Skip to content
drszaboeniko

PRIVACY STATEMENT

Dr. Enikő Szabó Law Firm

Introductory Provisions

The Data Controller, Dr. Enikő Szabó Law Firm, declares that it processes personal data it obtains in accordance with the currently effective legal regulations, with particular regard to the Fundamental Law of Hungary, Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information, and Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, “GDPR”).

The data processing related to the Law Firm’s activities complies with the expectations set forth in this policy and the effective legal regulations, including in particular the GDPR (REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC), as well as the Infotv. (Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information).

The Data Controller respects the personal and confidential data of its clients, employees, and partners, and uses them solely in the manner prescribed by law, for the operation of the firm and the performance of its legal representation activities. Personal data may only be disclosed to a third party with the prior, explicit consent of the data subject, unless the fulfillment of an official or judicial order is necessary and the conditions prescribed for this are met.

Legal Basis for Data Processing

The Data Controller processes data exclusively in accordance with the fundamental principles defined by law. Personal data can only be processed lawfully if at least one of the following legal bases exists: the data subject’s voluntary consent; performance of a contract; fulfillment of a legal obligation; protection of the vital interests of the data subject or another natural person; performance of a task carried out in the public interest or in the exercise of official authority; or the legitimate interests of the Data Controller or a third party, provided that these do not override the fundamental rights or freedoms of the data subject, especially in the case of a minor.

Principles of Data Processing

The Data Controller always processes data lawfully, fairly, and in a transparent manner for the data subject. The collection, storage, and processing of data are appropriate, relevant, and limited to what is necessary in relation to the purposes for which they are processed, and for no longer than is necessary. We continuously verify the accuracy of the processed data and take all reasonable steps to rectify or erase inaccurate data. Personal data is stored only until the stated purpose is achieved, and data security is ensured at every stage, preventing unauthorized or unlawful processing, loss, destruction, or damage.

Information for Data Subjects

The Data Controller takes all necessary measures to ensure that data subjects receive clear, concise, and easily accessible information regarding the processing of their personal data, including through the Data Processing Policy, abbreviated and detailed information sheets, and information boards. Our employees and partners are bound by strict confidentiality obligations.

Purpose of Data Processing

The primary purpose of data processing is to ensure the fulfillment of our legal representation agreements or other contractual obligations with our clients or other contractual partners. For this purpose, we process personal data provided to us by the contractual partner or obtained from third parties.

Please note that providing the necessary data is essential for concluding a legal representation agreement, performing tasks, or providing services. If the data is not available to us, we will be unable to fulfill the legal mandate or perform the task.

Scope of Processed Data

During data processing, the following personal data will be processed: name, birth name, address, email address, mother’s maiden name, place and date of birth, tax identification number, phone number, identity card or address card, or possibly passport number. In addition, any other personal data related to the specific case or contractual task and shared with us by the contractual partner also falls within the scope of processed data.

Purpose of Data Processing

The processing of our clients’ personal data is carried out in accordance with the relevant legal regulations, with particular regard to the provisions of Act LXXVIII of 2017 on Legal Practice. The purpose of data processing is the fulfillment of legal representation agreements and the complete discharge of related legal obligations towards our clients.

Legal Basis for Data Processing:

The legal basis for data processing is Article 6(1)(b) of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), which allows for the processing of personal data for the performance of a contract to which the data subject is a party.

Definitions

Data security refers to the totality of technical, organizational, and personnel measures ensuring the confidentiality, integrity, and availability of data.

Data processing refers to any operation performed on personal data, including its collection, recording, organization, storage, use, transmission, restriction, erasure, or destruction.

A data processor is a natural or legal person who processes personal data on behalf of the Data Controller, such as an accounting firm or system administrator.

Data Controller’s Details:

  • Name: Dr. Enikő Szabó Law Firm
  • Registered Office: 1013 Budapest, Krisztina krt. 30. 1/11.
  • Office Registration Number: 4481
  • Tax Number: 18946440-2-41
  • Represented by: Dr. Enikő Szabó, Attorney-at-Law
  • Bar Association ID: 36068850
  • Email: iroda@drszaboeniko.hu
  • Mobile: +36 20 4060999

Contact primarily via email.

The data processing activities of the Law Firm are based on the consent of the data subjects, are necessary for the performance or conclusion of a contract, are necessary for the fulfillment of a legal obligation applicable to the Law Firm, or are necessary for the enforcement of the legitimate interests of the Law Firm (or a third party).

Data Controller’s Data Processing Practices

During the provision of legal services to clients, with the exception of legal advice, an engagement can only be accepted if the client has appeared in person at the office and their identification has been carried out. The identification of unknown persons is done by presenting valid documents. To verify mandatory data, the Data Controller is entitled to access registered data electronically, for example, through the personal data and address register, the driver’s license register, the travel document register, and the central immigration register.

Clients’ personal data is processed solely for the purpose of providing legal representation and billing, and is stored from the signing of the engagement agreement until its fulfillment or the end of the sector-specific retention period.

Access to and Processing of Data

Personal data may only be accessed by staff members who have a legal obligation related to its processing. Data is stored for the shortest possible period, adhering to deletion or regular review deadlines. Documents obtained during client due diligence are retained for the period prescribed by law, and then promptly destroyed after the deadline expires.

Data may be used as evidence, for example, in court or administrative proceedings. The data subject may request the retention of recorded data within three working days; otherwise, the recordings must be deleted.

Personal data may only be disclosed to a third party with the data subject’s prior written consent, except for data transfers mandated by law. When engaging data processors, we ensure that data processing and storage are carried out lawfully.

Contact Our Office!

If you believe that your personal data is not being processed lawfully, please first communicate your observation or request to us, as the Data Controller, using one of our stated contact details, so that we can process and address your feedback as quickly and efficiently as possible.

National Authority for Data Protection and Freedom of Information (NAIH)

In case of unlawful data processing, you are entitled to lodge a complaint with the NAIH.

Contact Details:

Recourse to Court

Please be informed that you are also entitled to assert your claim before a court. The regional court has jurisdiction over the lawsuit. You may initiate the lawsuit before the regional court at our registered office or at your place of residence or domicile.

Updated: Budapest, 1 November 2025.

Effective from 1 November 2025.