Legal information
Zásady ochrany osobních údajů
This page explains who processes your personal data, for what purposes, on what legal basis and for how long, who we share it with and what your rights are. We only process the data needed for each purpose. We use optional cookies (for example for traffic measurement or advertising) only with your consent, which you can withdraw at any time in Cookie settings.
Who the controllers are
Mgr. ANNA SLANINOVÁ, advokátka
Mgr. LUKÁŠ CHALUPA, advokát
Why and for how long we process data
Website and cookies
The advocates are jointly responsible for running the website, measuring traffic and the cookie banner, as joint controllers (Art. 26 GDPR).
| Purpose | Controller | Personal data | Legal basis | Retention | Obligation to provide |
|---|---|---|---|---|---|
| Operating and securing the website | Mgr. Anna Slaninová and Mgr. Lukáš Chalupa | IP address, date and time of the request, requested URL, browser type (server logs) | Legitimate interest (Art. 6(1)(f) GDPR) Legitimate interest: keeping the website secure and available and detecting attacks. | 30 days | The data is recorded automatically on every visit. |
| Measuring website traffic (Google Analytics) | Mgr. Anna Slaninová and Mgr. Lukáš Chalupa | online identifiers (cookies), IP address, device and browser details, pages viewed | Consent (Art. 6(1)(a) GDPR) | until consent is withdrawn; data in Google Analytics 14 months | Voluntary; without consent no measurement takes place. |
Client matters
Each advocate processes the data of their own clients and prospective clients separately, as an independent controller. The controller of the data in your matter is the advocate you contact or who represents you.
| Purpose | Controller | Personal data | Legal basis | Retention | Obligation to provide |
|---|---|---|---|---|---|
| Replying to enquiries and negotiating a contract | each advocate for their own clients | name, e-mail, phone, the message and the information about your matter you share with us | Performance of a contract or steps before entering into it (Art. 6(1)(b) GDPR) | 3 years after the last contact if no contract is concluded | Providing the data is voluntary; without contact details we cannot reply. |
| Providing legal services | each advocate for their own clients | identification and contact details, details of the matter and other data in the case file, including data about opposing parties and other persons | Performance of a contract or steps before entering into it (Art. 6(1)(b) GDPR) | 5 years after the matter ends | The data is needed to conclude and perform the contract for legal services; without it we cannot represent you. |
| Identifying and checking the client | each advocate for their own clients | identification details, a copy of the identity document, information on the source of funds to the extent required by law | Compliance with a legal obligation (Art. 6(1)(c) GDPR) | 10 years after the business relationship ends (Section 16 of Act No. 253/2008 Coll.) | Providing the data is required by law; without it we cannot provide the legal service. |
| Accounting and taxes | each advocate for their own clients | billing details, payment details | Compliance with a legal obligation (Art. 6(1)(c) GDPR) | 5 years after the end of the accounting period | Providing the data is required by accounting and tax law. |
| Establishing and defending legal claims | each advocate for their own clients | data from communication and the contractual relationship | Legitimate interest (Art. 6(1)(f) GDPR) Legitimate interest: protecting our legal claims. | for the limitation period (usually 3 years, at most 10 years) and the duration of any dispute | We do not request this data separately; we use what we already hold. |
We do not carry out automated decision-making or profiling with legal or similarly significant effects.
Who we share data with
We only share data with these recipients and only to the extent needed for the purpose.
| Recipient | Role | Purpose | Country of processing |
|---|---|---|---|
| ZONER a.s. | processor | Website hosting and server logs | Czech Republic |
| Google Ireland Limited (Google Workspace) | processor | Running the e-mail mailboxes | Ireland (EU); transfer to the USA Transfer outside the EU/EEA based on a European Commission adequacy decision (for the USA, the EU-U.S. Data Privacy Framework). |
| Google Ireland Limited | processor | Traffic measurement (Google Analytics) | Ireland (EU); transfer to the USA Transfer outside the EU/EEA based on a European Commission adequacy decision (for the USA, the EU-U.S. Data Privacy Framework). |
| Soudy, orgány veřejné moci a Česká advokátní komora | independent controller | Only where the law requires it or your matter makes it necessary | Czech Republic |
Your rights
- Right of access – you can ask what data we process about you and get a copy (Art. 15 GDPR).
- Right to rectification of inaccurate data (Art. 16 GDPR).
- Right to erasure when we no longer need the data or process it unlawfully (Art. 17 GDPR).
- Right to restriction of processing (Art. 18 GDPR).
- Right to data portability for data you gave us based on consent or a contract (Art. 20 GDPR).
- Right to withdraw consent at any time; withdrawal does not affect the lawfulness of processing before it (Art. 7(3) GDPR).
- Right to lodge a complaint with the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz
Right to object
Where we process your data based on legitimate interest (Art. 6(1)(f) GDPR), you can object at any time on grounds relating to your particular situation. We will then stop processing it unless we demonstrate compelling legitimate grounds that override your interests or need it to establish or defend legal claims (Art. 21(1) GDPR).
You can object to processing for direct marketing at any time without giving a reason; we will then stop processing the data for that purpose (Art. 21(2) and (3) GDPR).
Joint controllership
The advocates decide together on running the website, measuring traffic and the cookie banner. Under their arrangement, Mgr. Anna Slaninová handles requests about the website and cookies, provides the information to data subjects and manages the cookie banner and traffic measurement; the contact point is slaninova@akvelmez.cz.
You can exercise your rights with any of the controllers (Art. 26(3) GDPR).
How to exercise your rights
Send questions and requests about personal data to slaninova@akvelmez.cz.
We will reply without undue delay and within one month at the latest; in complex cases we may extend this by two further months and will let you know (Art. 12(3) GDPR).
If you are not satisfied with our reply, you can contact the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Prague 7 (uoou.gov.cz).