Privacy Notice
The purpose of this Notice is to record the data protection and data management principles applied by the Jeney Law Firm and to provide information regarding the processing of Personal Data collected on the Controller’s website (https://jeneyugyved.hu/) and provided by Users.
I. Definitions
1.1 Data Processing: Any operation or set of operations performed on Personal Data, regardless of the procedure used, including but not limited to collection, recording, organization, structuring, storage, adaptation, alteration, use, retrieval, consultation, use, disclosure, transmission, dissemination, or otherwise making available, publication, alignment or combination, restriction, erasure, and destruction of Personal Data.
1.2 Data Controller: The entity that determines the purposes and means of processing Personal Data, either alone or jointly with others. For the services referred to in this Notice, the Data Controller is:
JENEY LAW FIRM
Registered Office: 1/6. 20. Arany János str. Debrecen 4025 Hungary
Telephone: +36/52-410 008
Email:iroda@jeneyugyved.hu
Represented by: Dr. Ferenc Jeney, head of the office
1.3 Personal Data or Data: Any information relating to an identified or identifiable natural person (User), directly or indirectly.
1.4 Data Processor: A service provider who processes Personal Data on behalf of the Data Controller. For the services referred to in this Notice, possible Data Processors include:
a) ZkDesignStudio Kft. (44. A. bl. 2. fl Soroksári str. Budapest 1095 Hungary) – Website operation
b) Green Index Bt. (91 Derék str. Debrecen 4031 Hungary) – Accounting
c) KBOSS.hu Kft. (, 7/D Záhony str. Budapest 1031 Hungary) – Invoicing
d) Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; „Google“) – Statistics
1.5 User: A natural person who visits the Data Controller’s website and provides the data listed in Section II of this Notice.
1.6 Notice: This Privacy Notice is of the Data Controller.
II. Scope of Personal Data Processed
2.1 Users may request a quote or further information regarding the legal services offered by completing the contact form available on the Data Controller’s website. To complete the form, Users must provide the following Personal Data: name and e-mail address. Providing any additional Personal Data is not required. The Data Controller requests that no further Personal Data be shared until contacted by staff.
2.2 To provide a personalized service, the Data Controller places small data packages (known as “cookies”) on the User’s computer with the User’s prior consent. The User can consent to this by clicking the “Accept” button displayed in the cookie banner at the bottom of the page. If the User allows the use of cookies, the system automatically records the User’s IP address in addition to form and website settings.
The purpose of cookies is to ensure the optimal operation of the website and enhance the user experience. Users can disable cookies upon entering the website or later delete them from their computer. Users can also set their browsers to block cookies entirely. Users acknowledge that disabling cookies may impair the full functionality of the website.
2.3 The website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics also uses cookies, stored on the User’s computer, to analyze website usage.
Google uses this information for statistical purposes to evaluate how Users interact with the website, compile reports on website activity for the operator, and provide other related services.
Within Google Analytics, the IP address transmitted by the User’s browser is not combined with other Google data.
III. Purpose and Legal Basis of Data Processing
3.1 The purpose of Data Processing by the Data Controller includes:
a) Identifying the User and maintaining contact
b) Managing and responding to User inquiries
c) Enhancing the user experience and conducting statistical analysis of website traffic (via cookies)
Should the Data Controller intend to process data for any other purpose, Users will be informed in advance.
3.2 By submitting the contact form, the User voluntarily provides Personal Data to the Data Controller. Providing this data is not mandatory, but it facilitates faster communication via the website. The legal basis for processing Personal Data provided through the contact form is the User’s prior consent.
3.3 Data may be transferred to the Data Processors identified in this Notice without additional User consent. Personal Data may only be shared with third parties beyond this with the User’s explicit, prior consent.
IV. Principles and Method of Data Processing
4.1 The Data Controller processes Personal Data by the purpose limitation principle, the principle of fair processing, the principle of data minimization, applicable legislation, and the provisions of this Notice.
4.2 The Data Controller uses Personal Data strictly for the intended purpose necessary for service provision.
4.3 Personal Data will only be processed for the purposes defined in this Notice or by law. The scope of processed Personal Data is proportionate to the purpose and does not exceed it. If Personal Data is to be used for a purpose different from that for which it was originally collected, the User will be informed and their explicit, prior consent will be obtained, or they will be given the option to prohibit such use.
4.4 The Data Controller ensures the security of Personal Data, implements appropriate technical and organizational measures, and establishes procedures to protect the data from accidental loss, unlawful destruction, unauthorized access, unauthorized use, alteration, or dissemination. The Data Controller requires all third parties to whom Personal Data is transferred to comply with these obligations.
V. Duration of Data Processing
5.1 Personal Data and IP addresses provided via the contact form are stored for 30 days by the Data Controller’s system, after which they are deleted.
5.2 If a contract is concluded between the User and the Data Controller following the inquiry, the Personal Data necessary for contract performance may be processed beyond the initial 30 days. Users will be informed separately in such cases.
VI. User Rights and Enforcement
6.1 Users may request confirmation as to whether the Data Controller processes their Personal Data and, if so, access to such data. Users can request information about their Personal Data at any time by sending a letter, email, or completing the message section of the contact form. Written requests are considered valid if the User can be clearly identified. Email or form requests are considered valid only if sent from the User’s previously provided email address, although the Data Controller may request additional identification. Information requests may concern the User’s Personal Data, its source, purpose, legal basis, duration, details of Data Processors, related activities, and recipients of any data transfers.
6.2 Users may request the correction or modification of their Personal Data. Considering the purpose of processing, Users may also request incomplete Personal Data to be completed.
6.3 Users may request the deletion of their Personal Data.
Deletion may be refused:
(a) To exercise freedom of expression and the right to information
(b) If processing is authorized by law
(c) To establish, exercise, or defend legal claims
If deletion is denied, the Data Controller will inform the User of the reason. Once deletion is carried out, the erased data cannot be restored.
6.4 Users may request the restriction of processing if they contest the accuracy of the data. Restriction applies for the period necessary to verify the data’s accuracy. Disputed data will be marked until confirmed. Users may also request restriction if processing is unlawful, but they oppose deletion and request restriction instead, or if the Data Controller no longer needs the data, but the User requires it for legal claims.
6.5 Users may request that their provided Personal Data, processed by automated means, be handed over in a structured, widely used, machine-readable format and/or transferred to another controller.
VII. Data Processing by Third Parties
7.1 The Data Controller engages the Data Processors named in this Notice.
7.2 Data Processors do not make independent decisions and act only within the scope of their legal relationship with the Data Controller, following instructions. They process Personal Data according to GDPR requirements and provide declarations to the Data Controller regarding compliance.
7.3 The Data Controller supervises the activities of Data Processors.
7.4 Data Processors may engage additional processors only with the Data Controller’s consent.
VIII. Legal Remedies
8.1 For any questions or concerns related to Data Processing, Users may contact the Data Controller’s staff at iroda@jeneyugyved.hu
8.2 Users may file complaints with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH):
Address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c.
Phone: +36 (1) 391-1400
Email: ugyfelszolgalat@naih.hu
Website: www.naih.hu
8.3 Users may take legal action if their rights are violated. Jurisdiction lies with the competent court. Lawsuits may also be initiated before the court of the User’s residence or place of stay.
01.05.2025, Debrecen
Jeney Law Firm