Privacy Notice

1. The controller and contact details

The data controller:

• Name: Czudar DHH Law Firm
• Registered seat: 1054 Budapest, Szemere u. 23. I/1., Hungary
• Branch office: 2660 Balassagyarmat, Rákóczi fejedelem út 13., Hungary
• E-mail: info@drczudar.hu
• Phone: +36 1 577 9191
• Bar registration: Budapest Bar Association, registration no. 5160

The firm is not required to appoint a data protection officer (DPO) under Article 37 GDPR and does not appoint one; data-protection enquiries may be addressed to the controller using the contact details above.

2. Data processed in connection with the website

2.1 Contact by e-mail and telephone

If you contact us using the e-mail address or telephone number shown on the website, we process the data you provide: your name, e-mail address, telephone number and the content of your enquiry. We process this data to respond to your enquiry and to prepare any potential engagement.

2.2 Online appointment booking (Google Calendar)

The online appointment booking available through the website operates via Google Calendar. The data provided for the booking (e.g. name, e-mail address, the requested time and the subject of the enquiry) is recorded in Google’s system. In this respect Google acts as a processor, handling the booking data on behalf of and on the instructions of the controller.

2.3 Embedded Google Maps

The website can display the firm’s location using an embedded Google Map (Google Maps). For privacy reasons the map does not load by default: it appears only if you expressly consent, either via the cookie bar or by clicking the button shown in place of the map. When the map loads, Google may set cookies and process technical data (e.g. IP address, device and browser information) for its own services; this constitutes Google’s own processing, governed by Google’s privacy policy. You may withdraw your consent at any time via “Cookie settings” in the footer.

2.4 Server and hosting logs

The website is hosted by GitHub, Inc. (United States) via GitHub Pages, which also uses a content delivery network (CDN). As with any web host, when a page is opened the provider may process standard technical server logs on its side (e.g. IP address, time of the request, page requested, browser and device identifier) for the provision and security of the service. The firm has no access to these logs; GitHub processes them as an independent controller/processor under its own privacy statement, and delivery may involve a transfer to the United States subject to the safeguards provided by GitHub.

2.5 Social-media links

The website may contain links to external social-media providers. By clicking these links you are taken to the external provider’s site, whose processing is the responsibility of that provider and is governed by that provider’s own privacy policy.

3. Purposes and legal bases of processing

• Contact, responding to enquiries, preparing an engagement — legal basis: steps taken prior to entering into a contract, or performance of a contract (Article 6(1)(b) GDPR).
• Handling online appointment bookings — legal basis: measures taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
• Operation and security of the website, display of the embedded map, and technical/statistical logging — legal basis: the controller’s legitimate interest (Article 6(1)(f) GDPR).
• Not strictly necessary cookies set by embedded Google services (e.g. Google Maps) — legal basis: your consent (Article 6(1)(a) GDPR), obtained through the website’s cookie bar and withdrawable at any time.

4. Retention periods

We process personal data only for as long as necessary to achieve the purposes above, and for the retention periods prescribed by law. Enquiries are retained for the time needed to respond to them and — where an engagement is established — to comply with the statutory obligations relating to that engagement.

5. Processors and data transfers

The controller uses the following processors:

• Google (online appointment booking via Google Calendar; embedded Google Maps). Certain Google services may involve transfers outside the European Economic Area, governed by the appropriate safeguards provided by Google (e.g. a European Commission adequacy decision or standard contractual clauses).
• GitHub (hosting of the website, GitHub Pages).

International transfers in connection with the DHH network / China desk: data collected in connection with the website (enquiries, bookings) is not transferred to the DHH network. Within a specific engagement, any transfer within the DHH network takes place only on the client's express authorisation and subject to a confidentiality undertaking required from the receiving party.

6. Your rights as a data subject

In connection with the processing you may exercise the following rights:

• access to your personal data;
• rectification (correction of inaccurate data, completion of incomplete data);
• erasure (the “right to be forgotten”);
• restriction of processing;
• objection to processing based on legitimate interest;
• data portability;
• where processing is based on consent, withdrawal of consent at any time (this does not affect the lawfulness of processing carried out before withdrawal).

You may submit a request to exercise your rights using the contact details set out in section 1. We will provide information in response without undue delay. The exercise of these rights may be limited by the rules on legal professional privilege and by statutory retention obligations (see section 8).

7. Remedies

If you consider that the processing infringes your rights, you may lodge a complaint with the supervisory authority:

• Hungarian National Authority for Data Protection and Freedom of Information (NAIH), Budapest.

You are also entitled to seek a judicial remedy. Proceedings may — at your choice — be brought before the tribunal of your place of residence or place of stay.

8. Legal professional privilege

Client data processed in connection with engagements is governed by legal professional privilege (attorney–client confidentiality) and by Act LXXVIII of 2017 on the Activities of Attorneys-at-Law. The protection of privileged information and the professional and legal liability rest solely with the acting attorney. In respect of privileged data, data-subject rights — in particular access and erasure — may be exercised only within the limits of the confidentiality obligation and the statutory retention requirements.

9. Cookie information

The website is built from static pages and does not itself set any cookies on your device; it only stores your cookie choice in your browser (in local storage), which is not transmitted to any third party.

When a page is first opened, the website displays a cookie bar. Embedded third-party content that may set cookies (above all Google Maps) does not load without your consent: an informational placeholder and a “load map” button are shown in its place. If you accept on the cookie bar or click the button, the embedded content loads and the provider (Google) may set cookies, governed by its own privacy and cookie policies. Online booking is a link to a separate page that loads Google content only if you click it.

You can change or withdraw your cookie choice at any time by clicking “Cookie settings” in the footer.