RealSyncer / Legal information

Privacy policy

An overview of the data handled when you visit our website, apply for beta access and use RealSyncer.

Document version:

Operator and contact details

Legal name
Lánczi-Mikolics Anikó e.v. - Web Born Media
Registered office / postal address
8043 Iszkaszentgyörgy, Petőfi Sándor u. 53
Company / registration number
60299062
Registering authority
Nemzeti Adó- és Vámhivatal (NAV)
Tax number
90943276-1-27
Contact and privacy requests
info@realsyncer.hu

01Scope and data protection roles

RealSyncer is a CRM for real estate agents and agencies. The operator identified above is the controller for the website, beta applications, user accounts and operational correspondence.

Each agency determines why client, property and deal data is uploaded to its workspace. For that data, the agency is the controller and the service provider acts as a processor on its instructions. The agency’s own privacy notice also applies and is not replaced by this document. Processing must be governed by a separate agreement under Article 28 GDPR.

02Beta applications and email updates

The application form stores your email address, the application source and consent timestamp. Invitation records may include sending, expiry and acceptance timestamps and a hashed invitation token. The operator receives an email notification of your application.

The purpose is to send the beta access, launch and onboarding communications described on the form. The legal basis is your voluntary consent (Article 6(1)(a) GDPR). An email address and consent are required to submit an application; you can browse the website without applying.

You can withdraw consent at any time by emailing the contact address above. Withdrawal does not affect the lawfulness of earlier processing. Proposed retention lasts until withdrawal or the notification purpose ends; the final notice must specify an outer retention limit and how evidence of consent is retained.

03User accounts and support

Accounts contain a name, email address, hashed password, email verification details, workspace memberships, roles and creation/update timestamps. Workspaces also contain plan and trial details. A name, email address and password are necessary for an account to operate.

Account administration provides access and performs the contract (Article 6(1)(b) GDPR). For agency staff, the proposed basis for contact and access data is the legitimate interest in secure organisational operations (Article 6(1)(f)); the balancing assessment must be documented before finalisation.

Support requests include your contact details, message and information necessary to resolve the issue. Please send only relevant data. Retention periods for accounts and correspondence, deletion procedures and any applicable legal obligations remain to be finalised.

04CRM data managed by agencies

Workspaces may hold company and contact details, property information, buyer requirements, mandates, deals, viewings, tasks, notes, uploaded documents and activity records. This information is generally supplied by agency users.

The agency is responsible for its legal basis, privacy information, data minimisation and retention periods. Workspace membership and user permissions determine access. For requests about your agency records, you can first contact the agency to which you provided your information.

An agency can publish a property listing through a public link. Published listing information can be accessed without signing in by anyone with that link. The agency controls publication and withdrawal.

Deleting a user account does not itself delete all client data or documents in the workspace. Their treatment depends on the agency’s instructions and the processing agreement.

05Cookies, technical information and external fonts

The web application uses a session cookie and an XSRF-TOKEN security cookie to maintain sessions and protect forms. Language and currency preferences are stored in the session. The configured session inactivity lifetime is 120 minutes; expiry on browser close depends on the environment settings.

Selecting “Remember me” during login may create a persistent login cookie. The standalone launch page may also retain your language choice in browser local storage until you clear it. You can remove or block cookies in your browser, which may prevent login and form submission.

Sessions and operational logs may contain IP addresses, browser identifiers, timestamps and technical events. The purpose is operation, troubleshooting and abuse prevention; the proposed legal basis is the legitimate interest in those activities. Actual log contents and retention periods must be confirmed against the hosting setup.

The current application has no built-in analytics or advertising tracking code. Some pages load fonts from fonts.bunny.net, connecting your browser directly to that external service, which may receive technical request data such as your IP address. Provider details, processing conditions and any international transfers must be specified in the final notice.

06Recipients, processors and security

Access is limited to authorised users and operators performing their tasks. Hosting, database, backup and email providers may process data to deliver their services. Information may be supplied to authorities where legally required.

To be finalised: the legal names, addresses and roles of hosting and email providers, storage locations, additional processors and any transfers outside the EEA with their safeguards. Missing provider details do not mean there are no international transfers.

The application uses hashed passwords, workspace access checks and permission controls. Uploaded document downloads require authentication and authorisation. Backup, recovery and incident procedures must be documented with the operating arrangements.

07Your rights and remedies

Subject to the applicable legal conditions, you can request access, rectification, erasure, restriction and portability, or object to processing based on legitimate interests. You may withdraw consent at any time. Send requests to the contact address above; proportionate identity verification may be necessary.

Requests normally require a response within one month. Where justified, this may be extended by two further months with notice during the first month. You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or another competent supervisory authority, and seek a judicial remedy. The NAIH link below provides current contact and submission details.

Property matching and task suggestions assist agency staff. In the current service they do not make decisions about you based solely on automated processing that produce legal effects.

08Changes to this notice

The final notice will be available here with its own version and effective date. Information must be updated to reflect new processing purposes or providers before the relevant changes take effect.

Related legislation and information

GDPR — EUR-Lex NAIH — Operator and contact details