Ilonalak Ingatlan

Adatvédelmi tájékoztató

PRIVACY NOTICE

Effective date: 17 June 2026

The purpose of this Privacy Notice is to describe the data processing operations carried out in connection with the operation of the ilonalak.hu website and with real estate brokerage activities, guaranteeing data subjects transparent and secure processing of their personal data. This document is in line with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and with Act CXII of 2011 on Informational Self-Determination and Freedom of Information (Info tv.).

1. Details of the Data Controller

  • Name / Company name: Böhm Ilona E.V.
  • Registered office: 1195 Budapest, Zrínyi utca 23.
  • E-mail addresses: bohmilona@gmail.com, info@ilonalak.hu
  • Phone number: +36 20 364 4237
  • Website: www.ilonalak.hu

2. Data Processors and Operators

For the uninterrupted operation of the website, the provision of its technical background and the performance of marketing activities, the Data Controller engages the following data processors, who act exclusively on the instructions of the Data Controller.

2.1. Marketing and Website Administration

  • Business name: Timár Dániel E.V.
  • Activity: Marketing, website administration and campaign management
  • Registered office: 1188 Budapest, Tölgy utca 7/a
  • Tax number: 57176820-1-43

2.2. IT Operations and Web Development

  • Business name: Endrik Róbert E.V.
  • Activity: Provision of IT infrastructure, web development, maintenance
  • Registered office: 1053 Budapest, Ferenciek tere 2.
  • Website: digitalgrant.hu
  • E-mail address: hello@digitalgrant.hu
  • Phone number: +36 30 681 1956
  • Tax number: 59352103-1-41

2.3. Hosting Provider

  • Business name: [TO BE COMPLETED]
  • Activity: Physical storage of the website's data and files
  • Registered office: [TO BE COMPLETED]
  • Tax number / Company registration number: [TO BE COMPLETED]

3. Scope, Purpose and Legal Basis of the Personal Data Processed

In the course of the real estate brokerage activity, the use of the website and marketing activities, the following data processing operations take place:

  • Contact and requests for offers: Data provided by users (name, e-mail address, phone number, message). Purpose: responding to enquiries, arranging property viewings. Legal basis: the data subject's explicit consent (Article 6(1)(a) GDPR).
  • Performance of real estate brokerage mandates and mandatory due diligence: Personal data of clients and buyers (name, birth name, mother's name, place/date of birth, address, details of personal identification documents). Purpose: preparation of contracts, brokerage, completion of the sale and purchase, identification required by anti-money laundering legislation. Legal basis: performance of a contract (Article 6(1)(b) GDPR) in respect of the brokerage agreement; and compliance with a legal obligation to which the Data Controller is subject (Article 6(1)(c) GDPR) in respect of customer due diligence carried out under Act LIII of 2017 on the Prevention and Combating of Money Laundering and Terrorist Financing (Pmt.).
  • Viewing declaration: Data of prospective buyers (name, identity card). Purpose: to evidence to the owner that a buyer was introduced. Legal basis: the legitimate interest of the Data Controller (Article 6(1)(f) GDPR).
  • Invoicing and accounting: Billing name, address, tax number. Purpose: issuing accounting documents in compliance with the law. Legal basis: legal obligation (under the Számv. tv. (Act C of 2000 on Accounting) and the Áfa tv. (Act CXXVII of 2007 on Value Added Tax) – Article 6(1)(c) GDPR).
  • Marketing and newsletter: Name, e-mail address. Purpose: providing information about current real estate market news and services. Legal basis: consent (Article 6(1)(a) GDPR).
  • Use of cookies: The website uses cookies. Purpose: supporting analytics, functional operation and marketing campaigns. The detailed list of cookies and the management of consent are available in the cookie bar (cookie banner) displayed on the website.

4. Data Retention Period

The Data Controller processes personal data strictly only for as long as necessary to achieve the purpose of the processing, or as required by law:

  1. Contact: For 1 year after the matter has been closed, or until consent is withdrawn.
  2. Contractual data and accounting documents: For 8 years pursuant to Section 169(2) of the Sztv. (Act C of 2000 on Accounting).
  3. Anti-money laundering identification data: In accordance with the Pmt., for 8 years from the termination of the business relationship or from the execution of the transaction order, which period may be extended to a maximum of 10 years at the request of the supervisory authority (in cases specified by law).
  4. Data used for marketing purposes: Until the user unsubscribes (withdraws consent).

5. Rights of Data Subjects and How to Exercise Them

The GDPR guarantees data subjects self-determination over their personal data. Accordingly, you are entitled at any time to:

  • Request information and access: You may request confirmation as to whether your data are being processed and obtain access to the data processed.
  • Request rectification: You may report inaccurate data held in the system and request their correction.
  • Request erasure (the "right to be forgotten"): You may request the permanent erasure of your data where the legal basis or purpose of the processing has ceased to exist.
  • Request restriction of processing: In certain disputed cases, you may have the processing suspended.
  • Exercise the right to data portability: You may obtain the data you have provided in a machine-readable format.
  • Object to processing: In particular, to processing for direct marketing purposes.

You may submit your requests, or unsubscribe from the newsletter, by e-mail at info@ilonalak.hu or by post at 1195 Budapest, Zrínyi utca 23. The Data Controller shall fulfil requests without undue delay and within one month at the latest, and shall inform you accordingly.

6. Legal Remedies

If you consider that the Data Controller or its appointed data processors have infringed your rights to the protection of your personal data, you may lodge a complaint with the competent authority or enforce your rights before the courts.

Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)
Registered office: 1055 Budapest, Falk Miksa utca 9-11.
Postal address: 1363 Budapest, Pf.: 9.
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu

This Privacy Notice enters into force upon its publication on the website. The Data Controller reserves the right to amend this notice in the event of changes in legislation or in its internal processes. The current version is always available on the www.ilonalak.hu website.