The Sárvár Spirit Hotel Thermal Spa Ltd. was warned by the Hungarian National Privacy and Information Authority to use online services that conform the Hungarian and EU data protection requirements – says 24.hu.
The National Privacy and Information Authority criticized the fact that the hotel has used the Russian Yandex web analytics program, which is suitable for capturing personal data and it might transmit the collected data to Russian servers. According to the authorities, a Yandex code was running on the website of the hotel, however, the hotel does not have any authorization for such data processing.
Spirit Hotel’s data collection was discovered by an American research: researches of the Princeton University analyzed the software usage of websites.
When the National Privacy and Information Authority initiated its investigation against the hotel, Yandex was not the website anymore.