Giró Szász Law Office (hereinafter: the Law Office) pays special attention to the protection of natural persons with regard to the processing of personal data and the free movement of such data in the interests of your data processing, and repealing Regulation (EC) No 95/46. Act in accordance with Regulation 2016/679 of the European Union and of the Council (hereinafter: the Regulation) on
The Law Firm hereby informs its clients and visitors to its website about the personal data processed by it, the rules governing the processing of this data, and the manner and possibilities of exercising the rights of the data subjects.
1. Legislation on data management
It handles personal data about its clients who are entrusted by the Law Office with the task of practicing as a lawyer. The Management of Personal Data of Clients is governed by these Regulations, Act 2017 on the Activities of Lawyers. year LXXVIII. Act (“Act”), the Decree, and the Act on the Right to Self-Determination of Information and Freedom of Information. year CXII. in accordance with the relevant provisions of
2. Data of the data controller
Giró Szász Law Office
Headquarters: 1126 Budapest, 23 János altábornagy utca.
Registration authority: Budapest Bar Association Registration number: 240
Phone: +36 1 266 9168
Within the framework of our office, your data is accessed on the basis of the “principle of knowledge required” by the firm’s partners, lawyers, lawyer candidates and the lawyers and law firms cooperating with us, our directorship and the IT function.
3. Data processors used in data management
The Law Office transfers the personal data of clients and their contacts to third parties for the following reasons:
- for the lawyers of the subcontractor: for the purpose of managing the lawyer-client relationship, invoicing, archiving, joint performance of the order and checking conflicts of interest, the personal data of the data subject may be accessed by other lawyers cooperating with the Law Firm if the subcontractor’s contract justifies it. The list of cooperating lawyers is available in the appendix to the respective general terms and conditions.
- Service Providers: Uses a third party IT system and services to support the internal procedures of the Law Firm. For the purpose of the given system or service and on the basis of the appropriate data processing contract concluded between the Law Office and the service provider, such service providers (hosting and support: ELIN.hu Informatikai Szolgáltató és Tanácsadó Kft., 9024 Győr, Déry T. u. 11. ).
- Case management system: uses the IT system and services provided by third parties to support the internal procedures of the Law Office. The case management system was developed by Legisly Solutions Kft. (registered office: 8237 Tihany, Halász utca 52 / a; company registration number: 19-09-521453). For the purpose of the given system or service, both the Law Office and Legisly Solutions Kft. Personal data is available to Legisly under an appropriate data processing contract between
4. Data transfer abroad
Personal data may also be transferred to parties located in third countries that are not located within the European Economic Area (EEA). In such cases, appropriate measures will be taken to ensure that personal data is protected in accordance with EU data protection rules (eg the EU General Data Protection Regulation, the GDPR). Please contact us at firstname.lastname@example.org if you would like a copy of the relevant data transfer guarantees.
5. Categories of data management
5.1. Case management data management
He keeps a register of the cases performed on the basis of the assignment – in order to be able to check the observance of the rules concerning the activity of a lawyer and to protect the rights of clients in the event of termination of the right to practice as a lawyer. The register shall contain the following information:
- a) the case identifier trained by the lawyer,
- b) the name of the customer,
- c) the subject matter of the case,
- (d) the date of conclusion of the engagement contract; and
- (e) the registration number of the court proceedings relating to the case or the registration number of other proceedings.
The Law Office handles the data specified above for five years after the termination of the order, for ten years after the countersignature of the deed, and for ten years from the registration of the right in the case of registration of the real estate right in the public register.
If the document is countersigned, the lawyer shall keep the countersigned document and other documents created in the case of countersigning the document, unless the law stipulates a longer retention period or the parties have agreed on a longer retention period, for ten years from the countersignature.
The legal basis for data processing is Article 6 of the Regulation. Article 1 (1) (c) (fulfillment of a legal obligation) as well as Article 53. § (1).
In the register:
- (a) the person or body carrying out the official control of the Chamber in order to verify compliance with the rules governing the practice of law during official inspections of the Chamber, to the extent necessary for that purpose,
- (b) in order to protect the rights of clients, to the extent necessary for the performance of their duties under this Act, the deputy lawyer and the appointed custodian
you can view or request data from it.
5.2. Customer due diligence
Where required by law, the Law Firm on the Prevention and Suppression of Money Laundering and Terrorist Financing 2017. year LIII. (hereinafter: Pmt.) handles the following data:
- (a) a natural person
- aa) surname and first name,
- ab) surname and first name at birth,
- (c) his nationality,
- (ad) place and date of birth,
- ae) mother’s birth name,
- (af) his address or, failing that, his place of residence,
- (ag) the type and number of its identification document;
- (b) a legal person or entity without legal personality
- (ba) his name, abbreviated name,
- bb) the address of its registered office or, in the case of a foreign-based enterprise, the address of its Hungarian branch, if any,
- bc) its main activity,
- (bd) the names and positions of the persons authorized to represent him,
- be) – if available, the details of his service agent in accordance with points ( a) ( aa) and ( f) ,
- bf) in the case of a legal person registered in the court of registration, the company registration number, in the case of another legal person the number or registration number of the decision on its establishment (registration, registration),
- bg) tax number.
In order to verify the identity of the Law Firm, it is obliged to require the presentation of the following documents or to query the public register of data:
- (a) a natural person
- aa) in the case of a Hungarian citizen, an official identity card and an official identity card proving the address of the address, the latter if the place of residence or stay is in Hungary,
- ab) in the case of a foreign citizen, his / her travel document or identity card, provided that he / she is entitled to reside in Hungary, a document certifying the right of residence or an official card certifying residence in Hungary, if he / she resides or stays in Hungary;
- (b) in the case of a legal person or, in the case of an organization without legal personality, in addition to the presentation of the document referred to in point (a) by a person authorized to act on its behalf or on its behalf,
- (ba) the company has been registered by the court of registration or the company has applied for registration, in the case of a sole proprietor the commencement of self-employment has been announced or the sole proprietor has been registered,
- ( bb) in the case of a domestic legal person other than those referred to in point (b) ( ba) , where its establishment requires official or judicial registration, registration has taken place,
- (bc) in the case of a foreign legal person or organization without legal personality, has been registered or registered under the law of its own country;
- (c) the instrument of incorporation of the legal person or entity without legal personality before submitting the application for judicial or official registration to a court or authority.
The Law Office of Pmt. 7. § (8), shall make a copy of the document presented for the purpose of verifying the above data, including all personal data indicated in the document, except for the personal identification page of the official identity card certifying the address.
The legal basis for data processing is Article 6 of the Regulation. Article 1 (1) (c) (fulfillment of a legal obligation) and Pmt. 7–11. And, where applicable, Articles 17 to 21. §.
The data are from Pmt. are transmitted in cases required by the Pmt. Pursuant to Section 74 (1) for the regional chamber, pursuant to Section 75 (1) for the financial information unit operating within NAV.
The Law Firm will keep the data for 8 years from the execution of the order. [Pmt. Section 56 (2), Section 57 (2)]
5.3. Customer identification data management
With the exception of assignments for legal advice, the Law Firm will identify the client before concluding the assignment contract.
The Law Office identifies a natural person who does not know or whose identity is in doubt by viewing his or her identification document.
The Law Office may electronically request the following data from the personal data and address register, the driver’s license register, the travel document register and the central aliens register in order to verify the correspondence of the data of a natural person with the registered data and the validity of the documents presented by it:
- a) natural identity data,
- (b) nationality, statelessness, refugee, immigrant, established or EEA status,
- c) address,
- d) portrait,
- e) signature,
- (f) the Regulation of 1992 on the registration of citizens’ personal data and addresses. year LXVI. Act 18. § (5),
- (g) the 1998 Act on travel abroad. year XII. Act 24. § (1) f) and the period of validity of the document,
- (h) the Road Traffic Register Act 1999; year LXXXIV. Act 8. § (1) b ) sub-points ba) -bb) ,
- (i) the 2007 Act on the entry and residence of persons enjoying the right of free movement and residence. Act 76 of. § d) , 80. § (1) ( b) and (c) and the 2007 Act on the entry and residence of third – country nationals. year II. Act 95. § (1) point g) , 96. § (1) ( g) and Article 100. § (1) b) and c) .
In this case, the legal basis for data processing is Article 6 of the Regulation. Article 1 (1) (c) (fulfillment of a legal obligation) and Article 32-33. §-the.
The data are from Üttv. (§ 30-31 of the Pmt.) to the financial information unit operating within the NAV.
The Office shall submit the data to the Üttv. In the case of data pursuant to Section 32 (3), the Üttv. 112. § (2), in the case of the data specified in Section 33 (2), it shall be retained for 8 years from the execution of the order. [Üttv. Section 33 (7), Pmt. Section 56 (2), Section 57 (2)]
3.3. Data management related to contracts with business partners
If a contract is concluded between the Law Firm and an employer, in order to fulfill this, the Law Firm handles the following personal data of the employer’s employee as a contact person: surname, first name, position, telephone number and email address.
The legal basis for data processing is Article 6 of the Regulation. Article 1 (1) (f) (assertion of a legitimate interest).
There will be no data transfer.
The Law Office shall retain the data until the general limitation period in civil law or for 5 years from the date of their occurrence. If the contact between the Law Office and the employer is continuous, the limitation period begins when the contact person changes.
The legal basis for the processing of data related to the assignment of a lawyer is the performance of a contract in accordance with Article 6 of the Decree. pursuant to Article 1 (1) (b). Contact information is handled by the Law Firm based on the client’s consent. (Regulation 6. Article 1 (a) In certain cases (eg compliance with tax obligations, compliance with money laundering rules), the legal basis for data processing is to enable the Law Firm to comply with its legal obligations. (Regulation 6. Article 6 (1) (c)) Legitimate interest (Article 6 of the Regulation). The Law Office shall handle the data of third parties, such as witnesses, experts, necessary for the performance of the assignment, in accordance with Article 1 (1) (f).
6. Data Security
The place of data processing is the seat of the Law Office. Personal data is considered a lawyer ‘s secret, and the Law Office applies enhanced security measures to protect it.
7. Data subject’s rights in relation to data processing
With regard to the processing of your personal data, the data subject has the following rights:
(a) the right of access (Article 15 of the Regulation) : the data subject has the right to be informed by the Law Office whether the processing of his or her personal data is in progress and, if such processing is in progress, the right to access the personal data and access the information in this leaflet.
The Law Office will provide a copy of the personal data to the data subject upon request. The Office of the Prosecutor may charge a reasonable fee for copies based on administrative costs.
(b) right of rectification (Article 16 of the Regulation) : the data subject has the right to have inaccurate personal data concerning him or her rectified at his or her request without undue delay.
(c) right of erasure (Article 17 of the Regulation) : the data subject has the right to have his or her personal data deleted by the Law Office without delay.
The Law Office is obliged to delete personal data without delay if one of the following reasons exists:
– the purpose of the processing of personal data from which they were collected or otherwise processed has ceased;
– if the data subject withdraws his or her consent;
– personal data have been processed unlawfully;
– personal data must be deleted in order to comply with a legal obligation under applicable Union or Member State law.
(d) right to restrict data processing (Article 18 of the Regulation): the data subject has the right to have the data processing restricted by the Law Office at his request if one of the following conditions applies:
– You dispute the accuracy of the personal data, in which case the restriction applies to the period of time that allows the Office to verify the accuracy of the personal data;
– the processing is unlawful and you object to the deletion of the data and instead request a restriction on its use;
– the Office no longer needs personal data for data processing purposes, but you do so in order to make, enforce or protect legal claims.
(e) the right to be informed of the above rights (Article 12 of the Regulation) : the Office shall inform you promptly, and in any case within one month of receipt of your request under points (a) to (d) above, of the circumstances surrounding the processing, clearly and unambiguously. If necessary, taking into account the complexity of the application and the number of applications, this period may be extended by a further two months. The Office shall inform you of the extension of the deadline, stating the reasons for the delay, within one month of receiving the request.
The information is free. If your request is manifestly unfounded or, in particular because of its repetitive nature, excessive, the Office shall, in view of the administrative costs involved in providing the information or information requested or in taking the action requested: (i) charge a reasonable fee, or (ii) refuse to act on the application. The burden of proving that the application is manifestly unfounded or excessive is on the Office.
(f) right to complain (Article 77 of the Regulation):You have the right to complain to the supervisory authority, in particular in the Member State where you have your habitual residence, place of employment or the alleged infringement, if you consider that the processing of personal data concerning you infringes the Regulation. The complaint can be submitted to the National Data Protection and Freedom of Information Authority (address: 1125 Budapest, Szilágyi Erzsébet fasor 22 / C .; phone: +36 1 391 1400; fax: +36 1 391 1410; naih.hu ; email@example.com ).
g) Right to go to court (Article 79 of the Regulation): You have the right to a judicial remedy if you consider that your rights under the Regulation have been infringed as a result of improper handling of your personal data. Proceedings against the Office shall be brought before the courts of the Member State in which the Office operates. Such proceedings may also be brought before a court in the Member State in which you have your habitual residence.
(h) right to data portability (Article 20 of the Regulation):if the processing is based on your consent or a contract between you and the Office, you are entitled to receive personal data concerning you and made available to you by the Office in a structured, widely used machine-readable format and to transfer the data to another data controller without being hindered by the Office. You also have the right, if technically feasible, to ask the Office to transfer personal data directly to another data controller.
i) Right to withdraw consent (Article 7 of the Regulation): You may withdraw your consent at any time via any of the contact details provided in this privacy statement, in which case your personal data will no longer be processed for the purpose of sending you a newsletter. Withdrawal of consent shall not affect the lawfulness of data processing prior to the withdrawal of consent.
- You are requesting information about the processing of your personal information
You can request further information on the handling of the personal data of the data subject from the Law Office by letter (1126 Budapest, Kiss János altábornagy utca 23.) or by e-mail ( firstname.lastname@example.org ).