Purpose of this Policy
The purpose of this statement is to inform you about the most important elements of the data management of Lajos Law Firm & Partners Associated, the data processing on the llf.hu and studiolegale.hu websites, and how we ensure the protection of your personal data.
Our legal bases
We process your personal data exclusively in accordance with the provisions of the applicable data protection law, and our data management policies, including this statement, are in accordance with Act CXII of 2011 on Freedom of Information (Info tv.) and Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter: GDPR).
Personal data – what does it mean?
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Who are we?
Lajos Law Firm & Partners Associated is an association of lawyers.
How to contact us for questions about data management:
If you have any questions about this statement or the processing of your personal data already provided, you can contact us at the following contact details of Lajos Law Firm & Partners Associated:
Lajos Law Firm & Partners Associated
legal seat: 1056 Budapest, Váci utca 81. IV. emelet
post address: 1056 Budapest, Váci utca 81. IV. emelet
e-mail: office@llf.hu
phone: +361 331 61 71
For what purposes do we process personal data?
Personal data is processed for the following purposes:
- Contacting us: via website form, email, phone;
- Cookies;
We provide separate information on our data processing activities not covered by this notice, subject to the provisions on our procedures for safeguarding data subjects’ rights, data security and contact details of data controllers.
- DATA PROCESSING RELATED TO CONTACTING, REQUESTING, MAINTAINING CONTACT
If you contact us with a question or request, we will process the personal data you provide in a message, e-mail, postal letter or telephone call for the purpose of contacting you and responding to your request. The legal basis for the processing is your voluntary, informed consent, given in the contact form, to the use of your personal data for the above purposes (Article 6(1)(a) GDPR).
You may withdraw your consent free of charge at any time, without justification or restriction, by sending a request by e-mail to office@llf.hu, telephone to +361 331 6171, post to 1056 Budapest, Váci utca 81, 4th floor.
You can contact us by entering your name, email address and telephone number in the ‘Contact Us’ section, where we will process data you provide in the message (including, in particular, the contact details of the person or other person concerned and the circumstances of the matter with which the person has contacted us). Your message will be sent to the email address office@llf.hu, to which access is limited.
If you contact us by phone, we will process your personal data if we need to contact you further, respond to your enquiry or complaint, in which case we will also record your name, phone number and, if necessary, the date and time of the conversation and any other personal data you provide for feedback.
For mail sent by post, we also record the name and address of the sender, the subject of the letter and the date of delivery, and for outgoing mail, the name, municipality and postcode of the addressee.
We delete the personal data processed in connection with the requests for further administration and enforcement of claims after the purpose of data processing ceases to exist, but no later than 5 years after the disclosure.
- Our use of cookies
For a detailed description of the cookies used on llf.hu and studiolegale.hu, please see our Cookie Notice here (LINK)
The use of social media sites (e.g. Facebook page) of Lajos Law Firm is subject to the terms of use of the respective social media. The data processing through the use of social media is primarily governed by the data processing rules of the respective social media. By liking, commenting or following, you consent (legal basis for data processing: Article 6 (1) (a) GDPR) to the disclosure of your name/user name in accordance with the social media policy and your account settings and to the access of Lajos Law Firm & Partners Associated. You have the option to unlike, unfollow, delete your posts, unfollow, and unfollow according to the settings in the relevant social media policy. Please contact the relevant social media provider in the first instance with any privacy issues relating to your use of a particular social media.
By collecting statistics about visits to our Facebook page (Facebook Insights), we can better understand who visits our page, how many people or accounts have viewed, responded to or commented on our posts, and aggregate demographic information to better understand the types of interactions and visitors to our Facebook page. The processing of data for statistical purposes on the Facebook page of Lajos Law Firm and Partners Lawyers Association is a joint processing of data by Lajos Law Firm and Partners Lawyers Association and Facebook Ireland Ltd. (4 Grand Canal Square, Grand Canal Harbour, D2 Dublin Ireland) (legal basis for processing: Article 6 (1) (f) GDPR).
The details of the joint processing agreement are set out in the Facebook Insights data controller appendix: https://www.facebook.com/legal/terms/page_controller_addendum , which states that Facebook is obliged to inform you of the details of Facebook’s processing for this purpose and that you can exercise your data subject rights with Facebook.
Visitor data is collected using cookie technology placed by Facebook, each of which contains a unique user identifier. The cookie expires after 2 years. If you visit our Facebook page with a registered Facebook account, Facebook recognises and monitors your behaviour on our Facebook page at the moment you open it and processes the information obtained.
We use anonymised statistical traffic data to make our Facebook page news, posts and our overall activity on Facebook as attractive as possible to our users and to target our marketing activities. Facebook and Lajos Law Firm & Partners Associated also have a legitimate economic interest in finding you with offers that best match your needs and interests (legal basis for processing: Article 6(1)(f) of the GDRP). This enables us to serve the interests of our customers/clients in the most optimal way and to continuously adapt our services to their ever-changing needs. Facebook can provide you with information on how to object (methods of objection: blocking cookies or changing your profile setting). If you have any questions about what is written here, please contact Facebook directly. For detailed information about Facebook’s data management and collection activities, please visit https://www.facebook.com/privacy/explanation
OTHER FORMS OF DATA PROCESSING
We will provide information about data processing not included in this notice (e.g. prize draw, employee data processing, etc.) at the time of data collection.
Who can access your personal data?
We inform you that the court, the prosecutor’s office, the investigating authority, the authorities responsible for offences, the administrative authorities, the National Authority for Data Protection and Freedom of Information, or other bodies authorised by law may contact our Company to provide information, disclose data, transfer data or provide documents.
We will disclose personal data to public authorities only to the extent and to the extent strictly necessary for the purpose of the request, provided that the public authority has indicated the precise purpose and scope of the data.
To carry out certain processing operations related to the processing of data detailed in this Policy, our Company may engage processors, who act on our behalf and under our instructions.
The data processors used by our company and their tasks:
| Data processor | Activity of the processor in relation to the processing |
| KBOSS.hu Kft. | billing |
| Mérleg 1999 Kft. | accounting services |
| Digicorp Kft. | storage services |
Lajos Law Firm reserves the right to involve additional data processors in the future, which will be notified to you by amending this information.
DATA SECURITY
Is my data safe?
Yes. In order to maintain the security and confidentiality of the data we process and to prevent the destruction, unauthorised use or alteration of the data, our Company applies the following IT and other data security and organisational measures in particular. In addition, we keep a constant eye on technological developments, available technical, technological and organisational solutions, and apply solutions that meet the level of protection justified by our data management.
When storing documents containing personal data on paper, we ensure their confidentiality by storing them in a lockable cabinet in an office building protected by a 0-24 hour receptionist. Only employees of the relevant department (e.g. HR, sales, office management, data protection specialists) who have access to your personal data provided by e-mail or other electronic means are entitled to access it.
We ensure that the data is preserved and unaltered through backups, and that the original data can be restored in the event of destruction or alteration. We use password-protected access systems and activity logging.
INCIDENT MANAGEMENT
Lajos Law Firm, as the data controller, keeps a record of the data protection incidents that have occurred and takes measures to remedy and prevent them in the future. The data breach will be assessed under the Company’s Incident Policy and the data breach will be reported to the National Authority for Data Protection and Freedom of Information without delay, but no later than 72 hours after becoming aware of the data breach. A data breach need not be notified if it is unlikely to pose a risk to the rights of data subjects.
EXERCISE OF THE RIGHTS OF PARTIES CONCERNED
What remedies do you have? Where can you turn?
1./ Right to information / Right of access
2./ Right to data portability
3./ Possibility to withdraw consent / Right to erasure / “right to be forgotten”
4./ Right to object to processing based on legitimate interest
5./ Right to restrict processing
6./ Right to data retention
7./ Possibility to complain
Right to information / Right of access
At any time, you can request information about whether we are processing your personal data. You have the right to request clear, transparent and understandable information about how we process your personal data and what your rights are in relation to this. This Privacy Notice also serves this purpose. Upon request, we will provide you with information about the data we process about you, the purposes, legal basis and duration of the processing, who receives or has received your data and for what purposes (in the case of data transfers to third countries, the safeguards to ensure adequate data protection), your data subject rights if we have not received your data from you, the source of the data, the circumstances of a data breach, its effects and the measures taken to remedy it.
We will also provide you with a copy of the personal data we hold about you upon request. The first copy will be free of charge, but we may charge a reasonable fee for each additional copy. The amount of this charge will be notified to you in advance.
Right to data portability
If you become aware that any of your personal data is incorrect, inaccurate or incomplete, or if your personal data has changed in the meantime (e.g. you have changed your name), please provide us with the correct, changed or additional data so that we can make the correction or addition and ensure that the data is up to date.
Possibility to withdraw consent / Right to erasure / “right to be forgotten”
You may notify us at any time, without giving any reason, that you wish to have your personal data deleted. We will then delete your personal data in the absence of an appropriate ground for refusal (legal basis). Please note that we may refuse to erase your data in particular if the data is or may be necessary to comply with a legal obligation or to exercise your right to freedom of expression and information.
With regard to processing based on consent, the withdrawal of consent shall not affect the lawfulness of the processing that preceded it.
Right to object to processing based on legitimate interest
You may object to our processing of your data if you consider that the processing is prejudicial to you. If you object, we will delete your personal data unless the processing is justified by compelling legitimate grounds which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims.
Right to restrict processing
You may request that we designate your personal data for the purpose of restricting its future processing if one of the following conditions is met: (a) you contest the accuracy of the personal data, in which case the restriction will be for a period of time that allows us to verify the accuracy of the personal data; (b) the processing is unlawful and you oppose the erasure of the data and instead request the restriction of their use; c) Lajos Law Firm & Partners Associated no longer needs the personal data for the purposes for which they were originally processed, but you require them for the establishment, exercise or defence of legal claims; d) you have objected to the processing and need time to verify whether there are other grounds for refusing the erasure.
During the period of restriction, we will only store the data and will not perform any other processing operations on it, unless you consent to further processing or unless such further processing is necessary to protect your rights, the rights of a third party or is in the public interest. In the event of a restriction of processing, you will be informed in advance of its lifting.
Right to data retention
In the case of automated processing based on consent or contract, you may request that the personal data you provide to us be provided to you or, where technically feasible, to a third party designated by you, in a commonly known and easily usable electronic format (e.g. Word, Excel).
Possibility to complain
In the event of a perceived breach of your rights in relation to the processing of your personal data, please contact us first at office@llf.hu. We will investigate your request to enforce your rights within 25 days at the latest. You have the right to take legal action or lodge a complaint with the National Authority for Data Protection and Freedom of Information (1055 Budapest, Falk Miksa utca 9-11., ugyfelszolgalat@naih.hu, +36-1-391-1400, President: dr. Attila Péterfalvi, www.naih.hu).
How to make a claim
You can send your request or complaint by email to office@llf.hu or by post to the following address: 1056 Budapest, Váci utca 81. In the letter, please include your identification details and, if you wish to receive a postal reply, your postal address. If we have any doubts about your identity or if the information provided is not sufficient to identify you, we are entitled to ask you for additional identification data.
A request for the exercise of the rights to which the data subject is entitled, submitted by you as the data subject, will be dealt with as soon as possible after its submission, but not later than 25 days, and the decision will be notified to you in writing or, if you have submitted the request electronically, electronically (by e-mail).
24/11/2022