Revised: 14 October 2026 · Effective from: [EFFECTIVE_DATE]
This notice describes what personal data Miller Ingatlan processes on the milleringatlan.hu website and related services, for what purpose and on what legal basis, for how long, to whom it passes the data, and what rights you have. It is based on the EU General Data Protection Regulation (GDPR – (EU) 2016/679), Act CXII of 2011 on informational self-determination and freedom of information (Infotv.), Act C of 2003 on electronic communications (Eht.) and Act CVIII of 2001 on electronic commerce services. This information is not your consent: where consent is needed (analytics) we ask for it separately.
Controller: [TELJES_JOGI_NÉV]; registered office: [SZÉKHELY]; mailing address: [LEVELEZÉSI_CÍM]; registry and number: [NYILVÁNTARTÓ_SZERV], [NYILVÁNTARTÁSI_SZÁM]; tax number: [ADÓSZÁM]; e-mail: info@homio.hu; telephone: [TELEFONSZÁM]. The brand of the service is Miller Ingatlan.
We currently do not appoint a data protection officer; for privacy matters you can reach us at the contact details above. If circumstances (such as the scale of processing) require it, we will appoint one and publish the contact details here.
If you enquire about a listing or send a message or a viewing request, the advertiser also receives its content. Depending on its type (estate agency, agent or private individual) the advertiser may be an independent controller of the processing of your enquiry for its own purposes; the advertiser determines and is responsible for its own status, and Miller Ingatlan only passes the enquiry on.
The overview below shows, purpose by purpose, who is affected, what data we process and where it comes from, the legal basis, whether providing the data is required, the recipients, how long we keep the data and whether it is transferred to a third country. The details of retention are in the retention table below.
Some data does not come from you: advertisers may give data of third parties – such as owners, neighbours, agents – in listings (photos, texts, floor plans, contact details); an agency gives the data of agents acting in its name; a person reporting content provides information about the advertiser or content reported; and with Google sign-in Google passes on your name and e-mail address. If you believe your data appears in a listing without authority, tell us by reporting unlawful content or through our privacy contact.
We do not sell your personal data. Those who access data fall into three groups with different roles:
Acting as processors, on our instructions and as far as needed to provide the service: hosting and infrastructure providers (application and database hosting: [TÁRHELYSZOLGÁLTATÓ_NEVE_ÉS_CÍME]); Cloudflare, Inc. (R2 object storage: uploaded images, floor plans, videos); the e-mail delivery provider (forwarding system messages, notifications and enquiries); Geoapify GmbH (Germany; address autocomplete, geocoding, maps, nearby places: the address fragment or map query reaches them, not your IP address); Functional Software, Inc. (Sentry; error monitoring, with technical data in filtered form); Google (reCAPTCHA: according to Google’s published information, a processor for customer data from 2 April 2026).
Acting as independent controllers: advertisers (estate agencies, agents and – depending on type – private individuals), who handle your enquiry for their own transaction; Google Ireland Limited for Google sign-in in its own account processing.
Authorities and courts: where a legal obligation or an official request requires, to the extent the law provides.
Some of our providers (for example those established in the United States: Cloudflare, Sentry, Google) may also process data outside the European Economic Area. We carry out or use such a transfer only where one of the conditions in Chapter V of the GDPR is met. On request we tell you what solution applies at a given provider.
We keep your data only as long as needed for the purpose or as long as a legal obligation lasts. The table below ties retention to Miller Ingatlan’s actual systems and shows when the clock starts.
If you delete your account (or ask for it to be deleted), we delete the data belonging to it from the primary database at once when the deletion is carried out, and we also remove your profile photo and the images of your saved floor plans from storage. Deletion also ends the conversations connected to your account, so they disappear on the other party’s side too. An account cannot be deleted while listings (drafts included) belong to it: those must first be deleted or handed over. In exceptional cases deletion may be prevented by a statutory retention duty, or by narrowly scoped retention tied to a specific matter that is needed to assert or defend a legal claim; in that case we keep only the data needed for that and tell you.
Database backups are made and kept for up to 90 days, then destroyed automatically. So deleted data may still be in backups for that long, but we do not use them for anything; if we had to restore from a backup, we would carry out the deletions already made again. We cannot guarantee the deletion of independent copies held by third parties – for example messages already forwarded to advertisers, data handed to authorities, or public listing content already copied by search engines and other users – but on request we tell the recipients concerned where the law requires it. Uploaded images, floor plans and videos are also backed up in a separate bucket; a deleted file does not disappear from there at once (see the retention table).
We do not treat pseudonymised data (such as the random browser identifier in the consent record) as anonymous while the link between the identifier and the browser exists; we speak of anonymisation only where the possibility of re-identification has actually been excluded.
We apply appropriate technical and organisational measures to protect your data, including:
In case of a personal data breach that is likely to result in a risk to people’s rights and freedoms, we notify the supervisory authority without undue delay and, where feasible, no later than 72 hours after becoming aware of it (GDPR Art. 33); if the breach is likely to result in a high risk, we also notify the people affected without undue delay (GDPR Art. 34), subject to the exceptions in that article. The notification goes to the supervisory authority competent for the operator’s actual place of establishment; where it is established in Hungary, that is NAIH.
The personalised sections on the home page and in listings (such as “recently viewed”, recommendations, alerts) are based on your own earlier actions – views, favourites, saved searches. This may count as simple profiling, but we do not base decisions with legal effect, or that similarly significantly affect you, on it. We do not use recommendations for an advertising profile, and you may object to the handling of your viewing history.
Some protective measures work automatically: rate limiting, the reCAPTCHA check, the security scan of uploaded files and restriction of failed sign-ins may temporarily stop an action. If you think such a measure affected you wrongly, you can ask for human review at our contact details.
Our service is not for people under 16 and we do not knowingly collect personal data from them. The age for data processing and the capacity to contract are separate questions: the contractual conditions (for 14 to 18 year olds, with the legal representative’s consent) are in the Terms. If we learn that someone under 16 has given data without parental consent, we delete it without delay.
Under Articles 15–22 of the GDPR you have the following rights:
We answer your request without undue delay and at most within one month of receiving it; where needed, given the complexity and number of requests, this period may be extended by two further months, and we tell you of this and the reason within one month. Information and action are free of charge; for a manifestly unfounded or excessive request we may charge a reasonable fee or refuse to act. We may need additional information to confirm your identity.
If you feel your data is being processed in breach of the law, you can complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9–11; postal address: 1363 Budapest, Pf. 9; telephone: +36 1 391 1400; e-mail: ugyfelszolgalat@naih.hu (a procedure cannot be started by plain e-mail); electronic filing: naih.hu/online-ugyinditas or epapir.gov.hu; KR ID: 429616918 (checked on 14 October 2026; current details at naih.hu). You can also turn to the supervisory authority of the EU Member State where you live.
If your rights are violated you can also go to court (GDPR Art. 79, Infotv. section 22). At your choice the case can be brought before the regional court of your place of residence or stay. Contacting us first is not a condition of going to the authority or to court, but we are glad to settle the matter directly.
We update this notice when the law or the service changes. We tell you about material changes on the site and, where needed, by e-mail; the version in force is always on this page.
For privacy questions, or to exercise your data-subject rights, please reach us through the our contact page.
