+36 30 220 1100 company@budapestconsulting.hu

Privacy Policy

Effective from 13 November 2026.

This Privacy Policy explains how we handle personal data when you visit companyformationhungary.com or contact us through it. We process personal data in line with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Hungarian Act CXII of 2011 on the Right of Informational Self-Determination and on Freedom of Information.

1. Who is responsible for your data

The data controller is:

  • Budapest Consulting Kft. (“Budapest Consulting”, “we”, “us”)
  • Registered office: Istenhegyi út 101/D, 1125 Budapest, Hungary
  • EU VAT number: HU12517376
  • E-mail: company@budapestconsulting.hu
  • Phone: +36 30 220 1100

For any question or request about your personal data, please write to the e-mail address above. We have not appointed a data protection officer, as we are not required to do so.

2. Quote requests and enquiries (contact form, e-mail, phone)

What we process: your name and e-mail address, and – if you provide them – your phone number, the package you are interested in, the planned name of your company and the content of your message. When you send the form, we also record the date and time and your IP address.

Why we process it: to answer your request, prepare a fixed-price offer and keep in touch with you about it. The IP address and the time are recorded to protect the form against spam and misuse.

Legal basis: taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). For the IP address and the time of sending, the legal basis is our legitimate interest in the security of the website (Article 6(1)(f) GDPR).

How long we keep it: if no contract is concluded, we delete your request one year after our last communication with you. If you become our client, the retention periods in section 3 apply.

You are not obliged to provide this data, but without your name and e-mail address we cannot answer your request. Please do not send special categories of data (for example health data) or official documents through the form.

3. If you become our client

What we process: the identification, contact, company and billing data that are needed for the service you order (for example company formation, registered address, accounting or permit administration), including the documents you give us for this purpose.

Why and on what legal basis: to perform the contract with you (Article 6(1)(b) GDPR) and to comply with our legal obligations, in particular accounting, tax and anti-money-laundering rules (Article 6(1)(c) GDPR).

How long we keep it: contract data for five years after the end of the contract (the general limitation period for civil claims); invoices and accounting documents for eight years, as required by the Hungarian Accounting Act; data that other laws require us to keep for the period set by those laws.

You receive detailed information about the processing connected to a specific service when you order it.

4. Visiting the website (server logs)

When you open a page, the web server automatically records technical data: your IP address, the date and time, the page requested, and the type of your browser and device. This data is needed to deliver the website to you and to keep it secure and working (legitimate interest, Article 6(1)(f) GDPR). We do not use it to identify you. Log files are kept and deleted by the hosting provider according to its own retention rules.

5. Cookies and Google Analytics

The website itself works without cookies. Two things are stored in your browser:

  • Your cookie choice. When you accept or decline analytics in the consent bar, we store this choice in your browser's local storage (entry name: cfh_consent) so that we do not have to ask you again. It is not sent to anyone.
  • Google Analytics cookies – only if you accept. If you click “Accept”, Google Analytics 4 sets cookies (for example _ga) that allow us to see, in statistical form, how visitors use the website: which pages are viewed, for how long, and from which country or type of device. We do not use Google Analytics for advertising.

Legal basis: your consent (Article 6(1)(a) GDPR). If you decline, no analytics cookies are set; Google only receives cookieless, non-identifying signals that a page was loaded.

Withdrawing consent: you can change your choice at any time with the “Cookie settings” link at the bottom of every page, which reopens the consent bar. You can also delete the cookies and site data for this website in your browser settings. Withdrawal does not affect processing that took place before it.

Provider and retention: Google Analytics is provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), acting as our processor. Analytics data linked to cookies is kept for the period set in our Google Analytics account, not longer than 14 months. See section 7 on transfers outside the EU.

6. Who receives your data

We do not sell your data and we do not pass it on for marketing. Your data is accessible only to our staff who need it for their work, and to the following recipients:

  • Hosting provider – the company that operates the server of this website, as our processor (Websupport Magyarország Kft., Fehérvári út 97–99, 1119 Budapest, Hungary).
  • E-mail service provider – the company that operates our mailboxes, as our processor.
  • Google Ireland Limited – Google Analytics, only if you have accepted analytics cookies.
  • The Hungarian attorney we work with – if the service you request requires a lawyer (for example company formation or legal advice), we pass on the data needed for your matter. The attorney is bound by professional secrecy and acts as an independent controller.
  • Accounting and other professional partners – where this is necessary to provide the service you ordered.
  • Authorities and courts – where the law requires it (for example the Court of Registration, the tax authority or the immigration authority in the course of your case).

7. Transfers outside the European Economic Area

We store your enquiries and client data in the European Union. If you accept analytics cookies, Google may process data in the United States. Google LLC is certified under the EU–US Data Privacy Framework, for which the European Commission has adopted an adequacy decision; where necessary, Google also relies on the European Commission's standard contractual clauses.

8. How we protect your data

The website is available only through an encrypted (HTTPS) connection. Requests sent through the form are stored on the server in a folder that cannot be reached from the internet, and can be viewed only by authorised staff after a login protected with two-factor authentication. We do not make decisions about you by automated means and we do not carry out profiling.

9. Your rights

Under the GDPR you have the right to:

  • access – ask whether we process your data and receive a copy of it;
  • rectification – have inaccurate or incomplete data corrected;
  • erasure – have your data deleted, for example when it is no longer needed or you withdraw your consent, unless the law requires us to keep it;
  • restriction – ask us to limit the processing in the cases set out in the GDPR;
  • data portability – receive the data you gave us in a commonly used, machine-readable format, where the processing is based on consent or contract;
  • object – object to processing based on our legitimate interest;
  • withdraw consent – at any time, where the processing is based on your consent.

To use these rights, write to company@budapestconsulting.hu. We answer without undue delay and at the latest within one month; in complex cases this period may be extended by two further months, of which we will inform you. Exercising your rights is free of charge. We may ask for information to confirm your identity.

10. Complaints and legal remedies

If you believe that we have not handled your data properly, please contact us first so that we can resolve it. You also have the right to lodge a complaint with the Hungarian supervisory authority:

  • Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH) – Hungarian National Authority for Data Protection and Freedom of Information
  • Address: Falk Miksa utca 9–11, 1055 Budapest, Hungary
  • Postal address: 1363 Budapest, Pf. 9, Hungary
  • E-mail: ugyfelszolgalat@naih.hu · Website: naih.hu

If you live in another EU member state, you may also turn to the supervisory authority of your place of residence. In addition, you may bring your case before a court; in Hungary you can choose the regional court of your place of residence or stay.

11. Children

Our services are intended for businesses and adults. We do not knowingly collect data from persons under 16. If you believe a child has sent us personal data, please let us know and we will delete it.

12. Changes to this policy

We may update this Privacy Policy when our services, the website or the law change. The current version is always available on this page, with its effective date at the top.