1. The attorney is a controller according to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “the Regulation”).

 

2. The attorney declares that he processes personal data of the client where the client is a natural person, personal data of natural person acting on behalf the client where the client is a legal person, as well as personal data of other persons in relation with providing of legal services (for the purpose of this privacy policy hereinafter referred to as “client”)

 

3. The attorney shall process personal data of the client for the purposes of performance of the contract on provision of legal services or negotiating regarding concluding of such a contract (especially for the purposes of the provision of legal services and/or fulfilment of the tasks of the client), for the purposes of fulfilment of his legal and professional obligations (especially fulfilment of financial/bookkeeping and/or tax obligations and/or fulfilment of obligations of the attorney while managing and/or archiving the client´s file) and/or for the purposes of ensuring legitimate interests of the attorney and/or legitimate interests of third persons (especially within a disputes settlement). The attorney does not carry out processing of the personal data by automated means including profiling.

4. The attorney can process following personal data of the client when provided to the attorney:

a. name, surname, academic titles,

b. date of birth/registration number, VAT number,

c. address of residence/registered office/place of business,

d. e-mail address,

e. phone number,

f. bank details,

g. signature of the client,

h. other personal data provided by the client to the attorney and/or received by the attorney while providing legal services.

 

5. The attorney is authorized to transfer personal data to the third party without the consent of the client only on conditions set out in the Act No. 85/1996 Sb., the Bar Act (hereinafter referred to as “the Bar Act”), the Act No. 253/2008 Sb., on Anti Money Laundering and Financing of Terrorism Measures (hereinafter referred to as “AML Act”), and/or in other specific legislation. The attorney states that the attorney is authorized to transfer personal data also to his employees, cooperating lawyers and to the limited extent so far as necessary to the accountant and/or tax consultant of the attorney, IT provider and/or other such providers (processors), and also to representatives of the Czech Bar Association subject under the conditions of legislation and professional regulations.

 

6. The attorney shall process personal data of the client for the purposes of the performance of the legal services and compliance with legal obligations for the duration of the contract concluded between the attorney and the client and for the period of 10 years after its termination, unless longer period of archiving is provided by legislation, in particular by the Bar Act, AML Act and/or by the Act. No. 499/2004 Sb., on archives and records management. For the purpose of protection of the controller’s and/or third parties’ legitimate interest, the attorney shall retain personal data for the period of 4 years from the date of termination of the contract concluded between the attorney and the client, but also for longer period, if reasonable. Should the attorney receive a demand for legal services and the agreement on providing of legal services is not concluded between parties, the attorney shall process personal data of the client as long as necessary, but not longer than for 2 months from the date of receiving of the personal data.

 

7. The client shall have following rights in the field of the protection of personal data:

a. in accordance with the Article 15 of the Regulation, the right to access to personal data concerning the client (information whether and which personal data of the client are being processed and information about means of such processing),

b. in accordance with the Article 16 of the Regulation, the right to have personal data concerning the client rectified and the right to have incomplete personal data completed,

c. in accordance with the Article 17 of the Regulation, the right to erasure of personal data concerning the client,

d. in accordance with the Article 18 of the Regulation, the right to restriction of processing of personal data concerning the client,

e. in accordance with the Article 20 of the Regulation, the right to data portability of personal data concerning the client (only if these are provided by the client in commonly used and machine-readable format),

f. in accordance with the Article 21 of the Regulation, the right to object to processing of personal data concerning the client when processing is necessary for the purposes of the legitimate interests pursued by the attorney or by a third party or for the performance of a task carried out in the public interest.

The attorney is obliged to respect his obligations under legislation and professional regulations in the field of his professional bar practice as well as obligations of advocacy confidentiality.

 

8. The client may complain to the supervisory authority (The Office for Personal Data Protection).

 

9. This privacy policy comes into force on 1^st January 2019.