Privacy and data processing
Privacy Notice
Effective and last updated: 4 September 2026
1. Scope and controllers
This notice applies to personal data processed through this website, including enquiries, first-party analytics and access to the password-protected portfolio.
- Website and professional contact
- Szentpétery László, real estate consultant
szentpetery.laszlo@oc.hu · +36 70 716 9175 - Website operator / controller's complete legal details
- [MISSING – legal name or sole trader details, registered office/address, registration or tax number, and exact controller status require approval.]
- Relevant franchise partner
- Torday Corporation Kft.
Full name: Torday Corporation Ingatlanforgalmazó, Értékbecslő és Hiteltanácsadó Korlátolt Felelősségű Társaság
Company registration number: 13 09 241615
Country: Hungary
Registered address: 2098 Pilisszentkereszt, Pilisszántói út 15.
Principal activity: 6831.25 – Real estate agency activities
[MISSING – direct contact details and exact controller role require approval.]
Szentpétery László participates in responding to enquiries and providing real estate consultancy. Depending on the enquiry, the Otthon Centrum Network and the relevant franchise partner may act as controllers in the roles described in the official Otthon Centrum notice.
Official Otthon Centrum privacy notice for direct consultant enquiries
2. Enquiry forms
Depending on the form, the site processes name, telephone number and/or email address, subject, message, preferred area, budget, property type, priorities, preferred consultation method, project purpose and time horizon, selected property and source page. A hidden anti-spam field is also used.
Purpose: responding to the enquiry and providing real estate brokerage services. Legal basis: the data subject's consent (GDPR Article 6(1)(a)). Submission is blocked without consent. The system records the submission time, consent version and notice URL in the enquiry record. Current consent version: 2026-09-04.
Recipients: Szentpétery László and, where relevant, authorised members of the applicable franchise partner and Otthon Centrum Network. No separate newsletter or marketing consent is currently requested or used on this site.
[APPROVAL REQUIRED – retention in the website database and email inbox, deletion workflow and responsible person. No automatic deletion rule was found in the current system.]
3. Technical services and data flows
- ChatGPT Sites / Cloudflare Workers és D1: website hosting, server execution and storage of enquiry, page-view and consent-based conversion-event records.
- Resend: forwarding enquiry emails to the configured administrative email address.
- ChatGPT authentication: restricted administrator access; it is not used for ordinary visitors.
[APPROVAL REQUIRED – exact contracting provider entities, addresses, processor/controller roles, processing locations, current data processing agreements and any Standard Contractual Clauses.]
Because the listed technical providers may process data outside the EEA, the existence and details of any international transfer and its safeguards must be verified against the current contracts before legal approval.
4. Analytics, cookies and similar technologies
The site contains first-party analytics only; no advertising pixel or third-party marketing tracker was found. Analytics starts only after consent. It records the visited path, referring host, source category, language, device category, timestamp, selected conversion actions and a random session identifier. Conversion actions are stored separately from technical page views. The raw IP address is not stored by the application.
| Technology | Category and purpose | Duration |
|---|---|---|
| portfolio_session | Necessary, secure password-protected portfolio session | 12 hours |
| szl_cookie_consent | Necessary local storage, records the visitor's consent choice and version | Until changed, browser data is cleared or the consent version changes |
| szl_analytics_session | Analytics session storage, created only after consent | Browser tab/session |
[APPROVAL REQUIRED – retention period and deletion schedule for page-view and conversion-event records in D1. No automatic deletion rule was found.]
5. Data subject rights
Subject to the conditions of the GDPR, you may request access, rectification, erasure, restriction of processing and data portability; you may object to processing based on legitimate interests and withdraw consent at any time without affecting processing carried out before withdrawal. Requests may be sent to szentpetery.laszlo@oc.hu. The final controller-specific complaints contact must be approved together with the missing controller details.
Supervisory authority
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)1055 Budapest, Falk Miksa utca 9–11.
Postal address: 1363 Budapest, Pf. 9.
+36 (1) 391 1400 · ugyfelszolgalat@naih.hu · www.naih.hu
You may also bring proceedings before the competent court.