Prepared for the visitors of the following domain operated by Gallai Lilla (sole proprietor): https://therealassist.eu/
This Privacy Policy applies to all subdomains operating under the above domain.

As a data controller, the sole proprietor / Data Controller considers the protection and security of the data of natural persons associated with it, as well as the respect and enforcement of their rights related to their data, extremely important. In light of this, and for the purpose of complying with current Hungarian and European legal provisions, the following brief information is provided to all data subjects who wish to contact the Data Controller based on the information found under the above domain name or use any service under the above domain name.

Who is the Data Controller?

The Data Controller in relation to this notice is Gallai Lilla (sole proprietor), registered under number 60181752 in the Register of Sole Proprietors. The Data Controller's:

Tax number: 90837803-1-33

Phone number: +36 70 316 1701

Email address: therealassist1@gmail.com

Registered office: 2200 Monor, Ady Endre Street 69.

Who is responsible for data protection?

The person responsible for data protection is the same as the sole proprietor / Data Controller: Gallai Lilla, whose contact details are provided in the previous section.

Who are the data subjects?

A data subject is any natural person identified or identifiable based on any specific personal data processed by the Data Controller.

You may be a data subject if you visit any website operating under the above domain, or use any service provided there.

Why, on what legal basis, and for how long do I process your data?

The answer to this question depends on how you came into contact with me. The following data processing activities arise in relation to the above domain at my business:

I. One-time Information Request via Form or Email

Legal basis for data processing: Data processing during an information request is based on voluntary consent. You can withdraw your consent at any time, but if the question has not been answered yet, it will not be answered after the withdrawal.

Source of data: You provide the data when you contact me either through the contact form on the above domain or via email. During the fulfillment of your request, I may only ask for additional data compared to the data you initially provided if more precise identification is necessary to provide the requested information.

Scope of data subjects: You become a data subject when you request information by providing your personal data.

Scope of processed data:

The name you provide, which is processed to identify you in order to provide the appropriate information and maintain contact with you.
The email address you provide, which is processed to maintain contact with you during the provision of information.
The content of the question you ask, which is processed for the purpose of providing an answer.
The time you send your question, which is processed to determine the deadline for providing an answer.
If your question involves a business secret, I need to examine whether you are entitled to access the requested information. If this entitlement is not clearly evident from the data under points 1-3, I may request the following additional data to establish your entitlement to an answer: birth name, place of birth, date of birth, mother's name. Providing these additional data is also based on your voluntary consent, but if not provided, I will issue a statement indicating that the data provision cannot be fulfilled, and I will specify the legal grounds for the refusal.

Duration of data processing: I process these data only until the purpose is achieved, i.e., I delete them once your question has been satisfactorily and fully answered, or if not, when I issue a statement properly substantiated with legal references, indicating the refusal of data provision.

If your question is not a one-time information request but already implies the possibility of entering into a contract for a service (such as virtual assistant services or web design services), I will retain the above data until the contract is concluded, but no longer than 30 (thirty) days.

Location of data processing: Data processing takes place on the web interface of my email address therealassist1mail.com. Additionally, the following data from inquiries sent through the website are stored in the website's internal database under the domain name from which the inquiry was sent: the message text, the sender's email address, and the time of sending.

Data processors: The email address and website hosting provider is Sybell Informatika Korlátolt Felelősségű Társaság (Company Registration Number: 01-09-293034, Tax Number: 25859502-2-42), a limited liability company based at 1158 Budapest, Késmárk u. 7/B 2nd floor, 206, which qualifies as a data processor, considering that both the emails sent to or by me and the inquiries sent by you through the web interface are accessible on its hosting.

Persons authorized to access the data: Only the Data Controller. If there is a problem with the hosting, the hosting provider may access the data to resolve the issue.

II. Contract Conclusion

After you order the service(s), a contract is concluded between us according to the General Terms and Conditions, which constitutes a separate data processing.

Legal basis for data processing:

If you are the contracting party, the legal basis for data processing is defined in Article 6(1)(b) of the GDPR, which states that data processing is necessary for the performance of a contract to which you are a party.
IIf you are a natural person acting on behalf of our contracting customer, you act as a legal representative in accordance with Section 3:21 of the Civil Code, fulfilling a legal obligation, based on which the legal basis for data processing is defined in Article 6(1)(b) of the GDPR, which states that data processing is necessary for the performance of a contract in which you legally represent the party.
If you are a natural person designated for contact by our contracting supplier, the legal basis for data processing is the performance of a mandate contract as defined in Section 6:272 of the Civil Code, or your obligations arising from your employment contract or other civil law contract with our customer.

Source of data: You provide the data during the preparation of the contract by filling in the appropriate fields on the form.

Scope of data subjects: You become a data subject during the conclusion of the contract if you are:

a natural person ordering my service as a private individual or sole proprietor,
the executive officer of my legal entity customer, or
the contact person designated by my legal entity customer.

Scope of processed data:

Name, which is processed to identify you as a contracting partner.
1. Email address and phone number, which are processed to maintain contact for the performance of the contract.
1. Billing data: billing name, address, which are processed for future invoice issuance.
1. Specification of the ordered service: the data are processed for the performance of the contract.

Additionally, if the service you ordered is so unique that the subject of the service also identifies you, the specification of the service is also treated as personal data, processed for the purpose of defining the terms of the contract.

Duration of data processing: I process the data recorded in the contract concluded with you for 5 years following the performance of the contract. In the case of an indefinite-term contract, I retain your data for 5 years following the termination of the contract. After the 5-year period, I delete your electronically recorded data from the system. I do not process contracts on paper.

Location of data processing: Data processing is exclusively electronic. The contract is concluded electronically by filling in and submitting the form. The form data are stored on the hosting provided by Sybell Informatika Kft.

Data processors: Your data are stored on the hosting provided by Sybell Informatika Korlátolt Felelősségű Társaság (Company Registration Number: 01-09-293034, Tax Number: 25859502-2-42), a limited liability company based at 1158 Budapest, Késmárk u. 7/B 2nd floor, 206.

Persons authorized to access the data: Only the Data Controller during the contract conclusion. If there is a problem with the hosting, the data processor Sybell Informatika Kft. is authorized to access the data to the extent necessary to resolve the issue. If an official procedure arises in connection with the contract, the data of the concluded contract may be accessed by the authority conducting the official inspection and its representative.

Contracts are concluded on the https://www.eszerzodes.hu/ website, with electronic signatures. The website operator is:

Service provider name: Wiredsign Zrt.

Service provider contact, regularly used electronic mail address for communication with users: info@eszerzodes.hu

Phone number: +36 20 886 13 09 / +36 20 770 55 98

Tax number: 29277261-2-12 Community tax number: HU29277261

Company registration number: 1210001683

Registered office: 2643 Diósjenő, Dózsa György út 28./b

Mailing address: 2600 Vác, Deákvári fasor 35. Fsz4.

III. Contact

Contact is necessary for the performance of the contract.

Legal basis for data processing:

If you are the contracting party, the legal basis for data processing is defined in Article 6(1)(b) of the GDPR, which states that data processing is necessary for the performance of a contract to which you are a party.
IIf you are a natural person acting on behalf of our contracting customer, you act as a legal representative in accordance with Section 3:21 of the Civil Code, fulfilling a legal obligation, based on which the legal basis for data processing is defined in Article 6(1)(b) of the GDPR, which states that data processing is necessary for the performance of a contract in which you legally represent the party.
If you are a natural person designated for contact by our contracting supplier, the legal basis for data processing is the performance of a mandate contract as defined in Section 6:272 of the Civil Code, or your obligations arising from your employment contract or other civil law contract with our customer.

Source of data:

Scope of data subjects: You become a data subject in case of contact if you are designated as a contact person in connection with the contract, or you are the contracting party, and no separate contact person is designated.

Scope of processed data:

Name, which is processed to identify you.
Phone number, email address, which are processed to ensure your availability during the term of the contract.

Duration of data processing: The day following the performance of the contract by both parties.

Persons authorized to access the data: Only the Data Controller during the contract conclusion. If there is a problem with the hosting, the data processor Sybell Informatika Kft. is authorized to access the data to the extent necessary to resolve the issue. If an official procedure arises in connection with the contract, the data of the concluded contract – including the contact details provided – may be accessed by the authority conducting the official inspection and its representative.

Contracts are concluded on the https://www.eszerzodes.hu/ website, with electronic signatures. The website operator is:

Service provider name: Wiredsign Zrt.

Service provider contact, regularly used electronic mail address for communication with users: info@eszerzodes.hu

Phone number: +36 20 886 13 09 / +36 20 770 55 98

Adószám: 29277261-2-12Közösségi adószám: HU29277261

Company registration number: 1210001683

Registered office: 2643 Diósjenő, Dózsa György út 28./b

Mailing address: 2600 Vác, Deákvári fasor 35. Fsz4.

IV. Billing

I conduct my activities within the framework of current Hungarian and European Union laws, and in light of this, I issue invoices for service sales. No invoicing occurs if you have registered for a free consultation.

Legal basis for data processing: Section 159 of Act CXXVII of 2007 on Value Added Tax.

Source of data: You provide the data by filling out the service order form.

Scope of data subjects: You become a data subject during billing if the invoice is issued in your name or in the name of a company that contains your name.

Scope of processed data:

Billing name,
Billing address,
Name of the ordered service,
Price of the ordered service,

which are processed uniformly for the purpose of issuing the invoice.

Duration of data processing: I store the data for the retention period specified in Section 12 of the Act on Small Business Tax, i.e., for 5 years from the due date of the invoice.

Data processors: After submitting the form, your data are stored on the hosting provided by Sybell Informatika Korlátolt Felelősségű Társaság (Company Registration Number: 01-09-293034, Tax Number: 25859502-2-42), a limited liability company based at 1158 Budapest, Késmárk u. 7/B 2nd floor, 206. Invoicing is done using the számlázz.hu system of KBOSS.hu Kft. (Company Registration Number: 01 09 303201, Tax Number: 13421739-2-41), a limited liability company based at 1031 Budapest, Záhony Street 7/D.

Persons authorized to access the data: Only the Data Controller. If there is a problem with the billing systems, the data processors Sybell Informatika Kft. and Billingo Technologies Zrt. are authorized to access the data to the extent necessary to resolve the issue. If an official procedure arises in connection with the contract, the data of the issued invoices may be accessed by the authority conducting the official inspection and its representative.

Invoices are forwarded to Újraszámol-OM Bt. Accounting Office. (Company Registration Number: 13 06 074666, Tax Number: 21120323-1-13) The address of the Accounting Office is 2200 Monor, Ady Endre Street 47.

V. Complaint Handling

Legal basis for data processing: Fulfillment of my obligation under Section 6:138 of the Civil Code, which stipulates that in case of breach of contract, the aggrieved party is entitled to demand the performance of the service.

Source of data: During complaint handling, you provide the data when you submit a complaint against my activities or any part thereof.

Scope of data subjects: You become a data subject during complaint handling if you submit the complaint. You provide the data during the complaint handling.

Scope of processed data:

The Data Controller processes the following data during complaint handling:

Name of Data	Purpose of Data Processing
Name	Identification of you
Content of Complaint	Resolution of the complained activity in a manner satisfactory to both parties
Time of Complaint Submission	Registration of the complaint
Time of Complaint Resolution	Closure of the complaint in the complaint register
Related Contract	Identification of the complained case

During complaint handling, it is possible that I may process additional data beyond the above, depending on the content of the complaint. For example, if your complaint is submitted due to payment deficiencies, I may use your previously known bank account number during the performance of the contract to investigate the reasons for the default.

Duration of data processing: 5 years following the resolution of the complaint (the general limitation period defined by the Civil Code).

Data processors: The email address receiving complaints and the websites containing the contact form are hosted by Sybell Informatika Korlátolt Felelősségű Társaság (Company Registration Number: 01-09-293034, Tax Number: 25859502-2-42), a limited liability company based at 1158 Budapest, Késmárk u. 7/B 2nd floor, 206, which qualifies as a data processor, considering that both the emails sent to or by me and the inquiries sent by you through the web interface are accessible on its hosting.

Persons authorized to access the data: Only the Data Controller. If there is a problem with the hosting, the hosting provider Sybell Informatika Kft. is authorized to access the data to the extent necessary to resolve the issue.

During complaint handling, in addition to the above, my legal representative and the authority acting in the event of an official procedure – if the complaint is not resolved to your satisfaction – may also access the data processed by me based on your inquiry.

VI. Visiting Websites

Legal basis for data processing: Voluntary consent, which you exercise by opening my website in your browser.

Source of data: You provide the data during the visit to the website.

Scope of data subjects: You become a data subject if you appear as a visitor on my website.

Implementation of data processing: Data processing is carried out through cookies. The site only contains WordPress cookies necessary for operation, which ensure your access to the WordPress website. I do not use marketing cookies.

What is a cookie?

A cookie is a small piece of code that the browser places on the computer during visits to certain websites. These may contain data necessary for identification, data related to interests, but they are always stored on your computer. You can delete these cookies from the browser under the Settings menu.

My websites only contain data necessary for operation, and their lifespan mostly lasts until the browser is closed. The only exception is the cookie recording your acceptance of the cookie information, which has a lifespan of 1 year. Of course, you can delete this cookie from your computer before the 1-year period using the above method.

Do I process your data differently?

I only process your data for the purposes defined above, and I do not transfer them to third parties unless specifically indicated in this notice.

An exception to this is if an investigative authority, court, prosecutor, administrative authority, or other authority contacts me based on legal authorization. In this case, I only transfer your data within the scope and extent specified by the authority's request, which is necessary for the authority to perform its tasks.

If a legal dispute arises between me and you, or between our partner represented by you, or between our partner designating you, the contract will be handed over to the court or mediator authorized to resolve the dispute. This serves my legitimate interest.

What rights do you have?

You have the right to be informed about the processing of your data, which is provided within the framework of this document.

4.1. Right of access

You can request access to your personal data. In this context, you can ask for information about what data I process, on what legal basis, for what purpose, for how long, how I obtained these data, to whom, when, for what purpose, and on what legal basis I transferred these data, and to whom, when, and on what legal basis I provided access.

4.2. Right to rectification

You can request the rectification or clarification of the above data if you notice any discrepancies. I am obliged to rectify the above data within 3 working days according to your request.

For example: If your notification address, phone number, or email address has changed, you can request that the Data Controller update the new data in the records.

You can also supplement your data if you notice any deficiencies. However, no additional data beyond the above are needed for the individual data processing activities, so the Data Controller would process them without a specific purpose. If you wish to provide a new phone number or email address and do not want the old one to be deleted, please indicate which of the two contact details (the old and the new) you consider primary!

4.3. Right to erasure (right to be forgotten)

You can request the deletion of all your data processed by the Data Controller based on your consent, provided that no legal regulation prescribes an obligation to retain them for a specified period.

You can also request that if the data have been transferred to a third party by the Data Controller and this transfer was not for the fulfillment of a legal obligation, the Data Controller initiates the deletion of your data at the recipient.

For example, you can request the deletion of your email address or phone number from our records, but this will result in the inability to fulfill the contract due to the lack of contact, and the contract between us will terminate for reasons attributable to you.

4.4. Right to restriction of processing (right to block)

If you dispute the accuracy of the personal data, you can restrict the processing for the period during which the Data Controller verifies the accuracy of the data and rectifies it if necessary.

You can also request the restriction of the processing of your data for specific purposes if the processing is unlawful, but you do not request their deletion. In this case, your data cannot be used for the purposes you specify until you make a contrary statement.

For example, if you provided your data for the purpose of concluding a contract, but the contract was not concluded, the purpose of the data processing was not realized, and the processing may become unlawful after the planned date of signing the contract. However, if you state that you do not request the deletion of your data, they will remain in the Data Controller's records, so if you contact me again with the intention of concluding a contract, you will not need to provide your data again, only update them if necessary.

You can also request the restriction of the processing of your data if the Data Controller no longer needs the personal data for processing purposes, but you request their further processing for the presentation, enforcement, or defense of legal claims. In this case, in addition to making a restrictive statement, please also make a statement recording your consent to the further processing of the data!

If you feel that your legitimate interests are being violated by the processing of your data, you can restrict the processing by objecting until it is determined whether the purpose of processing your data or the legitimate reasons for processing your data take precedence over your legitimate interests.

During the restriction period, the Data Controller may only store the blocked personal data and process them with your consent, or for the presentation, enforcement, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for important public interest reasons.

For example: if the Data Controller has a direct claim against you, they can use your data to enforce it through administrative or judicial means.

4.5. Right to object

You have the right to object to the processing of your personal data at any time for reasons related to your particular situation, unless a legal regulation prescribes an obligation to retain and process the data previously provided based on your consent.

The Data Controller uses personal data for direct marketing purposes only to the extent that new service information appears in newsletters. The Data Controller does not perform profiling. The Data Controller does not process data for scientific or historical research purposes or for statistical purposes.

4.6. Right to lodge a complaint with a supervisory authority If

If you object to the data processing by the Data Controller, you have the right to lodge a complaint with the National Authority for Data Protection and Freedom of Information. The Authority's contact details are:

Postal address: 1530 Budapest, Pf.: 5.

Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/C.

Phone: +36 1 3911400

Email: ugyfelszolgalat@naih.hu

Web: http://naih.hu

4.7. Right to judicial remedy

If you feel that your rights have been violated by the processing of your data and you wish to enforce your grievance through judicial means, you have the right to turn to the court. Additionally, you can seek legal remedy against the decision of the data protection authority according to the general rules of administrative procedure by filing a lawsuit before the competent administrative and labor court.

Declaration on Compliance with Data Processing Principles

As I consider the security of your data extremely important both as an entrepreneur and as a private individual, I inform you that:

I process your data lawfully and fairly, and in a transparent manner for you.
I collect your data only for specified, explicit, and legitimate purposes, and I do not process them in a manner incompatible with these purposes.
Your data are adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed.
Your data are accurate and up-to-date based on the information you provide, and I take all reasonable measures to ensure that personal data that are inaccurate are erased or rectified without delay.
I store your data in a form that permits identification of you only for as long as necessary for the purposes for which the personal data are processed, and I protect them with appropriate technical and organizational measures.
I process your data in a manner that ensures appropriate security of the personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Monor, February 20, 2025

Lilla Gallai e.v.
Data Controller