{"id":3,"date":"2026-07-31T13:21:04","date_gmt":"2026-07-31T13:21:04","guid":{"rendered":"https:\/\/flatmaningatlan.hu\/?page_id=3"},"modified":"2026-08-15T19:42:07","modified_gmt":"2026-08-15T19:42:07","slug":"adatkezelesi-tajekoztato","status":"publish","type":"page","link":"https:\/\/flatmaningatlan.hu\/en\/adatkezelesi-tajekoztato\/","title":{"rendered":"Privacy Notice"},"content":{"rendered":"<h1 id=\"en-privacy-policy\">Privacy Notice<\/h1>\n<p><strong>In short:<\/strong> this website sets no cookies, does not measure its visitors, and passes no data to advertising systems. Personal data reaches me in one way only: if you fill in the contact form, or write or call me. I use what you send solely to reply and \u2014 should you decide so \u2014 to handle your property transaction.<\/p>\n<h2>1. Who processes your data<\/h2>\n<ul>\n<li><strong>Controller:<\/strong> Karner P\u00e9ter N\u00e1ndor E.V. (sole trader, Hungary)<\/li>\n<li><strong>Registered seat:<\/strong> 1021 Budapest, Als\u00f3 V\u00f6lgy utca 14\/A, Hungary<\/li>\n<li><strong>Tax number:<\/strong> 68237039-1-41<\/li>\n<li><strong>Registration number:<\/strong> 51449166<\/li>\n<li><strong>E-mail:<\/strong> <a href=\"mailto:hello@flatmaningatlan.hu\">hello@flatmaningatlan.hu<\/a><\/li>\n<li><strong>Phone:<\/strong> +36 20 926 0345<\/li>\n<\/ul>\n<p>I am not required to appoint a data protection officer and have not appointed one: the processing involves neither regular large-scale monitoring nor special categories of data at scale. Please address any data protection question to me directly.<\/p>\n<h2>2. What data I process, why, and for how long<\/h2>\n<h3>2.1. Getting in touch (form, e-mail, phone)<\/h3>\n<ul>\n<li><strong>Data:<\/strong> name, e-mail address, phone number (optional), the text of your message, and the page address you sent the form from.<\/li>\n<li><strong>Purpose:<\/strong> answering your enquiry, arranging viewings, making offers, and keeping continuity in later correspondence.<\/li>\n<li><strong>Legal basis:<\/strong> steps taken at your request prior to entering into a contract (GDPR Article 6(1)(b)). Where the enquiry is unrelated to a transaction, the basis is your consent (Article 6(1)(a)), which you may withdraw at any time.<\/li>\n<li><strong>Retention:<\/strong> <strong>2 years<\/strong> from our last substantive contact, so that a returning enquiry need not start from scratch. On an earlier erasure request I delete without delay, except what accounting law requires me to keep.<\/li>\n<li><strong>If you provide nothing:<\/strong> without a name, an e-mail address and a message I cannot reply. Providing them is not a statutory obligation, but it is a precondition of contact.<\/li>\n<\/ul>\n<h3>2.2. Performing an engagement<\/h3>\n<ul>\n<li><strong>Data:<\/strong> the data contained in the agency agreement, the property record and the documents belonging to the transaction.<\/li>\n<li><strong>Purpose and legal basis:<\/strong> performance of the contract (Article 6(1)(b)) and compliance with legal obligations (Article 6(1)(c)) under accounting and anti-money-laundering rules.<\/li>\n<li><strong>Retention:<\/strong> accounting records for <strong>8 years<\/strong> under Act C of 2000 on Accounting; customer due diligence records for <strong>8 years<\/strong> from the end of the business relationship under the Hungarian anti-money-laundering act. Other documents for 5 years from termination, following the general limitation period.<\/li>\n<\/ul>\n<h3>2.3. Abuse protection on the form<\/h3>\n<ul>\n<li><strong>Data:<\/strong> an irreversible fingerprint derived from your IP address, and the number of submissions.<\/li>\n<li><strong>Purpose:<\/strong> preventing automated bulk submissions.<\/li>\n<li><strong>Legal basis:<\/strong> legitimate interest (Article 6(1)(f)) in keeping the form usable. Balancing test: the value cannot identify you and exists for a very short time, so the effect on your rights is negligible.<\/li>\n<li><strong>Retention:<\/strong> <strong>1 minute<\/strong>, after which it is deleted automatically.<\/li>\n<\/ul>\n<h3>2.4. Protection against password guessing<\/h3>\n<p>This section concerns the site&#8217;s <strong>editing interface<\/strong>, not its visitors. If you only read the site, it does not affect you.<\/p>\n<ul>\n<li><strong>Data processed:<\/strong> an irreversible fingerprint derived from the IP address attempting to sign in, and the number of failed attempts. The IP address itself is not stored, and it cannot be recovered from the fingerprint.<\/li>\n<li><strong>Purpose:<\/strong> to prevent automated guessing of the password. After five failed attempts, no further attempt is accepted from that address for a while.<\/li>\n<li><strong>Legal basis:<\/strong> legitimate interest (GDPR Art. 6(1)(f)) in protecting the site and the enquiries stored in it. Balancing test: the data cannot identify anyone, arises only on a failed sign-in, and expires by itself shortly afterwards.<\/li>\n<li><strong>Retention:<\/strong> at most <strong>20 minutes<\/strong>, after which it is deleted automatically.<\/li>\n<\/ul>\n<h3>2.5. Server logs<\/h3>\n<ul>\n<li><strong>Data:<\/strong> to operate the site, the hosting provider&#8217;s system logs request times, requested addresses, IP addresses and browser identifiers.<\/li>\n<li><strong>Purpose and legal basis:<\/strong> operation, troubleshooting and IT security \u2014 legitimate interest (Article 6(1)(f)).<\/li>\n<li><strong>Retention:<\/strong> as set out in the hosting provider&#8217;s own policy (typically no more than 30 days).<\/li>\n<\/ul>\n<h2>3. What I do not do<\/h2>\n<ul>\n<li>I use no analytics, statistics or advertising cookies, and build no visitor profiles.<\/li>\n<li>I send no newsletter and keep no mailing list.<\/li>\n<li>I neither sell nor rent personal data to anyone.<\/li>\n<li>I take no automated decisions about you and carry out no profiling.<\/li>\n<li>I neither request nor process special categories of data (health, religious, political and similar).<\/li>\n<\/ul>\n<h2>4. Who may access your data<\/h2>\n<p>Access is primarily mine. Besides me, the following processors act, strictly within the task indicated:<\/p>\n<ul>\n<li><strong>Hosting provider \u2014 T\u00e1rhely.Eu Szolg\u00e1ltat\u00f3 Kft.<\/strong> (Orm\u00e1ns\u00e1g utca 4, floor X\/241, 1144 Budapest, Hungary; <a href=\"mailto:gdpr@tarhely.eu\">gdpr@tarhely.eu<\/a>): operating the website and the mailboxes. Data is stored on servers in Hungary, within the European Union.<\/li>\n<li><strong>Accountant:<\/strong> processing accounting records to meet statutory obligations.<\/li>\n<li><strong>Website developer and maintainer \u2014 Karner Krist\u00f3f e.v.<\/strong> (registration number: 59509570, <a href=\"mailto:kristof@kristofkarner.com\">kristof@kristofkarner.com<\/a>): development, updates and operational support for the site. Maintenance may involve access to data stored on the server, used solely for the technical task at hand.<\/li>\n<\/ul>\n<p>Beyond this I disclose data only where law obliges me to (for instance an official request), or where you expressly ask me to (for instance towards the other party in a transaction).<\/p>\n<h2>5. Embedded content: maps and video<\/h2>\n<p>Property pages offer a map, and some listings a video. These <strong>do not load automatically<\/strong>: until you click to display them, the site sends no request to Google or YouTube, and no data leaves the page.<\/p>\n<p>If you display the map or start the video, the provider acts under its own rules and receives your IP address and browser details. Video is served from <em>youtube-nocookie.com<\/em>, which sets no tracking cookie before playback. These services belong to a company operating in the United States; the transfer relies on the EU\u2013US Data Privacy Framework.<\/p>\n<ul>\n<li>Google privacy policy: <a href=\"https:\/\/policies.google.com\/privacy\" rel=\"noopener noreferrer\" target=\"_blank\">policies.google.com\/privacy<\/a><\/li>\n<\/ul>\n<h2>6. Your rights<\/h2>\n<p>Under the GDPR you have the rights below. You may exercise any of them free of charge using the contact details above. I reply <strong>within one month<\/strong> at the latest; in complex cases this may be extended by two months, of which I will inform you.<\/p>\n<ul>\n<li><strong>Access:<\/strong> you may ask whether I process your data and, if so, request a copy.<\/li>\n<li><strong>Rectification:<\/strong> you may ask for inaccurate data to be corrected and incomplete data completed.<\/li>\n<li><strong>Erasure:<\/strong> you may ask for your data to be deleted where it is no longer needed, where you withdraw consent, or where processing is unlawful. Erasure does not extend to data I am legally obliged to retain.<\/li>\n<li><strong>Restriction:<\/strong> you may ask me to store your data but otherwise not process it \u2014 for example while you contest its accuracy.<\/li>\n<li><strong>Portability:<\/strong> data processed by automated means on the basis of consent or contract can be provided in a structured, machine-readable format.<\/li>\n<li><strong>Objection:<\/strong> you may object to processing based on legitimate interest; I will then stop, unless compelling legitimate grounds require otherwise.<\/li>\n<li><strong>Withdrawal of consent:<\/strong> you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.<\/li>\n<\/ul>\n<h2>7. Security<\/h2>\n<p>The site is served over an encrypted connection (HTTPS). Incoming enquiries are stored behind a password-protected interface accessible only to me. Systems and credentials are kept current. In the event of a personal data breach likely to result in a risk to your rights, I notify the authority within 72 hours and inform you where required.<\/p>\n<h2>8. Remedies<\/h2>\n<p>If you believe your rights have been infringed, please contact me first \u2014 most questions are resolved fastest that way. Regardless, you may lodge a complaint with the supervisory authority or bring court proceedings.<\/p>\n<ul>\n<li><strong>Hungarian National Authority for Data Protection and Freedom of Information (NAIH)<\/strong><br \/>\nFalk Miksa utca 9-11, 1055 Budapest, Hungary<br \/>\nPostal address: 1363 Budapest, Pf. 9<br \/>\nPhone: +36 1 391 1400 \u00b7 E-mail: <a href=\"mailto:ugyfelszolgalat@naih.hu\">ugyfelszolgalat@naih.hu<\/a> \u00b7 <a href=\"https:\/\/naih.hu\" rel=\"noopener noreferrer\" target=\"_blank\">naih.hu<\/a><\/li>\n<li><strong>Courts:<\/strong> you may also bring proceedings before the regional court of your place of residence or stay.<\/li>\n<\/ul>\n<h2>9. Changes to this notice<\/h2>\n<p>I update this notice when the operation of the site or the legal environment changes. The version in force is always available at this address; I announce material changes on the website.<\/p>\n<hr>\n<p class=\"fm-jogi-impresszum\">Website developed and maintained by <strong>Karner Krist\u00f3f e.v.<\/strong> \u00b7 registration number: 59509570 \u00b7 <a href=\"mailto:kristof@kristofkarner.com\">kristof@kristofkarner.com<\/a><\/p>\n<p><strong>In force from: 15 August 2026<\/strong><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Privacy Notice In short: this website sets no cookies, does not measure its visitors, and passes no data to advertising systems. Personal data reaches me in one way only: if you fill in the contact form, or write or call me. I use what you send solely to reply and \u2014 should you decide so [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"open","template":"","meta":{"_fm_cim_rejtve":false,"_fm_teljes_szeles":false,"fm_cim_en":"Privacy Notice","fm_leiras_en":"<h1 id=\"en-privacy-policy\">Privacy Notice<\/h1>\n\n<p><strong>In short:<\/strong> this website sets no cookies, does not measure its visitors, and passes no data to advertising systems. Personal data reaches me in one way only: if you fill in the contact form, or write or call me. I use what you send solely to reply and \u2014 should you decide so \u2014 to handle your property transaction.<\/p>\n\n<h2>1. Who processes your data<\/h2>\n\n<ul>\n<li><strong>Controller:<\/strong> Karner P\u00e9ter N\u00e1ndor E.V. (sole trader, Hungary)<\/li>\n<li><strong>Registered seat:<\/strong> 1021 Budapest, Als\u00f3 V\u00f6lgy utca 14\/A, Hungary<\/li>\n<li><strong>Tax number:<\/strong> 68237039-1-41<\/li>\n<li><strong>Registration number:<\/strong> 51449166<\/li>\n<li><strong>E-mail:<\/strong> <a href=\"mailto:hello@flatmaningatlan.hu\">hello@flatmaningatlan.hu<\/a><\/li>\n<li><strong>Phone:<\/strong> +36 20 926 0345<\/li>\n<\/ul>\n\n<p>I am not required to appoint a data protection officer and have not appointed one: the processing involves neither regular large-scale monitoring nor special categories of data at scale. Please address any data protection question to me directly.<\/p>\n\n<h2>2. What data I process, why, and for how long<\/h2>\n\n<h3>2.1. Getting in touch (form, e-mail, phone)<\/h3>\n\n<ul>\n<li><strong>Data:<\/strong> name, e-mail address, phone number (optional), the text of your message, and the page address you sent the form from.<\/li>\n<li><strong>Purpose:<\/strong> answering your enquiry, arranging viewings, making offers, and keeping continuity in later correspondence.<\/li>\n<li><strong>Legal basis:<\/strong> steps taken at your request prior to entering into a contract (GDPR Article 6(1)(b)). Where the enquiry is unrelated to a transaction, the basis is your consent (Article 6(1)(a)), which you may withdraw at any time.<\/li>\n<li><strong>Retention:<\/strong> <strong>2 years<\/strong> from our last substantive contact, so that a returning enquiry need not start from scratch. On an earlier erasure request I delete without delay, except what accounting law requires me to keep.<\/li>\n<li><strong>If you provide nothing:<\/strong> without a name, an e-mail address and a message I cannot reply. Providing them is not a statutory obligation, but it is a precondition of contact.<\/li>\n<\/ul>\n\n<h3>2.2. Performing an engagement<\/h3>\n\n<ul>\n<li><strong>Data:<\/strong> the data contained in the agency agreement, the property record and the documents belonging to the transaction.<\/li>\n<li><strong>Purpose and legal basis:<\/strong> performance of the contract (Article 6(1)(b)) and compliance with legal obligations (Article 6(1)(c)) under accounting and anti-money-laundering rules.<\/li>\n<li><strong>Retention:<\/strong> accounting records for <strong>8 years<\/strong> under Act C of 2000 on Accounting; customer due diligence records for <strong>8 years<\/strong> from the end of the business relationship under the Hungarian anti-money-laundering act. Other documents for 5 years from termination, following the general limitation period.<\/li>\n<\/ul>\n\n<h3>2.3. Abuse protection on the form<\/h3>\n\n<ul>\n<li><strong>Data:<\/strong> an irreversible fingerprint derived from your IP address, and the number of submissions.<\/li>\n<li><strong>Purpose:<\/strong> preventing automated bulk submissions.<\/li>\n<li><strong>Legal basis:<\/strong> legitimate interest (Article 6(1)(f)) in keeping the form usable. Balancing test: the value cannot identify you and exists for a very short time, so the effect on your rights is negligible.<\/li>\n<li><strong>Retention:<\/strong> <strong>1 minute<\/strong>, after which it is deleted automatically.<\/li>\n<\/ul>\n\n<h3>2.4. Protection against password guessing<\/h3>\n\n<p>This section concerns the site&#8217;s <strong>editing interface<\/strong>, not its visitors. If you only read the site, it does not affect you.<\/p>\n\n<ul>\n<li><strong>Data processed:<\/strong> an irreversible fingerprint derived from the IP address attempting to sign in, and the number of failed attempts. The IP address itself is not stored, and it cannot be recovered from the fingerprint.<\/li>\n<li><strong>Purpose:<\/strong> to prevent automated guessing of the password. After five failed attempts, no further attempt is accepted from that address for a while.<\/li>\n<li><strong>Legal basis:<\/strong> legitimate interest (GDPR Art. 6(1)(f)) in protecting the site and the enquiries stored in it. Balancing test: the data cannot identify anyone, arises only on a failed sign-in, and expires by itself shortly afterwards.<\/li>\n<li><strong>Retention:<\/strong> at most <strong>20 minutes<\/strong>, after which it is deleted automatically.<\/li>\n<\/ul>\n\n<h3>2.5. Server logs<\/h3>\n\n<ul>\n<li><strong>Data:<\/strong> to operate the site, the hosting provider's system logs request times, requested addresses, IP addresses and browser identifiers.<\/li>\n<li><strong>Purpose and legal basis:<\/strong> operation, troubleshooting and IT security \u2014 legitimate interest (Article 6(1)(f)).<\/li>\n<li><strong>Retention:<\/strong> as set out in the hosting provider's own policy (typically no more than 30 days).<\/li>\n<\/ul>\n\n<h2>3. What I do not do<\/h2>\n\n<ul>\n<li>I use no analytics, statistics or advertising cookies, and build no visitor profiles.<\/li>\n<li>I send no newsletter and keep no mailing list.<\/li>\n<li>I neither sell nor rent personal data to anyone.<\/li>\n<li>I take no automated decisions about you and carry out no profiling.<\/li>\n<li>I neither request nor process special categories of data (health, religious, political and similar).<\/li>\n<\/ul>\n\n<h2>4. Who may access your data<\/h2>\n\n<p>Access is primarily mine. Besides me, the following processors act, strictly within the task indicated:<\/p>\n\n<ul>\n<li><strong>Hosting provider \u2014 T\u00e1rhely.Eu Szolg\u00e1ltat\u00f3 Kft.<\/strong> (Orm\u00e1ns\u00e1g utca 4, floor X\/241, 1144 Budapest, Hungary; <a href=\"mailto:gdpr@tarhely.eu\">gdpr@tarhely.eu<\/a>): operating the website and the mailboxes. Data is stored on servers in Hungary, within the European Union.<\/li>\n<li><strong>Accountant:<\/strong> processing accounting records to meet statutory obligations.<\/li>\n<li><strong>Website developer and maintainer \u2014 Karner Krist\u00f3f e.v.<\/strong> (registration number: 59509570, <a href=\"mailto:kristof@kristofkarner.com\">kristof@kristofkarner.com<\/a>): development, updates and operational support for the site. Maintenance may involve access to data stored on the server, used solely for the technical task at hand.<\/li>\n<\/ul>\n\n<p>Beyond this I disclose data only where law obliges me to (for instance an official request), or where you expressly ask me to (for instance towards the other party in a transaction).<\/p>\n\n<h2>5. Embedded content: maps and video<\/h2>\n\n<p>Property pages offer a map, and some listings a video. These <strong>do not load automatically<\/strong>: until you click to display them, the site sends no request to Google or YouTube, and no data leaves the page.<\/p>\n\n<p>If you display the map or start the video, the provider acts under its own rules and receives your IP address and browser details. Video is served from <em>youtube-nocookie.com<\/em>, which sets no tracking cookie before playback. These services belong to a company operating in the United States; the transfer relies on the EU\u2013US Data Privacy Framework.<\/p>\n\n<ul>\n<li>Google privacy policy: <a href=\"https:\/\/policies.google.com\/privacy\" rel=\"noopener noreferrer\" target=\"_blank\">policies.google.com\/privacy<\/a><\/li>\n<\/ul>\n\n<h2>6. Your rights<\/h2>\n\n<p>Under the GDPR you have the rights below. You may exercise any of them free of charge using the contact details above. I reply <strong>within one month<\/strong> at the latest; in complex cases this may be extended by two months, of which I will inform you.<\/p>\n\n<ul>\n<li><strong>Access:<\/strong> you may ask whether I process your data and, if so, request a copy.<\/li>\n<li><strong>Rectification:<\/strong> you may ask for inaccurate data to be corrected and incomplete data completed.<\/li>\n<li><strong>Erasure:<\/strong> you may ask for your data to be deleted where it is no longer needed, where you withdraw consent, or where processing is unlawful. Erasure does not extend to data I am legally obliged to retain.<\/li>\n<li><strong>Restriction:<\/strong> you may ask me to store your data but otherwise not process it \u2014 for example while you contest its accuracy.<\/li>\n<li><strong>Portability:<\/strong> data processed by automated means on the basis of consent or contract can be provided in a structured, machine-readable format.<\/li>\n<li><strong>Objection:<\/strong> you may object to processing based on legitimate interest; I will then stop, unless compelling legitimate grounds require otherwise.<\/li>\n<li><strong>Withdrawal of consent:<\/strong> you may withdraw consent at any time. This does not affect the lawfulness of processing before withdrawal.<\/li>\n<\/ul>\n\n<h2>7. Security<\/h2>\n\n<p>The site is served over an encrypted connection (HTTPS). Incoming enquiries are stored behind a password-protected interface accessible only to me. Systems and credentials are kept current. In the event of a personal data breach likely to result in a risk to your rights, I notify the authority within 72 hours and inform you where required.<\/p>\n\n<h2>8. Remedies<\/h2>\n\n<p>If you believe your rights have been infringed, please contact me first \u2014 most questions are resolved fastest that way. Regardless, you may lodge a complaint with the supervisory authority or bring court proceedings.<\/p>\n\n<ul>\n<li><strong>Hungarian National Authority for Data Protection and Freedom of Information (NAIH)<\/strong><br>\nFalk Miksa utca 9-11, 1055 Budapest, Hungary<br>\nPostal address: 1363 Budapest, Pf. 9<br>\nPhone: +36 1 391 1400 \u00b7 E-mail: <a href=\"mailto:ugyfelszolgalat@naih.hu\">ugyfelszolgalat@naih.hu<\/a> \u00b7 <a href=\"https:\/\/naih.hu\" rel=\"noopener noreferrer\" target=\"_blank\">naih.hu<\/a><\/li>\n<li><strong>Courts:<\/strong> you may also bring proceedings before the regional court of your place of residence or stay.<\/li>\n<\/ul>\n\n<h2>9. Changes to this notice<\/h2>\n\n<p>I update this notice when the operation of the site or the legal environment changes. The version in force is always available at this address; I announce material changes on the website.<\/p>\n\n<hr>\n\n<p class=\"fm-jogi-impresszum\">Website developed and maintained by <strong>Karner Krist\u00f3f e.v.<\/strong> \u00b7 registration number: 59509570 \u00b7 <a href=\"mailto:kristof@kristofkarner.com\">kristof@kristofkarner.com<\/a><\/p>\n\n<p><strong>In force from: 15 August 2026<\/strong><\/p>","footnotes":""},"class_list":["post-3","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/flatmaningatlan.hu\/wp-json\/wp\/v2\/pages\/3","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/flatmaningatlan.hu\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/flatmaningatlan.hu\/wp-json\/wp\/v2\/types\/page"}],"replies":[{"embeddable":true,"href":"https:\/\/flatmaningatlan.hu\/wp-json\/wp\/v2\/comments?post=3"}],"version-history":[{"count":5,"href":"https:\/\/flatmaningatlan.hu\/wp-json\/wp\/v2\/pages\/3\/revisions"}],"predecessor-version":[{"id":1212,"href":"https:\/\/flatmaningatlan.hu\/wp-json\/wp\/v2\/pages\/3\/revisions\/1212"}],"wp:attachment":[{"href":"https:\/\/flatmaningatlan.hu\/wp-json\/wp\/v2\/media?parent=3"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}