Privacy policy
DATA ON THE COMPANY:
"My Hungarian House" hereinafter referred to as "Data Controller
Name: György Gyula Sztari, sole entrepreneur, tax number: 69094644-1-25
Registered office: 3700 kazincbarcika Pattantyús utca 3. 2.em. 1.a.
Name: Gyuláné Sztari, sole entrepreneur, tax number: 58497490-1-25
Address: 3700, Kazincbarcika, Pattantyús street 3. floor 2 / 1
I. INTRODUCTION
"My Hungarian House", as a data controller, sets out below its data management principles and the expectations it has set for itself as a data controller and which it adheres to. Its data management principles are in compliance with the applicable data protection legislation, in particular with the following:
The following legal obligations have been taken into account in particular when drawing up these rules:
- Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info. tv.),
- The General Data Protection Regulation (GDPR) of the European Union (in particular the General Data Protection Regulation (GDPR) No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Regulation (EC) No 95/46/EC),
As a background legislation, Act V of 2013 on the Civil Code ("Civil Code") and the legislation on the sale of real estate also apply.
This Policy uses the interpretative provisions of the Info. law for the data processing terminology.
This Policy also has regard to the rules of the European General Data Protection Regulation, with the understanding that the Policy will be subject to review after the date of entry into force of the Regulation.
II. PRINCIPLES GOVERNING DATA PROCESSING
Personal data The collection and processing of personal data by the Data Controller is based on law or on the voluntary consent of the data subject using the service.
Based on your voluntary consent (Act CXII of 2011 (hereinafter: Infotv. You consent to the processing of your personal data by signing a contract of engagement with the Contractor, by making an offer to buy/sell through the Controller or by communicating the offer to the Controller. You also consent to the processing of your personal data by contacting the Controller in person, by telephone, electronically or by any other means to request information or by making a contract, sale or purchase offer through any of these means and by providing your personal data for this purpose.
The Controller collects and processes certain personal data because it is required to do so by law (Infotv. Such a law is Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing (hereinafter: Pmtv.), which requires the Controller to carry out customer due diligence on persons who are customers, to record certain personal data and to retain these data and related documents.
In addition to the above, unless otherwise provided by law, the Controller may process the personal data collected for the purposes of complying with a legal obligation to which it is subject or for the purposes of pursuing its own legitimate interests or the legitimate interests of a third party, where such interests are proportionate to the restriction of the right to the protection of personal data, without further specific consent and after the withdrawal of the data subject's consent.
III. OUR DATA PROCESSORS
Personal data of data subjects are stored on the computer of the Data Controller. Access is password-protected and is available to the Contractor and its employees.
The Data Controller publishes only public data on the advertised properties on the website www.myhungarianhouse.com (and www.mijnhongaarshuis.nl) and does not carry out any personal data processing or data collection. No news feed, subscription, email messaging. The hosting service is provided by Webrakéta Kft, 1111 Budapest, Lágymányosi út 12., Company registration number: 01-09-987579, Tax number: 23980790-2-43, EU 23980790, +36 (30) 37 38 706.
If data relating to the real estate appear in an advertisement published by an external service provider in the context of the execution of the order, the data processor in respect of this data is the provider of the relevant advertising platform.
IV. DATA PROCESSING, LEGAL BASIS, PURPOSES AND DURATION
The Data Controller processes data in the course of the following activities:
- Real estate brokerage and valuation services.
1, Data provider.
a, Personal data processed:
Surname and forename, surname and forename at birth, nationality, date and place of birth, mother's name at birth, address or, in the absence of it, place of residence, type and number of identification document, tax identification number, personal identification number, bank account number, telephone number, e-mail address
- purpose of processing. To facilitate the possible enforcement of the Data Controller's rights.
- Legal basis for data processing. Section 5 (1) (b) (mandatory data processing) Articles 7-9 of the Data Protection Act Infotv. Article 5(1)(a) (voluntary consent)
- Duration of data processing: 8 years from the date of execution or termination of the order.
- Purpose of data processing. To facilitate the possible enforcement of the Data Controller's rights. Use of the real estate data for statistical database training and valuation purposes, except: name of the client, house number
- Legal basis for data processing. Article 5 (1) (a) (voluntary consent)
- Duration of data processing: up to 5 years from the date of recording or, if longer, 5 years from the date of completion/termination of the order. For data processed for statistical and valuation purposes, until the withdrawal of the data subject's consent, but for a maximum of 10 years from the date of recording.
2, Data provider: buyer, bidder
- data processed: name and surname, name and surname at birth, nationality, date and place of birth, mother's name at birth, address or, in the absence of a mother's name, place of residence, type and number of identity document, tax identification number, personal identification number, telephone number, e-mail address
- Purpose of processing: to fulfil an order for real estate brokerage, to provide information, to establish a relationship between the seller and the buyer, to facilitate the conclusion of the sales contract, to carry out customer due diligence pursuant to the Pmtv.
- Legal basis for data processing. Section 5 (1) (b) (mandatory data processing) Articles 7-9 of the Pmtv. Article 5(1)(a) (voluntary consent)
- Duration of data processing: 8 years from the date of data recording.
3, Data provider: interested party (who visits the property or receives its address)
- Data processed: name, address or ID number, telephone number, e-mail address
- Purpose of processing: to fulfil an order for real estate brokerage, to provide information, to establish a relationship between the seller and the buyer, to facilitate the enforcement of any rights of the Data Controller
- Legal basis for processing. Article 5 (1) (a) (voluntary consent)
- Duration of data processing: up to 5 years from the date of data recording
4, Data provider: interested party (who receives general information about the real estate).
- Data processed: name; telephone number; e-mail address; information on the property sought
- purpose of processing: to provide information, to reply to enquiries from interested parties, to establish a relationship between the seller and the buyer
- Legal basis for processing: Infotv. Article 5(1)(a) (voluntary consent)
- Duration of data processing: up to 3 years from the date of recording the data, in case of repeated enquiries up to 3 years from the date of a new enquiry.
V. STATISTICAL DATABASE TRAINING, DATA TRANSMISSION
Data may be transmitted in the following cases:
- If the data subject wishes to use the assistance of a credit intermediary recommended by the Data Controller, his/her name, telephone number, e-mail address and, where applicable, the amount of the loan to be applied for will be transmitted to the credit intermediary. At the time of this transfer, the Data Controller will inform you of the name and contact details of the credit intermediary.
- If the data subject wishes to use a lawyer recommended by the Data Controller, his/her name, name at birth, identification document number, date and place of birth, mother's name, tax identification number, address/address, bank account number, address and parcel number of the property will be transmitted to the lawyer who will draw up the deed for the purpose of drawing up the contract of sale and other necessary documents. At the time of this transfer, you will be informed of the name and contact details of the lawyer by the Data Controller.
- If the data subject wishes to use a professional recommended by the Data Controller for the preparation of the energy performance certificate, the name, address, telephone number of the seller and the property details will be transmitted for this purpose. On the occasion of this transfer, you will be informed by the Data Controller of the name and contact details of the professional who will prepare the certificate.
- If a credit institution or an appraiser requests data from the Data Controller for its work, the address of the property (name of the municipality, street), the property's characteristics, sale price, date of sale (year, month) will be transmitted.
If you do not consent to the collection of data for statistical purposes and to the processing of these data, please indicate your objection separately.
VI. WHO IS ENTITLED TO ACCESS THE DATA
During the period of data processing, the personal data of the Data Subject may be accessed only by the Data Controller's manager, members of the company who are personally involved in the company's activities, and employees or agents who need access to these data in order to perform their duties. In addition, data may be disclosed to persons who work for service providers or agents who provide services to the Data Controller, where access to such data is necessary for the performance of their duties.
VII. SECURITY OF DATA
The Data Controller shall ensure the security of personal data by means of state-of-the-art physical and technical protection to prevent unauthorised access, unauthorised alteration or transmission, intentional and accidental deletion or destruction. The Data Controller undertakes to suspend the service immediately in the event of a data protection incident occurring despite this and to publish a statement until the incident has been rectified.
VIII. MODIFICATION, DELETION OF DATA
- The data subject may amend or request the rectification of his/her data at any time by sending an email or by post to the contact details set out herein in accordance with point XI.
- The data subject may, except where processing is mandatory, erase his or her personal data or request the erasure or blocking of his or her personal data by sending an email or by post to the contact details set out in point XI.
- The Controller shall erase the personal data of the data subject if the processing is unlawful; the purpose of the processing has ceased; or the statutory time limit for the storage of the data has expired; or the court or the National Authority for Data Protection and Freedom of Information has ordered it; or the processing is incomplete or inaccurate and cannot be lawfully remedied, provided that erasure is not excluded by law.
IX. INFORMATION
- The data subject shall have the right to request information from the Data Controller at any time by e-mail or by post about the personal data relating to him or her processed in connection with the Service in question, in accordance with point XI.
- The Controller shall, upon the data subject's request, provide information about the data relating to the data subject processed by the Controller or by a data processor on its behalf in connection with the Service, the source of the data, the purpose, legal basis and duration of the processing, the name and address of the data processor, the data processor's activities in connection with the processing, the legal basis and the recipient of the data transfer. The controller shall provide the requested information within a maximum of 30 days from the date of the request.
X. OBJECTION TO THE PROCESSING OF PERSONAL DATA
The data subject may object to the processing of his or her personal data,
- if the processing or transfer of personal data is necessary solely for compliance with a legal obligation to which the controller is subject or for the purposes of the legitimate interests pursued by the controller, the recipient or a third party, except in cases of mandatory processing;
- where the personal data are used or further processed for direct marketing, public opinion polling or scientific research purposes; and
- in any other case provided for by law.
If the Data Controller establishes that the data subject's objection is justified, the Data Controller shall cease the processing, including further collection and any further transfer, and block the data and notify the objection and the action taken on it to all those to whom the personal data subject has previously disclosed the personal data subject to the objection and who are obliged to take measures to exercise the right to object.
If the processing is required by law (e.g. accounting), the controller may not erase the data subject's data, but shall not transfer the personal data to the recipient if the objection has been accepted or if a court has ruled that the objection is justified.
XI. NOTIFICATION OF A CLAIM RELATING TO DATA PROCESSING
- Any request received by the Data Controller from an e-mail address previously provided to the Data Controller in connection with the Service shall be considered as a request from the data subject. In the case of claims from other e-mail addresses and claims in writing, the data subject may submit a claim only if the Data Controller or in a manner specified by law - has duly verified the identity of the data subject.
- Where the processing of personal data by the Controller is not based on the consent of the data subject, but is initiated by a third party in an abusive manner, the data subject may request the erasure of personal data relating to him or her which have been disclosed by a User, and information about the processing, upon appropriate proof of his or her identity and his or her connection with the personal data.
- In the event of the death of the data subject, any close relative of the data subject or of a person to whom he or she has made a beneficiary of a will may, by presenting the death certificate or by sending a copy thereof to the address of the Data Controller, request the erasure of the data relating to the data subject, upon proof of his or her relationship with the data subject, and the transfer of the data, upon proof of his or her legitimate interest.
XII. MEANS OF REDRESS
Any data subject may lodge a complaint with the competent court or the National Authority for Data Protection and Freedom of Information (President: Dr. Attila Péterfalvi, 1024 Budapest, Szilágyi Erzsébet fasor 22/C.,ugyfelszolgalat@naih.hu , +36-1-3911400, www.naih.hu).