Privacy Notice
Introduction
The security of your personal data is of critical importance to us. The following information is intended to provide an overview of how we process your personal information, as well as of the rights you have based on the EU General Data Protection Regulation (GDPR, available free of charge at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32016R0679) and on Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (referred to as “Act on Information”; available in Hungarian free of charge at www.net.jogtar.hu). Exactly which of your data we process and for what purpose is primarily determined by the services you use. Accordingly, not all parts of this notice may be applicable to you.
Who is responsible for processing and who can I contact?
Controller: Lajer Law Firm (hereinafter: the “Firm”)
Phone: (+36-1) 354-3640
Email: titkarsag@lajer.net
Registered office: 1024 Budapest, Lövőház utca 30. (Hungary)
You can ask for information and file requests or complaints in connection with the processing of your personal data using the above contact details.
To which services or whom does this Notice pertain?
The scope of this Notice covers processing the data of users visiting the www.lajer.net website and providing personal information on it (hereinafter: you).
In the event you wish to use a service provided by the Lajer Attorneys Partnership (Lajer Ügyvédi Társulás), but not listed in section 4 below, you will be provided with a custom notice that includes data processing for the chosen service once you have selected the service you are looking for, before you can use such service and prior to providing your details.
What purposes do we process your personal data for?
4.1 Processing activity: First contact
Purpose of processing: If you reach out to the Firm for the purpose of making contact using any of its contact details, the personal information you provide will be processed solely for the purpose of answering and sending feedback to that inquiry.
Legal basis of processing: Your informed consent
Data subjects: Natural person clients or natural persons acting as the representative of legal person clients
Scope of processed data: The information you provide.
External and internal users of the processed data who have access to the data:
Internal parties: Authorised staff and members of the Lajer Attorneys Partnership, External parties: None
Transfer of personal data to third countries or international organisations: None.
Time limit for storing and deleting data: As long as you do not withdraw your consent. In the absence of a withdrawal of consent, your personal data will be stored for one year after responding to the inquiry.
The following processors will be involved in achieving the purpose of processing: None.
4.2 Processing activity: Recruitment
Purpose of processing: Handling job applications the Firm receives.
Legal basis of processing: Your informed consent
Data subjects: Job applicants
Scope of processed data: Data submitted in a curriculum vitae and attachments (if any).
External and internal users of the processed data who have access to the data:
Internal parties: Authorised staff and members of the Lajer Attorneys Partnership, External parties: None
Transfer of personal data to third countries or international organisations: None.
Time limit for storing and deleting data: As long as you do not withdraw your consent. In the absence of a withdrawal of consent, your personal data will be stored for 6 months after the application is submitted (provided no employment relationship is established).
The following processors will be involved in accomplishing the purpose of processing: None.
4.3 Processing activity: Price quote
Purpose of processing: Responding to inquiries about price quotes received by the Firm. Legal basis of processing: The Firm’s legitimate interest, possibility to prove communication with clients subsequently, quality assurance.
Data subjects: Natural person clients or natural persons acting as the representative of legal person clients.
Scope of processed data: Name, notification address and all additional details the data subject provides as part of requesting a quote.
External and internal users of the processed data who have access to the data:
Internal parties: Authorised staff and members of the Lajer Attorneys Partnership, External parties: None
Transfer of personal data to third countries or international organisations: None.
Time limit for storing and deleting data: One year after the expiry of the offer validity period.
The following processors will be involved in accomplishing the purpose of processing: None.
4.4 Processing activity: Sending newsletters
Purpose of processing: Providing information about changes in legal regulations, disclosure of trade news, articles, publications, providing information on Firm events
Legal basis of processing: Your informed consent
Data subjects: Natural person clients or natural persons acting as the representative of legal person clients who request newsletters.
Scope of processed data: Name, email address.
External and internal users of the processed data who have access to the data:
Internal parties: Authorised staff and members of the Lajer Attorneys Partnership, External parties: None
Transfer of personal data to third countries or international organisations: None.
Retention period and deletion of data: Retention until and deletion upon withdrawal of consent.
What rights do I have regarding data protection?
All data subjects have access rights under GDPR Article15, pursuant to which they can request information from the Firm on their personal data processed.
You may request that inaccurate, incomplete personal data relating to you are completed or corrected (right to rectification, GDPR Article16).
Furthermore, you may request that the Firm delete personal data relating to you without undue delay if the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, or if you have withdrawn your consent constituting the basis of and there is no other legal basis for processing, of if you have lodged a successful objection to processing and there are no overriding legitimate grounds for processing or if the processing of personal data was unlawful (right to erasure, GDPR Article17).
You may request that the Firm limit processing if one of the following is met:
(a) You dispute the accuracy of the personal data, in which case the limitation shall apply to the period that allows the Firm to verify the accuracy of the personal data;
(b) Data processing is unlawful, and you are opposed to the deletion of data, instead requesting the restriction of their use;
(c) The Firm no longer needs the personal data for the purpose of processing, but you need them to file, assert or defend legal claims;
(d) you have objected to processing, in which case the restriction shall apply for as long as it can be determined whether the legitimate reasons of the Firm take precedence over your legitimate reasons (right to restriction of processing GDPR Article18).
You have the right to object within the meaning of GDPR Article21 (explained in detail later).
You have the right to receive, in a structured, commonly used and machine-readable format, the personal data that pertains to you and you will have provided to the Firm, if processing is based on your consent or processing is based on the performance of the contract concluded with you and if processing is automated (right to data portability, GDPR Article20).
In addition to the above, you have the right to lodge a complaint about data processing if you believe that the Firm has infringed its obligation referring to processing. If you do not agree with the Firm’s response to your complaint or the Firm fails to respond within 25days, you may seek remedy at a court of law. Proceedings may, at your discretion, be brought before the regional court according to your home address or place of residence.
You may furthermore lodge a complaint (GDPR Article77) with the Hungarian National Authority for Data Protection and Freedom of Information (registered office: 1125 Budapest, Szilágyi Erzébet fasor 22/C (Hungary); mailing address: 1530 Budapest, Pf.: 5; Phone: +36-1-391-1400, fax: +36-1-391-1410; email: ugyfelszolgálat@naih.hu; website: www.naih.hu). In addition, you may seek a grievance fee in the event of an infringement of your personality rights, and claim damages for unlawful processing or the infringement of data security requirements from the Firm before a court.
Am I required to disclose my information?
We strive to only request personal information from you that may be required for achieving the purpose of processing, however, you must provide such data—other than cases of processing based on consent—so that you can take advantage of the respective option (e.g. receiving newsletters) or for us to be able to establish a business relationship.
To what extent is decision-making automated?
We do not use automated decision-making processes.
Do you engage in profiling?
We do not engage in profiling.
Security of Personal Data
The Firm implements appropriate state-of-the-art measures to ensure a level of security appropriate to the risk. In addition to technical and organisational measures, it provides regular training and appropriate instructions to staff and members involved in processing. The Firm ensures that the data it processes are always accessible to duly authorised persons and remain inaccessible to anyone without authorisation. Furthermore, the Firm guarantees the integrity of the data and the resilience of the system. To that end, the Firm engages in continuous testing and assessment.
What kinds of cookies are used?
Although to a minimum extent, but the www.lajer.net website does use what are known as cookies, which you accept by visiting the site. You can find more information about the types of cookies we use, the features, data gathered by and the lifespan of the cookies in the annex to this Notice.
Information on the right to object within the meaning of GDPR Article21
You have the right to object, at any time, to the processing of your personal data based on GDPR Article6(1) point (e) or (f) (processing based on consideration of interests). Where you do exercise your right to object, we will no longer process your personal data, unless there are substantiated grounds which take precedence over your interests, rights, and freedoms or which relate to the submission, assertion, or protection of legal claims.
You must deliver your objection without any format-related requirements, specifying your name and mailing address, to one of the Lajer Law Firm contact details, marked at the beginning of this Notice.
–––
Annex
What is a cookie?
A cookie is a small file, an information identifier, that is placed on your computer. Using cookies helps us store information about your (previous) browsing on our website (“identifiers”) in your browser (on your computer). It is important that cookies are not a means to provide websites with information that you do not wish to provide, and that websites do not get access to files stored on your computer by using cookies.
Why use cookies?
We use the information we collect based on cookies to ensure that our website works, improve its services, and enhance user experience. The legal basis of processing is therefore a contractual legal basis within the meaning of GDPR Article6(1)(b).
Can I be identified based on the cookie?
No. You cannot be individually identified based on the information collected in this way.
What kinds of cookies do you use?
We also use the very widespread Google Analytics technique. It is an internet information and analytics service operated by Google Inc. that enables Google and website operators to have an understanding of what kind of users use a website, and how. Cookies placed in this way collect information about the device used for browsing and the browser, IP addresses, and data about the activity on the respective website. Such cookies are deleted after a maximum of two years after use. You can find details at the following links:
https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage
https://policies.google.com/technologies/cookies
That latter link also provides information on the option of restricting data processing.
In respect of this service, the processor is Google Inc., Amphitheatre Parkway, Mountain view, CA 94043, United States of America.
Can I delete cookies?
Of course! You can find help about that for different browsers here:
Firefox
https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Chrome
https://support.google.com/chrome/answer/95647
Edge
Internet Explorer
Safari
https://support.apple.com/en-us/HT201265
We particularly call your attention to the https://optout.networkadvertising.org website, where you can unsubscribe and disable your external provider cookies.
However, please take a moment to consider that cookies are designed to support and facilitate the use of the website and its processes, so you may not be able to fully use the website’s features if you disable or delete cookies, and that the website will work differently from the way you may want and how it was intended to when you browse it.
Please feel free to reach out to us if you have any questions about the above.
Lajer Ügyvédi Iroda Telephone: 06 1 354-3640 E-mail: titkarsag@lajer.net