IBA European Regional forum Annual retreat

5-8 March, 2025

Privacy Notice

1. The purpose of the data processing

Lakatos, Köves and Partners Law Firm („Data Controller„) is committed to the protection of personal data and considers the provision of appropriate information on the processing of personal data to be important.

For the registered participants being present at the IBA European Regional Forum Annual Retreat event held on 5-8 March, 2025 in Budapest („Event„), the Data Controller organises various activities, including dinners, social programs etc. („Activities„). In order to participate at the Event and in the Activities, the participants („Data Subjects„) shall provide their full name, e-mail address and the name of their company, while in order for the Data Controller to be able to issue its invoice, the Data Subjects shall provide certain  invoicing data as well (the abovementioned data together: „Personal Data„).

The Data Controller will process the Data Subjects’ full name, e-mail address and the name of their company for the purpose of organizing the Event and the Activities, as well as process the invoicing data provided by the Data Subjects in order to invoice the company represented by the participant as applicable.

2. The Data Controller

The personal data provided by the Data Subject will be processed and handled by Lakatos, Köves and Partners Law Firm as Data Controller (registered office: 1075 Budapest, Madách Imre út 14.,; e-mail: info@lakatoskoves.hu; telephone: 06 14 291 300).

3. The duration of the data processing

The duration of processing of the Personal Data commences when the Data Subject submits the Personal Data.

The Data Controller shall be entitled to keep the Personal Data until required by accounting laws applicable to the Data Controller (as a general rule, for 8 years from issuing the relevant invoice).

4. The legal basis of the data processing

The legal basis for processing the Personal Data mentioned under Point 5 a)-c) of this Privacy Notice is the Data Subject’s consent pursuant to Article 6(1) Point (a) of Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

The submission of the consent to the Data Controller is voluntary. The Data Subject gives his/her consent to the processing of his/her Personal Data mentioned under Point 5 a)-c) of this Privacy Notice by registering to the Event. In case the Data Subject does not provide his/her consent to the processing of these Personal Data, he/she cannot participate in the Event and the Activities.

The Data Subject has the right to withdraw his/her consent at any time. The Data Subject may exercise his/her right to the withdrawal of consent by sending an e-mail to the e-mail address of the Data Controller (info@lakatoskoves.hu). In the event of the withdrawal of consent, the Data Controller shall delete the Personal Data without undue delay, but no later than within 3 (three) working days (unless there is another legal basis for the processing). The withdrawal of consent by the Data Subject shall not affect the lawfulness of the processing based on consent prior to the withdrawal and shall not affect the Personal Data to be processed on the basis of mandatory accounting regulation applicable to the Data Controller (as indiciated in the next paragraph).

The legal basis for processing the Personal Data mentioned under Point 5 d) of this Privacy Notice (invoicing data) is the necessity to comply with a legal obligation to which the Data Controller is subject. Such legal obligation is set forth by the Hungarian accounting laws applicable to the Data Controller (in particular, Act C of 2000 on Accounting). 

The Data Subject shall provide his/her own, real and genuine Personal Data when registering to the Event and the Activities. By submitting the Personal Data, the Data Subject expressly accepts and warrants that, in the event of a violation of a third party’s right to the personal data provided by the Data Subject, the Data Subject shall be personally, unconditionally and expressly liable for any damage, fines or compensation incurred by the Data Controller that may result therefrom, as well as for any fees and costs incurred in connection with such damage, fines or compensation.

5. The types of Personal Data processed

The Personal Data processed by the Data Controller in accordance with the present Privacy Notice are the following:

1. full name;
2. e-mail address;
3. the name of the company represented by the Data Subject;
4. invoicing data (name and address to be indicated on voice, EU VAT number).

6. Access to the Personal Data

The Data Controller is entitled to access the Personal Data in accordance with applicable law.

The Data Controller shall not sell, transfer or disclose the Data Subject’s personal data to third parties in any form without the Data Subject’s explicit consent, except for its data processors (if applicable).

The Data Controller shall not transfer the Data Subject’s personal data to a third country or international organisation.

7. The rights of the Data Subject and the possibilities for legal remedy

The Data Subject may request the Data Controller to access, rectify, erase or restrict the processing of the Personal Data, and may object to the processing of the Personal Data.

The Data Subject may contact the Data Controller’s staff at info@lakatoskoves.hu with any questions or comments regarding the processing of the Personal Data.

The Data Subject may lodge a complaint about the processing directly with the National Authority for Data Protection and Freedom of Information (NAIH).

In the event of a breach of the Data Subject’s rights, the Data Subject may take legal action before a court of law.

Detailed information on the rights of the Data Subject and the possibilities for legal remedy can be found in Points 6 to 7 of the Privacy Notice (https://www.lakatoskoves.hu/hu/adatvedelem) published on the Data Controller’s website.

Budapest, 20 January 2025

Lakatos, Köves and Partners Law Firm

Data Controller