Please read this notice carefully to understand how we process your personal data and to learn about your rights in connection with the processing. The SetupInHungary website (setupinhungary.com) is operated by Dr. Varga P. Ügyvédi Iroda (Dr. Varga P. Law Firm, hereinafter: Controller or Attorney). In the course of its activities, the Controller pays particular attention to the protection of personal data, compliance with mandatory legal provisions, and secure and fair data processing.
Data is processed in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter: GDPR), Hungarian Act CXII of 2011 on informational self-determination and freedom of information (Infotv.), Act LXXVIII of 2017 on attorneys' activities (Üttv.), and Act LIII of 2017 on the prevention and combating of money laundering and terrorist financing (AML Act, "Pmt.").
Name: Dr. Varga P. Ügyvédi Iroda (Dr. Varga P. Law Firm)
Registered seat: 1068 Budapest, Benczúr utca 28., Hungary
Website: www.drvlegal.hu, setupinhungary.com
E-mail: info [at] drvlegal [dot] hu
Where processing is based on your consent under Article 6(1)(a) GDPR, you give your consent by voluntarily providing your data, and you may withdraw it at any time without giving reasons; withdrawal does not affect the lawfulness of processing carried out before the withdrawal. Processing necessary for the performance of a contract is based on Article 6(1)(b) GDPR; processing required by a legal obligation on Article 6(1)(c) GDPR.
| Processing activity | Categories of personal data | Purpose of processing | Legal basis | Retention period |
|---|---|---|---|---|
| Contact form | Name, e-mail address, and the content of your message | Answering the question you have asked | Your voluntary consent [Art. 6(1)(a) GDPR] | Until the purpose is fulfilled or your consent is withdrawn |
| Chat (website messenger) | Name, e-mail address, and the content of the messages sent in the chat | Answering the question you have asked, including sending the answer by e-mail if you are no longer available in the chat | Your voluntary consent [Art. 6(1)(a) GDPR] | Until the purpose is fulfilled or your consent is withdrawn |
| Company formation form – contact person | Name, e-mail address, phone number | Fulfilling your request for a quote, keeping contact | Your voluntary consent [Art. 6(1)(a) GDPR] and steps taken prior to entering into a contract [Art. 6(1)(b) GDPR] | If no engagement is concluded, until the purpose is fulfilled; in the event of an engagement, for 5 years from its termination (general limitation period under the Hungarian Civil Code) |
| Company formation form – member(s), managing director(s), delivery agent(s) | Name, e-mail address, residential address | Fulfilling your request for a quote and performing the engagement contract for the company formation | Your voluntary consent [Art. 6(1)(a) GDPR] and performance of the contract [Art. 6(1)(b) GDPR] | For 5 years from the termination of the engagement; for as long as the document-retention obligation under Section 53 of the Üttv. applies |
| Client due diligence (KYC) and further data required for the company registration | Identification data under the AML Act (in particular: place and date of birth, mother's name, citizenship, ID document data and copies, tax identification number) | Fulfilling the client due diligence obligation under the AML Act and conducting the company registration procedure | Compliance with a legal obligation [Art. 6(1)(c) GDPR; Sections 7–11 of the AML Act] | 8 years from the termination of the business relationship, pursuant to Sections 56–57 of the AML Act |
Your data may be accessed by the Attorney and the Attorney's staff (e.g. trainee lawyer, legal assistant), as well as by cooperating or substitute attorneys approved in the engagement contract. In operating the website and providing the service, the Controller uses the following processors and independent controllers:
As a rule, the Controller does not transfer data to third countries. Where such a transfer occasionally occurs (e.g. through the service providers above), it takes place exclusively under an adequacy decision of the Commission or subject to the safeguards of Articles 46 or 49 GDPR. In cases prescribed by law, the Attorney is obliged to transfer the data specified by law to the bodies designated therein.
You may exercise your rights by submitting a request to the Controller; the Controller responds without delay, but no later than within 30 days. You have the following rights:
The Controller processes personal data in a transparent and verifiable manner. Electronically stored data is protected by passwords, access restrictions, regular backups and anti-virus protection; paper-based documents by physical safeguards (locked office); data provided on the website is transmitted over an encrypted (HTTPS) connection. The Controller ensures compliance with data protection and professional secrecy legislation, in particular the rules of the Üttv.
Please address any complaint primarily to the Controller using the contact details in Section 2. You are also entitled to lodge a complaint with the supervisory authority:
Hungarian National Authority for Data Protection and Freedom of Information (NAIH)
Address: 1055 Budapest, Falk Miksa utca 9–11.; postal address: 1374 Budapest, Pf. 603., Hungary
Phone: +36 (1) 391-1400 · E-mail: ugyfelszolgalat@naih.hu · Web: naih.hu
Under Articles 78–79 GDPR you may also seek a judicial remedy against a legally binding decision of the supervisory authority, or against the Controller or a processor, if you consider that your personal data has not been processed in accordance with the GDPR. Proceedings may be brought before the competent regional court.
Budapest, 17 July 2026
Dr. Varga P. Ügyvédi Iroda