Privacy notice
What we do with your details
The data controller is a private individual in Hungary and the supervisory authority is the Hungarian NAIH. In the event of any difference between the two texts, the Hungarian version is the one that applies. It carries the same version number, 2026-08-30.3.
In short: we ask for your details so that we can organise the sale, and so that visitors can find your location. We do not sell them, we do not pass them on for marketing, and we do not keep them for longer than is necessary.
1. The data controller
Personal details appear blurred, and become readable with one click. This is so that robots cannot collect them automatically.
Email:
The controller organises the sale as a private individual, voluntarily and unpaid, with no economic or commercial interest. She is not a business and not an organisation, and carries out no business or commercial activity in connection with the sale. She processes your details solely in order to be able to organise the sale: the processing serves no business purpose, and commercial exploitation of the data does not arise at all.
2. What details we process
- name,
- email address and phone number,
- the address of the location: village, street, house number, and any note you added,
- the categories chosen and the payment methods accepted,
- any question or particular request you wrote,
- the fact of your consents, the time of them, and the version number of the text,
- technical data from the moment of submission: IP address and browser identifier, solely in order to filter out abuse and robots.
3. Why, and on what legal basis
- Organising the sale and keeping in touch with you. Legal basis: your consent, which you give by sending the registration. Without it we cannot add your location to the list.
- Showing the location on the public map and list. Legal basis: consent. Your name only appears if you ticked that separately. Without a name, the street and house number show, because without those a visitor cannot find their way there.
- Appearing in promotional material. Legal basis: separate, voluntary consent, which you can tick in the registration and withdraw at any time.
- A newsletter about future sales. Legal basis: separate, voluntary consent. You can register without it; in that case we will only contact you about this sale.
- Filtering out abuse and robots. Legal basis: the controller’s legitimate interest in the registration form not being floodable with false submissions.
4. How long we keep it
- The registration details: for 12 months from the day of the event, so that you do not have to enter everything again when the next sale is organised.
- The records evidencing consent: for 3 years after the consent is withdrawn.
- Where you consented to the newsletter, your email address: until you withdraw.
- Technical logs: for at most 90 days.
5. Who sees your details
The controller, and the few people who help her organise the sale. Beyond them, the service providers needed to run it, as processors:
- Vercel Inc. (United States): running the site.
- Neon Inc. (database, stored in a European region): storing the registrations.
- Resend Inc. (United States): sending the confirmation emails, in the Irish (EU) region.
- Forward Email LLC (United States): forwarding letters written to into the organiser’s mailbox. It does not store the letters, only forwards them.
- Google Ireland Ltd.: the organiser’s mailbox, where the letters arrive.
- Cloudflare, Inc. (United States): the robot check, where it is turned on.
In the case of providers operating in the United States, the transfer takes place on the basis of the standard contractual clauses adopted by the European Commission, or of the EU-US Data Privacy Framework. We do not pass your details to third parties for marketing, and we do not sell them.
6. What rights you have
- you can ask what data we hold about you,
- you can ask for inaccurate data to be corrected,
- you can ask for your data to be erased,
- you can ask for processing to be restricted,
- you can ask for your data in machine-readable form,
- you can withdraw any of your consents; withdrawal does not affect the lawfulness of processing before it.
For any of these, an email to is enough. We answer a request within one month at the latest. If you ask for erasure before the sale, your location comes off the map.
7. Automated decision-making
There is no automated decision-making and no profiling. The registrations are read by a person.
8. Complaints
If you feel your details are not being handled properly, write to us first. You may also complain to the Hungarian National Authority for Data Protection and Freedom of Information (naih.hu, ugyfelszolgalat@naih.hu), or go to court.
9. Cookies and visitor statistics
This site does not use cookies to count visitors, and stores nothing on your device. There is no marketing cookie, no advertising identifier, and we pass no data to any advertiser. That is also why there is no cookie banner: there is nothing for you to consent to.
We do look at how many people come here, though. On each page view we record which page was opened, where the visitor came from (the address of the referring page), how long the page was open, whether it was read on a phone or a computer, and from which country. If you click a link leading away from here, we record which one.
Our hosting provider also derives an approximate geographic location from your IP address, accurate to a few kilometres. We do not store this: we note one single thing from it, roughly how far you are from Solymár, as one of four bands (Solymár and around, Budapest and its commuter belt, elsewhere in Hungary, abroad). That is enough to see whether word is reaching the neighbours or travelling further, and we do not want to know any more than that.
We do not store your IP address. So that your second page view on the same day does not count as a new visitor, we derive an irreversible identifier from your IP address and your browser’s name, using a random number regenerated daily. We delete that random number after two days, and from then on the identifier cannot be linked to anything - neither to you nor to your visit the next day. The price of this is that somebody who looks in on two days is counted as two visitors. The number is less accurate that way; in exchange we do not have to store anything about you.
Legal basis: legitimate interest (GDPR Article 6(1)(f)), namely seeing whether word is reaching the people in the village it is meant for. Since the data is not capable of identifying you, and we place nothing on your device, we do not ask for consent for it. Retention: 12 months, after which it is deleted automatically.
The data stays in our own database (Neon, a Frankfurt server); it does not go to Google Analytics or any other external measurement system.
10. Google Maps
On the Map page, the map is provided by Google Ireland Limited. The map does not load by itself: until then a question stands in its place, and it only starts once you agree.
If you accept, Google places cookies in your browser and receives your IP address, your browser details, and which part of the map you are looking at. Google’s own privacy notice applies to that: policies.google.com/privacy.
Legal basis: your consent. Until you give it, Google receives nothing from us, because we never start its script. Your decision is stored in your own browser (not in a cookie), and you can withdraw it at any time below the map, after which Google no longer loads. Withdrawal does not affect the lawfulness of processing before it.
If you do not accept, you lose no information at all: the list of locations, the addresses, the categories and the directions links are all on the page without the map.
The „Directions” buttons load nothing: they are plain links, and they only take you to Google if you click them, exactly as any other link would.