GDPR

Information on the processing of personal data

pursuant to Act No. 110/2019 Coll., on Personal Data Processing, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), and Act No. 480/2004 Coll., on certain Information Society Services and on Amendments to some Acts.

Data controller

Legal office Mgr. Jiřina Svojanovská, attorney of the Czech Bar Association No. 10471, ID: 71331280, with its registered office in Brno, Šilingrovo nám. 257/3, ZIP: 60200, telephone: +420 542 216 189, email: info@svojanovska.cz, Data box ID: z4sf87b.

Categories of processed data

• identification and contact details related to our contractual partners: title, first name, surname; job position within a contractual partner; telephone number, e-mail address; data resulting from the contract
• personal and sensitive data of clients: title, first name, surname; permanent or another residence, delivery address; marital status, information about family household; date of birth (age), place of birth; citizenship; gender, personal identification number, or another national identifier; data resulting from the submitted documents; telephone number, e-mail address; data resulting from the subscription contract; method of financing and payment, bank connection; the source and origin of finances and assets; data resulting from injuries at work or occupational diseases of clients' employees; data on professional and medical qualifications of clients' employees; for natural persons engaged in business: name, registered office, identification number

Legal basis of processing and purposes of processing

• conclusion and performance of the contract to which we are a party
• fulfillment of the legal obligation that applies to us, especially the provision of legal services under Act No. 85/1996 Coll., on Advocacy, as amended
• our predominantly legitimate interests, where these are justified in particular by:
  • the interest in establishing contractual cooperation
  • the pre-contractual communication and possible claims arising from pre-contractual liability
  • the interest in the future resumption of negotiations on the establishment of contractual cooperation
  • the purposes of our tax records and control
  • the measures for the further development of our services
  • the optimization of the procedures for analysis of our needs
  • the assertion of legal claims and defense in case of legal disputes
  • the security verification
  • the communication between the parties to the contract
• if the law requires the data subject's consent to the processing, we will always ask for it in advance

To whom can the data be provided

• the providers of IT services or information systems
• the providers of external accounting services
• the persons who, based on an authorization, ensure the fulfillment of our contractual or legal obligations and the exercise of rights established by contract or law or with whom we otherwise cooperate in fulfilling the subject of the contract or in realizing the matter of their business (i. e. tax advisors, auditors, etc.)
• the state administration bodies, courts, or bodies active in criminal proceedings
• we do not transfer personal data to third countries or international organizations

The period of processing personal data

We process personal data for the time necessary to fulfill the purpose for which the personal data were collected.

The source from which the personal data comes

Personal data may come directly from the subject whose personal data we process and from public registers or other sources (e. g. websites).

The method of personal data processing

Personal data are processed in electronic form in an automated way or printed form in a non-automated way. We do not perform systematic or extensive processing of personal data. We also do not perform automated individual decision-making with legal or similar effects, incl. profiling, within the meaning of Article 22 of the GDPR.

Data subjects' rights to personal data protection

the right to information and access to personal data (Article 15 of the GDPR); the right to rectification, or addition of personal data (Article 16 of the GDPR); the right to demand the erasure of personal data (Article 17 of the GDPR); the right to personal data portability to another data controller (Article 20 of the GDPR); the right to restrict the processing of personal data (Article 18 of the GDPR); the right to object to the processing (Article 21 of the GDPR); the right to file a complaint within the Office for Personal Data Protection - applies to the Czech Republic; the right not to be the subject to the automated individual decision-making with legal or similar effects, incl. profiling (Article 22 of the GDPR).

If the data subject has given us his/her consent, he/she may revoke it at any time in writing at our address or by email to info@svojanovska.cz (in whole or in part) - this does not affect the lawfulness of processing based on the consent given prior to its revocation.

Voluntary provision of personal data

If the processing of personal data is based on the data subject's consent, their provision is entirely voluntary; therefore, if the data subject does not provide us with his/her personal data, he/she will not suffer any legal damage but will not be able to use our services. Otherwise, personal data processing is possible only based on a legal or contractual requirement (e. g. if personal data must be included in the contract).

If the data subject has any questions related to the processing of personal data or the investigated security incident, he/she can contact us by phone at +420 542 216 189 or by email at info@svojanovska.cz.