Data controller
The controller of hmhlegal.hu is Dr. Hampel Tamás Ügyvédi Iroda (tax number: 19063816-1-43), with its registered office at Ménesi út 70, 1118 Budapest, Hungary. The firm’s attorney is Dr Tamás Hampel, an active member of the Budapest Bar Association (KASZ: 36074668). Contact: tamas.hampel@hmhlegal.hu, +36 20 390 2090.
Website operation and security
The website runs on WordPress, Hello Elementor, Elementor and Polylang. The hosting provider and processor is Rackhost Informatikai Zártkörűen Működő Részvénytársaság (Rackhost Zrt.), Tisza Lajos körút 41, 6722 Szeged, Hungary; info@rackhost.hu. Rackhost processes hosting-related data on the firm’s behalf; processing takes place primarily in the EEA.
Access logs may be generated to serve the website and may include, for example, IP address, time, requested address and technical browser or connection data. The firm processes these data to operate the website, troubleshoot problems, prevent abuse and maintain information security. The legal basis is GDPR Article 6(1)(f): the legitimate interest in keeping the website available and secure. Log data are retained for as long as necessary for these purposes, in accordance with Rackhost’s deletion and backup cycles. Rackhost may also process data independently to secure its own systems; Rackhost’s own privacy notice applies to that processing.
Email and telephone enquiries
There is no contact form. Email and telephone links open the visitor’s own application; we receive personal data if the visitor sends an email or calls. We use the contact details and message to respond. Where a person requests steps before entering into a contract, the legal basis is GDPR Article 6(1)(b); for other general enquiries, it is GDPR Article 6(1)(f), our legitimate interest in handling and responding to enquiries. We retain the data until the response and any related follow-up have concluded, then delete them unless they are needed to establish, exercise or defend legal claims. This notice covers website use and enquiries made through it; where personal data are processed to provide legal services, separate information will be provided when applicable.
Cookies and language preferences
The Polylang language selector uses the pll_language cookie to remember the selected language; the plugin documentation specifies a one-year duration. The free CookieYes plugin operates locally in WordPress, without an external account or cloud service. The cookieyes-consent cookie remembers the cookie preference for 365 days. No optional cookies, analytics or marketing tracking are currently configured.
Under electronic communications privacy rules, storing information on or accessing information from a user’s device without consent may be permitted where it is solely for transmitting a communication or strictly necessary to provide a service explicitly requested by the user. This exception is not, by itself, a GDPR legal basis: the legal basis for personal-data processing connected with these cookies is our legitimate interest under GDPR Article 6(1)(f) in remembering the requested language and cookie preference, taking account of the individual’s interests and fundamental rights. Any non-essential cookie or similar technology introduced later will be activated only after any prior consent required by applicable rules has been obtained.
Fonts and external link
Elementor fonts are configured to load from the website’s own hosting. The website contains an external link to LinkedIn and no embedded LinkedIn content. Following the link takes the visitor away from this website; LinkedIn’s own privacy notice applies to its processing.
Rights and complaints
Subject to the conditions in the GDPR, individuals may request access to, rectification or erasure of their personal data, or restriction of processing; they may object to processing based on legitimate interests. The right to data portability applies under the conditions set out in the GDPR. Consent may be withdrawn at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal. Requests may be sent to the controller’s email address above.
We respond without undue delay and within one month at the latest. This period may be extended by up to two further months where necessary, taking into account the complexity and number of requests; we will explain any extension within the first month. Requests are generally free of charge. For manifestly unfounded or excessive requests, particularly repetitive ones, a reasonable fee may be charged or the request refused as permitted by the GDPR. We request additional identifying information only where there are reasonable doubts about identity and only to the extent needed to confirm it. If we take no action, we will explain why and inform the individual of available remedies within one month at the latest.
A complaint may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH), 9–11 Falk Miksa Street, 1055 Budapest, Hungary, naih.hu. Individuals may also seek a judicial remedy under the conditions set out in the GDPR.
In connection with website use and the enquiries described here, we do not make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect individuals.
Effective: 24 September 2026.