The Tréki-Tóth Law Firm acts as the data controller (hereinafter: Data Controller) concerning the personal data of current, former, and prospective clients, as well as related individuals (hereinafter collectively: client or clients).
Data Controller Name: Tréki-Tóth Law Firm
Registered Office: 1055 Budapest, Honvéd u. 22. I. em. 1.
Email Address: iroda@trekitothlaw.eu
Phone Number: +36 30 331 0150
Website: http://www.trekitothlaw.hu
Inquiries About Services via Website, In-Person, Phone, or Other Means
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Request for a Personalized Quote
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Conclusion and Fulfillment of an Attorney Engagement Contract
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Retention periods may be extended if personal data is necessary for ongoing or future legal proceedings. In such cases, the retention period extends until the relevant legal process is concluded or fails.
Certain documents containing data may not be disposed of under special legal provisions or by mutual agreement of the parties.
Client Identification via Videoconference
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Signature or Acknowledgment of Signature on Documents via Recorded Videoconference for Attorney Certification (so-called remote signing or remote presence) and Completion of Client Identification Obligations via Recorded Videoconference
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Billing Data Processing
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Processing of Personal Data Related to Marketing Photos and Videos
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Attorney Trust Account Records
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Data Processing Related to Our Website
Scope of Data Processed:
Purpose of Data Processing:
Legal Basis for Data Processing:
Retention Period:
Data Captured by Cookies on the Website
Details regarding the cookies used on the website can be found under the "Details" section of the Cookie popup.
Our website uses cookies to enhance the user experience and ensure the proper functioning of the site. A cookie is a piece of data sent by the website to the user's browser, which stores certain information, enabling the website to reload the original settings during subsequent visits. The subject is informed about the cookies used on the site when visiting the website. The subject uses the website based on this information. The purpose of cookies is to enhance the user experience during website use and to provide the Data Controller with information to monitor the site's operation.
Legal Basis for Data Processing:
When the subject visits the website, their consent for the use of cookies is requested. The subject may withdraw or modify their consent for the use of cookies at any time. Additionally, the subject can manage cookie settings, except for essential cookies necessary for the operation of the website. All information about the use of cookies is available in the "settings" section.
The cookies used are not capable of identifying the subject. Refusing to allow the use of cookies does not disadvantage the subject. The subject can delete cookies from their own computer or prevent their application in their browser. These options are generally found in the "Settings/Privacy" menu, depending on the browser.
Further information on browser settings:
Recipients are organizations to whom the Data Controller may transfer personal data in certain cases.
The Data Controller generally shares clients' personal data with the following third parties:
The Data Controller only processes special personal data of the subject if it is absolutely necessary in connection with the legal service (e.g., representation in litigation related to health status). In such cases, the Data Controller is entitled to process the data under Article 9(2)(f) of the GDPR, given that the processing is necessary for the establishment, exercise, or defense of legal claims. If this provision does not apply, special data can only be processed based on the explicit consent of the subject, according to Article 9(2)(a) of the GDPR.
Right of Access
If the subject requests the Data Controller to confirm whether it is processing their personal data, the Data Controller is obliged to provide information within the limits defined by law.
The subject’s right to receive confirmation from the Data Controller regarding whether their personal data is being processed:
At the request of the applicant, the Data Controller provides access to and a copy of their personal data. If the client requests additional/repeat copies of their personal data, the Data Controller may charge a reasonable fee (50 HUF per page) to cover the administrative costs of fulfilling the request, which the client is obliged to bear.
Right to Rectification
The Data Controller rectifies or completes personal data concerning the subject upon request. If there is any doubt about the rectified data, the Data Controller may request the subject to substantiate the corrected data appropriately, primarily with documents. If the personal data affected by this right have been shared with another person, the Data Controller will notify those persons without delay after rectification unless this is impossible or requires disproportionate effort from the Data Controller. At the subject's request, the Data Controller will inform them of these recipients.
Right to Erasure
If the subject requests the erasure of some or all of their personal data, the Data Controller will erase them without undue delay if:
If the personal data affected by this right has been shared with another person, the Data Controller will notify those persons without delay after the erasure, unless this is impossible or requires disproportionate effort from the Data Controller. At the subject's request, the Data Controller will inform them of these recipients. The Data Controller is not obliged to erase personal data in all cases, especially if the processing is necessary for the establishment, exercise, or defense of legal claims.
Right to Restriction of Processing
The subject may request the restriction of the processing of their personal data in the following cases:
Restricting data processing means that the Data Controller does not process the personal data affected by the restriction except for storage, or only processes them within the scope to which the subject has consented. The Data Controller may process these data without consent if it is necessary for the establishment, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the Union or of a Member State. The Data Controller will inform the subject in advance of the lifting of the restriction on processing. If the personal data affected by this right has been shared with another person, the Data Controller will notify those persons without delay after the restriction, unless this is impossible or requires disproportionate effort from the Data Controller. At the subject's request, the Data Controller will inform them of these recipients.
Right to Data Portability
The subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used, and machine-readable format, and has the right to transmit those data to another data controller without hindrance from the data controller to which the personal data were provided, where technically feasible, if the processing is based on consent or necessary for the performance of a contract and the processing is carried out by automated means.
We note that our legal practice is subject to strict professional confidentiality obligations. In this context, the right to data portability can only be exercised if we receive a waiver from our confidentiality obligation from the subject, as the person entitled to dispose of the attorney-client privilege, to the extent necessary for the data transfer.
Right to Object
If the legal basis for the processing of personal data concerning the subject is the legitimate interest of the Data Controller or a third party, the subject has the right to object to the processing of their personal data. The Data Controller is not obliged to comply with the objection if it proves that:
Timeframe for Responding to Subject’s Requests
The Data Controller responds to the following requests within the timeframes below:
| Subject’s Request | Timeframe |
|---|---|
| Right to Information | When the data is collected (if provided by the subject) or within one month (if not provided by the subject) |
| Right of Access | One month |
| Right to Rectification | One month |
| Right to Erasure | Without undue delay |
| Right to Restriction of Processing | Without undue delay |
| Right to Data Portability | One month |
| Right to Object | Upon receipt of the objection |
Right to Lodge a Complaint and Seek Legal Remedy
If the subject believes that the processing of their personal data by the Data Controller violates the applicable data protection laws, particularly the GDPR, they have the right to lodge a complaint with the data protection supervisory authority in the Member State of their habitual residence, place of work, or place of the alleged infringement.
In Hungary, a complaint can be submitted to the National Authority for Data Protection and Freedom of Information (hereinafter: NAIH).
NAIH Contact Information:
In addition to or independently of the right to lodge a complaint, the subject may also seek legal remedy in court. The subject has the right to bring an action against a legally binding decision of the supervisory authority concerning them. The subject is also entitled to judicial remedy if the supervisory authority fails to address a complaint or does not inform the subject within three months about the progress or outcome of the complaint.
The Data Controller reserves the right to modify this Privacy Notice at any time. The Data Controller will notify clients of such modifications by letter or email and, in all cases, in accordance with the applicable legal requirements.
Effective Date: 31 May 2024