Privacy Policy
Legal Disclaimer
Attorneys-at-law, JUDr. Veronika Uhlerová, with registered office at Skuteckého 33, Banská Bystrica, Company ID: 55 032 761, JUDr. Kristína Panasiuková, with registered office at Damborského 3, 949 01 Nitra, Company ID: 42 369 517, and JUDr. Tereza Vacvalová, with registered office at Mikovíniho 7, 831 02 Bratislava, Company ID: 56 398 107 (hereinafter referred to as “We”) care about your privacy. These terms and conditions explain how we process personal data when providing legal services.
If you have any questions, you can contact us by phone, email at info@legals.sk or by mail at the attorney's registered office.
When processing personal data, we are governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "GDPR") and Act No. 18/2018 Coll. on the protection of personal data and on amending and supplementing certain acts, as amended (hereinafter referred to as the "Act on the Protection of Personal Data"), Act No. 586/2003 Coll. on advocacy, as well as other regulations. We comply with the Code of Conduct adopted by the Slovak Bar Association, which explains in more detail the processing of personal data by lawyers. You can familiarize yourself with the SAK Code of Conduct at www.sak.sk.
Why do we process personal data?
The processing of personal data is necessary in particular for the purposes of:
providing legal services to clients and practicing the legal profession in accordance with relevant legal regulations;
fulfillment of the operator's legal, professional and contractual obligations;
protection of the legitimate interests of the operator, its clients and other data subjects;
informing clients and potential clients about legal news, as well as the activities and successes of the law firm.
Where do we get personal data from?
We generally obtain personal data of data subjects directly from them, in particular from clients, employees, contractual partners, job applicants, as well as from persons who have signed up to receive legal information or other professional materials. In justified cases, personal data may also be obtained from publicly available sources, from public authorities or from third parties.
In the case of persons who are not our clients, personal data may be obtained primarily from our clients for whom we provide legal services, or from publicly available registers, legally established records or other lawful sources. This includes in particular data obtained on the basis of requests addressed to public authorities, extracts from public registers or when securing and performing actions for the benefit of the client, including obtaining and evaluating evidence. In such cases, the personal data of the persons concerned may be processed without their prior notification, to the extent resulting from the relevant legal regulations, in particular from the Act on Advocacy and related legal regulations governing the practice of advocacy.
What is the length of the retention period?
We generally obtain personal data of data subjects directly from them, in particular from clients, employees, contractual partners, job applicants, as well as from persons who have signed up to receive legal information or other professional materials. In justified cases, personal data may also be obtained from publicly available sources, from public authorities or from third parties.
In the case of persons who are not our clients, personal data may be obtained primarily from our clients for whom we provide legal services, or from publicly available registers, legally established records or other lawful sources. This includes in particular data obtained on the basis of requests addressed to public authorities, extracts from public registers or when securing and performing actions for the benefit of the client, including obtaining and evaluating evidence. In such cases, the personal data of the persons concerned may be processed without their prior notification, to the extent resulting from the relevant legal regulations, in particular from the Act on Advocacy and related legal regulations governing the practice of advocacy.
To whom is personal data provided and to which countries?
We disclose personal data of clients and other natural persons only to the extent necessary and always on condition that the data recipient maintains the legal obligation of confidentiality. Recipients of personal data may include, in particular, public authorities (especially courts and administrative authorities), employees of the controller, persons authorized to perform individual acts within the scope of providing legal services, representing or cooperating attorneys, accounting and tax advisors, translators, the Slovak Bar Association, as well as providers of software solutions and technical support used in the practice of law, including their employees.
Although the controller is not obliged to provide personal data to public authorities (which are not considered recipients under Article 4(9) of the GDPR) in full due to the legal obligation of confidentiality, in cases provided for by law it is obliged to fulfil specific legal obligations, in particular the obligation to prevent the commission of a crime and obligations arising from regulations on the prevention of money laundering and terrorist financing.
The transfer of personal data to third countries outside the European Economic Area (European Union, Iceland, Norway and Liechtenstein) takes place only exceptionally. In such cases, an adequate level of protection of personal data is ensured, in particular through standard contractual clauses adopted by the European Commission, as well as through the implementation of appropriate technical, organizational and personal security measures.
What are your rights?
If personal data are processed based on the consent of the data subject, the data subject has the right to withdraw his or her consent at any time. The withdrawal of consent does not affect the lawfulness of the processing of personal data carried out before its withdrawal.
The data subject has the right to object at any time to the processing of personal data which is based on the legitimate interest or public interest of the controller, as well as to the processing for direct marketing purposes, including profiling, if it applies to it.
The client is entitled to exercise the right of access to personal data and the right to rectification. However, in the case of processing of personal data in connection with the provision of legal services, the data subject, including the client and other natural persons (e.g. counterparties), does not have the right to object to such processing under Article 22 GDPR, as regards processing necessary for the exercise of legal profession.
To the extent that the personal data relate to a client, regardless of whether the client is a natural or legal person, other data subjects are not entitled to exercise the right of access to such data or the right to data portability, due to the lawyer's legal obligation to maintain confidentiality, as well as in accordance with Article 15(4) and Article 20(4) of the GDPR and Article 18(8) of the Act on Advocacy, according to which: "A lawyer is not obliged to provide information on the processing of personal data, to enable access to or portability of personal data under a special regulation, if this could lead to a breach of the lawyer's obligation to maintain confidentiality under this Act."
The data subject is also entitled to file a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, or the Slovak Bar Association.
Aké automatizované individuálne rozhodovania vykonávame?
We do not perform automated individual decision-making.
How is the protection of your personal data ensured?
Appropriate technical, organizational and personnel security measures are taken to prevent loss, misuse, unauthorized alteration, disclosure or unauthorized access to the personal data of data subjects.
The operator limits access to personal data exclusively to those persons who absolutely need it to fulfill their work or contractual obligations, in particular to employees, representatives, contractual partners and other third parties involved in ensuring the operator's activities.
These persons are authorized to process personal data solely on the instructions of the controller and are bound by a legal or contractual obligation of confidentiality.
Processing of cookies
Cookies are small text files stored on the user's end device that enable the improvement of the functionality of the website, in particular by recognizing repeat visitors when logging into the user interface, storing user settings when browsing the pages, as well as by measuring traffic and analyzing how the website is used with the aim of optimizing it and improving the user experience.
The website operator uses cookies mainly to ensure the correct display of the website's content and functionality, to analyze traffic, to improve its searchability in search engines, as well as to support its promotion through social networks and Internet search engines (e.g. Google).
The user can prevent the storage of cookies on their end device at any time by changing the settings of their internet browser. Pursuant to Section 55(5) of Act No. 452/2021 Coll. on electronic communications, the setting of the internet browser is considered to be an expression of consent to the use of cookies on the website.
Changes to privacy terms
Ochrana osobných údajov nie je jednorazovým úkonom, ale priebežným procesom. Informácie poskytované v súvislosti so spracúvaním osobných údajov sa môžu v čase meniť alebo strácať svoju aktuálnosť.
Prevádzkovateľ si preto vyhradzuje právo tieto podmienky ochrany osobných údajov kedykoľvek jednostranne upraviť alebo doplniť v akomkoľvek rozsahu. V prípade podstatných zmien bude táto skutočnosť dotknutým osobám oznámená primeraným spôsobom, najmä zverejnením oznámenia na webovej stránke alebo prostredníctvom osobitného oznámenia zaslaného e-mailom.