Privacy Policy

Data Policy

Processing of Personal Data

Impact Advisory Zártkörűen Működő Részvénytársaság (registered office: 1061 Budapest, Andrássy út 11., Hungary; company registration number: 01 10 049712; hereinafter referred to as “Impact Advisory” “us” or “we“) is the data controller for personal data processed under this Data Policy and is as such responsible for ensuring that the processing is conducted in accordance with applicable legislation.


By giving your consent under the website interface for direct offer-requests, you acknowledge our processing of your personal data for marketing purposes in accordance with the provisions below.



The use of personal data is necessary for us to get in touch with you. This means that you cannot object to us processing your personal data and in the meantime still require us to contact you. However, you are entitled to object to certain use of your personal data, for example if the relevant use is not required for us to be able to contact you, but only necessary e.g. to send you marketing by email. This right of yours is further explained below in Section 8.

As a data subject, you also have a number of other rights to gain insight into and influence how Impact Advisory processes your personal data. These rights include a right to gain access to the personal data Impact Advisory stores about you, request that we correct any incorrect data and a right to lodge complaints with supervisory authorities if you have concerns with our use of your personal data or the right to withdraw your consent anytime. These rights are further explained in Section 8 of this Personal Data Policy.

The personal data that we process consist of the information provided by you when filling out the form on the website interface for direct offer-request.

The purposes with our processing of personal data include the ability to being able to contact you. For example, we will;


1) Use your name, e-mail, company name, telephone number to make it possible for us to make an offer for you.


We do not transfer your personal data to any third parties.


If you have any questions about how Impact Advisory uses and protects your personal data, you are always welcome to contact us.


Contact details:


Below follows a more detailed description on how we use personal data.


  1. What entity is responsible for the processing of your personal data?

Impact Advisory Zártkörűen Működő Részvénytársaság, company registration no. 01 10 049712, is the data controller for the personal data processed under this Personal Data Policy.

Our contact details are:

1061 Budapest, Andrássy út 11.


Telephone no. +36 1 488 5220

What is “personal data” and “processing of personal data”?


The term “personal data” as used in this Personal Data Policy is any piece of information that, either on its own or together with any other pieces of information, can be used to identify a living individual, and any other data that qualifies as personal data in accordance with the law applicable to Impact Advisory, including the General Data Protection Regulation (the “GDPR“).


This Personal Data Policy covers all personal data that is in any form considered processed under applicable law in relation to you, including personal data that is collected, kept, stored, transferred, disclosed or otherwise used by Impact Advisory.


  1. What personal data is processed and for what purposes?

Impact Advisory will only collect and process the personal data about you as explained in this Privacy Policy and as further set out in the “Data Processing Table” in Section 11.

  1. How is your personal data protected?

Impact Advisory has implemented appropriate technical and organizational measures for the protection of your personal data to ensure that only authorized persons are given access to it. Impact Advisory uses technical security systems, such as firewalls, encryption technologies, passwords and anti-virus programs, to prevent and avoid unauthorized use of personal data.

  1. For how long is my personal data stored?

We will not store or process your personal data for any longer time than what is necessary to fulfill the purposes for the processing set out in this Personal Data Policy or according to any mandatory applicable law, as further specified in the “Data Processing Table” in Section 11.

Thus, when the purpose has been fulfilled in relation to a specific type of personal data, we will delete or anonymize the relevant personal data as soon as reasonably possible.

  1. With whom do we share personal data?


We do not share your personal data with any third parties.


  1. To what countries will your personal data be transferred?


We do not transfer your personal data to any countries outside Hungary.


  1. What are your rights as regards your personal data?

Right to access and rectification

You have the right to obtain information on what personal data Impact Advisory processes regarding you, the source of the data, for what purposes the data has been used, and the identity of parties to whom the data has been provided. You have also the right to, at any time, request a correction of any inaccurate or incomplete personal data. If a request is manifestly unfounded or excessive, in particular because of its repetitive character, Impact Advisory may charge a reasonable administrative fee or refuse to act on the request.

Right to erasure (‘right to be forgotten’)

You may request that your personal data be erased in specific circumstances if e.g. (i) the personal data is no longer necessary in relation to the purposes for which is was collected and (ii) there is no lawful reason for continuation of processing, or the processing is unlawful or the personal data has to be erased to comply with a legal obligation to which Impact Advisory is subject. This list is not exhaustive. Please contact us to receive further information on erasure of your personal data.

Right to object

You are entitled to object to certain processing or request that the processing of the personal data is restricted if (i) the personal data may not be correct, or (ii) you consider the processing to be unlawful, or (iii) you believe that Impact Advisory does no longer need the personal data for the purposes as set out in the “Data Processing Table” in Section 11.

Right to withdraw consent

You can always withdraw your consent for any future processing that is reliant on such consent.

Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine readable format. You may also ask us to transmit such data directly to another controller where technically feasible.

  1. What should you do if you have any complaints?

If you have any complaints on how we use your personal data, or would like further information, we would ask you to first contact us. However, you can also always make a complaint about how we process your personal data with the supervisory authority, being the Hungarian National Authority for Data Protection and Freedom of Information (address: 1125 Budapest, Szilágyi Erzsébet fasor 22/c, Telephone: +36 (1) 391-1400, E-mail:

Without prejudice to your rights to make complaints, where you consider that your rights under this Data Policy have been infringed as a result of the processing of your personal data in non-compliance with the applicable laws, you may also bring proceedings before the competent courts.

In any event, it is advisable that, in order to resolve the issue more quickly and effectively, you send any complaints or enquiries to Impact Advisory first prior to addressing the authorities.

  1. Updates

This Personal Data Policy may be modified by Impact Advisory at any time. Should Impact Advisory wish to use personal data other than as stipulated in the Personal Data Policy in force at the time of data collection, notice of any such modifications will be provided to you in a visible manner (e.g. such notice may be sent to you via email).

  1. Data Processing Table

The below Data Processing Table outlines the categories of personal data collected and processed by Impact Advisory in relation to you and the purposes for processing each category of data.

These terms are used in the table and may require an explanation:

  • Legal ground: According to applicable data protection legislation, Personal Data may only be processed if there is a legally valid ground to support the relevant processing. Impact Advisory only processes personal data based on your informed consent.


  • Retention time or criteria: In this column, Impact Advisory specifies how long your data will be stored.


Personal data type and sourcePurpose                                 Legal groundRetention time or criteria
Identification details
first name,
last name,
company name Source: Directly from you when you fill out the form on the website interface for direct offer-requests


To enable Impact Advisory to contact you for marketing purposesConsent


Until Until your withdrawal of the consent but if, you have not withdrawn your consent, until 1 year, provided that you have not entered into contractual arrangement with Impact Advisory.
Contact information
e-mail address,
telephone numberSource: Directly from you when you fill out the form on the website interface for direct offer-requests


To enable Impact Advisory to contact you.Consent


Until your withdrawal of the consent but if, you have not withdrawn your consent, until 1 year, provided that you have not entered into contractual arrangement with Impact Advisory.


Latest update on October 17, 2019