Privacy Policy

Last updated: 2026-08-23

Bonaregio is operated by Attila Rózsavölgyi as a private individual (not a registered company), reachable at hello@bonaregio.eu. This page explains what personal data we collect, why, and what rights you have over it under the GDPR.

1. What we collect

Account data

Your email address, an optional display name, your hashed password (we never store or see your actual password), your preferred language, your marketing-email preference, and a record of when you accepted these terms.

Listing data

If you post a listing: the property details you enter, its approximate location (city/region — never the exact street address), and any photos you upload.

Inquiry data

If you contact a seller through the site: your message, an optional phone number, and which listing and account it's linked to. Your name and email address, which are already part of your account, are shared together with this so the seller knows who's asking and can reply to you directly — see "Who we share it with" below.

Anonymous usage data

We run a first-party, cookie-free analytics system that records page views and an anonymous, one-way-hashed visitor identifier that changes daily — no cookie, and no raw IP address is ever stored. See our Cookie Policy for the full detail.

Listing reports

If you report a listing, we record your account, the reason you selected, and any details you add, so we can review it. If we contact the lister about a report, that message and the fact that it was sent are also kept as a record.

2. Why we process it

Account and listing data is processed to provide the service you asked for (performance of a contract with you) — creating your account, publishing your listings, and delivering inquiries to sellers. Marketing emails are only sent with your separate consent, which you can withdraw at any time. Aggregated, anonymous usage data is processed under our legitimate interest in understanding and improving the site. Listing reports are processed under our legitimate interest — and legal obligation, under the EU Digital Services Act — in reviewing and acting on reports of illegal or rule-breaking content.

3. Who we share it with

We don't sell your personal data, and we don't share it with advertisers.

The listing's owner, when you send an inquiry: Your name, email address, message, and any phone number you provide are sent directly to the owner of that listing, so they can identify who's asking and reply to you. This is the only case where your personal data is shared with another Bonaregio user rather than a service provider we use to run the site.

Beyond that, we use a small number of service providers strictly to run Bonaregio:

• Hosting & database: Render, which stores our database in the EU (Frankfurt, Germany). All account, listing, and inquiry data lives there.
• Transactional email: Brevo, used only to send you and sellers service emails (such as notifying a seller about a new inquiry) — not for marketing unless you've opted in.
• Location lookup: OpenStreetMap's Nominatim service, used to place a listing's city on the map. Only the city and country you enter are sent — never your account details.

4. Admin access

As Bonaregio's sole operator, Attila Rózsavölgyi has administrator access to run and moderate the platform. This includes aggregated, anonymous usage statistics, and the contents of listing reports — the reporter's account, the reason given, and any details — together with any messages sent to a lister through the report tool. Admin access is used only to operate and moderate the site, never for marketing or resale.

5. How long we keep it

We keep your account and listing data for as long as your account is active. If you ask us to delete your account, we delete or anonymize your personal data, except where we're required to keep something for a legitimate reason (such as fraud prevention). Records related to listing reports and the moderation actions we took (such as a message sent to a lister about a report) are kept as an accountability record even after the accounts involved are deleted, since they document that we reviewed and acted on a report.

6. Your rights

Under the GDPR, you can ask to access, correct, delete, or export your personal data, and you can object to or ask us to restrict certain processing. To exercise any of these, contact us at hello@bonaregio.eu. If you're not satisfied with our response, you can lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu) or your own country's data protection authority.

7. Age

Bonaregio is not intended for anyone under 18, and we don't knowingly collect data from minors.

8. Security

Passwords are stored as salted hashes, never in plain text, and access to the database is restricted. No online service can be guaranteed perfectly secure, but we take reasonable technical measures to protect your data.

9. Data breach notification

If a data breach occurs that's likely to pose a risk to your rights and freedoms, we'll notify the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) within 72 hours of becoming aware of it, as required by GDPR Articles 33-34. If the breach is likely to result in a high risk to you, we'll also notify you directly, by email, about what happened and what we're doing about it.

10. Changes to this policy

If we make a material change to how we handle your data, we'll update this page and, where required, notify you directly.

11. Contact

Questions about this policy or your data? Reach us at hello@bonaregio.eu.