Personal data processing – Preegal advokátní kancelář s.r.o.

In accordance with Article 13 of Regulation 2016/679 (GDPR)

Name and contact details of the administrator

Preegal advokátní kancelář s.r.o., IČ: 218 73 160 , registerred office Bohunická 133/50, 619 00 Brno, registerred in the Commercial register No.: C 140535 registered at Krajský soud in Brno, email: necasova@preegal.cz, tel: +420 776 645 509.

Purpose of processing of personal data, categories of subjects, categories of personal data

The controller processes personal data of clients and third parties for the performance of its business activities, which consist mainly in the provision of legal services and related consultancy and in the performance of the activities of a mediator

Personal data is processed for the following purposes:

Performance of the contract (contract for legal services, mediator’s services)
Fulfillment of legal obligations (obligations arising from the Law on Advocacy and state regulations, i.e., in particular, keeping a lawyer’s file or identification under the Law on Certain Measures against the Legalization of Proceeds of Crime, obligations arising from accounting or tax legislation, i.e., in particular, proper bookkeeping and tax records)
Protection of the legitimate interest of the Controller
Protection of the legitimate interest of third parties (in particular clients) in accordance with the rules governing the practice of law
Handling requests sent via electronic forms available on the Controller’s website at www.akkrajcikova.cz

The controller processes the following personal data according to the purpose of processing:

Name and surname – Fulfilling the contract, Fulfilling legal obligations, Protecting the legitimate interest of the Controller, Handling requests sent via electronic forms
Contact address – Fulfilling the contract, Fulfilling legal obligations, Protecting the legitimate interest of the Controller, Handling requests sent via electronic forms
E-mail – Fulfilling the contract, Fulfilling legal obligations, Protecting the legitimate interest of the Controller, Handling requests sent via electronic forms
Telephone number – Fulfilling the contract, Fulfilling legal obligations, Protecting the legitimate interest of the Controller, Handling requests sent via electronic forms
Bank account – Fulfilling the contract, Fulfilling legal obligations, Protecting the legitimate interest of the Controller
ID number, Tax ID number – Fulfilling the contract, Fulfilling legal obligations, Protecting the legitimate interest of the Controller
Birth number – Fulfillment of contract, Fulfillment of legal obligations, Protection of legitimate interest of the Controller
Date of birth – Fulfillment of contract, Fulfillment of legal obligations, Protection of legitimate interest of the Controller
Other information and data concerning the client or third parties – Performance of the contract, Performance of legal obligations, Protection of the legitimate interest of the Controller, Protection of the legitimate interest of third parties

Personal data is processed manually by the Controller.

Personal data is collected:

Clients: data subjects, courts, administrative authorities
Third parties: clients, data subjects, courts and court files, administrative authorities, witnesses, experts, public registers, publicly accessible information (e.g. internet).

Categories of recipients

The controller discloses personal data to the competent courts or administrative authorities in connection with the exercise of the legal profession.

In cases provided for by special legal regulations, the Controller is entitled or obliged to transfer some of the personal data processed to law enforcement authorities or other state authorities.

The processed personal data is not transferred abroad or accessible from abroad.

Transmission of personal data

Personal data is not transferred to third countries or international organisations

Period of processing of personal data

The controller processes personal data only for the necessary period of time, according to the purpose of processing personal data as follows:

Performance of the contract – for the duration of the contractual relationship and for a period of 10 years from the termination of the contractual relationship.
Performance of legal obligations – for the period specified by the relevant legal regulation.
Protection of the legitimate interest of the Controller or third parties – for a maximum period of 3 years from the time of the beginning of the processing of personal data, unless special legal regulations provide otherwise (e.g. regulations governing the practice of law), or unless the need to process personal data for a longer period arises in the context of a justified case.
Processing of requests sent via electronic forms – for the time necessary to process the relevant request.

Rights of the date subject

The data subject has the following rights in relation to the processing of personal data:

The right of access to personal data: The data subject shall have the right to obtain confirmation from the Controller as to whether or not personal data concerning him or her are being processed and, if so, the right to obtain access to such personal data.

Right to rectification of inaccurate and completion of incomplete personal data: the data subject has the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing an additional declaration.

The right to erasure (the so-called. right to be forgotten): The data subject has the right to have the Controller erase the personal data concerning the data subject without undue delay and the Controller is obliged to erase the personal data without undue delay if (i) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, (ii) the data subject objects to the processing and there are no overriding legitimate grounds for processing the personal data, (iii) the personal data have been unlawfully processed, or (iv) the personal data must be erased to comply with a legal obligation under Union or Czech law.

Right to restriction of processing of personal data: the data subject has the right to have the controller restrict the processing of personal data.

Right to data portability: The data subject has the right to obtain personal data concerning him or her that he or she has provided to the Controller in a structured, commonly used and machine-readable format and to transmit such data to another controller.

Right to object: The data subject shall have the right to object at any time to processing of personal data concerning him or her on grounds relating to his or her particular situation. The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests or rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

Data subjects may submit their requests/complaints for the exercise of the rights described in the preceding paragraphs to the Controller, in particular by sending them to the email address krajcikova@akkrajcikova.cz or in writing to the registered office of the law firm.

The supervisory authority in the field of privacy and personal data protection, where complaints can be lodged, is the Office for Personal Data Protection, with its registered office at: Pplk. Sochor 27, 170 00 Prague 7 (www.uoou.cz).