DATA PROCESSING INFORMATION
What is this information about?
This notice aims to inform you about the key aspects of data processing activities undertaken by the Lajos Law Firm and Partners Legal Association, the data processing carried out on the llf.hu and studiolegale.hu websites, and how we ensure the protection of your personal data.
Our Principle
We process your personal data solely in accordance with applicable data protection laws. Our data management regulations, including this notice, comply with Act CXII of 2011 on the Right of Informational Self-Determination and Freedom of Information (“Info Act”) and Regulation (EU) 2016/679 of the European Parliament and of the Council (“GDPR”).
Your Personal Data – What Does This Mean?
Personal data means any information relating to an identified or identifiable natural person (“data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Who Are We?
Lajos Law Firm and Partners Legal Association provides legal services.
Contact Information for Data Processing Inquiries
If you have any questions regarding this notice or the management of your personal data already provided, you can contact Lajos Law Firm and Partners Legal Association at the following:
Lajos Law Firm and Partners Legal Association
Address: 1052 Budapest, Szervita tér 8.
Postal address: 1052 Budapest, Szervita tér 8.
Email: office@llf.hu
Phone: +361 331 61 71
For What Purposes Do We Process Personal Data?
Personal data are processed for the following purposes:
1. Contact, communication: via website form, email, phone;
2. Cookies;
For data processing not described in this notice, we provide separate information, and the procedures for ensuring data subjects’ rights, data security, and data controller contact details apply to those as well.
I. Data Processing Related to Contact, REQUEST FOR QUOTE, and Communication
If you contact us with any questions or requests, the personal data provided in your message, email, letter, or phone call will be processed for the purpose of communicating with you and responding to your inquiry. The legal basis for processing is your voluntary, informed consent given via the contact form for using your personal data for these purposes (GDPR Article 6(1)(a)).
You can withdraw your consent at any time, without justification or limitation, and free of charge, by sending your request to office@llf.hu, calling +361 331 6171, or by mail (address: 1052 Budapest, Szervita tér 8.).
Through the ‘Contact’ menu, you can get in touch by providing your name, email address, and phone number. In addition to these details, we will process any further personal data you include in your message (such as the contact details and circumstances of the matter you are inquiring about). Messages are received at office@llf.hu, with access limited to authorized staff.
If you contact us by phone, personal data are processed only if further contact, a response, or complaint handling is required. In such cases, we record your name, phone number, and, if necessary, the date and time of the conversation and any additional personal data you provide.
For letters sent by mail, we record the sender’s name, address, the subject of the letter, the date of delivery, and for outgoing mail, the recipient’s name, city, and postal code.
Personal data processed in relation to inquiries are deleted after the purpose of processing ceases, but no later than 5 years from the date of data provision.
II. Cookie Usage
For detailed information about the cookies used on llf.hu and studiolegale.hu, please refer to our Cookie Policy (Cookie Notice) here (LINK).
III. Lajos Law Firm and Partners Legal Association Social Media Pages
The use of the Lajos Law Firm and Partners Legal Association’s social media platforms (e.g., Facebook page) is governed by the terms and conditions of each social media site. Data processing arising from social media use is primarily subject to the respective social media provider’s data processing policies. By liking, commenting, or following, you consent (legal basis: GDPR Article 6(1)(a)) to your name/username being made public and accessible to Lajos Law Firm and Partners Legal Association according to the settings of your account and the platform’s policy. You can revoke likes, delete comments, and unfollow as provided by each social media platform. For data protection questions regarding social media use, please contact the service provider directly.
Through statistical data collection (Facebook Insights) on our Facebook page, we can better understand who visits our page, how many people or accounts view our posts, react to them, or comment, and receive aggregate demographic data to better tailor interactions and understand our audience. Statistical data processing on our Facebook page is a joint operation between Lajos Law Firm and Partners Legal Association and Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, D2 Dublin, Ireland) (legal basis: GDPR Article 6(1)(f)). Details of the joint controller agreement are available in the Facebook Insights (Page Analytics) Data Controller Appendix: https://www.facebook.com/legal/terms/page_controller_addendum. According to this, Facebook is responsible for informing you about the details of such data processing and data subject rights can be exercised with Facebook.
Visitor data collection is carried out using cookies placed by Facebook, each containing a unique user identifier. The expiration period for cookies is 2 years. If you visit our Facebook page with a registered Facebook account, Facebook recognizes you upon opening and monitors your behavior on our page, processing the information accordingly. We use anonymized statistical visitor data to make our news, posts, and overall activities on Facebook more attractive to users, and to carry out targeted marketing activities. Both Facebook and Lajos Law Firm and Partners Legal Association have a legitimate business interest in offering you the most suitable products and services according to your needs and interests (legal basis: GDPR Article 6(1)(f)). This enables us to best serve the interests of our customers/clients, and to continually adapt our services to changing needs. For information on how to object, please consult Facebook (ways to object: disable cookies or modify profile settings).
If you have questions regarding the above, please contact Facebook directly. For detailed information on Facebook’s data processing and data collection activities, please see: https://www.facebook.com/privacy/explanation.
IV. OTHER DATA PROCESSING
For data processing not listed in this notice (e.g., prize draws, employee data processing, etc.), we provide information at the time of data collection.
Who May Access Your Personal Data?
Please note that courts, prosecutors, investigative authorities, administrative authorities, the National Authority for Data Protection and Freedom of Information, and, under statutory authorization, other bodies may request information, data disclosure, transfer, or documents from our company. Personal data will only be disclosed to authorities if the authority specifies the exact purpose and scope of the data required, and only to the extent strictly necessary to achieve the purpose of the request.
For certain data processing operations described in this policy, our company may engage data processors who act on our behalf and according to our instructions.
Data Processors Engaged by Our Company and Their Tasks:
| Data Processor | Activities Related to Data Processing |
| KBOSS.hu Kft. | invoicing |
| Mérleg 1999 Kft. | accounting services |
| Digicorp Kft. | hosting provider |
Lajos Law Firm and Partners Legal Association reserves the right to engage further data processors in the future and will inform you of this via an amendment to this notice.
DATA SECURITY
Are My Data Secure?
Yes. To preserve the security and confidentiality of the data we process, and to prevent destruction, unauthorized use, or alteration, our company applies the following IT and other organizational data security measures. We continuously monitor technological advancements and available technical, organizational solutions and apply those appropriate to the level of protection required by our data processing activities.
Documents containing personal data stored in paper form are kept confidential by being organized and stored in a lockable cabinet in our office building, which is protected by a 24-hour security service. Personal data provided by email or other electronic means are accessible only to staff with appropriate access (e.g., HR, sales, office management, data protection specialists).
We ensure the authenticity and integrity of data through backups, which allow us to restore original data in the event of destruction or alteration. Password-protected access systems and activity logging are applied.
INCIDENT MANAGEMENT
Lajos Law Firm and Partners Legal Association, as data controller, keeps records of data protection incidents, takes corrective measures, and acts to prevent future occurrences. Data protection incidents are assessed according to the company’s incident policy and are reported to the National Authority for Data Protection and Freedom of Information without delay, but no later than 72 hours after becoming aware of the incident. Reporting is not required if the incident is unlikely to pose a risk to the rights of the data subjects.
EXERCISE OF DATA SUBJECT RIGHTS
What Are Your Rights and Where Can You Turn?
1. Right to information / right of access
2. Right to rectification
3. Right to withdraw consent / right to erasure / “right to be forgotten”
4. Right to object to processing based on legitimate interests
5. Right to restriction of processing
6. Right to data portability
7. Right to lodge a complaint
Requesting Information / Right of Access
You may request information at any time about whether your personal data are being processed by us. You are entitled to clear, transparent, and understandable information about how we process your personal data and what rights you have in this regard. This Data Processing Information aims to provide this. Upon request, we will provide you with details about the data we process about you, the purposes, legal basis, duration of processing, and who receives or has received your data (including guarantees for data transferred to third countries), the rights you have, the source of data not obtained from you, and the circumstances, effects, and measures taken in relation to any data protection incident.
Upon request, we will also provide you with a copy of your personal data processed by us. The first copy is free of charge; for additional copies, we may charge a reasonable fee, which will be communicated to you in advance.
Right to Rectification or Completion
If you notice that any of your personal data are incorrect, inaccurate, or incomplete, or if your personal data have changed (e.g., you changed your name), please provide us with the correct, updated, or additional information so we can rectify, complete, and ensure the accuracy of your data.
Right to Erasure (“Right to Be Forgotten”)
You may request the erasure of your personal data at any time without justification. We will delete your personal data unless there is a valid reason (legal basis) for refusal. Please note that we may refuse deletion, especially if the data are needed to fulfill a legal obligation, for the exercise of legal claims, or for the freedom of expression and information.
Withdrawal of consent-based processing does not affect the lawfulness of processing carried out before withdrawal.
Right to Object to Processing Based on Legitimate Interests
You may object to our processing of your personal data if you find it detrimental to you. In the event of objection, we will delete your personal data unless there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, or that relate to the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing
You may request the restriction of your personal data if any of the following applies:
a) you contest the accuracy of the personal data – restriction applies for the period enabling verification;
b) processing is unlawful, and you oppose erasure and request restriction instead;
c) Lajos Law Firm and Partners Legal Association no longer needs the personal data for the original purpose, but you require them for legal claims;
d) you have objected to processing and time is needed to determine whether there are overriding reasons for processing.
During restriction, data are only stored, and no further processing is carried out except with your consent or for the protection of your or third-party rights, or for public interest. We will inform you in advance before lifting any restriction.
Right to Data Portability
For processing based on consent or contract and carried out by automated means, you may request that the personal data you provided be handed over in a commonly used, easily readable electronic format (e.g., Word, Excel), either to you or to a third party designated by you, if technically feasible.
Remedies, Complaints
In case of any perceived infringement related to the processing of your personal data, please contact us first via office@llf.hu. Requests to exercise data subject rights will be investigated within a maximum of 25 days. You may also turn to the courts or submit a complaint to the National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalatKUKACnaih.hu, +36-1-391-1400, president: Dr. Attila Péterfalvi, www.naih.hu).
How to Exercise Your Rights
You may submit your request or complaint by email to office@llf.hu or by mail to the following address: 1052 Budapest, Szervita tér 8. Please provide sufficient personal identification and your mailing address if you request a response by post. If your identity cannot be verified or the data provided are insufficient for identification, we may request additional identification data.
Requests to exercise data subject rights will be assessed as soon as possible but no later than 25 days from submission, and you will be notified in writing or electronically (by email) if you submitted your request electronically.
November 24, 2022