Below, we inform you, as a visitor to our website and user of our services, about our company's data management and data protection rules.

1. What principles do we follow during our data processing?

• Our company adheres to the following principles during data processing:
• we process personal data lawfully, fairly, and transparently for you.
• we collect personal data only for specified, explicit, and legitimate purposes, and do not process them in a manner incompatible with those purposes.
• the personal data we collect and process are adequate, relevant, and limited to what is necessary for the purposes of data processing.
• Our company takes all reasonable measures to ensure that the data we process is accurate and, where necessary, kept up to date; inaccurate personal data will be promptly erased or rectified.
• we store personal data in a form that permits your identification only for as long as is necessary for the purposes for which the personal data are processed.
• we ensure appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.
• Our company processes your personal data
• based on your prior informed and voluntary consent, and only to the necessary extent and always for a specific purpose, meaning we collect, record, organize, store, and use it.
• in some cases, the processing of your data is based on legal requirements and is mandatory; in such cases, we will specifically draw your attention to this fact.
• or in certain cases, our Company or a third party has a legitimate interest in processing your personal data, for example, for the operation, development, and security of our website.

2. Who are we?

• Company Name: HUNAKAMO Kft.
• Registered Office: 2310 Szigetszentmiklós, Rezeda utca 12. b. ép.
• Website: goproperties.eu
• Postal Address: 2310 Szigetszentmiklós, Rezeda utca 12. b. ép.
• Email Address: [email protected]
• Tax Number: 23583324-2-13
• Company Registration Number: 13-09-151414

Our company is not obliged to appoint a data protection officer under Article 37 of the GDPR.

Our company's hosting provider:

• Hosting Provider Name: DigitalOcean, LLC
• Hosting Provider Registered Office: 105 Edgeview Drive, Suite 425, Broomfield, CO, 80021, United States of America
• Hosting Provider Website: www.cloudways.com
• Hosting Provider Email Address: [email protected]

To provide high-quality service to our clients, our company uses the following data processors during data management:

• Data Processor (1): VRX IT Services Kft.
• Address (1): 2051 Biatorbágy, Kőris utca 2. A. ép. 1. floor 1. door
• Responsibilities (1): All activities

Should we modify the scope of our data processors, we will update these changes in this privacy notice.

Data processed by us:

We only request personal data from our website visitors if they fill out one of the forms on our site.

Personal data provided in connection with the use of our marketing services cannot be linked, and identifying our visitors is not our primary goal.

For questions regarding data processing, you may request further information via email at [email protected] or by postal mail. We will send our response to the contact details you provided within 15 days (but no later than 1 month).

3. What are cookies and how do we manage them?

Cookies are small data files (hereinafter: cookies) that are placed on your computer via the website when you use it, and are downloaded and stored by your internet browser. Most commonly used internet browsers (Chrome, Firefox, etc.) accept and allow the download and use of cookies by default, but it is up to you whether you reject or disable them by modifying your browser settings, or you can delete cookies already stored on your computer. More detailed information on the use of cookies is provided in the "help" section of each browser.

There are cookies that do not require your prior consent. Our website provides brief information about these at the start of your first visit, such as authentication, multimedia player, load-balancing, user interface customization session cookies, and user-centric security cookies.

Regarding cookies requiring consent – if data processing begins upon visiting the site – our Company will inform you at the start of your first visit and request your consent.

Our company does not use or permit cookies that allow third parties to collect data without your consent.

Accepting cookies is not mandatory, however, our Company does not take responsibility if our website does not function as expected due to the absence of cookie enablement.

What cookies do we use?

Name: _ga

Provider: goproperties.eu

Purpose: Registers a unique ID that generates statistical data on how the visitor uses the website.

Expiry: 2 years

Type: HTTP

Name: _gat

Provider: goproperties.eu

Purpose: Stores the request rate according to the throttle used by Google Analytics.

Expiry: Session

Type: HTTP

Name: _gid

Provider: goproperties.eu

Purpose: Registers a unique ID that generates statistical data on how the visitor uses the website.

Expiry: Session

Type: HTTP

Name: _fbp

Provider: goproperties.eu

Purpose: Used by Facebook to provide advertising products to third parties (e.g., real-time ads).

Expiry: 3 months

Type: HTTP

Name: fr

Provider: facebook.com

Purpose: Facebook uses this cookie to offer a range of advertising products (e.g., real-time bidding from third-party advertisers).

Expiry: 3 months

Type: HTTP

You can read more about third-party cookies on this page.

4. What else should you know about our data processing related to our website?

You voluntarily provide personal data to us during registration or contact with our Company. Therefore, we kindly ask you to pay close attention to the authenticity, correctness, and accuracy of your data when providing it, as you are responsible for these. Incorrect, inaccurate, or incomplete data may hinder your ability to use our services.

If you provide personal data of another person rather than your own, we assume that you have the necessary authorization to do so.

You may withdraw your consent to data processing at any time free of charge

• by withdrawing consent to data processing, or
• by withdrawing consent to the processing or use of any data that must be filled in during contact, or by requesting its blocking.

We undertake to register the withdrawal of consent within a 30-day period due to technical reasons, but we draw your attention to the fact that we may process certain data even after the withdrawal of consent for the purpose of fulfilling our legal obligations or asserting our legitimate interests.

In the event of misleading personal data being used, or if one of our visitors commits a crime or attacks our Company's system, their data will be immediately deleted upon termination of their registration, or – if necessary – retained for the duration required to establish civil liability or conduct criminal proceedings.

5. What should you know about our data processing for direct marketing and newsletter purposes?

By making a statement during contact or by later modifying your personal data stored on the newsletter and/or direct marketing registration interface (i.e., by clearly expressing your intention to consent), you can give your consent for us to use your personal data for marketing purposes. In this case – until consent is withdrawn – your data will also be processed for direct marketing and/or newsletter sending purposes, and we will send you advertisements and other mailings, as well as information and offers, and/or newsletters (Grtv. Section 6).

You may give your consent for direct marketing and newsletters jointly or separately, and may withdraw it/them free of charge at any time.

We undertake to register the withdrawal or cancellation of individual consents within a 15-day period due to technical reasons.

6. What should you know about prize games?

Our company may organize prize games on a campaign basis, the specific terms and conditions of which are contained in a separate regulation. The current promotion's rules can always be found on our website's homepage, via a centrally located link.

7. Other Data Processing Issues

We may only transfer your data within the limits defined by law, and in the case of our data processors, we ensure through contractual terms that they do not use your personal data for purposes contrary to your consent. Further information can be found in point 2.

Our company does not transfer data abroad.

Courts, prosecutors, and other authorities (e.g., police, tax authority, National Authority for Data Protection and Freedom of Information) may contact our Company for information, data disclosure, or document provision. In these cases, we must fulfill our data provision obligation, but only to the extent strictly necessary to achieve the purpose of the request.

Our Company's collaborators and employees involved in data processing and/or data management are entitled to access your personal data to a predetermined extent – under the obligation of confidentiality.

We protect your personal data with appropriate technical and other measures, ensuring data security and availability, and safeguarding it against unauthorized access, alteration, damage, disclosure, and any other unauthorized use.

As part of organizational measures, we control physical access to our buildings, continuously train our employees, and keep paper-based documents securely stored with appropriate protection. As part of technical measures, we use encryption, password protection, and antivirus software. However, we draw your attention to the fact that data transfer over the internet cannot be considered entirely secure. Our Company does everything possible to make the processes as secure as possible, but we cannot take full responsibility for data transfers via our website. Nevertheless, we adhere to strict regulations regarding data received by our Company to ensure the security of your data and prevent unlawful access.

Regarding security matters, we ask for your help in carefully safeguarding your existing access password for our website and not sharing this password with anyone.

8. What are your rights and remedies?

You may request information about data processing,

• request information,
• request the rectification, modification, or completion of your personal data processed by us,
• object to data processing and request the erasure or blocking of your data (with the exception of mandatory data processing),
• seek judicial remedy,
• lodge a complaint with the supervisory authority or initiate proceedings (https://naih.hu/panaszuegyintezes-rendje.html).

Supervisory Authority: National Authority for Data Protection and Freedom of Information

• Registered Office: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
• Mailing Address: 1530 Budapest, P.O. Box: 5.
• Phone: +36 (1) 391-1400
• Fax: +36 (1) 391-1410
• Email: [email protected]
• Website: https://naih.hu/

Upon your request, we will provide information about your data processed by us, or by our appointed data processor,

• about your data,
• its source,
• the purpose and legal basis of the data processing,
• its duration, or if this is not possible, the criteria for determining this duration,
• the name, address, and data processing activities of our data processors,
• the circumstances and effects of data protection incidents and the measures we have taken to remedy and prevent them, and furthermore,
• the legal basis and recipient of data transfers, if your personal data has been transferred.

We will provide our information within 15 days (but no later than 1 month) from the submission of the request. The information is free of charge, except if you have already submitted an information request concerning the same data category in the current year. Any fee you have already paid will be reimbursed if the data was processed unlawfully or if the request for information led to rectification. We may refuse to provide information only in cases stipulated by law, with reference to the legal provision, and by informing you of the possibility of judicial remedy or recourse to the Authority.

Our company will notify you, as well as all those to whom the data was previously transferred for data processing purposes, about the rectification, blocking, marking, and erasure of personal data, unless the absence of notification does not prejudice your legitimate interests.

If we do not fulfill your request for rectification, blocking, or erasure, we will communicate the reasons for our refusal in writing or – with your consent – electronically within 15 days (but no later than 1 month) of receiving the request, and inform you of the possibility of judicial remedy and recourse to the Authority.

If you object to the processing of your personal data, we will examine the objection within 15 days (but no later than 1 month) from the submission of the request and inform you of our decision in writing. If we decide that your objection is well-founded, we will cease data processing – including further data collection and transfer – and block the data. We will also notify all those to whom the personal data affected by the objection was previously transferred, and who are obliged to take measures to enforce the right to object, about the objection and the actions taken based on it.

We will refuse to fulfill the request if we demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. If you do not agree with our decision, or if we miss the deadline, you may appeal to a court within 30 days from the communication of the decision or the last day of the deadline.

Data protection lawsuits fall within the jurisdiction of the regional court; the lawsuit may be initiated – at the choice of the data subject – before the regional court of the data subject's place of residence or domicile. A foreign national may also lodge a complaint with the supervisory authority competent for their place of residence.

We kindly ask you to contact our Company before lodging a complaint with the supervisory authority or a court – for consultation and the quickest possible resolution of the issue.

9. What are the main governing legal regulations for our activities?

• Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR)
• Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information (Info Act)
• Act V of 2013 on the Civil Code (Civil Code)
• Act CVIII of 2001 on certain issues of electronic commerce services and information society services (E-commerce Act)
• Act C of 2003 on Electronic Communications (Electronic Communications Act)
• Act CLV of 1997 on Consumer Protection (Consumer Protection Act)
• Act CLXV of 2013 on Complaints and Public Interest Disclosures (Complaints Act)
• Act XLVIII of 2008 on the Basic Conditions and Certain Limitations of Economic Advertising Activities (Advertising Act)

10. Amendment of the Data Processing Notice

Our company reserves the right to amend this Data Processing Notice, about which it will inform the data subjects in an appropriate manner. Information related to data processing will be published on the goproperties.eu website.

Date: Budapest, December 10, 2025.