1. Data Controller Details
Name of data controller: Dr. Anna Júlia Kiss, attorney at law
Registered office: 1134 Budapest, Lőportár Street 14, III/6, Hungary
E-mail: dr.annajuliakiss@gmail.com
Telefon: +36 20 261 1255
Bar registration number (KASZ): 36079761
Bar association: Budapest Bar Association
The data controller operates in accordance with Act LXXVIII of 2017 on Legal Practice (Üttv.).
During its legal activities, the data controller acts in compliance with applicable data protection
legislation, in particular Act CXII of 2011 on Informational Self-Determination and Freedom of
Information (“Infotv.”), as well as Regulation (EU) 2016/679 of the European Parliament and of the
Council of 27 April 2016 on the protection of natural persons with regard to the processing of
personal data and on the free movement of such data, and repealing Directive 95/46/EC (General
Data Protection Regulation, “GDPR”). For matters not defined in this Notice, the GDPR and, where
permitted by it as supplementary law, the provisions of Infotv. shall apply.
2. Scope of Personal Data Processed
During contact via the website, the following personal data may be processed:<br
• name
• e-mail address
• phone number
• • any other personal data provided in the message
During website operation, technical data may also be recorded:
• IP-address
• browser type
• device type
• ltime of visit
3. Purpose of Data Processing and Retention Period
Personal data provided by the data subject is processed by the data controller for specific
purposes and only to the extent necessary, including handling inquiries, responding to contact
requests, preparing contractual offers, contract preparation, and maintaining communication. If a
mandate agreement is concluded between the data controller and the data subject as a result of
the inquiry, the personal data provided will be processed until the expiration of the limitation period
for claims arising from the contract (5 years or as specified in the contract), after which it will be
deleted. If no mandate agreement is concluded, the data will be processed for the duration of the
offer’s validity period or until the withdrawal of consent by the data subject, and then deleted. The
data controller does not use the personal data for purposes other than those stated above.
Personal data may only be disclosed to third parties or authorities with the prior explicit consent of
the data subject, except where mandatory disclosure is required by law.
4. Legal Basis for Data Processing
By visiting the website www.drkisslegal.hu, the data subject may obtain information about the
attorney’s services and may contact the data controller via the provided email addresses or contact
forms, request information, and ask questions. By accessing and browsing the website, the data
subject acknowledges that this Privacy Notice applies to such use. If the data subject contacts the
data controller, the controller processes all personal data provided (name, e-mail address, phone
number) for communication purposes. The legal basis for processing is the data subject’s consent,
given by initiating contact and voluntarily providing data (GDPR Article 6(1)(a)). In case of a
mandate agreement, the legal basis is contract performance (GDPR Article 6(1)(b)).
5. Data Processors
The following data processor is involved in website operation: [Rackhost Zrt.] Registered office:
6722 Szeged, Tisza Lajos körút 41, Hungary Website: www.rackhost.hu.
The hosting provider
may process technical data through server log files.
6. IT Security
To ensure the security and uninterrupted operation of the website, the data controller uses IT security systems [Wordfence Security] (https://www.wordfence.com) to detect, prevent, and log unauthorized access attempts.
During operation, technical data may be recorded, including:
• visitor’s IP address
• time of access
• browser and device technical data
• events related to security incidents and attack attempts
The purpose of data processing is to ensure the security of the website and IT systems, prevent unauthorized access, and investigate incidents. The legal basis is the legitimate interest of the data controller under Article 6(1)(f) GDPR, related to the protection of its IT systems. Logged data may be accessed only by the data controller and authorized IT service providers and is stored only for the time necessary to achieve security purposes.
7. Cookies
The website uses cookies to ensure proper functionality, improve user experience, and analyse website usage. Cookies are small data files placed on the visitor’s device, allowing the website to recognize the device on future visits.
Cookies used on the website may serve the following purposes:
• ensuring basic website functionality (strictly necessary cookies)
• analysing website usage and statistical evaluation
• analysing website usage and statistical evaluation
Other cookies (e.g. statistical or analytical cookies) are placed only based on the visitor’s prior voluntary consent, which can be withdrawn or modified at any time via cookie settings. Cookie data generally does not allow direct identification of the visitor. Visitors may delete, disable, or restrict cookies in their browser settings; however, this may affect the functionality or availability of certain website features.
8. Data Subject Rights
Under the GDPR, the data subject is entitled to:
• request information about the processing of their personal data (right of access),
• request rectification of their personal data,
• request the deletion of their personal data (“right to be forgotten”),
• request restriction of processing,
• object to the processing of their personal data,
• exercise their right to data portability, provided that the legal conditions for this are
met.
fennállnak.
The data controller shall respond to requests without undue delay, but no later than within
one month. If necessary – taking into account the complexity of the request or the
number of requests – this deadline may be extended by an additional two months, about
which the data subject will be informed in writing.
9. Remedies
The data controller makes every effort to ensure that personal data is processed lawfully and with the highest possible level of security. Therefore, in case of any issues, it is advisable to contact the data controller directly before initiating any other legal remedies, in order to resolve the matter as quickly as possible. In relation to the lawfulness of data processing, the data subject may initiate proceedings with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH): • Address: 1055 Budapest, Falk Miksa utca 9–11, Hungary • Postal address: 1363 Budapest, P.O. Box 9 • Website: www.naih.hu • Phone: +36 (1) 391-1400, +36 (30) 683-5969 • Central e-mail: ugyfelszolgalat@naih.hu Alternatively, the data subject may bring an action before the competent court of their place of residence or domicile. The competent court can be found at: https://birosag.hu/ugyfelkapcsolati- portal/birosag.
10. Other Provisions
The data controller does not verify personal data provided electronically for the purpose of contact. The person providing the data is solely responsible for its accuracy. By providing an e-mail address, the user assumes responsibility that they are the sole user of the e-mail address provided for communication purposes and, by sending an e-mail, also consents to communication via e-mail. The data controller has not appointed a data protection officer, as there is no legal obligation to do so. The data controller reserves the right to amend this Privacy Notice in accordance with applicable legal regulations and case law at any time.
