1️⃣ 🇪🇺 General Data Protection Regulation (GDPR)
Full name: Regulation (EU) 2016/679 of the European Parliament and of the Council.
Directly applicable in Hungary.
If you process personal data (e.g., name, email address, IP address, cookie identifier), you are required to:

• Inform the data subject about the processing;
• Specify the purpose and legal basis for the processing;
• Explain the rights of data subjects;
• Identify the data controller;
• Indicate the data retention period;
• Provide information about data processors.

👉 Articles 13–14 of the GDPR detail the obligation to provide this information.
2️⃣ 🇭🇺 Act on the Right to Informational Self-Determination and Freedom of Information (Infotv.)
This is a national supplement to the GDPR.
It does not replace the GDPR but clarifies certain provisions within Hungary.
3️⃣ When data processing information is required
The obligation to inform applies if the website:

• Contains a contact or feedback form;
• Sends newsletters;
• Provides user registration;
• Operates as an online store;
• Uses analytics or tracking services;
• Stores IP addresses;
• Processes personal data of identifiable individuals.

➡️ In practice, this applies to about 95% of websites.
4️⃣ Important points

• Data processing information must be specific and reflect the actual operation of the website.
• Generic or template texts do not meet legal requirements.

Supervisory authority:
National Authority for Data Protection and Freedom of Information (NAIH)