Dr. Barbu Remus

Privacy Policy

Data Controller/Service Provider: Dr. Barbu Remus, sole practitioner attorney (address: 1132 Budapest, Alig utca 14. 1. em., KASZ: 36082829, phone: +36 30 955 0838, e-mail: drbrugyved@gmail.com, registered with: Budapest Bar Association).

This Privacy Policy is issued in accordance with Regulation (EU) 2016/679 (GDPR).

General Provisions

The Controller respects the right to informational self-determination and processes personal data in accordance with applicable Hungarian and EU data protection laws.

By using the website or sending personal data by e-mail, the data subject consents to the collection, processing and transfer of personal data to the extent necessary for the purpose for which it was provided.

Definitions

Controller, Processing, Personal Data, Consent, Objection, Processor, Data Subject, Data Transfer, Disclosure, Erasure, Restriction and Data Breach shall have the meanings set out in applicable data protection legislation.

Purpose and Legal Basis of Processing

Personal data are processed on the basis of consent, contractual necessity, legal obligations (including AML requirements under Act LIII of 2017), legitimate interests, and professional record-keeping obligations under the Act on the Activities of Attorneys.

Data may include identification data, contact details and other information necessary for legal services.

The Controller does not transfer personal data to third parties unless required by law or with the explicit consent of the data subject.

The purpose of processing includes: performance of the services offered on the website, contact management (GDPR Art. 6(1)(a)), preparation of contracts and related documents (GDPR Art. 6(1)(b)), client due-diligence under AML legislation (GDPR Art. 6(1)(c)), and record-keeping as required by the Act on the Activities of Attorneys (GDPR Art. 6(1)(c)).

Retention

Data are retained only as long as necessary for the relevant purpose or as required by law. Electronic deeds must be retained for 10 years, paper deeds for 5 years, and countersigned deeds together with related documents for 10 years. Other personal data obtained during client due-diligence must be retained for 8 years after the termination of the business relationship or completion of the transaction. Where a transaction does not proceed or where an enquiry does not result in a mandate, data are deleted 2 years after the enquiry.

Rights of Data Subjects

Data subjects may exercise the following rights by written request submitted by e-mail, post or telephone to the Controller. Requests will be answered within 30 days.

  • Right to information, what data are processed, on what legal basis, for what purpose, from what source and for how long.
  • Right to withdraw consent (GDPR Art. 7), without affecting the lawfulness of processing before withdrawal.
  • Right of access (GDPR Art. 15), to receive confirmation of processing and a copy of the data.
  • Right to rectification (GDPR Art. 16), to have inaccurate data corrected without undue delay.
  • Right to data portability (GDPR Art. 20), to receive data in a structured, machine-readable format.
  • Right to object (GDPR Art. 21), to ongoing processing based on legitimate interests.
  • Right to erasure (GDPR Art. 17), where the purpose no longer exists, consent is withdrawn, or processing is unlawful.
  • Right to restriction of processing (GDPR Art. 18), where accuracy is contested, processing is unlawful, or the data are needed for legal claims.

Remedies

Complaints may be submitted to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH; postal address: H-1530 Budapest, P.O. Box 5; phone: +36 (1) 391-1400; e-mail: ugyfelszolgalat@naih.hu; website: www.naih.hu) or to a competent court.

Data Security

The Controller applies administrative, technical and physical safeguards, including password-protected systems, monthly backups and secure document storage at the registered office, to protect personal data against unauthorised access, loss and every possible threat.

Website Information

The website may be visited free of charge and without providing personal data. The following data are recorded automatically: IP address, time of visit, and pages and content viewed. These data are used solely for website analytics and security monitoring.

Cookies may be used. The data subject may configure their browser to receive notification of or to refuse cookies.

Website content is informational only and does not constitute legal advice. The Controller excludes liability for any loss arising from the transmission, late arrival, error, download or unavailability of electronic content.