Privacy Policy

Lotus Residence Hévíz Kft. (‘Data Controller’) hereby informs you about the processing of your data in connection with the registration for the purpose of a callback on this website. Please read the following information. The processing of personal data is primarily governed by the 2017/679/EU (GDPR or General Data Protection Regulation).

Data Controller:
Name: Lotus Residence Hévíz Kft.
Registered office: 8380 Hévíz, Kölcsey utca 6.
Tax number: 32767346-2-20
Company registration number: 20 09 079591
Company representative: János Gelencsér
Phone: +36 30 552 4258
Website: https://lotusresidenceheviz.hu/
E-mail: ertekesites@lotusresidenceheviz.hu

The data processed:
Your name, telephone number, or other contact details, the fact that you are interested in the property offered for sale by the Data Controller.

The purpose of data processing:
To call you back, to keep in touch with you in order to provide you with more information.

The legal basis for data processing:
Your consent [Article 6(1)(a) of GDPR].

The duration of data processing:
If a contract of sale is concluded between the parties, data processing will last until the conclusion of the contract, or, if no contract of sale is concluded or you withdraw your consent, data processing will last 8 working days from the last communication or receipt of the withdrawal.

Consequences of non-disclosure of data:
You cannot register for communication purposes.

Your rights:
You have the right to request information from the Data Controller about the processing of your personal data and to obtain a copy of it. You may also object to the processing of your personal data and request their rectification, or in certain cases, their erasure or transmission. Furthermore, you may at any time file a complaint if your personal data have been compromised. The Data Controller will take all reasonable steps to ensure that your request is handled appropriately.
Your rights are set out in detail in Articles 15-22 of the GDPR. If you have any questions, please contact one of our colleagues to help you find the right answers.

Detailed description of your above rights:

1. Your right of access:
You have the right to access (obtain a copy of) your personal data and to receive feedback from the Data Controller on whether your child’s personal data is being processed. If your personal data are being processed, you have the right to access your personal data and the following information listed below.
• the purposes of the processing;
• the types of personal data involved;
• the recipients or categories of recipients to whom or to which the personal data have been or will be disclosed, including, in particular, third-country (non-EU) recipients and international organisations;
• the planned duration of the storage of the personal data and, if this cannot be specified in advance, the method of calculating it;
• the right to rectification, erasure or restriction of data processing and the right to object;
• the right to file a complaint with a supervisory authority;
• information on the data sources; the fact of automated decision-making, including profiling, and the logic applied and clear information on the significance of such processing and its likely consequences for the data subject.

2. Right to rectification:
By law, any person may request the rectification of inaccurate personal data relating to them and the completion of incomplete data processed by the Data Controller.

3. Right to erasure:
If one of the following conditions applies, you have the right to have your personal data erased without undue delay:
• the personal data are no longer necessary for the purposes for which they were collected or processed in any other way;
• you withdraw your consent on which the processing is based and there is no other legal basis for the processing;
• you object to the processing and there are no overriding legitimate grounds for the processing;
• unlawful processing of personal data can be established;
• the personal data must be erased in order to comply with a legal obligation under Union or Member State law applicable to the Data Controller;
• the personal data have been collected in connection with the provision of information society services.
The erasure of data cannot be initiated if the processing is necessary for the following purposes:
• for the exercise of the right to freedom of expression and information;
• to comply with an obligation under Union or Member State that requires the Data Controller to process personal data, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;
• for research purposes in the field of public health, or for archiving, scientific and historical research purposes, or for statistical purposes in the public interest;
• or for the establishment, exercise or defence of legal claims.

4. Right to restriction of data processing:
At your request, processing may be restricted under the conditions set out in Article 18 of the GDPR:
• if you dispute the accuracy of the personal data, the restriction applies for the period of time necessary to allow the accuracy of the personal data to be verified;
• the processing is unlawful and the data subject opposes the erasure of the data and requests the restriction of their use instead;
• the Data Controller no longer needs the personal data for the purposes of processing, but the data subject requires them for the establishment, exercise or defence of legal claims; or;
• you objected to the processing; in which case, the restriction shall apply for a period of time until it is established whether the legitimate grounds of the Data Controller prevail over your legitimate grounds.
If data processing is restricted, personal data may be processed, with the exception of storage, only with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or of an important public interest of the European Union or of a Member State. The data subject shall be informed in advance of the lifting of the restriction on data processing.

5. Right to data portability:
You have the right to receive the personal data concerning you, provided by you to the Data Controller, in a structured, commonly used, machine-readable format and to transmit these data to another Data Controller. The Data Controller can fulfil such a request in MS Word or Excel format. The right to data portability is subject to the condition that the processing is automated and its legal basis is consent or a contract.

6. Right to object:
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data, including profiling, for these purposes, insofar as it is related to direct marketing. If you object to the processing of your personal data for direct marketing purposes, the data will not be processed for that purpose. You have the right to object if the data processing is based on the legitimate interests of the Data Controller, but in this case the discretion to comply with the request is subject to the priority of the rights of the parties in accordance with Article 21(1) of the GDPR.

7. Right of withdrawal:
You have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of data processing based on consent prior to its withdrawal.

Procedural rules:
The Data Controller will inform you of the action taken on your request without undue delay and in any event within one month of receipt of the request. If necessary, and taking into account the complexity of the request and the number of requests, this time limit may be extended by a further two months. The Data Controller shall inform you of the extension of the period, stating the reasons for the delay, within one month of receipt of the request.

If you submit the request online, the information will be provided the same way, unless you request otherwise.
If the Data Controller does not take action on your request, the Data Controller will inform you without delay, and at the latest within one month of receipt of the request, of the reasons for the failure to act and of your right to lodge a complaint with the supervisory authority and to seek judicial remedy.

The Data Controller shall inform each recipient to whom or to which the personal data have been disclosed of any rectification, erasure or restriction of processing that the Data Controller has carried out, unless this proves impossible or involves a disproportionate effort. Upon your request, the Data Controller will inform you of these recipients.

If you believe that your rights have been violated, you may file a complaint with the Data Controller. You also have the right to complain directly to the competent authority:
National Authority for Data Protection and Freedom of Information:
Postal address: 1363 Budapest, Pf.: 9.
Address: 1055 Budapest, Falk Miksa utca 9-11.
Phone: +36 (1) 391-1400
E-mail: ugyfelszolgalat@naih.hu
Website: https://www.naih.hu/

You also have the right to file a complaint with the competent court.