PRIVACY POLICY<\/p>\n
For clients and partners<\/p>\n
The Karsai D\u00e1niel Law Office wants to ensure that the personal data which it handles is processed in a lawful manner. Accordingly, it wishes to inform its clients and partners (data subjects) about how it handles the personal data which they disclose to it. The aim of this Privacy Policy is for you to, before you disclose your personal data, receive appropriate information as to the conditions and guarantees applicable to the handling of your data as well as for how long the Karsai D\u00e1niel Law Office handles it.<\/p>\n
Processor
\nName: Karsai D\u00e1niel Law Office<\/p>\n
Headquarters: 1056 Budapest, Ny\u00e1ry P\u00e1l utca 10.<\/p>\n
Registration number: 3714<\/p>\n
Website: https:\/\/drkarsai.hu (hereinafter: \u201cWebsite\u201d)<\/p>\n
Email address: karsai.daniel@drkarsai.hu<\/p>\n
Telephone number: +36-30-363-41-78<\/p>\n
Represented by: Dr D\u00e1niel Andr\u00e1s Karsai<\/p>\n
(hereinafter: \u201cProcessor\u201d)<\/p>\n
Applicable legislation
\nRegulation (EU) No 2016\/679 of the European Parliament and of the Council on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Regulation (EC) No 95\/46 (GDPR);
\nAct CXII of 2011 on information self-determination and freedom of information;
\nAct V of 2013 on the Civil Code;
\nAct C of 2000 on accounting (\u201cthe Accounting Act\u201d);
\nAct CL of 2017 on taxation;
\nAct XLVIII of 2008 on the basic conditions and certain restrictions applying to commercial advertising activities;
\nAct CVIII of 2001 on e-commerce services and on certain issues related to services in an information society;
\nAct LXXVIII of 2017 on the activities of attorneys (\u201cthe Attorney Act\u201d);
\nAct LIII of 2017 on the prevention and countering of money laundering and the financing of terrorism (\u201cthe Money Laundering Act\u201d).
\nPurpose of data processing, scope of personal data handled, legal basis and duration of processing
\n3.1 Data processing on website<\/p>\n
Anyone may, by providing their personal data, and without disclosing their identity, may have access to the Website maintained by the Processor, and may have free and unrestricted access to the information on the Website and to any content stored thereupon.<\/p>\n
Some of the links appearing on the Website may lead to websites operated by others. The Processor does not assume any liability whatsoever for the content of the latter, or for any damages resulting from the use of information found on these sites.<\/p>\n
With the help of Google Analytics, the Website automatically collects anonymous information about visitors. To this end, it sends cookies and saves them on the computers of visitors, which visitors then send back to the Website on subsequent visits. However, no personal information can be gained from these data. For more information on the activities of Google Analytics, see: https:\/\/policies.google.com\/privacy<\/p>\n
For more information on browser settings for cookie preferences, see the following pages:<\/p>\n
Internet Explorer
\nFirefox
\nChrome
\nSafari
\n3.2 Contact<\/p>\n
Activity performed by the processor: handling of personal data disclosed when contact is first established<\/p>\n
Purpose of data processing: to establish and maintain contact<\/p>\n
Legal grounds for data processing: consent by the data subject [GDPR Article 6 (1) a)], as well as taking steps at the request of the data subject prior to entering into a contract for data processing [GDPR Article 6 (1) b)].<\/p>\n
Persons who have not yet 16 years of age may only give consent to data processing via the persons exercising parental rights in their regard or through the consent of the latter.<\/p>\n
Scope of data subjects: Natural persons establishing contact with the Processor by email or telephone, or by sending a message from the \u201cContact Us\u201d menu point on the Website<\/p>\n
Personal data processed: name (given and family names), place and date of birth, residential address, telephone number, other data disclosed when contact was established, the description of the case at bar and information, documents and electronic documents for its resolution.<\/p>\n
The Processor may not use the personal data disclosed, nor permit it to be used by others, for any purposes other than those specified above. The prior and explicit consent of the data subject is required for the release of personal data to a third person or to government authorities, unless otherwise stipulated by law.<\/p>\n
Duration of data processing: until the purpose of establishing contact is fulfilled or until the contract for services with the person initiating contact is signed<\/p>\n
Controllers:<\/p>\n
Name\tHeadquarters\tControlling task
\nMozilla Corporation\t331 E. Evelyn Ave, Mountain View, CA 94041\tOnline storage provider (operation of email system)
\nITEX SOLUTIONS KFT.\t1044 Erd\u0151sor u. 2, 2. Emelet 11.\tTechnical support services (provision of system administration and system management services)
\nRights of data subjects: in accordance with the provisions of section 4, data subjects<\/p>\n
a) may request information with regards to the processing of their personal data, and for access to these personal data,
\nb) may request their correction,
\nc) may request their deletion,
\nd) may request a restriction on the handling of personal data,
\ne) may object to the handling of personal data,
\nf) may exercise the right to data portability. In accordance with the latter right, the data subject is entitled to receive the personal data related to him or her, and is entitled to request that the Processor forward these data to another processor.
\ng) have the right to legal remedy. Data subjects may file a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (hereinafter: \u201cNAIH\u201d) or with the court having jurisdiction.
\n3.3 Blog sending<\/p>\n
Activity performed by the processor: The Processor handles the data of Blog subscribers<\/p>\n
Purpose of data processing: to provide Blog subscribers with regular information on new blog posts<\/p>\n
Legal grounds for data processing: consent by the data subject [GDPR Article 6 (1) a)]<\/p>\n
Persons who have not yet 16 years of age may only give consent to data processing via the persons exercising parental rights in their regard or through the consent of the latter.<\/p>\n
Scope of data subjects: natural persons having subscribed to the Processor\u2019s Blog<\/p>\n
Personal data handled: name (given name and family name), email address<\/p>\n
The Processor may not use the personal data disclosed, nor permit it to be used by others, for any purposes other than those specified above. The prior and explicit consent of the data subject is required for the release of personal data to a third person or to government authorities, unless otherwise stipulated by law.<\/p>\n
Duration of data processing: until the date when the data subject unsubscribes from the Blog<\/p>\n
Controller:<\/p>\n
Name\tHeadquarters\tControlling task
\nITEX SOLUTIONS KFT.\t1044 Erd\u0151sor u. 2, 2. Emelet 11.\tStorage of newsletter sending list and operation of newsletter sending system
\nRights of data subjects: in accordance with the provisions of section 4, data subjects<\/p>\n
a) may request information with regards to the processing of their personal data, and for access to these personal data,
\nb) may request their correction,
\nc) may request their deletion,
\nd) may request a restriction on the handling of personal data,
\ne) may object to the handling of personal data,
\nf) may exercise the right to data portability. In accordance with the latter right, the data subject is entitled to receive the personal data related to him or her, and is entitled to request that the Processor forward these data to another processor.
\ng) have the right to legal remedy. The data subject may file a complaint with the NAIH or with the court having jurisdiction.
\n3.4 Legal activities<\/p>\n
Activity performed by the processor: provision of legal services (e.g. representation of clients, legal advisory services, drafting of documents)<\/p>\n
Purpose of processing: performance of contract for services entered into with clients, fulfilment of legal obligations, including maintaining contact with clients and invoicing<\/p>\n
Legal grounds for processing: necessity to perform a contract to which the data subject is a party [GDPR Article 6 (1) b)], as well as the performance of the legal obligations stipulated by Section 28 (3) of the Attorney Act, Section 1 (1) e), 6 and 7 of the Money Laundering Act, as well as Section 169 (1) and (2) of the Accounting Act [GDPR Article 6 (1) c)]<\/p>\n
Scope of data subjects: the Processor\u2019s clients<\/p>\n
Personal data processed: name, permanent address, place of residence, mother\u2019s maiden name, place and date of birth, email address, telephone number, citizenship, ID document (personal ID or passport) number, address card number, personal identifier, tax number, photograph, contact person and representative\u2019s name, email address and telephone number, facts of case as given by the client (including the following: description o the case, and information, documents and electronic documents regarding means of resolution).<\/p>\n
The Processor may not use the personal data disclosed, nor permit it to be used by others, for any purposes other than those specified above. The prior and explicit consent of the data subject is required for the release of personal data to a third person or to government authorities, unless otherwise stipulated by law.<\/p>\n
Duration of data processing: five years following the termination of the contract; in the case of countersigned documents, ten years from date on which countersigned; for cases related to real property rights, ten years from the date of registry of the right to the real property in the public registry [Section 53 (3) of the Attorney Act]. Where an invoice is issued, the duration of data processing shall be of eight years from the date of the annual report, business report or accounting report for the given year.<\/p>\n
Controllers:<\/p>\n
Name\tHeadquarters\tControlling task
\nHRUV\u00c1R Bt.\t2225 \u00dcll\u0151, Mez\u0151 utca 30.\tAccounting services provided by
\nITEX SOLUTIONS KFT.\t1044 Erd\u0151sor u. 2, 2. Emelet 11.\tTechnical support services (provision of system administration and system management services)
\nMozilla Corporation\t331 E. Evelyn Ave, Mountain View, CA 94041\tOnline storage provider (operation of email system)
\nRights of data subjects: in accordance with the provisions of section 4, and except for compulsory data processing, data subjects
\na) may request information with regards to the processing of their personal data, and for access to these personal data,<\/p>\n
b) may request their correction,
\nc) may request their deletion,
\nd) may request a restriction on the handling of personal data,
\ne) may object to the processing of personal data,
\nf) may exercise the right to data portability. In accordance with the latter right, the data subject is entitled to receive the personal data related to him or her, and is entitled to request that the Processor forward these data to another processor.
\ng) have the right to legal remedy. The data subject may file a complaint with the NAIH or with the court having jurisdiction.
\nRights of data subjects
\nThe Processor shall ensure that the rights of data subjects are enforceable as follows.<\/p>\n
The Processor shall provide data subjects with the possibility to submit a request in connection with the exercise of their rights as data subjects in the following ways: (i) by post, (ii) by email, and (iii) by telephone.<\/p>\n
The Processor must respond to the data subject\u2019s request without any undue delay, at the latest within one month of receipt of the request, in a concise, transparent, understandable and easily accessible format, expressed in clear non-technical language. If the Processor should decide to refuse this request, it must do so within the same time limit, and must in this case inform the data subject of the rejection of the request, the reasons therefore as well as the legal recourses open to the data subject.<\/p>\n
As a general rule, the Processor shall respond to the data subjects request via email. However, if the data subject specifically requests to be contacted by post or telephone and has provided relevant contact information, the Processor shall respond in kind. Response to the data subject\u2019s request by telephone may only be given once the data subject has proven his\/her identity. The Processor may not use the data subject\u2019s postal address or telephone number for any other purpose.<\/p>\n
The Processor may not charge any fees or demand any compensation for responding to data subject requests. If however the data subject submits another request regarding the same set of data within one year of a request that was already fulfilled, the Processor shall reserve the right to set a proportionate amount of compensation for the work required to fulfil said request.<\/p>\n
a) Right to information and access:
\nThe Processor must respond to the data subject\u2019s request in a concise, transparent, understandable and easily accessible format, expressed in clear non-technical language, providing the following information:<\/p>\n
whether any of his or her personal data are currently being processed by the Processor;
\nthe name and contact information of the Processor;
\nwhether data is being controlled, and the name and contact information of the controllers specified in sections 3.2-3.4, above;
\nthe personal data and source of the data subject\u2019s data that are being processed by the Processor;
\nthe purpose and legal grounds for the processing of the personal data;
\nthe duration of data processing;
\nthe addressees or categories of addressees to whom the Processors has or will disclose the personal data, including in particular addressees in a third country or international organisations;
\nthe consequences of data processing;
\nthe rights of the data subject;
\nthe circumstances, effect and measures taken to counter any personal data breach that may have occurred.
\nEven in the absence of a request by the data subject, the Processor shall provide information (by email) to the data subject of any substantial changes to the original information provided, of the circumstances, effect and measures taken to counter any personal data breach that may have occurred.<\/p>\n
b) Right to rectification:
\nAt the request of the data subject, the Processor shall correct any inaccurate personal data relating to the data subject.<\/p>\n
The Processor shall inform all addressees of the correction to whom it has disclosed the personal data, except if this proves impossible or requires disproportionate effort. At the request of the data subject, the Processor shall inform the data subject of the addressees.<\/p>\n
c) Right to erasure:
\nAt the request of the data subject, the Processor shall delete any personal data connected to the data subject, if any of the following conditions are present:<\/p>\n
the personal data are no longer needed for the purpose for which they were collected or processed in any other manner;
\nthe data subject objects to the data processing;
\nthe Processor unlawfully processed the personal data;
\nunder applicable EU or Hungarian law, the Processor has an obligation to delete the personal data.
\nThe Processor shall inform all addressees of the deletion to whom it has disclosed the personal data, except if this proves impossible or requires disproportionate effort. At the request of the data subject, the Processor shall inform the data subject of the addressees.<\/p>\n
d) Right to restriction of processing:
\nAt the request of the data subject, the Processor will restrict processing, if any of the following occur:<\/p>\n
the data subject disputes the accuracy of the personal data \u2013 in this case, the restriction applies to the duration of processing, thereby permitting the Processor to verify the accuracy of the personal data;
\nprocessing is unlawful, but the data subject objects to the erasure of data, and instead requests the restriction of their use;
\nthe Processor no longer needs the personal data for processing purposes, but the data subject requests the latter for the purpose of asserting, enforcing or defending legal claims.
\nThe Processor shall inform all addressees of the restriction to whom it has disclosed the personal data, except if this proves impossible or requires disproportionate effort. At the request of the data subject, the Processor shall inform the data subject of the addressees.<\/p>\n
e) Right to data portability:
\nAt the request of the data subject, the Processor shall place all personal data relating to the data subject and disclosed by the latter at the disposal of the data subject. The Processor further agrees that the data subject may forward these personal data to another processor without any interference on the part of the Processor.<\/p>\n
f) Right to a judicial remedy:
\nInsofar as the data subject believes that, in the course of data processing, the Processor has violated his or her right to the protection of personal data, the data subject may avail himself or herself of the statutory judicial remedies offered by the competent legal authorities, or may file a complaint with the NAIH (address: 1125 Budapest, Szil\u00e1gyi Erzs\u00e9bet fasor 22\/c.; postal address: 1530 Budapest, Pf.: 5.; website: www.naih.hu; email address: ugyfelszolgalat@naih.hu; telephone number: +36-1\/391-1400), or may file a claim with the competent tribunal. The Processor agrees to, in the course of these proceedings, cooperate in every respect with the tribunal in question or the NAIH, and to deliver to the tribunal in question or the NAIH any data related to the data processing.<\/p>\n
The Processor further agrees that it shall have the obligation to provide compensation for any damages caused by the unlawful processing of the personal data, or for any processing conducted in violation of data security requirements. In the event that the right of a data subject has been violated, the data subject may make a claim for damages. The Processor shall be relieved from liability in the event that these damages were sustained as a result of an unavoidable cause falling outside of the control of the processing, or if the damage or the injury caused by the violation of a personality right was due to the intentional or gross negligence of the data subject.<\/p>\n
Miscellaneous provisions
\nThe Processor agrees that it shall have the obligation to ensure that, in connection with its activities, all its data processing complies with the present Privacy Policy, the internal regulations of the Processor \u2013 based on requirements identical to those in this Privacy Policy \u2013 as well as the requirements stipulated by legislation currently in force.<\/p>\n
The Processor shall reserve the right to make changes to this Privacy Policy at any time, but shall be bound to inform data subjects of any changes on its Website.<\/p>\n","protected":false},"excerpt":{"rendered":"
PRIVACY POLICY For clients and partners The Karsai D\u00e1niel Law Office wants to ensure that the personal data which it handles is processed in a lawful manner. Accordingly, it wishes to inform its clients and partners (data subjects) about how it handles the personal data which they disclose to it. The aim of this Privacy […]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"class_list":{"0":"post-2415","1":"page","2":"type-page","3":"status-publish","5":"entry"},"yoast_head":"\n