Privacy notice · F49 Community Office, Budaörs
What happens to your data?
This notice explains what personal data we process when you book at f49.hu, write or call us, or simply browse the site: what we use it for, how long we keep it, who can access it, and what rights you have.
Effective: 5 October 2026Controller: Párkányi Tamás e.v.info@f49.hu
1 · CONTROLLER
Who is responsible for your data?
ControllerTamás Párkányi, sole proprietor (Párkányi Tamás e.v.), operator of F49 Community Office
Registered addressFarkasréti út 49, 2040 Budaörs, Hungary
Tax number84304235-1-08
Emailinfo@f49.hu
Phone+36 20 419 5919
Data protection officerGiven the nature of our business, we are not required to appoint one. For any data protection question, write to info@f49.hu.
2 · BOOKING
When you book
The same data reaches us if you book by email or phone instead of the booking calendar.
DataName, email address, phone number; for company bookings, the company name and tax number; the booking details (space, date and time, number of people, price, status) and any note you add. For online bookings we also record the IP address used to submit the booking.
PurposeReceiving, approving, confirming, changing and cancelling your booking, arranging access to the building, and contacting you about the booking.
Legal basisPerformance of a contract and steps taken before entering into a contract (Article 6(1)(b) GDPR). Recording the IP address helps us filter out abuse (such as mass fake bookings); its legal basis is our legitimate interest (Article 6(1)(f) GDPR).
RetentionWe keep the data of completed bookings for 5 years from the date of the booking, the general limitation period for civil-law claims (Section 6:22 of the Hungarian Civil Code). Data of rejected, cancelled or unapproved bookings is deleted after 1 year. Deletion is automatic: personal data (name, contact details, company details, note, IP address) is removed from the booking, while non-personal data (date, space, price) may be kept for statistics.
If you do not provide itWithout a name, email address and phone number we cannot accept the booking. The note is optional.
EmailsWe send system emails about your booking (received, confirmed, rejected, cancelled). These are part of the service. We do not send newsletters or marketing emails.
3 · MY BOOKINGS
Viewing and cancelling your booking
How it worksUsing the personal link in your confirmation email, or a link you request on the My bookings page (in Hungarian) by entering your email address, you can view and cancel your bookings.
DataYour booking details and your email address. We do not ask for anything new.
Legal basisPerformance of a contract (Article 6(1)(b) GDPR).
ImportantThe link contains a unique code that lets anyone open your booking, so please do not share it.
4 · CONTACT
When you write or call us
DataName, email address, phone number (optional on the form), the topic and content of your message. For phone calls, your phone number and what you tell us.
PurposeAnswering your question and, if requested, making an offer.
Legal basisOn the contact form, your consent (Article 6(1)(a) GDPR), which you can withdraw at any time. If your enquiry concerns a booking or an offer: steps taken before entering into a contract (Article 6(1)(b) GDPR).
RetentionFor up to 1 year after our last exchange, or until you withdraw your consent. If your enquiry turns into a booking, the booking rules apply from then on.
Where it goesThe contact form is delivered by email to info@f49.hu; the website database does not store it.
5 · INVOICING AND PAYMENT
Invoices and payment
DataName or company name, billing address, tax number for companies, and the name, date and price of the service. For bank transfers, the details on the bank statement (name, account number, payment reference).
PurposeIssuing the invoice, recording payment and bookkeeping.
Legal basisCompliance with a legal obligation (Article 6(1)(c) GDPR) under the invoicing rules of the Hungarian VAT Act and the Hungarian Accounting Act.
RetentionWe keep invoices and related accounting documents for 8 years (Section 169(2) of Act C of 2000 on Accounting).
HowInvoices are issued with the Billingo online invoicing service. By law, invoice data is also reported to the Online Invoice system of the Hungarian Tax Authority (NAV Online Számla).
6 · CALENDAR AND SYSTEM EMAILS
What happens behind the scenes
CalendarFor confirmed bookings, a calendar invitation is sent to the Google accounts (Gmail, Google Calendar) of the operator and his colleague, so we know who is arriving when. The invitation contains the booking reference, the date, the name of the person booking and, for company bookings, the company name and tax number.
Legal basisPerformance of a contract (Article 6(1)(b) GDPR): it is needed to run the booking.
RetentionCalendar entries are kept for as long as the booking data.
System emailsThe website sends emails through our own mail server. To check delivery, a technical log is kept (recipient, subject, time, content of the email) for no more than 30 days.
7 · SECURITY
Keeping the site secure
DataTechnical data of requests reaching the website: IP address, time, the page requested and browser type. Suspicious or malicious requests and failed login attempts are recorded by the Wordfence security plugin.
PurposeProtecting the website and the data you provide, filtering out attacks, troubleshooting.
Legal basisLegitimate interest (Article 6(1)(f) GDPR): operating the site securely, which also protects your data.
RetentionLogs are deleted automatically: the security plugin keeps a size-limited log and continuously overwrites the oldest entries; server logs are kept briefly by the hosting provider according to its own settings.
8 · CAMERA AND DOOR ACCESS
Camera and door access
There is no camera inside the office. A security camera operates outside the building.
CameraIt covers the building entrance and the outdoor area belonging to the house. It does not cover public areas.
DataThe image and movement of people within the camera view, and the time of recording.
PurposeProtecting the building and the property inside it; preventing and providing evidence of offences (such as burglary or vandalism).
Legal basisLegitimate interest (Article 6(1)(f) GDPR): protection of the property and assets.
RetentionRecordings are kept for no more than 3 days and are then overwritten automatically. If a recording is needed in official or court proceedings, we keep it until the proceedings end.
AccessOnly the operator has access to the recordings. They are only reviewed if an incident occurs, and recordings are only handed over to authorities as required by law.
Your rightsIf you appear in a recording, within the 3-day retention period you can ask to view the footage of you, or ask us not to delete it to protect your rights or legitimate interests.
Door accessYou open the door with a code. The access system only records when a code was entered; it stores no name or other data that could identify a person.
9 · STATISTICS AND COOKIES
Visitor statistics and cookies
A cookie is a small data file stored in your browser. We only use Google Analytics cookies if you consent in the cookie banner; without consent, analytics is not even loaded.
Cookie bannerWhen you first open the site, we ask whether you consent to Google Analytics. The Accept and Essential only buttons are equally available, and you can change your choice at any time with the Cookie settings link at the bottom of the page.
Own statisticsWith the WP Statistics plugin we count visits on our own server. It anonymises IP addresses and stores them only in irreversible (hashed) form, does not store browser data and uses no cookies, so no one can be identified from it.
Google AnalyticsGoogle Analytics 4 uses cookies to measure how the site is used (pages viewed, device type, approximate location, where visitors came from). Google Analytics 4 does not store IP addresses. We use the data in aggregate, for statistics.
Legal basisFor Google Analytics, your consent (Article 6(1)(a) GDPR and Section 155(4) of Act C of 2003 on Electronic Communications), which you can withdraw at any time.
Cookies_ga and _ga_LTKQ8HBL8K: Google Analytics cookies that distinguish visitors; set only with your consent; they expire after 2 years. f49_consent: stores your cookie choice so we do not ask every time; it expires after 6 months. It is necessary for the site to work, so it does not require consent.
RetentionGoogle Analytics data is kept for no more than 14 months.
WithdrawalYou can withdraw your consent at any time with the Cookie settings link at the bottom of the page; we then also delete the Google Analytics cookies from your browser. You can also delete or block cookies in your browser settings, and turn off Google Analytics measurement with the Google opt-out add-on.
10 · THIRD-PARTY CONTENT
Google Maps and fonts
Google MapsAn embedded Google Map on our Contact page shows where we are. When the map loads, your browser connects directly to Google servers, so Google receives your IP address and may use cookies.
Google FontsSome fonts are loaded from Google Fonts; when this happens, your browser IP address is sent to Google.
Legal basisLegitimate interest (Article 6(1)(f) GDPR): a consistent appearance and showing how to find us.
More informationAbout Google data processing: policies.google.com/privacy
11 · RECIPIENTS
Who can access your data?
We do not sell your data and do not pass it on to anyone for marketing. The following may access data only as far as needed to provide the service.
UsThe operator of F49 and his colleague, solely for the purposes above.
Hosting and emailThe hosting provider running the website, the database and the mail server (processor).
InvoicingBillingo Technologies Zrt. (Árbóc utca 6, 1133 Budapest, Hungary), online invoicing service (processor).
GoogleGoogle Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and its affiliate Google LLC (USA): Google Analytics, Gmail and Google Calendar, Google Maps, Google Fonts.
SecurityDefiant Inc. (USA), developer of the Wordfence security plugin: may receive the IP address of malicious requests.
AuthoritiesWhere required by law, on request (for example the tax authority, courts or the police).
12 · TRANSFERS OUTSIDE THE EU
Transfers outside the European Union
Google LLCBased on the adequacy decision of the European Commission of 10 July 2023 (EU–US Data Privacy Framework); Google LLC is a certified participant.
OtherAny other transfer to the USA may take place on the basis of safeguards under Chapter V GDPR (an adequacy decision or the standard contractual clauses adopted by the European Commission).
13 · DATA SECURITY
How we protect your data
EncryptionEvery page of the site is served over an encrypted (HTTPS) connection, including the data you enter when booking.
AccessBooking data can only be accessed through personal, password-protected administrator accounts.
ProtectionA security plugin, regular updates and backups protect the site.
IncidentsShould a personal data breach occur, we will report it to the authority as required by law and, if it poses a high risk, we will also notify you.
14 · YOUR RIGHTS
What are your rights?
AccessYou can ask what data we hold about you and request a copy (Article 15 GDPR).
RectificationYou can ask us to correct inaccurate data or complete incomplete data (Article 16).
ErasureYou can ask us to delete your data, unless the law requires us to keep it, for example invoice data (Article 17).
RestrictionIn certain cases you can ask us to store your data but not otherwise use it (Article 18).
PortabilityYou can request the data you gave us on the basis of consent or a contract in a machine-readable format (Article 20).
ObjectionYou can object to processing based on legitimate interest (Article 21).
WithdrawalYou can withdraw your consent at any time; this does not affect the lawfulness of processing before the withdrawal (Article 7(3)).
HowWrite to info@f49.hu or by post to our registered address. We reply free of charge within one month at the latest; in justified cases this may be extended by two further months, and we will let you know. We may verify your identity.
Automated decisionsWe do not use automated decision-making or profiling.
15 · COMPLAINTS
If you have a complaint
Please contact us first: we can resolve most issues quickly.
Supervisory authorityHungarian National Authority for Data Protection and Freedom of Information (NAIH), Falk Miksa utca 9–11, 1055 Budapest; postal address: 1363 Budapest, Pf. 9.; phone: +36 1 391 1400; email: ugyfelszolgalat@naih.hu; www.naih.hu. You may also lodge a complaint with the data protection authority of the EU country where you live or work.
CourtYou can also take legal action if your rights are infringed. You may bring proceedings before the courts of the EU country where you live; in Hungary, before the regional court (törvényszék) of your place of residence or stay.
QUESTIONS?
A question about your data?
Write to info@f49.hu or call us on weekdays between 8:00 and 17:00. We reply within one month at the latest, but usually within a few days.
We update this notice whenever the law or our data processing changes; the current version is always available on this page. Applicable law: Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Hungarian Act CXII of 2011 on Informational Self-Determination and Freedom of Information, the Hungarian Civil Code (Act V of 2013), Act C of 2000 on Accounting and Act C of 2003 on Electronic Communications. This is a translation; in case of any discrepancy, the Hungarian version prevails. Effective: 5 October 2026.
Community office, meeting room and training space in the leafy part of Budaörs, just outside Budapest.
Contact
Farkasréti út 49, 2040 Budaörs, Hungary
+36 20 419 5919
info@f49.hu
Weekdays 8:00–17:00
Outside those hours by arrangement
Privacy notice
Cookie settings