This notice is a general website and appointment-booking privacy notice. Where an attorney-client engagement is established, separate rules may also apply regarding attorney-client privilege, client identification and statutory retention obligations.
1. Data Controller
The data controller is: dr. Anikó Lengyel, sole practitioner attorney.
- Email: ugyved@drlengyelaniko.hu
- Phone: +36 70 321 0157
- Office: 1158 Budapest, Késmárk u. 7/B.
- Website: www.drlengyelaniko.hu
2. Appointment Booking
On the booking page, the data controller processes the following data to record, pay for and confirm a booking: name, email address, phone number, chosen consultation type, chosen appointment time, an optional comment, as well as the booking's technical identifiers, payment status and finalisation status.
The purpose of the processing is to arrange the consultation appointment, initiate the payment process, automatically confirm a successfully paid booking, modify or cancel the booking, and maintain correspondence. The legal basis for processing is contact initiated at the data subject's request and steps taken prior to entering into a contract, as well as the data subject's consent given when submitting the booking form.
Please only enter brief information in the comment field that is necessary to prepare for the consultation, and do not submit any unnecessary special category data.
3. Card Payments via Stripe
To finalise a booking, the website uses the Stripe payment service. Payment takes place on an external payment interface provided by Stripe. The website and the data controller do not store full card numbers, CVC codes, or other complete card data needed to charge a card directly.
During the payment process, the name and email address associated with the booking, the amount and currency of the consultation fee or deposit payable, the booking's technical identifier, and technical data required to complete the payment may be transmitted to Stripe. The system processes the payment result, Stripe's payment identifiers, and the status and time of payment, so that a booking is automatically finalised once payment succeeds.
Stripe may also process data under its own data processing rules for fraud prevention, payment security, legal compliance, and to provide the payment service. Detailed information on Stripe's data processing is available in Stripe's privacy notice. As an international provider, Stripe may also process or transfer data outside the European Economic Area, subject to appropriate data protection safeguards.
4. Correspondence
In the case of a phone or email enquiry, the data controller processes the data necessary for contact, the content of the message, and the correspondence details needed to handle the matter. The purpose of the processing is to respond to the enquiry and prepare for the legal consultation.
5. Google Calendar, Email and Technical Providers
Confirmed appointments may be managed using Google Calendar. The system also forwards booking data by email and may send automatic system messages to the email address provided. Hosting, email and technical service providers may be involved in operating the website; they may only process data under the data controller's instructions.
6. Google Analytics and Google Tag Manager
The website may use Google Tag Manager and Google Analytics to measure visits and usage of the website. These services may use cookies or similar technologies and may process technical data such as browser data, device data, information related to the IP address, and page-usage data. The purpose of this measurement is to improve the operation and content of the website.
7. Google reCAPTCHA
The booking form is protected by Google reCAPTCHA against abuse and automated submissions. In operating reCAPTCHA, Google may process technical data such as the IP address, browser and device information, and interactions performed on the website. Google's data processing is governed by Google's privacy policy and terms of service.
8. Retention Period
The data controller processes booking, payment and correspondence data for as long as necessary to arrange the appointment, carry out the consultation, complete accounting, assert any legal claims, or comply with statutory obligations. Unpaid, expired or interrupted bookings may be deleted or set to a cancelled status.
9. Data Subject Rights
The data subject has the right to request information about the processing, to request access to their personal data, to request its rectification, erasure or restriction of processing, to object to the processing, and, where processing is based on consent, to withdraw that consent.
The data controller accepts data subject requests at the email address above. As a remedy, the data subject may turn to the National Authority for Data Protection and Freedom of Information, or may seek judicial remedy.
10. Data Security
The data controller strives, through appropriate technical and organisational measures, to keep personal data secure and accessible only to authorised persons.
11. Amendment of this Notice
The data controller reserves the right to amend this notice. The version in force at any given time is available on the website.
Effective: 14 May 2026.
Back to appointment booking