Privacy notice

Who handles your data?

The controller is the company operating the Monvero Estates brand ("Monvero", "we"):

Company name: ARR Hungary Korlátolt Felelősségű Társaság (ARR Hungary Kft.)
Registered office: 2096 Üröm, Táborföld út 6.
Company reg. no.: Cg. 13-09-174145
Tax number: 25142686-2-13
E-mail: info@monveroestates.com
Phone: +36 70 603 3333 (Mon–Fri 9:00–18:00)
Website: monveroestates.com

We are not required to appoint a data protection officer. For any privacy question, write to info@monveroestates.com; we confirm receipt within one working day.

What data, what for, how long?

We only ask for what we need to handle your request. Feel free to leave optional fields empty.

Contact and consultation requests

The form on the Contact page and the "Let's talk" forms on other pages.

Data: name, e-mail address, phone number (if given), your message, the options you chose (destination, budget, time), the page you wrote from, the time of sending and your IP address.
Purpose: answering your question, arranging the consultation and, if you instruct us, preparing the work together.
Legal basis: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)). The IP address is processed on the basis of our legitimate interest (Art. 6(1)(f)) to filter out mass unsolicited messages.
How long?: if no engagement follows, 1 year from our last exchange, then deleted. If you instruct us, for the period set out under "Engagement" below.

Viewing requests for a listed property

The viewing form on property pages.

Data: name, phone number, e-mail address (if given), preferred day and time, viewing type (in person or video), the property, time of sending and IP address.
Purpose: arranging the viewing. The advisor responsible for the listing also receives your message.
Legal basis: pre-contractual steps at your request (Art. 6(1)(b)); IP address: legitimate interest (Art. 6(1)(f)).
How long?: 1 year from the last contact, or the engagement period if you instruct us.

Selling and valuation requests

The questionnaire on the Selling page.

Data: your contact details and the property details (type, size, rooms, floor, condition, location) plus anything else you tell us.
Purpose: estimating your property's value and, if you wish, preparing our sales proposal.
Legal basis: pre-contractual steps at your request (Art. 6(1)(b)).
How long?: 1 year from the last contact, or the engagement period if you instruct us.

Guide downloads

The guide form in the Journal and on the destination pages.

Data: e-mail address, the guide you chose, time of sending and IP address.
Purpose: giving you the guide, and asking you once, personally, whether we can help with the topic.
Legal basis: your consent (Art. 6(1)(a)), given with the form's checkbox, which you can withdraw at any time.
How long?: until you withdraw your consent, for at most 2 years.

The newsletter sign-up in the Journal.

Data: e-mail address, the markets you chose (Budapest, Dubai, Costa del Sol), time of sign-up and IP address.
Purpose: at most one e-mail a month about new articles, guides and important rule changes.
Legal basis: your consent (Art. 6(1)(a)). Every e-mail has a one-click unsubscribe link, or just write to us.
How long?: until you unsubscribe. We remove your address from the list within 30 days of unsubscribing.

Engagement: buying, selling or investment matters

If you instruct us (buyer representation, selling, advisory).

Data: what the contract and the matter require: name, date and place of birth, address, ID document numbers, contact details, property and financing details, correspondence.
Purpose: carrying out the engagement, settling our fee and meeting our legal obligations.
Legal basis: performance of a contract (Art. 6(1)(b)); for invoices and customer due diligence, legal obligation (Art. 6(1)(c)) under the Hungarian Accounting Act and the Anti-Money Laundering Act (Act LIII of 2017).
How long?: 5 years from the end of the contract (general limitation period); accounting records for 8 years; due diligence data for 8 years from the end of the business relationship.

Phone, e-mail, WhatsApp

Data: what you tell us on the call or in writing, and your phone number or e-mail address. We do not record calls.
Purpose, basis: answering your question, as with contact requests (Art. 6(1)(b)).
How long?: 1 year from the last contact, or the engagement period if you instruct us.

The WhatsApp button opens WhatsApp (Meta Platforms Ireland Ltd.), where WhatsApp's own privacy terms apply.

Using the website

Data: the hosting server log: IP address, time, the address opened, browser type.
Purpose: running the site securely, detecting errors and attacks.
Legal basis: our legitimate interest (Art. 6(1)(f)) in protecting the site and visitors' data.
How long?: according to the hosting provider's settings, for at most 30 days.

Objecting to legitimate interest

Where we rely on legitimate interest (IP address, server log), we have weighed that it does not disproportionately affect your privacy: the data is used only for abuse filtering and security, for a short time. You can object to this at any time.

Who has access?

Your data is seen by Monvero's advisors and legal advisor, each only to the extent their work requires. In addition, the following processors work for us, on our instructions:

Processor	What they do	Where
Rackforest Zrt. 1132 Budapest, Victor Hugo utca 11. 5. em. B05001	hosting the website, database and e-mail	Hungary
Google Ireland Limited Gordon House, Barrow Street, Dublin 4, Ireland	serving the fonts (Google Fonts): your browser sends its IP address to Google for this; no cookies are set	EU; Google's transfers rely on the EU–US Data Privacy Framework

We do not sell your data or pass it on for advertising. We share data with third parties (a bank, lawyer, notary, a property's seller or developer) only if you ask us to or if your engagement requires it, and we tell you beforehand. With authorities only where the law requires, on written request.

Matters and partners abroad

For Dubai and Costa del Sol matters we work with local partners (developers, agencies, lawyers). If a partner needs to know about you, we pass on only the data required, after agreeing it with you.

Spain is an EU member state; the same GDPR applies there.
The United Arab Emirates (Dubai) is outside the EU and has no adequacy decision from the European Commission. We transfer data there only at your request and only as far as your engagement requires (GDPR Art. 49(1)(b)). We tell you in advance and name the recipient.

Cookies and local storage

We use no statistics, marketing or advertising cookies. Your browser only keeps the setting you choose (light or dark view), and our staff area uses a login session cookie. The full list is on the Cookie settings page, where you can also clear it.

How we protect your data

The site and its forms run over an encrypted connection (HTTPS).
Enquiries are handled in a password-protected internal area that only our staff can access, each with their own account. Failed login attempts are limited.
The database and files are stored on the hosting provider's servers in Hungary, closed to the public.
If a personal data breach poses a risk to you, we report it to the authority within 72 hours and, where the risk is high, notify you too.

We do not use automated decision-making or profiling.

Your rights

AccessAsk what data we hold about you and request a copy (Art. 15).

RectificationAsk us to correct or complete inaccurate data (Art. 16).

ErasureAsk us to delete your data when it is no longer needed or you withdraw consent (Art. 17).

RestrictionAsk us only to store, not use, the data while a dispute is resolved (Art. 18).

PortabilityReceive the data you gave us in a machine-readable format (Art. 20).

ObjectionObject to processing based on legitimate interest (Art. 21).

WithdrawalWithdraw your consent at any time; this does not affect earlier lawful processing.

Send your request to info@monveroestates.com. We reply within one month at the latest; in justified cases this may be extended by two months, and we will tell you if so. Replies are free of charge. If we are unsure of your identity, we may ask for more information to confirm it.

Complaints and remedies

If you feel we have breached your rights, please write to us first so we can put it right. You can also complain to the supervisory authority:

Authority: Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: H-1055 Budapest, Falk Miksa utca 9–11.; postal: H-1363 Budapest, Pf. 9.
Contact: ugyfelszolgalat@naih.hu, +36 1 391 1400, naih.hu

You may also go to court; in Hungary you can bring the case before the regional court of your place of residence. If you live in another EU member state, you can also complain to the data protection authority there.

Other information

The site is not intended for people under 16. If we learn that someone under 16 has given us data without parental consent, we delete it.
If you give us someone else's details (for example your partner's), please share this notice with them first.
We update this notice when our processing or the law changes. The current version is always on this page, with the date above. Newsletter subscribers are also told about material changes by e-mail.

This is a translation; in case of any discrepancy the Hungarian version prevails.