Privacy Policy

Preamble

As the Data Controller, we declare that the data in our possession is processed in compliance with the applicable legal provisions, including the Fundamental Law of Hungary, Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, "GDPR").

We respect the personal and confidential information of our members, employees, and clients. All data and facts that come to our attention are treated confidentially and are used solely for the operation of the firm and the provision of legal representation in accordance with legal requirements.

We only disclose personal data to third parties with the explicit consent of the individual concerned. However, if a court or authority compels data disclosure, we are obligated to comply provided that all legal conditions are met.

Legality of Data Processing

Our principles of data processing align with the applicable data protection laws.

The processing of personal data is lawful only if and to the extent that at least one of the following conditions is met:

• The data subject has given their consent for the processing of personal data for one or more specific purposes;

• Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract;

• Processing is necessary for compliance with a legal obligation to which the Data Controller is subject;

• Processing is necessary to protect the vital interests of the data subject or another natural person;

• Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller;

• Processing is necessary for the legitimate interests pursued by the Data Controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, which require protection of personal data, particularly when the data subject is a child.

Principles of Data Processing

The processing of personal data is carried out in accordance with the following principles: Data processing is conducted lawfully, fairly, and transparently for the data subject. The principle of data minimization is observed, ensuring that the data is adequate, relevant, and limited to what is necessary for the purposes of processing.

Data must be accurate and, where necessary, kept up to date. All reasonable measures are taken to ensure that inaccurate data is erased or rectified without delay. Personal data is stored only for as long as necessary to achieve its purpose. Data processing is protected against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

We process personal data only for the purposes specified in the Data Processing Policy and in a manner consistent with exercising rights and fulfilling obligations as defined therein. Processing must align with these purposes at all times. Only personal data essential for the purpose and proportionate to achieving that purpose is processed.

Information for Data Subjects

We take appropriate measures to provide all information regarding the processing of personal data in a concise, transparent, intelligible, and easily accessible manner, using clear and plain language.

Our obligations are fulfilled through the creation of our Data Processing Policy, the publication of this statement, the preparation of summarized and individual information sheets, and the placement of informational notices.

Our employees and partners are bound by strict confidentiality obligations concerning the data they process.

Definitions

Data Security: The system of technical, personal, and organizational measures and procedures designed to protect data's confidentiality, integrity, and availability.

Data Processing: Any operation or set of operations performed on personal data or data sets, whether automated or not, including collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.

Data Controller: A natural or legal person, public authority, agency, or other body that determines the purposes and means of the processing of personal data, alone or jointly with others.