Data Protection

Principles

The website Dobrocsi.hu is operated by Dobrocsi Law Office.
The Dobrocsi Law Office (registered office: 1136 Budapest, Pannónia utca 30. II/2.; hereinafter: the “Controller”) provides the following information in accordance with:

  • Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information (“Infotv.”),

  • Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter “GDPR”),

  • Act V of 2013 on the Civil Code (“Ptk.”) regarding business secrets,

  • Act LXXVIII of 2017 on Attorneys (“Üttv.”) regarding attorney-client confidentiality,

to its clients, partners, and visitors of the website www.dobrocsi.com (“Data Subjects”).
This notice describes the principles and practices of handling personal data, organizational and technical measures for data protection, and the rights of Data Subjects and their enforcement.


I. Data Controller

  • Name: Dobrocsi Law Office

  • Address: 1136 Budapest, Pannónia u. 30. II/2.

  • Phone: +36 70 337 2333; +36 70 433 7979

  • Email: office@dobrocsi.com

  • Website: www.dobrocsi.com

  • Representative: Dr. Krisztián Ervin Dobrocsi


A. Website Data Processing

  • The website can be accessed freely without providing personal data or revealing identity.

  • Certain links may lead to external websites for which the Controller is not responsible.

  • The website uses Google Analytics to collect anonymous visitor information via cookies. No personal data is collected.

  • More information on Google Analytics: Google Privacy Policy.


B. Contact and Communication

  • Activity: Processing of personal data provided during contact.

  • Purpose: Contact and communication.

  • Legal basis:

    • Consent of the Data Subject [GDPR Art. 6(1)(a)]

    • Steps taken at the Data Subject’s request prior to entering into a contract [GDPR Art. 6(1)(b)]

  • Data Subjects: Persons contacting the Controller via e-mail, phone, or the “Message Us” form.

  • Personal Data Processed:

    • Name

    • Email address

    • Phone number

    • Other personal information provided during communication

    • Description of the case and related documents

  • Retention: Until the purpose of contact is fulfilled, or until a service agreement is concluded.

  • Recipients: Personal data is not disclosed to third parties unless required by law or with prior explicit consent.

Data Subject Rights:

  • Request information, access, rectification, deletion, restriction, objection, portability, legal remedies at NAIH or court.


C. Legal Services

  • Activity: Legal representation, legal advice, document drafting.

  • Purpose: Fulfillment of contracts, legal obligations, communication, invoicing, case records.

  • Legal basis:

    • Contract performance [GDPR Art. 6(1)(b)]

    • Legal obligations (Act on Attorneys, AML law, Accounting Act) [GDPR Art. 6(1)(c)]

  • Data Subjects: Clients (principals).

  • Personal Data:

    • Name, address, mother’s name

    • Place and date of birth

    • Email, phone, nationality

    • ID numbers (passport, ID card, residence card)

    • Tax number, personal number

    • Face image

    • Client’s representative contact data

    • Facts and case information, legal documents

  • Retention:

    • Five years after termination of mandate

    • Ten years for notarized documents or property-related registrations

    • Eight years for accounting and invoicing records

  • Data Processors:

    • Könyvelés Felsőfokon Bt. – bookkeeping

    • LIW Intermedia Kft. – website management

Rights: Similar to Section B.


D. Partners’ Data Processing

  • Activity: Contract execution with partners, contractors.

  • Purpose: Communication, invoicing, contract performance.

  • Legal basis:

    • Contract performance [GDPR Art. 6(1)(b)]

    • Accounting obligations [GDPR Art. 6(1)(c)]

  • Data Subjects: Natural person contractors, partners’ representatives.

  • Personal Data: Name, address, email, phone of partner or their representative.

  • Retention:

    • Five years after completion of the contract

    • Eight years for accounting purposes

  • Data Processors: Same as above.

Rights: Same as Section B.


III. Rights of Data Subjects

Data Subjects may exercise their rights:

  • By post

  • By email

  • By phone

Controller’s obligations:

  • Respond within 1 month in a concise, transparent, and clear manner.

  • Requests are free of charge, except repeated requests within one year where proportional costs may apply.

Key Rights

  • Access & Information – confirmation if personal data is processed.

  • Rectification – correction of inaccurate data.

  • Erasure (“Right to be Forgotten”) – when data is no longer necessary, unlawful, or requested by Data Subject.

  • Restriction – temporary blocking of data processing under certain conditions.

  • Portability – right to receive data and transfer to another controller.

  • Objection – against processing where applicable.

  • Legal remedy – complaint to NAIH or court.


IV. Business Secret

Business secrets include confidential facts, information, and data related to economic activities, whose unauthorized disclosure would harm the Controller’s interests. Protection also covers technical, financial, or organizational know-how with economic value.


V. Confidentiality Obligation

The Controller is bound by strict attorney-client confidentiality under the Üttv. This obligation:

  • Applies indefinitely, even after termination of the mandate.

  • Covers all case-related documents in any form.

  • May only be waived by the client or lawful representative (with exceptions in criminal defense).

  • Extends to employees, legal entities, and subcontractors handling confidential records.


VI. Applicable Laws

  • Act CXII of 2011 (“Infotv.”)

  • GDPR (EU 2016/679)

  • Civil Code (Act V of 2013)

  • Act on Attorneys (Act LXXVIII of 2017)

  • Act LIII of 2017 on AML

  • Accounting Act (Act C of 2000)

  • Act CL of 2017 on Taxation

  • Act XLVIII of 2008 on Economic Advertising

  • Act CVIII of 2001 on Electronic Commerce


VII. Cookies Policy

During website visits, cookies and similar technologies may automatically record technical information.

  • Session cookies – deleted when browser is closed.

  • Permanent cookies – stored to improve user experience and website functionality.

  • Google Analytics cookies – retain user and event data for 26 months.

Collected information may include:

  • IP address

  • Browser type

  • Device operating system (with settings such as language)

  • Time of visit

  • Referrer URL

  • Pages visited and time spent

These cookies cannot identify the visitor personally.

Details: Google partner sites and cookies


VIII. Miscellaneous

  • Links to third-party websites may exist; the Controller is not responsible for their practices.

  • The Controller does not make automated decisions or create profiles based on available data.

  • Issues not covered here are governed by GDPR and Hungarian law.

  • This policy is effective from May 25, 2018 until revoked.


 

en_USEnglish