DATA PROCESSING INFORMATION

Effective: From December 12, 2025 until revoked

The purpose of this Data Processing Notice is to inform you about https://k4lofts.hu (hereinafter: Website) (hereinafter: Data Subject) about the processing of personal data and the related rights and obligations. Data processing is carried out in accordance with Act CXII of 2011 (Info tv.) and Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

1. Data of the Controller

The data controller pursuant to this Policy (hereinafter: "Controller"), who is the owner of the real estate development and the collector of data, is:

  • Company name: Városmag KE4 Kft.

  • Registered Seat: 1053 Budapest, Kecskeméti utca 4.

  • Company registration number: 01-09-329064

  • Represented by: András Ifi, managing director

  • Email: ifiandras@gmail.com

  • Phone number: +36 30 664 6665

The Data Controller reserves the right to unilaterally amend this Notice. The Data Controller shall inform the Data Subjects of any amendments via the Website.

2. Purpose of data processing

The purpose of data processing is to enable visitors to the Website to request quotes for real estate development services and to contact the Data Controller.

The data will be used:

  • For contact and individual offers.

  • Sending newsletters and marketing materials (only with the express consent of the Data Subject).

  • Website traffic analysis and advertising conversion measurement to optimize services.

3. Scope of personal data processed

The scope of personal data collected through the Website (forms):

  • Full name

  • E-mail address

  • Phone number

Data collected during technical measurements (see points 6-7): IP address, browser data, cookie identifiers.

4. Legal Basis for Data Processing

Legal basis for processing:

  • Consent of the data subject (GDPR Article 6(1)(a)): given by accepting the request for quotation, contacting us, or accepting the cookie banner on our website.

  • Performance of a contract or steps prior to entering into a contract (GDPR Article 6(1)(b)) – in the case of a request for quotation.

  • Compliance with a legal obligation (GDPR Article 6(1)(c)) – e.g., for billing purposes.

5. Duration Data Processing

We store the data for 12 months from the date of the request for quotation or until the Data Subject withdraws their consent. In the case of data processing for marketing purposes, until unsubscribing.

6. Data processors and third parties (Technical partners)

We use the following third-party service providers (data processors) to operate the Website and perform measurements. The Data Controller declares that its partners comply with the provisions of the GDPR.

A. Website features:

  • Squarespace Ireland Ltd.: Website hosting (storage) and cookie consent management (built-in cookie banner).

  • Google Maps: Map display.

  • Kuula: 360-degree real estate tours.

  • Apartmentpicker: A self-developed apartment selection application embedded from GitHub.

B. Analytics and Advertising Measurement (Server-Side Tracking): We use Server-Side Tracking to measure website traffic and advertising data more accurately.

  • Stape Europe OÜ: (Headquarters: Estonia, Server location: EU/Germany). Technical service provider for server-side measurement (proxy server). Transfers data from the website to advertising partners via a secure channel.

  • Meta Platforms Ireland Ltd. (Facebook): Facebook Pixel and Facebook Conversions API (CAPI) services.

    • Purpose of data transfer: Measuring the effectiveness of advertisements, remarketing.

    • Processed data: IP address, browser data, and, in the case of a request for a quote, the user's encrypted (hashed - SHA256) email address and phone number (Advanced Matching).

  • Google Ireland Ltd.: Google Analytics 4 and Google Tag Manager services for statistical purposes.

7. Use of Cookies and Server-Side Measurement

The Website uses cookies to improve its functionality and user experience. Cookies are managed using Squarespace's built-in consent management tool.

Important: The Facebook Conversions API (server-side measurement) and marketing cookies are only used if you have given your express consent via the cookie banner when you arrive at the website (acceptance of marketing cookies). If you reject marketing cookies, the system will not transmit any data to Meta/Facebook from either your browser or the server.

8. Rights of data subjects

Data Subjects are entitled to request access to the personal data provided by them; request rectification or deletion of their data; object to data processing if it is unlawful or for marketing purposes; or withdraw their consent at any time. You may exercise your rights at the following e-mail address: info@k4lofts.hu

  • Request access to the personal data they have provided.

  • Request the correction or deletion of your data.

  • Object to data processing.

  • Withdraw their consent at any time (this does not affect the lawfulness of data processing prior to withdrawal).

You can exercise your rights at the following e-mail address: info@k4lofts.hu

9. Data security

The Data Controller shall do everything in its power to ensure the security of personal data. During server-side measurements, data is transmitted via an encrypted channel, and personal data (e.g., email) is transmitted to advertising systems in hashed form, ensuring its protection.

10. Contact person

The official representative and data protection contact person for the Controller is:

  • Name: András Ifi (Managing Director)

  • Email: ifiandras@gmail.com

11. Complaints and Legal Remedies

Data Subjects may address their complaints regarding data processing directly to the Controller:

  • Email: ifiandras@gmail.com

  • Phone number: +36 30 664 6665

If the Data Controller's response is unsatisfactory, data subjects may contact the National Authority for Data Protection and Freedom of Information (NAIH):

  • Address: 1055 Budapest, Falk Miksa u. 9-11.

  • Web: www.naih.hu

  • Phone: +36 1 391 1400

  • Email: ugyfelszolgalat@naih.hu

12. Access by the controller and processor

The Data Controller (Ifi András) and the developer and website operator have access to the data of the data subjects. Máté Urwho info@k4lofts.hu manages email accounts and technical settings (GTM, Stape). A data processing agreement is in place between the parties.

Dated: Budapest, December 5, 2025.

Modified on December 12, 2025.