Mandatory information on the processing of personal data

Information on the protection of personal data

Our law firm processes personal data in accordance with the legal regulations, in particular Act No. 85/1996 Coll. (the Advocacy Act) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as “regulation“) and Act No. 110/2019 Coll., the Personal Data Processing Act.

Personal data controller and its contact details

1. Czech Republic:

UEPA advokáti s.r.o.
Voctářova 2449/5
180 00 Prague 8 – Libeň

2. Slovak Republic:

UEPA advokáti s.r.o.
Lazaretská 23
811 09 Bratislava

(hereinafter referred to as “administrator“)

Purpose and legal basis of processing

Purpose: Provision of legal services

Legal basis: for the performance of a contract within the meaning of Article 6(1)(b) of the Regulation to which the data subject is a party (contract for the provision of legal services) or for the implementation of measures taken prior to the conclusion of the contract at the request of the data subject

the fulfilment of legal obligations within the meaning of Article 6(1)(c) of the Regulation to which the controller is subject, in particular the controller’s legal obligations arising from Act No 85/1996 Coll., the Advocacy Act and related professional regulations, Act No 253/2008 Coll., on certain measures against the legalisation of the proceeds of crime and terrorist financing and others

Purpose: Recording and assertion of claims by the controller against the data subject

Legal basis: Legitimate interest of the controller within the meaning of Article 6(1)(f) of the Regulation to establish, exercise and defend the controller’s legal claims

The provision of personal data is, as the case may be, an obligation of the data subject – the client (hereinafter referred to as “client“) arising from the aforementioned contract or from the aforementioned legislation.

Purpose: Distribution of legal news and invitations to social events of the administrator

Legal basis: Legitimate interest of the controller within the meaning of Article 6(1)(f) of the Regulation to carry out direct marketing

Purpose: Statistics on web mailbox traffic and filtering of robot requests

Legal basis: Consent to the processing of personal data within the meaning of Article 6(1)(a) of the Regulation

For the above purposes, the data subject is not obliged to provide his or her personal data.

Personal data processed

  • Identifying personal data of the client (name and surname, title, date of birth, birth number, permanent address, data from the ID card for verification of identity, signature; in the case of entrepreneurial natural persons, also the company name, ID number and data on registration in the relevant register) – identical personal data are processed, as the case may be, for natural persons who are statutory bodies or trustees of clients – legal persons.
  • Client contact details (email address, telephone number, data box details).
  • Any other personal data provided to the controller in connection with the fulfilment of the purpose of processing, in particular the provision of legal services and representation before courts and state and local government authorities.

Recipients of personal data

  • Public authorities (e.g. courts, administrative authorities, Czech Bar Association)
  • Attorneys cooperating permanently with the controller
  • Experts and translators
  • Information system maintenance providers
  • Provider of accounting and tax services
  • Other recipients according to the needs and instructions of the client

Duration of processing of personal data

The personal data will be processed for the duration of the aforementioned contract and after its termination will be handled in accordance with the applicable legislation, in particular Act No. 85/1996 Coll. (Act on Advocacy), Act No. 499/2004 Coll. (Act on Archiving and Filing Service and on Amendments to Certain Acts) and Regulations). For example, a attorney is obliged to keep client files and related documentation in accordance with Article 3 of the CBA Board Resolution No. 9/1999 of the Bulletin for a minimum period of five years from the date on which he/she ceased to provide legal services, unless otherwise provided for by law or a special statutory regulation. Such a different legal regulation may be, for example, Act No. 253/2008 Coll., on certain measures against the legalization of proceeds of crime and financing of terrorism, which in Section 16 imposes the obligation to keep mandatory data and documents for 10 years after the transaction or termination of the business relationship.

Special information on the processing of personal data through cookies

The controller uses cookies on its website, namely:

(a) functional cookies (necessary for the operation of the website), where the processing of personal data of website visitors is based on the legitimate interest of the controller pursuant to Article 6(1)(f) of the Regulation.

(b) Analytical cookies for the purpose of determining the number of views of our website (we do not perform detailed the analytics) The legal basis for the processing of personal data in this case is the consent given by you via the cookie bar to the processing of personal data within the meaning of Article 6(1)(a) of the Regulation.

(c) Tracking (marketing cookies), for the purpose of displaying maps and fonts and filtering robot requests to our website. All these cookies are deleted at the latest after the end of the session. The legal basis for the processing of personal data in this case is the consent given by you via the cookie bar to the processing of personal data within the meaning of Article 6(1)(a) of the Regulation.

Any personal data processed in this way is not shared with third parties other than Google to the extent necessary, as Google is our web service provider. For more information about specific cookies and their use, please see the details in the cookie bar on our website.

Client rights

1. The right of access to personal data means that the client has the right to obtain from the controller, upon request, information about whether it processes his personal data and, if so, what data is involved and how it is processed, and a free copy of such personal data.

2. The right to rectification means that the client has the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay upon his or her request. The client has the right to complete incomplete personal data at any time.

3. The right to erasure of personal data means, in other words, the obligation of the controller – the attorney – to erase the personal data it processes about the client if certain conditions are met and the client requests it. The controller may not comply with the request if it is obliged to process the personal data for the performance of its legal obligation imposed by law, including applicable professional regulations.

4. The right to restrict processingmeans the client’s right to request that his or her personal data, with the exception of storage, be processed only with his or her consent or for the reasons expressly set out in Article 18 of the Regulation. This right only applies to you if you have objected to the processing or contest the accuracy of your personal data or for other reasons under Article 18 of the Regulation.

5. Right to object – the client may object at any time to processing which is based on the legitimate interests of the controller, a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

6. The right to data portability gives the client the possibility to obtain the personal data he has provided to the controller in a common and machine-readable format (we provide the data in .pdf format, unless otherwise agreed upon the client). He can subsequently transfer this data to another controller or, if technically possible, request that the controllers transfer it between themselves. The client has the right to data portability if the processing is based on a contract for the provision of legal services or on consent to the processing of personal data and the processing of such personal data is carried out electronically.

7. The right to withdraw consent to the processing of personal data at any time only applies if the client’s personal data is processed on the basis of consent to the processing of personal data, so in practice only in the case of personal data collected for marketing purposes and through certain cookies when visiting our website.

8. In case the client is in any way dissatisfied with the processing of his personal data carried out by the controller, he may lodge a complaint directly with the controller or contact the Data Protection Authority, depending on the country concerned:

(Czech Republic) The office for Personal Data Protection

Pplk. Sochora 27
170 00 Prague 7
www.uoou.cz

(Slovak Republic) The office for Personal Data Protection of the Slovak Republic

Hraničná 12
820 07 Bratislava 27
Slovak Republic
https://dataprotection.gov.sk/uoou/

You can also find more information on the websites of these supervisory authorities about the rights of the client and the obligations of personal data controllers.

If you have any questions about the processing of your personal data by the controller or if you wish to exercise your rights as set out above, please contact us at the following email address office@uepa.cz. In the event of a request to exercise your rights as a data subject, we are entitled to request from you the data necessary to verify your identity.