Privacy Notice of RNTNG Kft.
Regarding the data processing related to the use of the RentManager service
RNTNG Korlátolt Felelősségű Társaság ("Data Controller")
Registered seat: 1114 Budapest, Kosztolányi Dezső tér 7., Hungary
E-mail: [email protected]
Under Article 37 of the General Data Protection Regulation (GDPR), the Data Controller is not required to appoint a data protection officer.
3.1. The purpose of this Privacy Notice is to set out the data protection and data processing principles applied by the Data Controller in connection with the RentManager service.
3.2. This Notice covers the principles governing the processing of personal data provided while using RentManager.
3.3. This Notice does not cover services and data processing operations connected to services operated by third parties outside RentManager, even if RentManager links to them. Such services are governed by the privacy notices of the third parties operating them, and the Data Controller assumes no responsibility for such data processing.
3.4. Terms not otherwise defined in this Notice have the meaning given to them in RentManager's General Terms and Conditions (GTC).
1. Registration, conclusion of the contract, provision of the Service, communication
Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
Scope of data processed:
Duration of processing: until the User's account is deleted (deletion becomes final once the applicable revocation period following the deletion request expires).
2. Complaint handling
Legal basis: Section 17/A (4)-(5) of Act CLV of 1997 on Consumer Protection.
Scope of data processed: the User's name, phone number, email address.
Duration of processing: five (5) years from the submission of the complaint. Under Section 17/A (7) of the Consumer Protection Act, the Data Controller must retain the minutes taken of the complaint and a copy of the reply for five years and present them to the supervisory authorities upon request.
3. Two-factor authentication (2FA)
Legal basis: the Data Controller's legitimate interest in the security of Users' accounts (GDPR Art. 6(1)(f)); for administrator accounts, performance of a contract (2FA is mandatory for this group of users).
Scope of data processed: the secret key used by the authenticator app (TOTP), or the one-time authentication code sent by email.
Duration of processing: until the User disables the feature, or until the account is deleted.
4. Protection against registration abuse
Legal basis: the Data Controller's legitimate interest in protecting the Service against automated abuse (GDPR Art. 6(1)(f)).
Scope of data processed: the IP address of the person registering, and other technical data generated by the Cloudflare Turnstile service to filter out bot activity.
Duration of processing: as set out in Cloudflare, Inc.'s privacy policy in effect from time to time.
5. Uploaded files and documents
Legal basis: performance of a contract (GDPR Art. 6(1)(b)).
Scope of data processed: the profile picture uploaded by the User, monthly statements generated by the system, other documents uploaded by Users, photos of meter readings, and files attached to messages.
Duration of processing: until the User's account ceases to exist. The Data Controller stores files exclusively on its own leased server and does not use a third-party cloud storage provider.
6. Connecting a Landlord's own invoicing account
Legal basis: performance of a contract (GDPR Art. 6(1)(b)) - based on the Landlord's own decision, applicable only to Landlord Users.
Scope of data processed: if the Landlord chooses to connect their Számlázz.hu or Billingo invoicing service to RentManager, the billing name, address, tax number, bank account number provided for this purpose, and the API key belonging to the Landlord's own account.
Duration of processing: until the Landlord discontinues the connection, or until the Landlord's account is deleted.
5.1. RentManager always uses functional cookies necessary for the operation of the Service, and uses statistical cookies only with the User's prior consent. The Data Controller does not use advertising cookies.
5.2. Functionally necessary cookies used without consent:
5.3. With the User's consent, the Data Controller uses Google Tag Manager (Google Ireland Limited) to place statistical cookies that collect anonymized statistical data about the use of the Service. Consent can be given or withdrawn at any time via the cookie notice bar or the "Cookie settings" link available in the interface. Without consent, or until consent is given, no such cookie is placed.
5.4. Certain user-interface preferences (e.g. light/dark appearance, sidebar state) are stored in the User's browser's local storage (localStorage) and are not transmitted to the Data Controller's server.
6.1. The Data Controller processes personal data in accordance with the principles of good faith, fairness and transparency, as well as applicable law and this Notice.
6.2. The Data Controller processes personal data solely for the purposes set out in this Notice or in applicable law. The scope of personal data processed is proportionate to the purpose of the processing.
6.3. The Data Controller does not verify the personal data provided. The User providing the data is solely responsible for its accuracy.
6.4. The Data Controller does not transfer the personal data it processes to any third party other than the data processors specified in this Notice, unless required to do so by law (in particular, an official or judicial request).
6.5. The Data Controller ensures the security of personal data and takes the technical and organizational measures necessary to ensure that the data processed is protected against accidental loss, unauthorized access, alteration or disclosure.
7.1. The Data Controller develops and operates RentManager entirely with its own team and does not use an external data processor for this activity.
7.2. The Data Controller uses the following data processors:
Wildbit Inc. (225 Chestnut Street, Philadelphia, PA, 19106, USA) - delivery of transactional emails (in particular registration confirmation, password reset, 2FA code, statement notifications).
Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA) - protection of the registration interface against abuse (bot traffic).
KBOSS.hu Kft. (2000 Szentendre, Táltos u. 22/b, Hungary) - if a Landlord connects the Számlázz.hu service to RentManager, processing of the Landlord's billing data. This processor's privacy notice is available at szamlazz.hu.
Billingo Technologies Zrt. - if a Landlord connects the Billingo service to RentManager, processing of the Landlord's billing data. This processor's privacy notice is available at billingo.hu.
7.3. Providers facilitating registration and login: Users may also log in to RentManager with their Google account or Apple ID. In this context, Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) and Apple Inc. (One Apple Park Way, Cupertino, CA 95014, USA) transfer the User's name and email address to the Data Controller, in accordance with their own privacy notices.
7.4. Users may also log in to RentManager with their Rentingo (rentingo.com) account. As both Rentingo and RentManager are operated by the Data Controller (RNTNG Kft.), this does not constitute a transfer of data to a third party - the Data Controller acts in the same capacity as controller for both services.
7.5. Data processors do not make independent decisions; they are only entitled to act under the contract concluded with the Data Controller and the instructions received.
8.1. The Data Controller is entitled and obliged to transfer to the competent authorities any personal data at its disposal and lawfully stored by it, where required to do so by law or by a final and binding official order. The Data Controller may not be held liable for such data transfers or the consequences arising from them.
8.2. With the User's express consent, the Data Controller is entitled to transfer the personal data specified in the consent, for the purpose and duration specified therein, to the third party specified therein.
9.1. The Data Controller reserves the right to amend this Notice at any time by its own unilateral decision, in accordance with the amendment rules set out in the GTC.
As a data subject, you have the following rights with respect to the processing of your personal data:
10.1. The personal data provided by the User can be viewed, and - with the exception of the password - modified, on RentManager's profile and settings interface. In addition, the User may contact the Data Controller at any time to exercise their rights, using the contact details given in Section I.
10.2. The Data Controller will respond to the User's request without undue delay, and in any event within one month.
10.3. You may exercise your right to lodge a complaint with the following supervisory authority:
National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)
Address: 1055 Budapest, Falk Miksa utca 9-11., Hungary
Postal address: 1363 Budapest, Pf. 9., Hungary
Website: www.naih.hu
E-mail: [email protected]
Phone: +36-1-391-1400
10.4. If your rights are violated, you may also bring proceedings against the Data Controller before a court. Such cases fall within the jurisdiction of the regional court (törvényszék). You may file your claim with the regional court competent for your place of residence or stay, at your choice.
In addition to the cookies strictly necessary for the service to function, with your consent we also use statistical cookies. Details: Privacy Policy