Privacy policy

The security and protection of personal data has been a long-term priority for us. In accordance with the relevant generally binding legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation), and the applicable professional regulations of the Czech Bar Association, we would therefore like to inform you about the processing of personal data in connection with the services we provide. This personal data processing policy applies to any processing of personal data regardless of the form or manner in which the personal data is processed.


I. 

IDENTITY AND CONTACT DETAILS OF THE CONTROLLER 

1. Personal data shall mean any information about an identified or identifiable natural person. An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or to one or more specific elements of that natural person's identity. 

2. The controller of personal data is JUDr. Jan Růzha, attorney-at-law, registration No. of the Czech Bar Association 11466, ID No.: 71463992, with his registered office at Soukenická 2082/7a, Prague 1, Postal Code 110 00. 

3. If you are interested, you can contact us by writing to the address of the law firm's registered office or by using the following contact details: 

- e-mail: office(@)ruzha.cz 
- Databox ID: wacggmc


II. 

FOR WHAT PURPOSE AND FOR HOW LONG DO WE PROCESS YOUR PERSONAL DATA? 

1. We process personal data of clients, natural persons representing clients who are legal persons, and/or business partners, obtained in particular in the course of establishing mutual contact, in connection with the conclusion of contracts and the performance of related contractual obligations or in the course of mutual communication, in the manner specified in the provisions of this article. Personal data are processed only to the extent necessary to fulfil the specific purpose of the processing in each individual case. 

2. We therefore process your personal data on the following legal basis: 

a. the performance of a contract to which the data subject is a party and/or the performance of pre-contractual measures (primarily in the context of the provision of legal services by our law firm); 

b. the performance of legal obligations imposed on us by the relevant generally binding legislation (in particular Act No. 85/1996 Coll., on Advocacy, as amended, Act No. 253/2008 Coll., on Certain Measures Against the Legalization of the Proceeds of Crime and the Financing of Terrorism, as amended (hereinafter the "AML Act"), Act No. 586/1992 Coll. on Income Taxes, as amended,, No. 499/2004 Coll., on the Archives and File Service, as amended, Act No. 563/1991 Coll., on Accounting, as amended, Act No. 634/1992 Coll., on Consumer Protection, as amended, etc.); 

c. legitimate interest in relation to the protection and enforcement of our potential claims, legitimate interest in the optimization of our website for the widest possible range of devices and users, the protection of a legitimate interest of third parties in relation to practicing law. 

3. For the purposes of compliance with legal regulations, the personal data that we process on the legal basis specified in the provisions of Section 2. a. of this article for the purpose of providing the services offered are: a. Identification data (first name, surname, date of birth, national identification number, in the case of a natural person - entrepreneur or legal entity also the registration number, and VAT number); b. Contact details (address, telephone number, e-mail address); c. Payment details (bank account number); d. Details of the performance provided (details of payments, invoices, subject of performance); e. Any other data concerning the client or a third party. 

4. The personal data that we process for the purposes specified in Section 2. b. of this article in order to fulfil the obligations imposed on us by legal regulations are: 

a. Identification data (first name, surname, date of birth, national identification number, in the case of a natural person - entrepreneur or legal entity also the registration number, and VAT number);
b. Contact details (address, telephone number, e-mail address);
c. Payment details (bank account number);
d. Details of the performance provided (details of payments, invoices, subject of performance);
e. Any other data concerning the client or a third party. 

5. We may also process your personal data within the scope of the provisions of Section 3. a. - e. of this article on the basis of our legitimate interest in connection with the protection of our rights and/or the enforcement of any claims, or for the protection of a third party's legitimate interest in relation to practicing law. 

6. We may process the personal data of visitors to the website to the extent of data about the activity on the website (data on the type of device used, IP address, operating system, your browser, how and when the relevant pages are viewed) on the basis of our legitimate interest pursuant to the provisions of Section 2. c. of this article. 

7. We may transfer personal data to a cooperating lawyer, tax advisor or other cooperating person, provided that the conditions set out in generally binding legislation are met. In the cases provided for by generally binding legal regulation and/or an enforceable decision issued based on such regulation, the controller may be obliged to transmit your personal data to the competent public authority, but always only in accordance with the regulations governing the duty of confidentiality of attorneys, which is the primary pillar of trust between the attorney and the client. Recipients are assured of a high level of security of your personal data. Your personal data will not be transferred to an international organisation; any transfer to a third country may only be carried out in accordance with generally applicable law. 

8. We process your personal data in accordance with the applicable generally binding legal regulations and internal regulations only for as long as necessary. We retain personal data processed for the performance of contracts for 10 years after the termination of the contractual relationship. We retain personal data processed for the performance of a legal obligation for the period of time specified by the relevant legal regulation. We retain personal data processed for the protection of legitimate interest for a maximum period of 3 years from the start of processing, unless generally binding legal regulation provides otherwise or unless there is a justified need to retain the personal data in question for a longer period in a specific case (e.g., in connection with the enforcement of a legal claim). The archiving periods are specified in the controller's shredding and archiving rules and result from the relevant generally binding legislation or, where not provided for by law, from a decision of the controller. There is no automated decision-making or profiling in our processing of personal data. 

III. 

WHAT RIGHTS DO YOU HAVE IN RELATION TO YOUR PERSONAL DATA? 

1. Under the conditions set out in generally binding legislation, you have the right to access your personal data (i.e. the right to obtain information from us as to whether we process your personal data and, if so, which data is involved and how it is processed). 

2. You have the right to have inaccurate personal data corrected. If you find that the personal data we are processing does not correspond to reality (e.g. misspelled name, change of address), you have the right to request that we correct or complete the personal data in question. 

3. In certain cases, you also have the right to erasure if: 

a. Your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
b. you object to the processing of your personal data in the cases provided for by the applicable generally binding legislation and there are no overriding legitimate grounds for processing by us;
c. unlawful processing of your personal data has taken place; or
d. your personal data must be erased to comply with a legal obligation which we are subject to. 

4. You have the right to restrict processing, provided that: a. you dispute the accuracy of your personal data for the period necessary for us to verify the accuracy of your personal data; b. your personal data has been unlawfully processed and you request restriction of processing instead of erasure; c. you have objected to the processing; and in other cases provided for in the relevant generally binding legal regulations. 

5. You also have the right to object to the processing of your personal data based on our legitimate interest and the right to the transferability of your personal data in cases provided for by generally binding legislation. The asserted right to data transferability cannot be granted by us if the exercise of this right would adversely affect the rights and freedoms of other persons. You also have the right to lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection (www.uoou.cz), if you believe that the processing of your personal data is in breach of the law. If you have any doubts or questions about the processing of your personal data by us, you can contact us at any time using the above-mentioned contact information. 

6. We need some personal data from you to perform a contract. Of course, you are not obliged to provide us with your personal data; however, without providing the necessary personal data necessary for the relevant purpose (with which we will make you familiar), it is not possible to provide legal services to you in accordance with the applicable generally binding legal regulations and/or the professional regulations of the Czech Bar Association. 

IV. 

USE OF COOKIES AND ANALYTICS SERVICES 

1. In order to provide the best possible user experience and to ensure the full functionality of the website, we may use so-called cookies on the website. These are small text files that are stored on your device. For more information on the used cookies, please see, for example, here. Cookies are files that allow the website to store information about the viewing of the website on your device (e.g. number of page views, data about the pages viewed, etc.). 

2. Some cookies are deleted immediately after you turn off your web browser (temporary cookies), other cookies remain stored on your device and allow us to recognize your browser the next time you visit the site (permanent cookies). 

3. A list of the different types of cookies that may be used on our website is set out below. If personal data is obtained through the use of cookies, it is processed in the manner specified in this notice. 

a. Essential cookies - necessary for the proper functioning of the website and the use of the functions offered. Without essential cookies, some or all of the functions of the website may not be available (e.g. session cookies, load balancing, user ID, security cookies);
b. Preference cookies - collect information about your choices and preferences and allow us to remember the language or other local settings and customize the site accordingly (e.g., language, location, reference websites, last visit and activity, site history);
c. Analytical cookies - collect information about how users use the site and allow us to improve how the site works (e.g., most frequently visited bookmarks, any problems users may have with the site, etc.); they allow us to learn about general patterns of site use, not how a particular person uses the site;
d. Marketing cookies - they collect information about how many users have seen a particular advertisement or how many have viewed an advertisement repeatedly, etc. 

4. You can set rules on the use of cookies in your web browser - you can usually decide individually whether to accept them or to exclude them, both for specific cases and in general. Not accepting certain cookies may limit the functionality of the website. 

5. We use Google Analytics, a web analytics service, on the website. Google Analytics uses cookies. However, for this purpose, your IP address is anonymised in full compliance with data protection legislation. Google Analytics provides us with information to evaluate the use of the website by users and to improve the website environment where appropriate. You can block the use of Google Analytics, for example, by using the following link to save the so-called browser opt-out cookies on your device: https://tools.google.com/dlpage/gaoptout?hl=en.