Privacy notice
- Service provider / controller
- AKV Smart Properties Kft.
- Registered seat
- 4931 Tarpa, Esze Tamás utca 38.
- Tax number
- 29143768-2-15
- Company registration number
- 15-09-088318
- Supabase EU region
- eu-central-1 (Frankfurt, Németország)
1. Data categories and sources
Account data may include email, user ID, optional display name, creation and update information, newsletter preference, saved watchlist lots and any notes. Supabase authentication handles the password as a hash; the provider cannot access the readable password. Google sign-in supplies the identifier and email needed for authentication. We may also process information you send by email. Acceptance of the terms is a registration requirement, not analytics consent. The consent log records a random consent identifier, user ID when signed in, category choices, policy version and action to demonstrate the choice. The browser also stores the choice timestamp.
2. Purposes and legal bases
Accounts, authentication and watchlists rely on performance of the service (GDPR Art. 6(1)(b)). Newsletters and non-essential analytics require voluntary consent (Art. 6(1)(a)); recording a newsletter preference does not mean newsletters are already sent. Necessary and proportionate security and abuse-prevention logs rely on our legitimate interest in protecting the service (Art. 6(1)(f)). Handling statutory data-rights requests relies on a legal obligation (Art. 6(1)(c)).
3. Technical data and analytics
Operational logs may contain IP addresses, timestamps, browser or device data, requests and errors. GA4 measurement starts only after prior analytics consent. Microsoft Clarity usage and session analysis also starts only after analytics consent. Declining does not prevent basic functions. Analytics would assess aggregate usage and operation, not make automated auction decisions about users.
4. Retention
Account and watchlist data are held while the account exists or until a deletion request is fulfilled. Newsletter processing continues until consent is withdrawn; evidence of consent may be retained only as needed for applicable legal claims. Correspondence is retained until the matter closes and thereafter only for justified claims or legal obligations. Security logs are kept for the shortest period needed; provider-specific log and backup retention settings still require clarification, so we do not assert a fixed number of days or months. Deleted data leaves backups according to provider backup cycles.
5. Service providers and processors
Supabase Pte. Ltd. (data processor, privacy@supabase.com) provides authentication and data storage; Lovable Labs Sweden AB provides site hosting and its operating environment. Data is stored in the Supabase eu-central-1 (Frankfurt, Germany) EU region; this alone is not confirmation of exclusively EEA processing. Google also processes data under its own privacy terms when you use Google sign-in. GA4 (Google) is active only with analytics consent. Microsoft Clarity (Microsoft) loads only after analytics consent.
6. Transfers outside the EEA
International providers may involve access or transfers outside the EEA. Lawfulness requires an applicable adequacy decision for the recipient and processing, such as the EU–US Data Privacy Framework (DPF) for an actively certified participant, or European Commission Standard Contractual Clauses (SCCs) with supplementary safeguards as needed. We do not claim every provider or transfer is covered by the DPF. Contact the controller for information and copies of applicable safeguards; specific region and safeguard settings still require confirmation.
7. Your rights
You may request access, rectification, erasure, restriction and, where applicable, portability. You may object to legitimate-interest processing on grounds relating to your circumstances. Consent can be withdrawn at any time without affecting earlier lawfulness. Email your request; proportionate identity verification may be needed. We respond without undue delay, generally within one month; where GDPR permits, this may be extended by two further months, with notice within the first month.
8. Auction data and location privacy
We organise property information from public notices and do not publish debtor personal data. Locations are displayed only approximately, at settlement level. We do not make automated decisions with legal effects about you; analyses are informational property assessments. Please email us if you find personal data or incorrect content.
9. Complaints and remedies
You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa u. 9-11.; website: naih.hu. You may also seek a judicial remedy, including the competent court for your residence or place of stay where procedural law permits. Regulatory or judicial remedies are not conditional on first complaining to us.