Privacy Policy

1. What principles do we follow when processing data?

Our company follows the principles set out below when processing data:

• we process personal data lawfully and fairly, and in a manner that is transparent to you.
• we collect personal data only for specified, explicit and legitimate purposes, and we do not process it in a way that is incompatible with those purposes.
• the personal data we collect and process is adequate and relevant for the purposes of the processing and is limited to what is necessary.
• our company takes every reasonable step to ensure that the data we process is accurate and, where necessary, kept up to date; we erase or rectify inaccurate personal data without delay.
• we store personal data in a form which permits your identification for no longer than is necessary for the purposes of the processing.
• by applying appropriate technical and organisational measures we ensure an adequate level of security for personal data against unauthorised or unlawful processing, accidental loss, destruction or damage.

Our company processes your personal data

• on the basis of your informed and voluntary consent, and only to the extent necessary and always for a specified purpose; that is, we collect, record, organise, store and use it.
• in certain cases the processing of your data is based on statutory requirements and is mandatory; in such cases we draw your attention to this fact separately.
• and in certain cases our company, or a third party, has a legitimate interest in processing your personal data — for example the operation, development and security of our website.

2. Who are we?

Name of the business

EcoIngatlan (Anita Schaub, sole trader)

Registered seat

7763 Szőkéd, Ady Endre u. 7/A., Hungary

Website

https://ecoingatlan.hu

Postal address

7763 Szőkéd, Ady Endre u. 7/A, Hungary

Email address

info@ecoingatlan.hu

Tax number

900505231-22

Registration number

59184658

Under Article 37 of the GDPR, our company is not required to appoint a data protection officer.

Our hosting provider:

Name of the hosting provider

Contact Net Kft.

Registered seat of the hosting provider

4400 Nyíregyháza, Toldi u. 52., Hungary

Website of the hosting provider

https://contactnet.hu/

Email address of the hosting provider

info@contactnet.hu

In order to serve our clients to a high standard, our company uses the following data processors:

Data controller (1)

Anita Schaub

Address (1)

7763 Szőkéd, Ady Endre u. 7/A, Hungary

Areas of responsibility (1)

All activities

If we change the list of our data processors, we will update this policy accordingly.

The data we process:

We only ask visitors to our website for their personal data if they wish to register, log in, or take part in a prize draw.

We do not link the personal data provided in connection with registration or with the use of our marketing services, and identifying our visitors is not, in principle, our aim.

For further information about our data processing you may write to us at info@ecoingatlan.hu or at our postal address; we will send our reply to the contact details you provide within 15 days (but in any event within 1 month).

3. What are cookies and how do we handle them?

Cookies are small data files that are placed on your computer through the website when you use it, in such a way that your internet browser downloads and stores them. Most of the most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow the downloading and use of cookies by default, but it is up to you whether you refuse or block them by changing your browser settings, and you can also delete cookies already stored on your computer. The “help” menu of each browser provides more detailed information about the use of cookies.

Some cookies do not require your prior consent. Our website gives you brief information about these when you first visit; they include, for example, authentication, multimedia player, load-balancing and user interface customisation session cookies, as well as user-centric security cookies.

For cookies that do require consent — where processing begins as soon as the page is opened — our company informs you at the start of your first visit and asks for your consent.

Our company does not use and does not permit cookies that would allow third parties to collect data without your consent.

Accepting cookies is not mandatory; however, our company accepts no liability if our website does not work as expected because cookies have not been enabled.

Which cookies do we use?

You can read about third-party cookies in detail on this page.

4. What else should you know about the data processing related to our website

You provide your personal data voluntarily during registration and when contacting our company, and we therefore ask you to take particular care that the data you provide is true, correct and accurate, as you are responsible for this. Incorrect, inaccurate or incomplete data may prevent you from using our services.

If you provide the personal data of another person rather than your own, we assume that you have the necessary authorisation to do so.

You may withdraw your consent to the processing at any time, free of charge

• by deleting your registration,
• by withdrawing your consent to the data processing, or
• by withdrawing your consent to the processing or use of any data that must be provided during registration, or by requesting that it be blocked.

For technical reasons we undertake to register the withdrawal of consent within 30 days; please note, however, that in order to comply with our legal obligations or to enforce our legitimate interests we may continue to process certain data after consent has been withdrawn.

If misleading personal data is used, or if one of our visitors commits a criminal offence or attacks our company’s system, we will delete that visitor’s data without delay at the same time as terminating their registration or — where necessary — retain it for the duration of any proceedings to establish civil liability or of any criminal proceedings.

5. What should you know about our data processing for direct marketing and newsletter purposes?

By means of the declaration you make during registration, or later by amending the personal data stored on the newsletter and/or direct marketing registration interface (that is, by clearly expressing your intention to consent), you may consent to your personal data also being used for marketing purposes. In that case — until your consent is withdrawn — we also process your data for direct marketing and/or newsletter purposes and send you advertising and other materials, information and offers and/or forward newsletters to you (Section 6 of the Hungarian Advertising Act).

You may give your consent for direct marketing and for the newsletter together or separately, and you may withdraw it or them at any time, free of charge.

Deletion of your registration is in every case treated as a withdrawal of consent. Withdrawal of consent to data processing for direct marketing and/or newsletter purposes is not at the same time treated as withdrawal of consent to the data processing related to our website. Each consent relates to a specific purpose, so registering on the website and signing up to the newsletter are two separate purposes, kept in two separate databases; the two cannot be linked.

For technical reasons we undertake to register the withdrawal of an individual consent or an unsubscription within 15 days.

6. What should you know about prize draws?

Our company may organise prize draws as campaigns; the terms of each individual draw are set out in separate rules. The rules of the current promotion can always be found on the front page of our website, via a link placed in a central position.

7. Other data processing matters

We may only transfer your data within the limits laid down by law, and in the case of our data processors we ensure by contractual conditions that they cannot use your personal data for purposes contrary to your consent. Further information can be found in section 2.

Our company does not transfer data abroad.

Courts, the public prosecutor’s office and other authorities (for example the police, the tax authority, the Hungarian National Authority for Data Protection and Freedom of Information) may contact our company requesting information, the disclosure of data or the provision of documents. In such cases we must comply with our disclosure obligation, but only to the extent strictly necessary to achieve the purpose of the request.

Our contributors and employees involved in the processing of data are entitled, to a predetermined extent and subject to a duty of confidentiality, to access your personal data.

We protect your personal data with appropriate technical and other measures, ensure the security and availability of the data, and protect it against unauthorised access, alteration, damage, disclosure and any other unauthorised use.

As part of our organisational measures we control physical access to our premises, we train our employees on an ongoing basis and we keep paper documents locked away with appropriate protection. Our technical measures include encryption, password protection and anti-virus software. We would point out, however, that data transmission over the internet cannot be regarded as fully secure. Our company does everything it can to make these processes as secure as possible, but we cannot accept full responsibility for data transmitted through our website; for data that has reached our company we apply strict rules to safeguard your data and to prevent unlawful access.

On security matters we ask for your help in keeping the password for our website safe and not sharing it with anyone.

8. What are your rights and remedies?

In relation to the processing of your data, you may

• request information,
• request the rectification, amendment or completion of the personal data we process,
• object to the processing and request the erasure or blocking of your data (except in the case of mandatory processing),
• seek a judicial remedy before a court,
• lodge a complaint with, or initiate proceedings before, the supervisory authority (https://naih.hu/panaszuegyintezes-rendje.html).

Supervisory authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)

Registered seat

1125 Budapest, Szilágyi Erzsébet fasor 22/c., Hungary

Postal address

1530 Budapest, PO Box 5, Hungary

Telephone

+36 (1) 391-1400

Fax

+36 (1) 391-1410

Email

ugyfelszolgalat@naih.hu

Website

https://naih.hu/

At your request we will provide information about the data we process, or that is processed by the data processor engaged by us, concerning

• your data,
• its source,
• the purpose and legal basis of the processing,
• its duration or, where this is not possible, the criteria used to determine that duration,
• the name and address of our data processors and their activities relating to the processing,
• the circumstances and effects of any personal data breaches and the measures we have taken to remedy and prevent them, and
• in the event of a transfer of your personal data, the legal basis for the transfer and the recipient.

We will provide this information within 15 days of receiving the request (but in any event within 1 month). The information is free of charge unless you have already submitted a request for information concerning the same set of data in the current year. We will refund any costs you have already paid if we processed the data unlawfully or if the request for information led to a rectification. We may refuse to provide the information only in the cases laid down by law, stating the relevant legal provision and informing you of the possibility of a judicial remedy and of turning to the authority.

Our company notifies you, and everyone to whom the data was previously transferred for processing purposes, of any rectification, blocking, marking or erasure of personal data, unless the failure to notify does not prejudice your legitimate interests.

If we do not grant your request for rectification, blocking or erasure, we will set out the reasons for our refusal in writing or — with your consent — electronically within 15 days of receiving the request (but in any event within 1 month), and inform you of the possibility of a judicial remedy and of turning to the authority.

If you object to the processing of your personal data, we will examine the objection within 15 days of the request being submitted (but in any event within 1 month) and inform you of our decision in writing. If we decide that your objection is well founded, we will cease the processing — including any further collection and transfer of data — and block the data, and we will notify of the objection and of the measures taken on the basis of it everyone to whom we previously transferred the personal data concerned and who is obliged to take action to give effect to the right to object.

We will refuse to comply with the request if we demonstrate that the processing is justified by compelling legitimate grounds which override your interests, rights and freedoms, or which relate to the establishment, exercise or defence of legal claims. If you disagree with our decision, or if we miss the deadline, you may bring an action before a court within 30 days of the decision being communicated or of the last day of the deadline.

Data protection actions fall within the competence of the regional court; at the data subject’s choice, the action may also be brought before the regional court of the data subject’s place of residence or stay. Foreign nationals may also lodge a complaint with the supervisory authority competent for their place of residence.

Before turning to the supervisory authority or to a court with your complaint, we ask you to contact our company first, so that the matter can be discussed and resolved as quickly as possible.

9. Which are the main laws governing our activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (Info Act)
• Act V of 2013 on the Civil Code (Ptk.)
• Act CVIII of 2001 on certain issues of electronic commerce services and information society services (Eker Act)
• Act C of 2003 on electronic communications (Ehtv)
• Act CLV of 1997 on consumer protection (Fogyv Act)
• Act CLXV of 2013 on complaints and public interest disclosures (Pktv.)
• Act XLVIII of 2008 on the basic requirements and certain restrictions of commercial advertising activity (Grtv.)

10. Amendment of this privacy policy

Our company reserves the right to amend this privacy policy, and will inform data subjects of any amendment in an appropriate manner. Information relating to data processing is published on the https://ecoingatlan.hu website.

Dated: Budapest, 12 August 2026.