Privacy notice

name: Gerey Ügyvédi Iroda
address: H-1125 Budapest, Tündér Lépcső 7/D, Hungary
email: gerey@gerey.hu

website: gerey.hu/en

4. Purpose and legal basis of the data processing:

Legal basis of data processing:

a) A voluntary contribution by you concerned to the processing of data pursuant to Article 6 (1) (a) of the GDPR on the basis of appropriate information (hereinafter referred to as: Contribution)
b) According to Article 6 (1) (b) of the GDPR, data processing is necessary for the performance of a contract in which you, as a party, are involved (hereinafter referred to as "Performance of the Contract")
c) According to Article 6 (1) (c) of the GDPR, data processing is necessary to fulfill a legal obligation to the controller (such as fulfillment of the accounting obligation - hereinafter referred to as the “fulfilment of legal obligation”)
d) According to Article 6 (1) (f) of the GDPR, data processing is necessary for the legitimate interests of the controller or a third party (hereinafter referred to as "Legitimate Interest").

In detail the following:

The Gerey & Partners processes certain data on its business partners, depending on the nature of the business relationship, the content of the contract concluded with the business partner and the requirements of the relevant legislation.

The scope of the processed data may include the followings: name, contact data, status, position, any personal data relating to the management of the business partner, which helps the business relationship established with Gerey & Partners.

In respect of the rights and obligations related to the contractual relationship, we will process your personal data until the termination of the contractual relationship, the expiry of the limitation period of the rights and obligations arisen from the contractual relationship, or until the deadline specified in the legislation on the preservation period.

Personal data is retained for business marketing purposes for three years from the end of the commercial relationship.

7. Data transmission and data processors:

We hereby inform you that Gerey & Partners may use data processor during the data processing. In such cases, personal data will be transferred to our partner in order to realize the purpose of the data processing and we hereby warrants that your data will be processed by the data processor explicitly only for the purpose described in section 4. We will provide information on the person of the data processor.

The Gerey & Partners will not transfer personal data to a third country outside the European Union.

The Gerey & Partners communicates the data to the following:

–          The data processor of Gerey & Partners;

–          As part of their work recovering debts: organisations, officers of the court and ministerial officers;

The following persons have access to the personal data:

–          authorised staff of the Gerey & Partners and the employer of Gerey & Partners;

–          the accountant: KÖSZ STÚDIÓ Könyvviteli és Környezetvédelmi Szolgáltató Betéti Társaság (registered seat: H-1224 Budapest, Dénár u. 4., Hungary)

Upon your request, we will delete your personal data that we do not have a statutory obligation to store.

Where data processing is covered by point a) Section (1) Article 6 of the GDPR, the data subject is entitled to withdraw the consent at any time, which, however, does not affect the lawfulness of the data processing carried out on the basis of the consent prior to the withdrawal.

Upon your request and if the applicable law allows it, we will restrict the processing of your personal data.

Based on the point f) Section (1) Article 6 of the GDPR you may at any time, for reasons related to your own situation, object to the processing of your personal data. In this case, the controller may not further process the personal data unless the controller proves that the data processing is justified by compelling legitimate reasons that take precedence over the interests, rights.

The data subject may apply for legal remedies and complain to the National Privacy and Freedom Authority (Nemzeti Adatvédelmi és Információszabadság Hatóság) in respect of the data processing:
Seat: 1024 Budapest, Szilágyi Erzsébet fasor 22/C.
Website: http://www.naih.hu

The data subjects also have the right to submit a claim to the court. The competent court to deal with your complaint is:

Fővárosi Törvényszék
Postal address: 1055 Budapest, Markó utca 27.
Address: 1055 Budapest, Markó utca 27.

The Data Controller is entitled to unilaterally amend this Privacy Notice at any time. The Data Controller shall publish any amendments by making available, on the Website, the consolidated version of the Privacy Notice incorporating the amendments, under a dedicated menu item. Data subjects and Clients are requested to carefully review the Privacy Notice upon each visit to the Website.

This Privacy Notice is continuously accessible on the Website. Data subjects and Clients may open, view, print and save this Privacy Notice from the Website; however, they are not entitled to modify it—only the Data Controller is authorized to do so.

12. How does the Privacy Notice apply to the data subject and other Partners?

By entering into an engagement agreement for legal services, or by placing an order for such services, the Client automatically acknowledges the provisions of this Privacy Notice without the need for any further declaration of intent. Likewise, our other Partners, upon entering into a contract, automatically acknowledge the contents of this Privacy Notice without any additional declaration.

The provision of personal data is not mandatory for data subjects; however, it is indispensable for the conclusion and performance of the contract between the Client and the Data Controller, and constitutes a precondition for entering into such contract. Accordingly, if the provision of data is refused, no contractual relationship will be established between the Client and the Data Controller, or, where a contract has already been concluded, the Data Controller will be unable to perform it.

Our employees are regularly trained on data protection and information security requirements. Personal data are stored on servers rented by us and on the hard drives of the Data Controller's computers, to which access is restricted to a limited group of authorized personnel under strict access control rules.

Access to data and documents stored in the document management system is only possible with a password and appropriate authorization. The use of local machines is password-protected.

Our servers are located in secured server rooms with protection against water damage, fire, and unauthorized access.

Our IT systems are tested and audited periodically and on a recurring basis to ensure and maintain data and IT security.

Office workstations are password-protected; the use of external data carriers is restricted and permitted only under secure conditions and following verification.

All systems and system components of the Data Controller are protected by continuous and regular anti-malware measures.

Security functions are treated as a priority and are handled separately in the design and operation of programs, applications, and devices.

Protection of data relevant to the security of information systems (e.g. passwords, access rights, logs) is ensured through the allocation of access rights.

Backups of data are created daily and stored for 6 days, while weekly backups are retained for 4 weeks. Our servers are redundant and provide full backup functionality. Access to backups is limited to a narrow group of authorized personnel.

For electronically transmitted messages and files, we ensure data integrity for both control (communication) data and user data in compliance with secure data exchange requirements.

With respect to networks used for data transmission, we ensure an appropriate level of security to prevent unauthorized connections and interception.

We comply with data security requirements in document management as well, as defined in our document handling policies.

To ensure physical data security, we provide adequate locking and protection of access points and apply strict visitor and entry regulations.

Rooms designated for storing data carriers are designed to provide sufficient protection against unauthorized or forceful entry, fire, and natural disasters. Data carriers used for data transfer, backup, and archiving are stored only in securely locked locations.