a.) By signing the Contract of Engagement, the Client (hereinafter referred to as the Data Subject) consents to the processing of their data by the Company (LeoGroup Estate Kft, tax number: 25320288-2-42, company registration number: 01 09 208236; e-mail: szucs.attila@artonhome.hu, hereinafter referred to as the "Company" or "Data Controller") process their data.
See below for the scope of data processed.
b.) The purpose of data processing is to provide the Data Controller's services and to perform related business activities. Within this, the purpose of data processing is to identify the Data Subject, establish and maintain contact, record property data in the Data Controller's database, publish advertisements, establish relationships between customers, facilitate the conclusion and performance of transactions relating to the property, the performance of this Agreement, the provision of related services (e.g., energy certification, valuation), the exercise of rights arising from the legal relationship, the fulfillment of obligations, the enforcement of claims, the fulfillment of obligations imposed by law (e.g., customer due diligence), complaint handling, and consumer protection.
c.) The legal basis for data processing is the performance of this Agreement and, taking into account the fact that the Data Subject enters into the Agreement of their own free will, the consent of the Data Subject. The purpose of data processing is also to fulfill legal obligations, primarily the identification, reporting, and registration obligations prescribed by the Pmt. The customer due diligence data sheet forming part of this Agreement serves to fulfill the obligations under the latter law. If the Data Subject does not provide the data whose processing is mandatory under the law or without which the contract cannot be performed, the contract cannot be concluded. The Data Subject shall not suffer any other disadvantage beyond the failure to conclude the contract.
d.) One of the purposes of data processing is to enforce any claims. If a legal dispute arises between the Data Subject (principal) and the Company (as agent) and, in the course of this dispute, one party wishes to enforce a claim (of a financial or other nature) against the other party, the data necessary for this may be used in the enforcement of the claim. The legal basis for data processing is partly the provisions of the legislation that allow the enforcement of claims in the legal relationship between the parties, and partly the performance of the contract between the Parties. The legal basis for data processing is also the enforcement of the legitimate interests of the Data Controller. In the case of data processing under this section, it is in the Data Controller's interest to receive the consideration to which it is entitled in the event of the performance of the Contract concluded between it and the Data Subject. If the Data Subject does not voluntarily fulfill the claim, it can only be enforced by legal means, subject to the use of data necessary to substantiate and prove the claim and to initiate the necessary proceedings. In view of the equal relationship and equal treatment of the parties, if the Data Subject wishes to enforce a claim against the Data Controller, the Data Controller shall transfer the data processed by it to the Data Subject. The Data Subject shall have the right to object to the data processing referred to in this section, in which case the data processing may only be continued if there is a clearly demonstrable compelling interest justifying the data processing and if this interest cannot be enforced in any other way.
e.) The legal basis for data processing is the consent of the data subject pursuant to Article 6(1)(a) of REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (GDPR), the performance of a contract to which the data subject is party, pursuant to Article 6(1)(b) of the GDPR, the fulfillment of a legal obligation to which the controller is subject, pursuant to Article 6(1)(c) of the GDPR, and the pursuit of the legitimate interests of the controller, pursuant to Article 6(1)(f) of the GDPR.
f.) The Data Controller shall delete the data if the data processing is unlawful, the Data Subject withdraws his or her consent or objects to the data processing, and there is no other legal basis for the data processing, the purpose of the data processing has ceased to exist, or the data storage period has expired. The deletion of the data is mandatory or has been ordered by a court or the National Data Protection and Freedom of Information Authority.
g.) The Data Subject may request information about the processing of their data at any time, request the correction, deletion or restriction of their data, object to the processing of their data in the case referred to in point d) above, and request that their data be provided to them in a structured, widely used, machine-readable format and transferred to another data controller. The Data Subject may withdraw their consent to the processing of their data, in which case the Data Controller shall delete the data, unless there are other legal grounds for retaining it.
The Data Subject shall be entitled at any time to request information about the personal data concerning him/her processed by the Company, to request the correction of incorrect data, and to request the modification of such data in the event of changes.
The Data Subject may, at any time, by letter sent to the above address of the Company or by email sent to the above email address, prohibit the further use of their personal data for purposes for which the legal basis for data processing was their voluntary consent, and may also object at any time to data processing necessary for the enforcement of the Company's legitimate interests.
h.) Data processors are natural or legal persons who process personal data relating to the Data Subject within the framework of a contractual relationship with the Data Controller. The Company uses data processors in the course of data processing. Data processors do not make independent decisions; they are only entitled to act in accordance with the contract concluded with the respective Data Controller and the instructions received. With regard to the services and data processing referred to in this notice, the following persons may be data processors: Other contributors and performance assistants who have a legal relationship with the Company in the performance of the Company's activities (e.g., real estate consultants, office managers, administrative staff, credit intermediary subcontractors, appointed appraisers).
i.) The Company shall forward the Data Subject's data to the Anti-Money Laundering Information Office operating within the National Tax and Customs Administration in the cases specified in the Pmt.
The Company may transfer the Data Subject's personal data to a lawyer, law firm, or debt collection agency appointed by it in order to enforce its civil law claims arising from the contract.
The Company may transfer the Data Subject's personal data to the Buyer in the event of the sale of the property in order to prepare the property purchase agreement.
i.) Based on the Pmt., the duration of data processing is 8 years from the termination of the business relationship.
With regard to data processed on the basis of a contractual relationship with the Data Subject, the duration of data processing is 5 years from the termination of the business relationship. In the case of data processing based on the voluntary consent of the Data Subject, the duration of data processing is until the consent is withdrawn, but no longer than 2 years from the termination of the business relationship. After that, the Data Controller will not use the Data Subject's data for the purpose covered by the consent.
j.) In the event of refusal of their requests, unlawful processing of their data, or any questions, comments, or complaints regarding data processing, Data Subjects may contact the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11.; postal address: 1363 Budapest, Pf.: 9., telephone: +36-1-391-1400; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu), and may enforce their rights in court.
k.) This information is not exhaustive. Detailed information is available at the bottom of the http://szucsattilaingatlan.hu website, but upon request, the Data Controller or its representative will make it available to the Data Subject.
The scope of data processed in connection with each data processing purpose, the purpose of data processing, and the legal basis for data processing:
– Legal basis: Article 6(1)(b) of the GDPR – data processing necessary for the performance of a contract
– Scope of data processed: customer name, birth name, address, mother's name, place and date of birth, email address, telephone number, property details and parameters
– Legal basis: Article 6(1)(f) of the GDPR – enforcement of the legitimate interests of the data controller
– Scope of data processed: customer name, birth name, address, mother's name, place and date of birth, email address, telephone number
– legal basis: mandatory data processing as stipulated in Act LIII of 2017 on the prevention and combating of money laundering and terrorist financing (Pmt.), in accordance with Article 6(1)(c) of the GDPR, in order to comply with the legal obligation applicable to the data controller
– scope of data processed: the Data Subject's name, birth name, address, mother's name, place and date of birth, nationality, type and number of identification document, place of residence in the case of foreign private individuals
– legal basis: retention of accounting documents as stipulated in Section 169(2) of Act C of 2000 on Accounting, fulfillment of the legal obligation applicable to the data controller as set out in Article 6(1)(c) of the GDPR
– Scope of data processed: name of the Data Subject, address, invoice amount, other invoice details