Privacy notice
Effective: 28 August 2026 · Version 1.0
The short version. Főtér produces a market-watch report. In order to send it to you in the morning, we store three things: your email address, your search profile and the reports we have generated. We do not sell personal data, we do not pass it on to third parties for marketing purposes, and we do not store advertisers’ contact details in the first place. You can request erasure at any time.
1. The controller
Name of the service: Főtér
Operator: [company or sole trader name — to be completed before launch]
Registered seat: [registered seat — to be completed before launch]
Registration / tax number: [number — to be completed before launch]
Email: [contact email — to be completed before launch]
Processing is carried out in accordance with Regulation (EU) 2016/679 (GDPR) and the Hungarian Information Act (Infotv., Act CXII of 2011 on the right to informational self-determination and freedom of information).
2. What data we process, why, and for how long
| Data | Purpose | Legal basis | Retention period |
|---|---|---|---|
| Email address | Sending the daily or weekly report | Performance of a contract (GDPR Article 6(1)(b)); for free subscriptions, consent (Article 6(1)(a)) | Until you unsubscribe, and for no more than 30 days thereafter |
| Search profile (district, rooms, budget, criteria) and the sentence you typed in | The report is generated on this basis | Performance of a contract | Until the watch is deleted |
| Generated reports | So that you can also see retrospectively what changed, without having to regenerate it | Performance of a contract | 12 months |
| Visitor identifier (a random identifier stored in your browser) | So that you can see your own watches without registering | Legitimate interest (Article 6(1)(f)) — operation of the service | Until you clear your browser storage |
| Data from partner API-key requests (company, email, system, comment) | Establishing the data connection | Legitimate interest / steps prior to entering into a contract | 24 months, or until we erase it on request |
3. What we deliberately do NOT store
- Advertiser and agent contact details. The endpoint that receives the partner feed discards
the
contact_name,contact_phone,contact_email,agentandownerfields before they are ever stored. This is the principle of data minimisation (GDPR Article 5(1)(c)). The buyer makes contact on the partner’s own site. - Payment card data. In the case of a payment this is processed by the payment service provider; it never reaches us.
- Profiling for marketing purposes. We use the search profile solely to produce the report.
4. Processors
We use the following service providers to operate the service. We have a processor agreement in place with each of them, and each stores data within the EU or subject to appropriate safeguards:
- Hosting and runtime — serving the website and the API: [Netlify, Render — to be completed before launch]
- Email delivery — sending out the daily report: [email delivery provider — to be completed before launch]
- Language model — interpreting the sentence you typed in and writing the text of the report: [model provider — to be completed before launch]. Only the search sentence and the data of the matching items are sent there, without email address or name.
- Telegram — only if you specifically choose this channel.
5. What the report contains
The property data in the report comes from public official notices (judicial enforcement property auctions, municipal property tenders), from public-sector data, from licensed or partner data sources, and — if you asked for that — from your own saved searches. Főtér is not a listing platform: we do not republish partner listings, we link each item back to the source’s own page.
The report is not an official valuation and is not investment advice. Auctions and tenders are subject to deadlines and carry legal risk — we recommend involving an expert and a lawyer before you buy.
6. Cookies and measurement
We use two cookies, both needed for the service to work. Neither is an advertising cookie, and neither tracks your browsing on other sites.
| Cookie | Purpose | Lifetime |
|---|---|---|
foter-latogato |
A random identifier so we can reload your own saved searches without an account. It contains no name, address or other detail about you. | 1 year |
foter_mm |
Your signed-in state. Created only if you sign in. Code running in the browser cannot read it, and it travels over an encrypted connection. | 90 days, or until you sign out |
We use no analytics or advertising cookies. [If we introduce analytics later, this section will be amended and we will ask for cookie consent — to be completed before launch.]
7. Your rights as a data subject
- Information and access: what we store about you.
- Rectification: if the data is inaccurate.
- Erasure: deletion of the watch and of your email address — you can request it inside the service or by email.
- Restriction of processing, and objection to processing based on legitimate interest.
- Data portability: we will also provide your search profiles and reports in machine-readable form.
- Withdrawal of consent: you can unsubscribe with one click at the bottom of every email.
We respond to requests within 30 days. You may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, 1055 Budapest, Falk Miksa utca 9-11., Hungary) — the competent supervisory authority — or bring an action before a court.
8. Data security
The connection is encrypted via HTTPS. We store the data on a server with restricted access, and the keys in environment variables, outside version control. In the event of a personal data breach we will inform you within the statutory deadline and, where required, notify NAIH.
9. Amendments
We will notify you of any amendment to this notice in the next report, and the amended version will appear here with a new date.
Developer note. The passages highlighted in yellow must be completed before launch: the operator’s details, the specific provider names and the contact email. Until these are filled in, the service must not go live.