Legal
Privacy
notice.
Last updated: 14 October 2026
This notice explains how Stable 54 uses personal data when you visit stable54.com, contact us about a private event or book tickets.
Who is responsible for your data?
The controller is Új Udvar Kft., registered at 1036 Budapest, Bécsi út 38–44., Hungary, company registration number 01-09-562226. For privacy questions or requests, email info@stable54.com or write to our registered address.
Private-event enquiries
We receive your name, email address, event type and message. You may also provide a phone number, company, preferred date and guest count. We use these details to answer you, prepare a proposal and arrange an event. Required fields are marked on the form; without them we may be unable to answer. Please do not include sensitive personal information in your message.
The submission also records its page and time, IP address and browser information, plus the account identity if submitted while signed in. This context supports delivery, troubleshooting and handling the enquiry and is retained with the submission.
For an event you wish to book personally, this processing takes steps at your request before a contract and, if you book, performs that contract (GDPR Article 6(1)(b)). For corporate contacts and other enquiries, we rely on our legitimate interest in responding to business correspondence and arranging our services (Article 6(1)(f)). The form acknowledgement does not subscribe you to marketing.
Enquiries are stored in our WordPress/Elementor submissions and delivered to our Hostinger-hosted mailbox. Authorised staff handling enquiries, website administration and event delivery can access the information relevant to their work.
Tickets, reservations and payments
SevenRooms supplies our booking service. Its booking page loads when you open the ticket window or follow a booking link. We receive booking contact details, the event/date, party size and order/payment status needed to provide your booking. Billing details are collected where needed for an invoice. The legal bases are contract performance (Article 6(1)(b)) and, for required accounting records, legal obligation (Article 6(1)(c)).
Our connected payment processor is Stripe. Payment details are entered through the booking/payment service; our WordPress enquiry form does not collect card details. SevenRooms processes venue booking information on our behalf and also describes its own service processing in its privacy policy. Stripe processes payment and fraud-prevention information under its privacy policy. Their own legal obligations can require different retention of payment or security records.
A ticket link can carry the selected show/date and a source label such as website, Instagram or an advertising channel. This identifies the route used to reach our box office. Our website does not treat a ticket-link click as proof of a purchase.
Optional analytics and advertising
With analytics consent, Google Analytics measures visits, page interactions, ticket-link actions, enquiry starts and successful enquiries. With advertising consent, Meta Pixel measures page views, ticket interest and successful enquiries to assess advertising and help reach interested audiences. These event payloads do not include the name, email, phone number or message entered in our enquiry form. Providers can still receive browser/device information, identifiers, page URLs and technical connection information.
The legal basis for this optional website measurement is consent (Article 6(1)(a)). Google and Meta tags stay blocked until the relevant choice is accepted. You can reject optional cookies or withdraw your choice through cookie settings. Withdrawal stops future optional website measurement and does not affect the lawfulness of earlier processing. You can also use the providers’ own privacy controls. SevenRooms has its own privacy and cookie controls within its booking service.
For Meta Pixel collection and transmission, we and Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, act as joint controllers under Meta’s Controller Addendum. We provide the website information and consent controls; Meta handles rights requests concerning the data it stores after that transmission. Its subsequent processing is outside that joint collection/transmission arrangement. You can exercise your rights with us or directly with Meta; its privacy notice explains Meta’s processing, legal bases and contact options.
Website delivery, cookies and fonts
Hostinger provides website hosting and mailbox services. Technical requests can include your IP address, requested resource, time, browser/device information and response status. We use this information to deliver the site, diagnose failures and protect it from abuse, based on our legitimate interests in reliable and secure operation (Article 6(1)(f)). It is not used as a substitute for consent to optional advertising or analytics.
CookieYes remembers your cookie choice. Age confirmation and other essential browser-session notes support the site’s operation. A booking-source label is kept in browser-tab storage only with analytics consent and is cleared on withdrawal. Our typefaces are served from stable54.com, so loading the website fonts does not require a request to Google Fonts. See our cookie policy for storage names, purposes, durations and controls.
Who receives information?
- Authorised venue staff and service providers supporting the website, correspondence, bookings and event delivery.
- Hostinger for hosting and email; Elementor software stores enquiries within our WordPress installation.
- SevenRooms (SEVENROOMS LLC) for bookings and Stripe for payments.
- Google for Google Analytics when permitted; Meta for Meta Pixel when permitted. Relevant provider entities and their responsibilities are identified in the linked notices.
- Our accountant or professional advisers where necessary for accounting or legal matters, and competent authorities where disclosure is legally required.
Provider information: Hostinger, Google and Meta. Providers may process information for their own stated service, security or legal purposes as well as providing services to us.
International processing
Our providers and their subprocessors may process information outside the European Economic Area, including in the United States. Their published terms describe the applicable safeguards, including European Commission adequacy decisions where applicable and Standard Contractual Clauses for relevant restricted transfers. See the SevenRooms data-processing terms, Hostinger data-processing terms and the other provider notices above. Contact us for information or a copy of the safeguards relevant to your data.
How long we keep information
Our retention schedule, adopted on 14 October 2026, separates enquiries from contract and accounting records. We review records monthly and remove information that is no longer needed, subject to a documented legal obligation or active dispute.
| Information | Retention rule |
|---|---|
| Unsuccessful private-event enquiries | 12 months after the last meaningful correspondence, including relevant WordPress and mailbox copies. |
| Necessary event and ticket contract records | Up to 5 years after the event or final settlement for establishing or defending contract claims. We review necessity annually and remove unnecessary details sooner. This does not justify keeping every guest profile or message. |
| Qualifying invoices and accounting records | At least 8 years where Hungarian accounting law requires it. Only documents and information needed for that obligation are retained on this basis. |
| Routine website access/security logs | Our retention target is 30 days, with a documented extension for an active security incident. Hostinger manages server-side log rotation; the target is subject to confirmation of those hosting settings. |
| Google Analytics user/event data | 14 months. The user-data retention clock is not reset by new activity. This setting does not limit anonymous aggregated reports or determine cookie expiry. |
| Meta website event data | Meta’s Business Tools Terms allow event-data retention for up to 2 years. Any audience created from it can remain until deleted through the account tools. This is separate from browser-cookie expiry and our Google Analytics setting. See Meta’s terms. |
| Cookies and browser storage | As set out in the cookie policy. You can clear browser storage sooner or withdraw optional-cookie consent. |
For necessary contract-claim records we rely on our legitimate interest in establishing and defending legal claims (Article 6(1)(f)); statutory accounting retention relies on Article 6(1)(c). A justified legal hold is limited to relevant records and reviewed when the matter ends. Payment providers can retain their own records to meet separate obligations. Backup copies follow the hosting service’s backup cycle, are used for recovery and must have deletions reapplied if restored to active use.
Your rights and choices
Depending on the processing, you may request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. You may withdraw consent at any time. Email info@stable54.com; we may ask for proportionate information to verify your identity. We normally respond within one month, or explain a permitted extension. Some information must be retained to meet a legal obligation or address a justified legal claim.
You may complain to Hungary’s National Authority for Data Protection and Freedom of Information (NAIH), or another competent supervisory authority. This website’s enquiry process does not make solely automated decisions producing legal or similarly significant effects about you. Advertising providers may personalise advertising as described in their own notices.
Changes to this notice
We will update this notice when our processing changes and show the revised date above.