GDPR

Proper processing of your personal data and the protection of your privacy are of utmost importance to our company. Therefore, we process your personal data in compliance with applicable legal regulations and protect it with the highest possible care.

We would like to provide you with detailed information, primarily regarding the personal data we process, why we process it, what rights you have in relation to the processing of your personal data, as well as other information that may interest you and that relates to the processing of personal data.

Who is the data controller of your personal data?

The data controller is always the company to which the data has been provided and which determines the purpose and means of processing the personal data.

The data controller is the company HALADA & PARTNERS s.r.o., with its registered office at Kapitulská 21, 917 01 Trnava, registered in the Business Register of the District Court Trnava, section: Sro, Insert no. 18942/T, Company ID no. 36 669 661, represented by JUDr. Andrej Halada, attorney and managing director (hereinafter referred to as the "Controller").

Contact details: E-mail contact: kancelaria@akvh.sk Phone: 033/ 535 45 67

What legal basis allows us to process your personal data?

The Controller processes personal data within the information system: CLIENTS OF THE LAW FIRM for the purpose of fulfilling rights and obligations arising from the contract for the provision of legal services. In this case, the legal basis for processing personal data is the contract for the provision of legal services (Article 6(1)(b) GDPR).

The Controller processes personal data for the purpose of performing the profession of an attorney pursuant to Act No. 586/2003 Coll. on Advocacy, according to which an attorney processes personal data of clients and other natural persons to the extent necessary for the purposes of performing advocacy in accordance with this law and specific regulations. In this case, the legal basis for processing personal data is the law (Article 6(1)(c) GDPR).

The Controller processes personal data for the purpose of informing existing clients about legal news, the Controller's service offerings, etc. (direct marketing towards existing clients), and for the purpose of defending the Controller's legal claims. In this case, the legal basis for processing personal data is the legitimate interest of the Controller (Article 6(1)(f) GDPR). The Controller also informs that no consent is required from the data subject whose personal data is being processed for such processing.

Whose personal data do we process?

The Controller processes personal data of clients, their representatives, and other natural persons (such as contracting parties, opposing parties in court proceedings, etc.).

What personal data do we process?

The Controller processes only the personal data necessary to provide legal services in accordance with the contract for the provision of legal services, to comply with legal obligations, and to protect its legitimate interests.

The Controller processes mainly the following categories of personal data, to the extent necessary to achieve the purpose of processing:

Identification data:

Title, first name, surname, birth surname, date of birth, place of birth, birth certificate number, permanent or temporary residence address, photocopy of ID card, nationality, information on health and family status, signature, identification data for a self-employed individual - business name, place of business, business ID number, trade register number

Contact data:

Phone number, mobile number, fax number, email address.

Other data:

Bank account number and IBAN.

Provision of personal data to the above extent is both a contractual and legal requirement necessary for concluding contracts for legal services and fulfilling the Controller’s legal rights and obligations.

Who may have access to personal data?

The Controller, its employees, and cooperating attorneys have access to personal data, as well as external entities that provide and ensure various services for the Controller, such as external providers of accounting, archiving, printing, postal, and IT services, tax advisors, the Slovak Bar Association, legal representatives, and public authorities, in the context of fulfilling the Controller's legal obligations or in connection with exercising rights and obligations under the contract.

How long do we retain personal data?

The Controller is authorized to process the personal data of data subjects during the term of and for the fulfillment of rights and obligations arising from contracts for the provision of legal services and the performance of its role as an attorney, in accordance with the law, until all obligations arising from these contracts and the law are settled. Data is retained for the period necessary to fulfill legal obligations, including archiving duties, up to a maximum of 10 years, unless a specific law requires a longer retention period. For marketing purposes, the Controller processes personal data only for the necessary period, but no longer than until the data subject unsubscribes from the Controller's informational materials or withdraws consent, unless legal regulations require longer retention or there is another legal basis for retention.

How do we obtain your personal data?

If you are a client of the Controller, your personal data is most often obtained directly from you. In such cases, providing your personal data is voluntary. Depending on the specific case, failure to provide personal data may affect the Controller’s ability to provide high-quality legal advice or, in exceptional cases, may even require the Controller to refuse to provide legal services. The Controller may also obtain personal data about clients from publicly available sources, public authorities, or other individuals, if necessary to achieve the purpose of processing.

If you are not a client of the Controller, your personal data is most commonly obtained from the clients of the Controller or other public or legal sources, such as requests from public authorities, extracts from public registers, or gathering evidence in favour of a client. In such cases, the Controller may acquire personal data about you without informing you and even against your will, based on its legal authorization and obligation to practice advocacy in accordance with the Act on Advocacy.

What rights do you have in connection with the processing of personal data?

Data subjects have the right to request from the Controller, to the extent that it does not conflict with generally binding legal regulations and the fulfillment of concluded contracts:

• The right to access to their personal data,
• The right to rectification of personal data,
• The right to erasure of personal data,
• The right to restriction of the processing of personal data,
• The right to object to the processing of personal data,
• The right to data portability,
• The right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection of the Slovak Republic.

The aforementioned rights of data subjects are further specified in Articles 15 to 21 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

How can you exercise your rights regarding personal data?

You can exercise your rights by sending a written request by post to the address: HALADA & PARTNERS s.r.o., Kapitulská 21, 917 01 Trnava, or electronically to the email address: kancelaria@akvh.sk.

The Controller will respond to your request regarding the processing of personal data without undue delay, but in any case within one month of receiving the request. In specific cases, the Controller may extend this period by additional two months; however, you will always be informed of the reasons for the extension within one month of receiving the request.

Responses to your requests are provided free of charge. However, if your requests are unreasonable, manifestly unfounded, or excessively repetitive, the Controller may charge a reasonable administrative fee for processing them.

Updating Personal Data:

The Controller aims to process only current and accurate personal data. Please inform the Controller of any changes to your personal data that you have provided, either by post to the address: HALADA & PARTNERS s.r.o., Kapitulská 21, 917 01 Trnava, or electronically to the email address: kancelaria@akvh.sk.