Last update: September 1, 2026

Data controller

Dr. Kocsomba Nelli Ügyvédi Iroda (Dr. Kocsomba Nelli Law Firm; registered office: 1012 Budapest, Márvány u. 16., Hungary; registered with the Budapest Bar Association as a Law Firm under registration number 36063353; hereinafter: “we”, “us” or “the Firm” or “Law Firm”; e-mail: info@knip.hu).

Purpose and legal basis of data processing:

We process personal data for the following purposes:

• Handling Requests for Quote: managing the data of contracting authorities and their contacts for the purpose of preparing and communicating bids. The legal basis for processing is your consent or the legitimate interest of the Firm (in the case of contacts).
• Conclusion and performance of client engagements: processing of data of natural person clients, their contact persons, third parties and persons involved in proceedings for the purpose of performance of the contract, enforcement of legal claims and defence. The legal basis for the processing is the performance of the contract, the legitimate interest of the Firm or your consent, or, in the case of special data, the establishment, exercise or defence of legal claims.
• Preventing money laundering and terrorist financing (due diligence): identification and verification of clients and beneficial owners based on legal obligations.
• Client identification: identification of clients and their representatives under a legal obligation.
• Remote countersigning procedure: the processing of moving image and sound recordings made during the countersigning of documents, as required by law.
• Taxation and Accounting: tax and accounting compliance based on legal obligations.
• Meeting the Firm’s record-keeping obligations: Keeping compulsory records as required by law to ensure the security and controllability of the lawyer’s activities.
• Other requests: to reply to requests addressed to the Firm with your consent or in the legitimate interest of the Firm.
• Direct marketing: contacting potential clients and their contacts to recommend legal services. The legal basis for processing is your consent or the legitimate interest of the Firm (in the case of contacts).

The provision of personal data is necessary for the execution of the client’s mandate. If you do not provide the required information, we will not be able to complete the client due diligence process and we will be required to refuse to provide legal services.

The personal data sources:

Sources of personal data include the Client, public databases (such as the public register of companies, the official register of addresses and the register of trademarks), official publications, other legal service providers, courts and authorities, and data provided directly by you.

Recipients:

We keep your data secure and respect the client-attorney privilege. We will not disclose your information to third parties unless we are required to do so by law; or you authorise such disclosure. We store electronic documents and copies of documents securely on our hosting providers’ servers. We implement measures to ensure an adequate level of data protection for personal data transferred abroad. Please contact us at info@knip.hu if you would like a copy of these measures.

Data retention:

Our data retention is in accordance with the statutes of the Hungarian Bar Association and Hungarian law. In general, we retain data for five years, or at least 8 years after the conclusion of an assignment (Section 56(2) of the AML Act), and if the mandate involves countersigning documents, the relevant documents will be kept for at least 10 years (in accordance with Section 53(5) of the Act on the Legal Profession). Upon the expiry of the record retention period, the documents will be destroyed or deleted in a secure form.

Rights:

In accordance with the applicable data protection legislation, you have the right (i) to access your personal data, (ii) to rectify inaccurate data, (iii) to request erasure, (iv) to restrict processing, (v) to exercise the right to data portability, or (vi) in certain cases, to object to processing. If you believe that your data protection rights have been infringed, you may lodge a complaint with the competent data protection supervisory authority, i.e. the National Authority for Data Protection and Freedom of Information in Hungary (1055 Budapest, Falk Miksa utca 9-11.).

More detailed information can be found in our full privacy notice below.

Full privacy notice

For clients, contacts and third parties

This Full Privacy Notice (“Notice”) is addressed to the natural person clients of Dr. Kocsomba Nelli Ügyvédi Iroda (Dr. Kocsomba Nelli Law Firm; registered office: 1012 Budapest, Márvány u. 16., Hungary), as well as to the contact persons of its legal person clients, including its directors, employees and owners (collectively “Contact Persons”) and third parties involved in client matters. Information about natural person clients, their contacts and third parties are referred to as “personal data”.

Who is the controller of your data?

We, Dr. Kocsomba Nelli Ügyvédi Iroda (Dr. Kocsomba Nelli Law Firm; registered office: 1012 Budapest, Márvány u. 16., Hungary; registered with the Budapest Bar Association under registration number 36063353; e-mail: info@knip.hu) as data controller (“we”, “us” or “the Firm”) pay special attention to the protection of your personal data and the lawfulness of data processing.

Why do we store and process your personal data?

We process your personal data for the purposes as follows:

• Handling requests for quote:
  for making the offer, we will process the name, address, e-mail address and telephone number of the natural person requesting the quote. The legal basis for processing is your consent. We store your data for the duration of the offer period indicated in the quote, but not longer than consent withdrawal. The provision of the data is a prerequisite for making an offer, failing which the offer cannot be made. The data is provided by the contracting entity and this service is voluntary. We will also process the name, e-mail address, telephone number and position of the contracting entity’s agents, representatives and contact persons. The legal basis for this is our legitimate interest. We will process the data for the duration of the binding offer period indicated in the offer, but up to the time of a successful objection. The processing of these data is also a prerequisite for the submission of the offer, in their absence the offer cannot be made. The source of the data is the potential client or its agent, representative, contact person or other public source.
• Conclusion and performance of the engagement:
  When concluding and performing the engagement, we process the surname and forename, address, mother’s name, place and date of birth of the natural person client, as well as data related to the subject of the engagement. The legal basis for data processing is the performance of the contract. Unless otherwise provided for in the Act on the Legal Profession, we store the data until the limitation period for claims arising from or in connection with the contract (usually 5 years or the period specified in the contract). The provision of the data is an essential precondition for the conclusion and performance of the contract; in their absence, the contract may not be concluded or the effectiveness of performance may be reduced or rendered impossible. The source of the data is the natural person client, the provision of the data is voluntary. The name, e-mail address, telephone number and position of the client’s proxies, representatives, contacts are also processed because of our legitimate interest. Unless otherwise provided for in the Act on the Legal Profession, we store the data until the expiry of the limitation period for claims arising from or in connection with the contract (5 years or according to the contract), but at most until a successful objection. The provision of the data is a precondition for the conclusion and performance of the contract, failing which the conclusion of the contract may become impossible or the effectiveness of performance may be reduced/rendered impossible.

  The source of the data is the client who is not a natural person. In the course of the performance of the client mandate, in connection with the subject matter of the mandate, we process the names and other personal data of natural persons related to the client (e.g. relatives, representative of a non-natural person, proxy), based on legitimate interest, as communicated to the Law Firm. Unless otherwise provided for in the Act on the Legal Profession, we process the data until the limitation period for claims arising from or in connection with the contract (5 years or according to the contract), but at most until a successful objection. The provision of the data is a precondition for the execution of the order, failing which the effectiveness of the execution of the order may be reduced or rendered impossible. The source of the data is the client, the data subject, other public sources or documents related to the case. In addition, we also process data relating to natural persons (e.g. opposing party, intervener, witness, legal representative, judge, administrator) appearing in any capacity in judicial, administrative or other proceedings related to the subject matter of the mandate (e.g. name, telephone number, e-mail address, represented person, capacity of representation, data relating to the judicial/administrative proceedings), as well as data falling under special categories of personal data. The legal basis for this is consent in the case of a natural person client, legitimate interest in the case of other data subjects [Article 6(1)(a) and (f) GDPR] or processing necessary for the establishment, exercise or defence of legal claims [Article 6(1)(f) GDPR; Article 9(2)(f) GDPR in the case of special categories of data]. Unless otherwise provided for in the Act on the Legal Profession, the data are stored until the limitation period for legal claims arising from or in connection with the contract (5 years or according to the contract). In the case of consent, we will keep the data until revocation, in the case of legitimate interest until a successful objection at the most. The provision of the data is a prerequisite for the execution of the order; in their absence, the effectiveness of the execution of the order may be reduced or rendered impossible. The source of the data is the client or the data subject.

• Money laundering and prevention of terrorist financing (due diligence):
  for the purpose of identification and verification under the Money Laundering and Terrorist Financing Act (AML/CFT Act), we process the surname and forename, name and surname at birth, nationality, place and date of birth, mother’s maiden name of the natural person client and of the natural person client’s authorised representative, holder of a power of attorney, representative, address (or, in the absence thereof, place of residence), type and number of his/her identification document, capacity as a prominent public figure (in the case of a natural person client), a copy of the document proving his/her identity, and the moving image and audio recording of the natural person made during the identification of the natural person through the electronic communications network. The legal basis for this is the compliance with a legal obligation (Sections 7 and 19 of the AML Act). The data are stored for 8 years, exceptionally for 10 years, from the termination of the business relationship or the execution of the instruction (Sections 56, 57 and 58 of the AML Act). The provision of the data is based on a legal obligation, the data subject must provide the data, in case of failure to do so, the contract cannot be concluded. The surname and forename, name and forename at birth, nationality, place and date of birth, address (or, in the absence thereof, place of residence), prominent public figure, nature and extent of the ownership interest of the beneficial owner, as well as the moving image and sound recording of the natural person who has made a declaration in relation to the beneficial owner via an electronic communications network are processed, also on the basis of a legal obligation (Sections 8-9 of the AML Act).
• Client identification:
  the identification of the client and the person acting on behalf of the client under the Act on the Legal Profession includes the presentation of the document and the identification of the person acting on behalf of the client in accordance with Section 32 of the Act on the Legal Profession. Data obtained from the consulted registers during the data request indicated in Section 32 of the Act: natural person identification data (name and surname, name and surname at birth, place of birth, date of birth, mother’s name and surname at birth), nationality (statelessness, refugee, immigrant, settled or EEA national status), address, facial image, signature, and other data indicated in Section 32 of the Act. The legal basis for this is the fulfilment of a legal obligation (Section 32 of the Act on the Legal Profession). The processing of the data lasts until the identification has been completed. The provision of the data is based on a legal obligation, in the absence of which the contract cannot be concluded.
• Remote countersigning process:
  signing a document or recognising a signature as one’s own via an electronic communications network means the processing of a moving image and sound recording of a previously identified natural person via an electronic communications network. The legal basis for this is compliance with a legal obligation (Section 44 (2) of the Act on the Legal Profession). The data are stored for the duration of the retention of the countersigned document pursuant to the Act on the Legal Profession. The provision of the data is based on a legal obligation, the data subject must provide the data and in case of failure to do so, no countersigning may be made or only be conducted in-person.
• Taxation:
  for the purposes of tax compliance, the personal data specified in the Act on the Rules of Taxation are processed, based on the fulfilment of a legal obligation (Section 34(2), Section 78(3)-(4) and Sections 202-205 of the Act on the Rules of Taxation). The data are stored until the right to assess the tax has expired or, in the case of deferred tax, for 5 years from the last day of the calendar year in which the deferred tax becomes due. Data processing is based on a legal obligation.
• Accounting:
  in case of fulfilling the accounting requirements, personal data, in particular name and address, are processed in accordance with the provisions on accounting documents, based on the fulfilment of legal obligations (Sections 168-169 of the Accounting Act). We process the data for 8 years. Data processing is based on a legal obligation.
• Compliance with record keeping requirements:
  for the purpose of keeping a register of mandates requiring mandatory legal representation (to facilitate the security of legal transactions and to enforce the limits of the lawyer’s activity), we process the following data: natural person identification data (surname and forename, name and surname at birth, place of birth, date of birth, mother’s name and surname at birth), address, nationality (stateless, refugee, immigrant, settled or EEA national status), type and number of the identification document used for identification, the identifier of the response to the request for data for client identification, the case identifier of the cases in which the identification of the natural person is mandatory, as well as other data as defined in the AML Act. The legal basis for this is the fulfilment of a legal obligation (Section 33 of the Act on the Legal Profession). The data are stored for 8 years, exceptionally for 10 years, from the termination of the business relationship or the fulfilment of the order (Section 33 of the Act on the Legal Profession, Sections 56, 57 and 58 of the AML Act). The provision of the data is based on a legal obligation, the data subject must provide the data. In the case of an identified legal person or other entity, we also process the natural person’s identification data of the person acting on its behalf (name and surname, name and surname at birth, place of birth, date of birth, mother’s name and surname at birth). We keep a register of cases handled on a retainer basis (in order to check compliance with the rules governing the practice of the profession), in which case we keep the case identifier of the lawyer, the name of the client, the subject of the case, the date of the retainer agreement, the register number of the court proceedings relating to the case and the file number of other proceedings. The legal basis for this is the fulfilment of a legal obligation (Section 53 of the Act on the Legal Profession). The data are stored for 5 years after the termination of the mandate, 10 years after the countersignature of the deed in the case of the countersignature of a deed, and 10 years after the registration of the deed in the case of the registration of a right to real estate in the public register. Data processing is based on a legal obligation.
• Handling of other inquiries:
  for the purpose of responding to enquiries made to the Law Firm by a natural person, we process the name, telephone number, e-mail address and other personal data provided to the Law Firm by the natural person. The legal basis for the processing is your consent and we process the data until consent is withdrawn. The provision of the data is a prerequisite for responding to enquiries. The source of the data is the data subject. The name, telephone number, e-mail address and other personal data of the authorised representatives, agents, contacts of the person making the request will also be processed based on legitimate interest. Data will be processed until the purpose/interest ceases to exist or until a successful objection is raised. The data is provided on the basis of the requestor’s communication and is a prerequisite for responding to enquiries. The source of the data is the data subject or the person requesting the data.
• Direct marketing:
  when we contact prospect clients for direct marketing purposes, we process the name, address, email address and telephone number of the natural person potential client. The legal basis for this is your consent and we process the data until the purpose/interest ceases to exist, but not beyond the withdrawal of consent. In the absence of data provision, direct marketing is not possible; the data is provided by the potential client and is voluntary. In the case of proxies, representatives and contacts of a potential client, their names, e-mail addresses, telephone numbers and job titles will be processed. The legal basis for this is our legitimate interest, and the processing will continue until the purpose/interest ceases to exist, but not beyond a successful objection. The source of the data is the prospect, their agent, representative, contact person or other public sources.

What type/category of personal data we process and what is the source of the data?

We may obtain Personal Data from Clients, Client contacts or other public sources (such as the public register of companies, the official register of addresses and the trade mark register), other legal service providers, courts and authorities, and from information you provide directly to us. Such personal data may generally fall into the following categories:

• Identifying information such as name; name of representative, date and place of birth; passport, tax and identity documents and their numbers and copies;

• Contact details such as address, email address and telephone number(s);

• Work-related information, such as position and job title;

• Contract-related information, such as the subject of the contract and a description of the economic transaction;

• Bank details, such as bank account number and payment details;

• Communication details such as email content, business letters and other business documents;

• Sensitive data. In exceptional situations, we may process personal data relating to health or criminal convictions and offences.

If you are a contact person, we typically (i) have your name, title and contact details, such as your email address, telephone number, and (ii) do not receive or store information that could be considered “sensitive” to you. We will use information about you only for purposes that are customary in the context of our business relationship with you and your employer, such as regular contact with you regarding legal services, including providing you with information and inviting you to certain events or providing you with general information about us. The provision of personal data is necessary for the fulfilment of a client order. If you do not provide the required information, we are unable to complete the client due diligence process and we must refuse to provide legal services.

If you do not provide this information, we may not be able to fulfil the order, provide you with services or comply with applicable laws.

What is the legal basis for processing personal data?

We rely on the following legal bases for the processing of your personal data:

• Contract: If you are a natural person client, the usual legal basis for the processing of personal data is the performance of a contract or ancillary agreements between you and us or, at your request, the steps taken to enter into such agreements pursuant to Article 6(1)(b) of the GDPR. The provision of your personal data is voluntary; however, if you do not provide your data, we may not be able to enter into an engagement contract with you or fulfil the relevant engagement.

• Legitimate interests: where you are not personally our client, we have a legitimate interest in maintaining ongoing contact with you (as a person employed by, engaged by or providing services to our client); to facilitate and monitor our attorney-client relationship with a person who is our client; or to establish, enforce or defend our client’s legal claims or to ensure the effective performance of our client’s instructions (under Article 6(1)(f) of the GDPR). Our relevant legitimate interests are set out in the following section;

• Legal obligations: we may process your data in accordance with tax and/or accounting law, our obligations under the Act on the Legal Profession and for the purposes of preventing money laundering, fraud and terrorist financing (Article 6(1)(c) and (e) of the GDPR).

• We may process special categories of data either with your explicit consent (under Article 9(2)(a) of the GDPR) or if and to the extent necessary for the establishment, exercise or defence of legal claims (under Article 9(2)(f) of the GDPR).

What legitimate interests do we pursue in the processing of personal data?

Legitimate interest

Legitimate interest test

Direct marketing (about a potential client’s agents, representatives, contacts)

The law firm has a legitimate business interest in contacting potential clients and offering its legal services. This includes processing the data of potential clients’ agents, representatives and contacts. This processing is essential for the operation of the firm and the achievement of its business objectives.

Description of the legitimate interest test:

The purpose of the processing is to obtain business, which is clearly in the legitimate interest of the agency. The data (name, email address, telephone number, roster) are necessary for contact and enquiry purposes, and there is probably no less invasive way for the bureau to contact the appropriate contact person for a potential client. When considering the rights and interests of data subjects, it should be borne in mind that the data may also come from public sources, which reduces the invasiveness of the processing. It is important that data subjects have the right to object to processing and that the Firm must respect this right.

Request for quotes (agents, representatives, contact persons of the contracting authority)

It is in the legitimate interest of the law firm to make an individual offer to its potential clients. This requires the processing of the data of the contracting authority’s agents, representatives and contacts, as these data are a prerequisite for making an offer.

Description of the legitimate interest test:

The purpose of data processing is to make offers and to acquire clients, which is in the legitimate business interest of the agency. The contact details (name, e-mail address, telephone number, position) are essential for the preparation and communication of the offer; without them, the offer would be impossible. In considering the rights and interests of data subjects, it should be borne in mind that the processing of data is part of the bidding process, which may also be to the benefit of the data subjects. The data may also come from public sources and data subjects have the right to object to the processing. Conclusion and performance of an engagement Client’s proxies, representatives, contacts: it is in the legitimate interest of the law firm to provide effective and smooth legal representation and to fulfil the mandate. To this end, it is essential to maintain contact with the appropriate representatives of the client.

Natural persons connected to clients (e.g. relatives, representative of a non-natural person, proxy)

It is in the legitimate interest of the firm to process data in connection with the subject matter of the mandate which are necessary for the successful conclusion of the case. This often includes the processing of data of persons connected to the client.

Natural persons appearing in any capacity in judicial, administrative or other proceedings (e.g. opposing party, intervener, witness, legal representative, judge, administrator): the legitimate interest of the Firm in the presentation, enforcement or defence of legal claims makes it necessary to process the data of persons involved in the proceedings, including data falling under special categories of personal data.

Description of the legitimate interest test:

The firm has a legitimate interest in the provision of legal services, the performance of contractual obligations, and the assertion and defence of legal claims, which are essential to the practice of law. The data (name, contact details, position, relevant case information) are indispensable for the performance of the lawyer’s duties, for effective communication and for the conduct of legal proceedings; without them, the performance of the mandate would be impossible. When considering the rights and interests of the data subjects, it should be considered that the processing takes place in the context of the mandate of the lawyer, which is in the interest of the client. Although the rights of data subjects may be limited, the nature of legal professional privilege and legal proceedings means that this interest generally overrides the interests of data subjects, in particular where the data are necessary for the establishment, exercise or defence of legal claims. Data subjects have the right to object, but the success of the objection will depend on the circumstances and the purpose of the processing.

Other requests (from the requesting person’s agents, representatives, contacts)

It is in the legitimate interest of the law firm to be able to respond effectively to requests made to it, regardless of who is acting on behalf of the person making the request. This ensures smooth communication and proper information for clients and interested parties.

Description of the legitimate interest test:

The Firm has a legitimate interest in communicating effectively and responding to incoming enquiries. The contact details (name, telephone number, e-mail address and any other details provided) are necessary for the purpose of responding and any further communication; failure to provide these details may prevent the Firm from responding to enquiries. When weighing the rights and interests of data subjects, it should be considered that the processing is also in the interest of the data subject, as it allows him/her to obtain a response to his/her query. The data may also come from public sources. Data subjects have the right to object to processing and the Firm must respect this right.

If you need more detailed information about our legitimate interests and the results of the legitimate interest test, please contact us at the e-mail info@knip.hu

How long do we keep your personal data?

We will retain your data for varying periods of time during and after our relationship with you, depending on the reason why we are required to retain that data. The personal data we process for the purposes set out above will be kept for as long as you (you or the person who employs you or with whom you work or to whom you provide services) are in a client relationship with us and for 10 years thereafter in accordance with the Hungarian Act on the Legal Profession. In relation to the processing of your personal data in connection with our conflict-of-interest check database, we will process your personal data for 10 years after the termination of your client relationship with us. We need to keep your various data for a number of reasons, including: the limitation period under civil law (which is five years under Section 6:22(1) of the Hungarian Civil Code); tax law requirements (which is the limitation period for the right to initiate a tax audit, which is generally five years from the last day of the year in which the tax return for the relevant period was due (Sections 78(3) and 202(1) of the Act on the Rules of Taxation)). Accounting requirements require us to retain accounting documents (including contracts, communications and related business correspondence) with a retention period of at least eight years from the end of the relevant financial year (under Section 169 of the Accounting Act). Thereafter, we will remove your personal data from our systems and records and/or take steps to properly anonymise it so that you can no longer be identified from it. If we process your data based on consent, we will process the data until consent is withdrawn or the purpose of the processing ceases to exist, after which we will securely delete the data.

Who has access to personal data?

Within our Firm, our staff, collaborating lawyers and law firms and the persons performing IT tasks have access to your data on a “need to know” basis. We may transfer personal data to other recipients for the following reasons:

• External Service Providers: we use external IT systems or services provided by third party service providers to support our internal processes. Personal data may be made available to such service providers for use for the purposes of that system or service and is subject to appropriate data processing agreements between the Law Firm and the service provider concerned (hosting and support): hosting: Microsoft Ireland Limited, South County Business Park, One Microsoft Place, Carmanhall and Leopardstown, Dublin, D18 P521, Ireland; Google Ireland Ltd.; Google Building Gordon House, Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7; for accounting services: accounting service providers in Hungary)

• Courts and public authorities: we may need to transfer personal data as part of filings to courts and public authorities where this is necessary to effectively represent the interests of the client.

• Counterparties and other third parties: if you instruct us in a client matter, we may need to disclose your personal data to the counterparty or its legal representative as part of the performance of the client engagement if you instruct us to do so. We may transfer your personal data to external law firms and legal experts in legal matters where this is necessary for the establishment, exercise or defence of legal claims.

• Budapest Bar Association and Hungarian Bar Association: our activities are supervised by the Budapest Bar Association and the Hungarian Bar Association, and we may be required to transmit personal data to the Bar Association upon their binding request.

International data transfers

Personal data may also be transferred to persons in third countries outside the European Economic Area (“EEA”). If your personal data is transferred outside the EEA and Switzerland, we will take appropriate measures to ensure that your personal data is adequately protected, regardless of the country to which it is transferred, in accordance with our legal obligations. Such measures may include the application of an EU Commission decision on data protection compliance (a so-called “adequacy decision”), the Commission’s standard contractual clauses (Model Clauses) where there is no EU Commission adequacy decision for the transfer in question. Please contact us at info@knip.hu if you would like to receive a copy of these measures to ensure the adequacy of international transfers of personal data.

What rights do data subjects have?

Under applicable law (e.g. GDPR), you have the following rights:

• Right of access: you have the right to obtain confirmation from us whether or not personal data relating to you is being processed and, if so, to request access to your personal data. The information on access will include, among other things, the purposes of the processing, the categories of personal data concerned and the recipients or categories of recipients to whom the personal data have been or will be disclosed. You have the right to receive a copy of the personal data being processed. If you request additional copies, we may charge a reasonable fee based on administrative costs.

• Right to rectification: you have the right to ask us to rectify inaccurate personal data about you. Depending on the purpose of the processing, you have the right to have incomplete personal data completed, including by submitting a supplementary declaration.

• Right to erasure (right to be forgotten): you have the right to ask us to erase your personal data. This may prevent us from providing legal services to you or the client you represent in the future.

• Right to restriction of processing: you have the right to request the restriction of the processing of your personal data. This may prevent us from providing legal services to you or the client you represent in the future. In this case, the data concerned will be flagged and processed only for certain purposes.

• Right to data portability: you have the right to receive personal data about you in a structured, commonly used and machine-readable format, and the right to have that personal data transferred to another organisation without our interference.

• Right of objection: you have the right to object to our processing of your personal data on grounds relating to your particular situation at any time, and you may request us not to process your personal data. doing so may prevent us from providing legal services to you or the client you represent in the future. if you have a right to object and you exercise that right and it is granted, we will no longer process your personal information for such purposes. there is no cost to you to exercise this right. such a right of objection does not exist, in particular where the processing of your personal data is necessary for pre-contractual steps or for the performance of a contract already concluded.

Please note that the above rights may be limited in accordance with applicable law. Accordingly, due to attorney-client privilege requirements, our client may prohibit us from providing you with access to your personal information. You have the right to lodge a complaint with the competent supervisory authority of the Member State of your habitual residence regarding an alleged breach of the GDPR. If you reside in Hungary, this is the National Authority for Data Protection and Freedom of Information (address: 1055 Budapest, Falk Miksa utca 9-11., phone: +36-1-391-1400, fax: +36-1-391-1410, e-mail: ugyfelszolgalat@naih.hu)

How to contact us?

To exercise your rights, please contact directly Dr. Kocsomba Nelli Ügyvédi Iroda, e-mail: info@knip.hu; Tel: +36-30-777-5648

Last updated: September 1, 2026.