Privacy Policy
Last updated: November 28, 2025
Privacy Policy
Last updated: 9 October 2025
This Privacy Policy applies to the entire online platform operated by Feel-Ing Ingatlanközvetítő Kft., including the following domains:
- feel-ing.hu — Hungarian real estate office website
- feeling-spain.hu — Hungarian admin and information site
- feeling-spain.com — English information site
- feeling-spain.de — German information site
The Hungarian version of this Privacy Policy is the legally binding version. The English and German versions are translations provided for information purposes.
1. Data Controller
Feel-Ing Ingatlanközvetítő Kft. (Feel-Ing Real Estate Office)
Registered seat: 2890 Tata, Május 1 út 21/C, Hungary
Tax number: 32135132-2-11
E-mail: info@Feel-Ing.hu
Phone: +36 30 903 3193
The Data Controller determines the purposes and means of processing personal data and is responsible for ensuring that data processing is carried out in compliance with applicable laws, in particular with the GDPR (Regulation (EU) 2016/679).
2. Data Processors and service providers
2.1. Technical data processor
MK TechLAB (Sole Trader, United Kingdom)
E-mail: info@mktechlab.co.uk
Tasks: development, integration of hosting and database services, maintenance, error detection and technical operation of the websites. MK TechLAB processes personal data only on documented instructions from the Data Controller.
2.2. Infrastructure and e-mail services
- Supabase — storage of form submissions, enquiries, certain property and log data (EU region).
- Vercel — hosting and delivery of the websites (static and server-side rendering).
- Hostinger — SMTP e-mail transmission (TLS) and certain domain services.
2.3. Other third-party tools
- VeneoSys — external real estate management system providing property data via XML. Personal data of property owners is not displayed on the public sites.
- DeepL — translation service for generating English and German versions of Hungarian content (property descriptions, blog posts) created in the admin interface.
- Google LLC — Google Analytics, Google Maps and related tools.
- Meta Platforms — social media icons and share links (and potentially remarketing pixels in the future).
These service providers act as data processors or independent controllers according to their own terms; details can be found in their respective privacy policies.
3. Purposes and legal bases of processing
3.1. Contact, enquiries and customer communication
Purpose: handling contact requests, call-back requests, quote requests and questions regarding properties or services.
Data processed: name, e-mail address, phone number, message content, property reference (if applicable), IP address and timestamp for security reasons.
Legal basis:
- GDPR Article 6(1)(a) — consent (by submitting the contact form), and
- GDPR Article 6(1)(b) — taking steps prior to entering into a contract and performance of a contract.
3.2. Real estate intermediary services and contractual obligations
Purpose: presentation of properties, forwarding offers, concluding and performing contracts, issuing invoices.
Data processed: name, contact details, property information, contents of the agency agreement and invoicing data.
Legal basis: GDPR Article 6(1)(b) and (c) — performance of a contract and compliance with legal obligations (for example bookkeeping rules).
3.3. Website operation, security and error detection
Purpose: ensuring the secure operation of the systems, preventing abuse and attacks, detecting and correcting technical errors.
Data processed: IP address, timestamp, requested URLs, HTTP status codes, error logs, browser and device information.
Legal basis: GDPR Article 6(1)(f) — legitimate interest of the Data Controller in IT security and service continuity.
3.4. Analytics and statistics
Purpose: analysing website traffic and user behaviour in order to improve content, usability and performance.
Data processed: anonymised or pseudonymised identifiers, page views, basic technical data.
Legal basis: GDPR Article 6(1)(a) — consent via the cookie banner.
3.5. Marketing and remarketing (optional)
Purpose: displaying personalised adverts and remarketing campaigns via tools such as Google Ads or Meta platforms.
Legal basis: GDPR Article 6(1)(a) — consent (marketing cookies).
4. Categories of personal data processed
4.1. Website visitors
- IP address (short-term storage)
- date and time of visit
- requested pages and interactions
- browser and device type
- cookie identifiers (session, analytics, marketing — marketing cookies only with consent)
4.2. Contact and enquiry forms
- name
- e-mail address
- phone number
- message content
- property ID or reference (if relevant)
- IP address and timestamp
4.3. Admin interface users (feeling-spain.hu)
- name and e-mail address of agents and admin users
- login logs (time, IP address)
- edit history related to properties and content
The public websites do not display personal data of property owners. Instead, only the contact details of the agency or assigned agents are published.
5. Storage, data transfers and third countries
5.1. Storage locations
- Supabase — EU data centres (form data, enquiries, certain property and log records).
- Vercel — hosting and delivery of the websites. Technical logs may be stored for a limited time.
- Hostinger — e-mail transmission and domain services.
5.2. Transfers to third parties and third countries
Personal data is only shared with third parties to the extent necessary for the performance of the services or to comply with legal obligations (for example with legal or financial advisors).
Certain service providers may process data outside the European Union. In such cases, appropriate safeguards under the GDPR are applied, such as Standard Contractual Clauses (SCCs) or equivalent mechanisms provided by the relevant providers.
6. Retention periods
- General enquiries and contact messages: up to 12 months after the case has been closed.
- Contracts and invoicing data: 8 years, in line with applicable accounting laws.
- Technical logs (security and error detection): typically up to 30 days.
- Analytics cookies: up to 24 months.
- Marketing cookies: 6 to 18 months, depending on the provider.
7. Rights of the data subject
Data subjects have the following rights under the GDPR:
- right of access to their personal data,
- right to rectification,
- right to erasure (right to be forgotten),
- right to restriction of processing,
- right to data portability (where processing is based on consent or contract and carried out by automated means),
- right to object to processing based on legitimate interests.
Requests can be submitted by e-mail to: menczer.klara.it@gmail.com
Data subjects also have the right to lodge a complaint with the supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)
1055 Budapest, Falk Miksa u. 9–11., Hungary
Phone: +36 1 391 1400
Website: www.naih.hu
8. Cookies and analytics
8.1. Types of cookies used
| Category | Purpose | Example | Retention |
|---|---|---|---|
| Essential | Session management, security, basic functionality | session_id | until the end of the session |
| Analytics | Usage statistics, improving navigation | Google Analytics (_ga*) | up to 24 months |
| Marketing | Remarketing and personalised advertising | Google Ads, Meta pixel | 6–18 months |
Cookie settings can be adjusted at any time in the browser and, where available, via the cookie management interface on the websites.
8.2. Embedded third-party content
The websites may include embedded content from third parties, such as Google Maps, social media icons and share buttons (Facebook, Instagram, WhatsApp) or embedded videos. These providers may set their own cookies and process data according to their own privacy policies.
9. Data security
- Use of HTTPS encryption on all domains (feel-ing.hu, feeling-spain.hu, feeling-spain.com, feeling-spain.de).
- Role-based access control and Row Level Security (RLS) in Supabase.
- Access logging on admin interfaces.
- Secure e-mail transmission via Hostinger SMTP with TLS.
- Regular software updates and security patches.
10. Language versions
This Privacy Policy is available in Hungarian, English and German. In case of any discrepancy between language versions, the Hungarian version shall prevail.
11. Changes to this Privacy Policy
The Data Controller reserves the right to amend this Privacy Policy in order to reflect changes in legislation, services or technological solutions. The updated version will be published on the websites, with the date of the last update indicated at the top of the document.