Privacy notice on data management in relation to operating website

Members of the Illés & Németh Association of Attorneys-at-Law (separately: the „Controller”, jointly: the „Controllers”) provides the following information regarding the operation of the website according to articles 13 and 14 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

Identity and the contact details of the Controllers

Name Illés Law Office Németh József Law Firm
Registered seat 1052 Budapest Galamb utca 3. 6. em. 4. 1052 Budapest Galamb utca 3. 6. em. 4.
Postal address 1052 Budapest Galamb utca 3. 6. em. 4. 1052 Budapest Galamb utca 3. 6. em. 4.
E-mail address
Representative Dr. Ádám Illés managing partner Dr. József Németh managing partner


Controllers are joint controllers who carry out data processing activities in the form of operating website. According to their arrangement, the Controllers determine their respective responsibilities for compliance with the obligations under this Regulation, in particular as regards the exercising of the rights of the data subject and their respective duties to provide the information referred to in Articles 13 and 14 based on which Controller is the data subject’s (or the business operated with the participation of the data subject) appointed lawyer or, failing that, which Data Controller the data subject first contacted.

Number Description and purpose of data processing Legal basis Processed personal data Period of data processing

Using Google analytics cookies

The Data Controller uses cookies to track how the data subject uses the website. This allows it to track patterns of individual usage or patterns for larger groups. This helps the Controller to develop and improve the website and its services based on the needs and requirements of visitors.

Cookies also help the Data Controller to display information that may be of interest to data subjects.

consent -ga: Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 2 years
_gat: Used by Google Analytics to throttle request rate 1 day
_gid: Registers a unique ID that is used to generate statistical data on how the visitor uses the website. 1 day

Source of the personal data processed by the Data Controllers: Data Controllers collects the data during the use of the website.

Recipients of personal data:

·        Google Ireland Limited (seat: Gordon House, Barrow Street Dublin 4, Ireland)

·        Bende Katalin private entrepreneur (2835 Tata-Agostyán, Vasvári köz 2.)


Using Cookiebot cookies

The Website records and uses the opt-in cookie choices of visitors on subsequent visits.

consent CookieConsent: noting cookie settings 1 year

Source of the personal data processed by the Data Controllers: Data Controllers collects the data during the use of the website.

Recipients of personal data:

Cybot A/S

seat: 1058 Copenhagen, Havnegade 39, Dánia


The Controllers shall transmit the personal data processed to the competent authorities in cases specified by law, upon request by public authorities.


The natural persons concerned by the data processing have the following rights related to the data processing.

1.               Right of access:

Data subjects have the right to obtain confirmation using the given contacts as to whether or not personal data concerning them are being processed and, where that is the case, access to the personal data and the following information:

a) the purposes of the processing,
b) the categories of personal data concerned,
c) the recipients or categories of recipient to whom the personal data have been or will be disclosed,
d) the envisaged period for which the personal data will be stored,
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing,
f) the right to lodge a complaint,
g) the existence of automated decision-making, including profiling, and information about the logic involved, as well as the significance and the envisaged consequences of such processing for you.

Information shall be provided without undue delay, in one month from receiving your request. Primarily, Controllers provide information in the same form as the request is received.

Controllers provide information free for the first time in each calendar year. For requests filed repeatedly for the same scope of data, Controllers may charge administrational fees, provided that no infringement found and no rectification was necessary.

Gross administrational fee shall be 1,000 HUF per personal data

2.    Rectification

In case personal data processed by the Controller is inaccurate, and accurate data is available or sent them, the Controller will rectify such personal data.

3.    Erasure of personal data

Controller erase processed personal data if:

a)      it has been unlawfully processed;
b)     you withdraw your consent and there is no other legal ground for the processing;
c)      you object to the processing
d)     it is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
e)      it has to be erased for compliance with a legal obligation.

4.    Right to restriction

Restriction of the data processing shall take place in the following cases:

a) if the data subject contests the accuracy of the personal data (for the period of verifying accuracy)
b) if the processing is unlawful and the data subject do not request erasure,
c) if the Controllers do not need the personal data for the purposes of the processing any more, but they are required by you for the establishment, exercise or defence of legal claims;
d) if the data subject objects to processing (for the period of studying the objection assessing whether legitimate interests of the Controllers or the data subjects shall prevail)

In case of restriction of processing, the Controllers will not process the concerned personal data (except from storage). Controllers will send prior notification before lifting restrictions.

5.    Objection

Data subjects may object to the process of your personal data, for the purpose of direct marketing. The data subject can communicate the objection by clicking on the link provided in the newsletter.

6.    Lodging a complaint

In case the data subject believes that the data processing is detrimental, he/she may lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság)

7. Data portability

On request, Controllers will send the personal data concerning the data subjects, in a structured, commonly used and machine-readable format.

8. Compensation for damages, restitution

If the Controllers cause the data subjects or others any damage by unlawful or unsafe processing of personal data, the person suffered damage is entitled to claim compensation for damages. In case the harm affects rights relating to personality, the affected person shall be entitled to claim for restitution. Controllers shall not bear liability if the damages are the result of an unavoidable cause beyond the course of processing or caused by the data subject’s intentional or grossly negligent behavior

Exercising claims

1.    Contacting the Controllers

If the data subjects believe that the Controllers do not act lawfully processing the personal data, they first should share their comment with the controllers first to deal with it the fastest and most effective way.

2.    Hungarian National Authority for Data Protection and Freedom of Information (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH)

In case of unlawful processing, data subjects may lodge a complaint with NAIH.

Contacts of NAIH:

address: 1055 Budapest Falk Miksa u. 9-11.
postal address: 1363 Budapest, Pf.: 9.

3.    Going to court

Data subjects are entitled to exercise their claims in front of court. General courts shall have competence of the procedure. Data subjects may initiate trial on the general court that has jurisdiction either in their residential address or the Controller’s registered seat.


This website is maintained by a Hungarian association of lawyers registered at the Budapest Bar Association in accordance with the laws and policies governing Hungarian attorneys which are available together with the information on client rights on the website at

The materials contained in this website are for information purposes only, and their receipt does not constitute legal advice, or create an attorney-client relationship. You should obtain legal counsel on any particular matter which concerns you.Every effort has been made to ensure the accuracy of the information on this, and linked websites. However, any and all liability which might arise from your use of, or reliance upon, the information or links contained on this website is excluded.

Copyright of the content of this website is owned by Illés & Németh Association of Lawyers