contact persons, natural persons acting on their behalf and contractors in accordance with this Notice.

Data processed: name, position, workplace, contact details (e-mail address, telephone number, address, etc.)

Purpose of data processing: maintaining contact in connection with the establishment and implementation of cooperation and the performance of a contract.

The legal basis for processing is the data subject's freely given, specific and informed consent (Article 6(1)(a) GDPR) or the performance of a contract or the legitimate interests of Localme. (Article 6(1)(b) and (f) GDPR).

The data subject has the right to withdraw his or her consent to the processing of all or part of the personal data concerning him or her at any time by sending an e-mail to info@localmetravel.com Consent shall not affect the lawfulness of processing based on consent prior to its withdrawal.

Where processing is necessary for the legitimate interests of Localme or a third party, the data subject may object to the processing of his or her personal data. In such a case, the Controller may no longer process the personal data, unless he or she can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

Duration of data processing: until the withdrawal of consent or, failing this, for 5 years after the termination of cooperation. In the former case, the personal data will be deleted within 30 days of receipt by Localme of the withdrawal of consent. Even in the case of withdrawal of consent, Localme is entitled to process the personal data of the data subject where we have another legal basis for processing (e.g. processing is necessary for compliance with a legal obligation or for the purposes of the exercise of a legitimate interest).

4.3 During the visit of the Website, the IP address of the user's computer, the start and end time of the visit and, in some cases, depending on the configuration of the user's computer, the type of browser and operating system may be automatically recorded.

Purpose of processing: these data recorded in the log file are used for statistical purposes and cannot be linked to other personal data of users.

Legal basis for processing: legitimate interest in the operation of the Localme’s Website Article 6 (f) GDPR)

Duration of processing: for the period necessary for the proper functioning of the Website.

The Cookie policy of the data controller can be found at the following link: https://localmetravel.com/cookies

4.4 Registered members

Localme will process personal data provided to us (including all employees of the Data Controller and persons acting on its behalf) by the data subject, either orally or in writing, in accordance with this Notice.

Data processed:

Travelers

• User name
• Profile picture (optional)
• Email address

Locals

• User name
• Email address
• First name
• Last name
• Birthdate
• Profile picture
• Pictures they upload
• Phone number
• Website (optional)
• Social media account names (optional)

Chat

• Localme doesn't use the content of your messages.

Purpose of processing: provide Localme’s services, identification of the data subject, contact with the data subject, direct marketing.

The legal basis for processing is the data subject's freely given, specific and informed consent (Article 6(1)(a) GDPR), which he or she gives by communicating the request to the data subject.

The user has the right to withdraw his consent to the processing of all or part of his personal data at any time by sending an e-mail to info@localmetravel.com. Such consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal.

If the data subject does not provide Localme with the data requested by the Data Controller and necessary for the purposes of the processing, the consequence may be that we are unable to comply with the request.

Duration of processing: for the period necessary for the proper functioning of the Website.

4.5 Newsletter

Users have the option to subscribe to our newsletter service, where they can receive instant updates on our latest news, blog posts, or travel opportunities.

Scope of the data processed: email address

Purpose of processing: the purpose of processing is to ensure that the newsletter is sent to the e-mail address you have provided. Localme uses the data you provide for the sole purpose of sending the newsletter.

The legal basis for processing is the data subject's voluntary, specific and informed consent (Article 6(1)(a) GDPR), which he or she gives by accepting the terms of this Privacy Notice and subscribing to the newsletter.

Duration of data processing: in the case of a newsletter, Localme will process the data provided by you when subscribing to the newsletter until you unsubscribe from the newsletter by clicking on the "Unsubscribe" button at the bottom of the newsletter. If you unsubscribe, Localme will no longer contact you with the newsletter. You can unsubscribe from the newsletter at any time free of charge and withdraw your consent.

4.6 Evaluation, posting of photos on the site and on social media

Users have the possibility to upload and share their reviews, opinions and photos of the trip on www.localmetravel.com.

Scope of data processed: user name, photo.

Purpose of the processing: in order to give visitors to our website a more complete picture of Localme, we provide the opportunity for Traveler to rate and comment on both the Localme intermediary service and the activities organized by Local users, which can be illustrated by photographs. The shared reviews and content may be shared by Localme on its social networking sites as set out in this privacy policy.

The legal basis for processing is the data subject's voluntary, specific and informed consent (Article 6(1)(a) GDPR), which he or she gives to us by accepting the terms of this Privacy Notice.

The user has the right to withdraw his consent to the processing of all or part of his personal data at any time by sending an email to info@localmetravel.com. Such consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal.

Duration of processing: for the period necessary for the proper functioning of the Website and Localme’s social media platforms.

4.7 Organization of a prize draw

If we announce a prize draw, you can enter it by providing the details set out in the relevant prize draw rules, typically your name and email address. If you are the winner of the prize, we will also record your postal address in order to deliver the prize.

The prize draw can take place via a social networking site, such as facebook.com, or other forums, even at the event venue.

Data processed: name, e-mail address, address (if there is delivery), date of birth (if requested in the game)

Purpose of the processing: running the competition, notifying the winners and delivering the prize.

The legal basis for processing is your voluntary, specific and informed consent (Article 6(1)(a) GDPR), which you give by accepting the privacy policy during the prize draw or by entering the event venue.

Duration of data processing: your data will be processed until the end of the competition and, in the case of a winner, for 8 years (+ 2 years in view of the tax authority's audit cycle) in accordance with the Accounting Act.

4.8 Event organization, promotion through social media

From time to time, we might organize events in which participation is voluntary. During these events, crowd shots and individual shots will be taken, which will be highlighted in the invitation, at registration and during the event. The video and photo recordings will be published on our internal corporate communication platform and on the Internet (e.g. Facebook page, website).

Data processed: name, e-mail address, telephone number, photo and video recording.

Purpose of processing: to organize an event and to take and publish photos and videos to promote our company and to document events.

Legal basis for processing: the data subject's voluntary, specific and informed consent (Article 6(1)(a) GDPR), which he or she gives to the Data Controller by entering the event.

The user has the right to withdraw his consent to the processing of all or part of his personal data at any time by sending an e-mail to info@localmetravel.com.Such consent shall not affect the lawfulness of the processing based on consent prior to its withdrawal.

Duration of processing: for the period necessary for the proper functioning of Localme, Website and Localme’s social media platforms.

4.9 Payment via PayPal

When Traveler books an activity from the Local, a booking fee is paid by the traveler directly to Localme via PayPal. Once Traveler initiates a booking (booking request previously accepted by Local) the Localme website redirects Traveler to the PayPal website where the payment goes through. This means that Localme doesn’t processes personal data during the payment, all the given personal data is processed and controlled by PayPal. See more at PayPal’s website: https://www.paypal.com/us/webapps/mpp/ua/privacy-full

5. Rights of data subjects

5.1. Right to information: We will take appropriate measures to provide you with the information on the processing of your personal data in accordance with Articles 13 and 14 of the GDPR and to provide you with the information in accordance with Articles 15 to 22 and 34 of the GDPR. You can request information about the processing of your personal data by Localme by sending an email to the contact details indicated in point 1.

5.2 Right of access: you have the right to receive feedback on whether your personal data is being processed and, if such processing is ongoing, you also have the right to access your personal data and the following information: the purposes of the processing; the categories of personal data concerned; the recipients or categories of recipients to whom the personal data have been or will be disclosed; the period for which the personal data are stored; the rights that the data subject may exercise (rectification, erasure, objection, restriction of processing); the right to lodge a complaint with a supervisory authority; information on the data sources and the fact of automated decision-making.

Upon request, we will provide you with a copy of the personal data we process about you; initially free of charge, and then for a reasonable fee.

5.3. Right to rectification: you have the right to have inaccurate personal data concerning you corrected or to request that incomplete personal data be completed. If you are unable to carry out these operations independently, you may request us to carry out these corrections by writing to us at the contact details set out in point 1.

5.4. Right to erasure: If you request it, we will erase personal data relating to you within 30 days of receipt of the request, if you request it on the grounds set out in Article 17(1) of the GDPR (e.g. the purpose of the processing has ceased; the data subject has withdrawn his or her consent and there is no other legal basis for the processing; the processing is unlawful; the data subject objects to the processing and there are no overriding legitimate grounds for the processing; the personal data must be erased on the basis of a legal obligation). Where there are grounds under Article 17(3) of the GDPR (e.g. processing is necessary for the exercise of the right to freedom of expression and information or for compliance with a legal obligation or for the establishment or defense of legal claims), we are entitled to refuse your request for erasure.

5.5. Right to restriction of processing: if you contest the accuracy of personal data relating to you, you may request that we restrict the processing of your personal data while we verify its accuracy.

You may also request restriction of processing if the processing is unlawful but you object to the deletion of the personal data or if Localme no longer needs the personal data for processing but you require it to exercise your legal rights. You also have the right to request the restriction of processing if you have objected to the processing; in this case, the restriction will apply for the period of time it takes to determine whether Localme's legitimate grounds override your legitimate grounds. During the restriction period, personal data may be processed, except for storage, only in exceptional cases.

5.6. Right to data portability: you have the right to obtain from Localme personal data concerning you in a structured, commonly used, machine-readable format and to have such data transmitted by you or, where technically feasible, by Localme to another controller, where the processing is based on consent or a contract and the processing is carried out by automated means.

5.7. Right to object: if the processing is necessary for the legitimate interests of Localme or a third party, the data subject may object to the processing of his or her personal data. In this case, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

5.8. Enforcement: you can contact us directly with any complaints or objections by sending a letter to the contact details indicated in point 1, and we will do our utmost to remedy and rectify any infringements. In case of violation of your rights, you may apply to the competent court or lodge a complaint with the National Authority for Data Protection and Freedom of Information (1125 Budapest, Szilágyi Erzsébet fasor 22/c).

6. Method of data processing, data transfer, data security

6.1. We will not disclose your data to the public or to third parties without your prior written consent, unless we are required to do so by a court or administrative decision or by law, or if we disclose all or part of the performance of the activity to a third party.

6.2. Localme shall not be liable to you or to any third party for any inaccuracy, misrepresentation, or omission of any personal data provided by you, unless we are required by law to verify the personal data. If any third party makes a claim against us in relation to the inaccuracy of the personal data provided, you will be responsible for satisfying that claim on behalf of Localme. By providing us with your contact details, you also accept responsibility for ensuring that you are the only person communicating with us or using any services from the email address or telephone number you provide. Data subject is responsible for providing real and accurate information.

6.3. We do not provide information society services directly to children. The consent of children under the age of 16 to the processing of personal data is only lawful if the consent has been given or authorized by the person having parental authority over the child. The person giving the consent warrants that the consent complies with the above legal condition. If we become aware that consent to processing under the above provisions is unlawful, we will take immediate action to delete the personal data unless we have another legal basis for processing it.

6.4. For the purposes of and to the extent necessary for the performance of our legal obligations and contracts with our contractual partners, we may disclose personal data of data subjects to our service providers (agents, subcontractors) involved in the performance of our services, who process the data on behalf of Localme as data processors. Processors may not process personal data on their own, but only in accordance with the instructions of Localme.

6.5. We will only use a data processor who undertakes to process the personal data received in accordance with the GDPR, the above Hungarian legislation and the instructions of Localme and to provide at least the guarantees set out in this Notice in order to protect the personal data and the rights of the data subjects.

6.6. Localme will not transfer personal data of data subjects to third countries or international organizations that have not adopted and implemented GDPR regulations. Localme is not responsible for the disclosure, transmission, processing, sharing of personal data by users to third countries, which the users themselves have done of their own free will (in particular, for example, when personal data is shared through a message on www.localmetravel.com).

6.7. Where we are legally entitled to do so, we may make a decision about you based on the automated processing of your personal data.

6.8. Localme shall take all security, technical and organizational measures appropriate to the state of the art and the cost of implementation, to the nature, scope, context and purposes of the processing and to the risk to the rights and freedoms of natural persons, in order to ensure the security of the data, to provide an adequate level of protection against unauthorized access, alteration, disclosure, deletion or destruction, accidental destruction or accidental damage and against possible loss of access.