LiNovae Korlátolt Felelősségű Társaság (hereinafter: Controller)
Registered seat: 1134 Budapest, Váci út 47/B Ü 1. ajtó
Company registration number: 01-09-448538 · Tax number: 32900301-1-41
Contact for data protection matters: info@linovae.hu.
The Controller is the organisation providing the common representation of the managed condominiums. As regards the condominium register data, processing is carried out in the name and interest of the condominium, within the framework of the common representative's tasks under the Hungarian Condominium Act (Act CXXXIII of 2003, hereinafter: Condominium Act).
This notice covers the personal data processed when using the web interface and the mobile apps (iOS, Android) of LiNo Home. Regulation (EU) 2016/679 (GDPR), the Hungarian Act CXII of 2011 on informational self-determination, the Condominium Act and Act C of 2000 on accounting are applicable.
| Data category | Purpose | Legal basis | Retention |
|---|---|---|---|
| User account: name, e-mail address, role, password (solely in encrypted, irreversible form), the time of accepting the invitation and this notice | Sign-in, permission management, contact; proof of the acceptances | Performance of a contract — Art. 6(1)(b) GDPR; for the acceptance record: accountability — Art. 5(2) | Until the account is deleted |
| Condominium register: units and ownership shares, name and contact of owners and tenants, common-cost prescriptions and payments, balances | Common representative tasks under the Condominium Act: keeping the register, settlement, payment requests | Legal obligation — Art. 6(1)(c) (Condominium Act); for accounting vouchers: Act C of 2000 | After the ownership relationship ends, for the period applicable to accounting vouchers (8 years) |
| Accounting and banking data: the condominium's bank transactions (partner name, account number, amount, remittance note), double-entry ledger items, cash vouchers | Accounting of the condominium, matching payments with prescriptions | For bank access: the account holder's PSD2 consent given at the bank — Art. 6(1)(a) (revocable at any time); for accounting: legal obligation — Art. 6(1)(c) | Accounting voucher: 8 years |
| Incoming invoices: the image and extracted data of invoices arriving in the condominium's invoice mailbox (issuer, number, amount, due date) | Recording and posting supplier invoices | Legal obligation — Art. 6(1)(c) | 8 years |
| Meeting data: attendance sheet, represented ownership share, votes cast, powers of attorney, minutes, resolutions; documents bearing an eIDAS e-signature | Conducting and evidentially documenting decision-making under the Condominium Act | Legal obligation — Art. 6(1)(c) (Condominium Act §§ 39–42) | Resolutions and minutes must be kept for the entire operating period of the condominium |
| Meter data: meter identifiers, readings, consumption, submitted values, images of photo readings | Consumption-based settlement, charge allocation | Performance of a contract / legal obligation — Art. 6(1)(b), (c) | For the period applicable to settlement vouchers (8 years) |
| Operational data: reports, comments, messages and replies, package receipt, equipment and room use, insurance claims, the related photos | The daily operation of the building, handling and documenting resident matters | Legitimate interest — Art. 6(1)(f) (interest in operating the condominium) | Up to 5 years after the case is closed (general limitation) |
| Signature images: the signature given on screen at package receipt and at equipment and room handover | Proof that the handover took place | Legitimate interest — Art. 6(1)(f) | Up to 5 years after the case is closed |
| E-mail delivery data: the marker placed in the system's official letters records the fact and time of opening | Proof that the official notice (e.g. meeting invitation, payment request) has arrived | Legitimate interest — Art. 6(1)(f) | For the same period as the related document |
| Push notification identifiers: the notification token of the mobile device | Delivering notifications to the app | Consent — Art. 6(1)(a) (with the notification permission given on the device; revocable at any time in the device settings) | Until the permission is revoked or the account is deleted |
| Event log: who performed which operation in the system and when | Traceability of operations, prevention of misuse, accountability | Legitimate interest — Art. 6(1)(f) | 5 years |
| Handover data: the receiving owner(s)' name, e-mail, phone number, ownership share and on-screen signature; the acceptance checklist, meter readings and on-site photos; the fact and time of accepting this privacy notice | Documenting the handover of the unit, producing and retaining the handover record | Performance of a contract — Art. 6(1)(b) GDPR; for the acceptance record: accountability — Art. 5(2) | Until the ownership relationship ends; for the record, the period applicable to accounting vouchers (8 years) |
The data primarily originate from the data subject (registration, submission, report). The owners' master data come from the condominium's statutory register, the bank transaction data — based on the account holder's consent — from the account-keeping bank, and the invoice data from the issuing service provider.
| Provider | Activity | Location |
|---|---|---|
| BlazeArts Kft. (Forpsi) | Server and hosting service, e-mail sending | EU |
| Enable Banking Oy | PSD2-authorised bank data access (read-only) | EU |
| Apple Inc. / Google LLC | Delivery of push notifications (APNs / FCM) | EU/USA |
| Anthropic PBC | Extracting data from incoming invoice images and posting suggestions for bank transactions | USA |
We disclose personal data to authorities and courts solely upon an official request based on law. Members of the condominium may access the data contained in the management's records within their right of inspection under the Condominium Act.
The transfer to Anthropic PBC (USA) is based on the EU–U.S. Data Privacy Framework or the standard contractual clauses (SCC) adopted by the European Commission. Anthropic does not use the content of the processed documents for model training. When delivering push notifications, Apple/Google act under their own protection frameworks; we design the text of notifications to contain as little personal data as possible.
The system does not make automated decisions regarding data subjects and does not carry out profiling. The posting and invoice-extraction results produced by artificial intelligence are in all cases proposals approved by a member of the management staff; payment balances and resolutions are determined solely by the recorded data and the votes.
The system does not use marketing or analytics cookies and contains no third-party tracking code. The browser's local storage (localStorage) contains only the technical data required for the session: the login token, the identifier of the selected building, and the mark of accepting the notice. These can be removed by signing out or clearing the browser data.
You may exercise the following rights at any time and without justification at info@linovae.hu. We respond to requests on the merits at the latest within one month (extendable by two months in justified cases, with prior information).
If you consider that the processing infringes the GDPR, you may lodge a complaint with the supervisory authority:
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
1055 Budapest, Falk Miksa utca 9–11. · Postal address: 1363 Budapest, Pf. 9.
Phone: +36 (1) 391-1400 · E-mail: ugyfelszolgalat@naih.hu · Web: naih.hu
In addition, you may turn to the court competent for your place of residence. As a person residing in another EU Member State, you may also contact the data protection authority of your place of residence.
The Controller may amend the notice if the legal environment or the service changes. The version in force at any time is available on this page; we inform users of substantial changes through the system.