Privacy notice
How we handle personal data on problem.hu — under the GDPR and Hungarian law.
Last updated: 20 October 2026.
1. The controller
The controller is Jevgenyij Dutov, a private individual operating the website problem.hu.
problem.hu is a free advertising and brokerage portal: customers can post problems and service providers can bid on them. All services of the portal are free of charge, and the operator is not a legal person.
Privacy requests (access, rectification, erasure etc.): mail@dutov.eu. Please indicate which account (username, e-mail address or phone number) your request relates to.
2. Legal background
This notice is based on Regulation (EU) 2016/679 (GDPR), Act CXII of 2011 (Infotv.) and Act CVIII of 2001 on electronic commerce (Eker tv.).
In short: personal data is any information that identifies you (e.g. name, e-mail, phone number, photo); processing is any operation on such data; data subject is the person the data relates to (you); a processor handles data technically on our behalf (e.g. the hosting or SMS provider).
3. What data we process, why, and for how long
We only ask for and keep data that is strictly necessary for each function.
| Data set | Data processed | Purpose and legal basis | Retention |
|---|---|---|---|
| Customer account | Name, username, e-mail, phone, password (irreversible hash only), role | Account creation and login — performance of a contract (Art. 6(1)(b) GDPR) | For the life of the account; deleted without delay on request. |
| Problem posting | Name, e-mail, phone, city, district/address, category, description, uploaded photo, map coordinates | Publishing and brokering the request to providers — Art. 6(1)(b) | Until the problem is deleted; at most 12 months after closure. |
| Provider profile | Business name, tax number, contact name, e-mail, phone, city, service districts, introduction, website address (optional), reference photos | Provider presence and bidding — Art. 6(1)(b) | For the life of the profile; rejected applications kept for 6 months. |
| Bids, messages | Bid amount, message text | Contact between customer and provider — Art. 6(1)(b) | Same retention as the related problem. |
| Phone verification | Phone number, SMS verification code, number of attempts | Verifying account authenticity, preventing abuse — Art. 6(1)(b) and legitimate interests (Art. 6(1)(f)) | Codes valid for 10 minutes; delivery logs kept for 12 months. |
| Stay signed in | Session ID; remember-me token — only if you tick the box | Convenience feature — consent (Art. 6(1)(a)) | Session: until the browser is closed; token: 30 days, deleted immediately on logout. |
| Visit statistics | IP address, time, country, OS, language, visited page | Operation and aggregate statistics — legitimate interests (Art. 6(1)(f)) | 12 months; internal network addresses are not recorded. |
| Internal change log | Scope of changed data, ID of the staff member, time | Accountability — legitimate interests (Art. 6(1)(f)) | 24 months. |
Persons under 16 may only provide personal data under parental supervision.
4. Photos and data visibility
- Problem photos and descriptions are visible to signed-in providers and moderators — that is the essence of the brokerage.
- Provider profile data (business name, introduction, reference photos, districts) is visible to signed-in customers as needed for bidding.
- Contact details (e-mail, phone) are only visible to the parties in direct contact: the provider whose problem received a bid, and the customer who received the bid.
- Please do not upload photos or descriptions identifying another person without their consent. Such content is removed during moderation.
5. Automated moderation (AI)
Posted descriptions, introductions and bid messages may be checked by an automated moderation system (filtering profanity, spam and unlawful content). This check runs on a local AI server operated by the operator: the examined text is sent over an encrypted channel to this server, which uses it solely to perform the moderation — never for model training, and it does not retain the text beyond the time necessary for moderation. The text being moderated is not transferred to any external AI provider.
Should the operator in the future carry out AI moderation partly or wholly via an external AI provider, this notice will be updated in advance, naming the provider, the categories of data transferred, and the safeguards for the transfer.
Legal basis: the legitimate interest of the operator in filtering unlawful and unsolicited content (Art. 6(1)(f) GDPR). A human moderator always decides the fate of the content; no solely automated decision-making takes place. You may request human review of a moderation decision at mail@dutov.eu.
6. Who do we share data with?
- SMS provider: phone number and message text for delivering verification codes and notifications.
- Hosting provider: storage of the database and uploaded files, including the operation of the local AI server.
- Technical loads: the site loads external libraries (Tailwind, Font Awesome, Leaflet maps) and OpenStreetMap map tiles — these providers technically see your IP address when loading.
- Address search (Nominatim): the typed address fragment and the selected city are sent to Nominatim to run the search; apart from this and the technically necessary IP address, it receives no other personal data (no name, e-mail or phone number).
- Country lookup (ip-api.com): our server sends your IP address to ip-api.com, which returns only the country name for statistical purposes.
- Authorities, courts: on a request based on law, to the mandatory extent.
No personal data is transferred to an external AI provider for AI moderation; moderation takes place on the local AI server described in point 5. We do not sell personal data and do not share it with third parties for marketing. Some technical providers may use servers outside the EEA; in that case only strictly necessary data (e.g. the IP address) is transferred.
7. Cookies
| Cookie | Purpose | Lifetime |
|---|---|---|
| Session cookie (PHPSESSID) | Login and remembering the chosen language | Until the browser is closed |
| remember_me | Remember-me feature — only created if you tick the box at login | 30 days; deleted on logout |
The site sets no advertising or tracking cookies. The external loads mentioned in point 6 (CDN, maps) act under their own policies; you can restrict them in your browser privacy settings.
8. Your rights
- Access: you may request information about what data of yours we process.
- Rectification: you may request correction of inaccurate data; you can also edit your account data yourself when signed in.
- Erasure: you may request erasure of your data; you can also delete your problems and account yourself when signed in.
- Restriction: you may request restriction of processing (e.g. for the duration of a dispute).
- Portability: you may request the data you provided in a structured, machine-readable format.
- Objection: you may object to processing based on legitimate interests (e.g. statistics, moderation).
- Withdrawal of consent: for tick-box features — processing done before withdrawal remains lawful.
Send your request to mail@dutov.eu; we reply within one month at the latest. We may ask for proof of identity so that we do not disclose data to unauthorised persons.
9. Data security
- Passwords are never stored in readable form, only as irreversible hashes.
- Phone numbers are verified with a code sent by SMS.
- Everyone only has access to their own data and to what their task requires: the customer to their own problems, the provider to the advertised jobs, the moderator to the review interface.
- The site is available over an encrypted (HTTPS) connection.
10. Complaints, remedies, changes to this notice
If you believe your data is processed unlawfully, please first write to mail@dutov.eu so we can remedy it directly. You may also complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): 1055 Budapest, Falk Miksa utca 9-11.; postal address: 1374 Budapest, Pf. 603.; phone: +36 (1) 391-1400; e-mail: ugyfelszolgalat@naih.hu; web: www.naih.hu. You may also go to court — proceedings can be started before the court of your place of residence as well.
We update this notice when the service changes; the current version date is shown at the top of the page.