Privacy policy
This document describes how the law firm Němeček a Poloni, attorneys at law, s.r.o. (hereinafter the „Firm") processes personal data of natural persons in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council („GDPR"), Act No. 110/2019 Coll. on Personal Data Processing, and Act No. 85/1996 Coll. on the Legal Profession.
1. Data controller
Němeček a Poloni, attorneys at law, s.r.o.
IČO: 219 72 559 · registered in the Commercial Register maintained by the Municipal Court in Prague.
Registered office: Biskupcova 1719/42, Žižkov, 130 00 Prague 3
Contact for data protection matters: [email protected]
The Firm has not appointed a Data Protection Officer (DPO) — the obligation under Article 37 GDPR does not apply to it. Please direct inquiries about processing to the email address above.
2. What personal data we process
Depending on the nature of the relationship, we process in particular:
- Identifying data: name and surname, date of birth, personal identification number (only if necessary), business ID, tax ID, ID document number.
- Contact data: email address, phone number, registered office or residential address, correspondence address.
- Representation data: content of instructions, documents and materials provided by the client, work performed, billing details and fee information.
- Special categories of data: to the extent necessary, where the subject of representation requires it (e.g. health status in inheritance matters, criminal proceedings data).
- Website visitor data: technical and operational data (IP address, browser type, anonymized traffic statistics) and form data when you contact us.
3. Purposes and legal bases of processing
3.1 Provision of legal services
We process client data primarily for the performance of the legal services contract (Article 6(1)(b) GDPR) and for compliance with attorneys' statutory duties (Article 6(1)(c) GDPR — the Legal Profession Act and the professional regulations of the Czech Bar Associatio komory).
3.2 Compliance with statutory duties
Processing also takes place to comply with Act No. 253/2008 Coll. (AML), tax regulations, accounting rules, and archiving regulations.
3.3 Legitimate interests
On the basis of legitimate interest (Article 6(1)(f) GDPR), we process data for internal records, conflict-of-interest management, protection of the Firm's legal claims, and website security.
3.4 Komunikace na webu
If you contact us via the website, contact form, WhatsApp, or email, we will use your data solely to respond to your inquiry and to potentially establish a working relationship.
4. Retention period
We retain client files for at least five years after the termination of legal services in accordance with Section 25 of the Legal Profession Act and Czech Bar Association rules. We retain accounting and tax documents for 10 years from the end of the tax period in which they arose period dle Act č. 235/2004 Sb. Data z webu (analytika) we retain no longer than 14 months.
5. Recipients of personal data
Client data is protected by the attorney's duty of confidentiality under Section 21 of the Legal Profession Act — which takes precedence over GDPR obligations. The only exceptions are:
- Courts, criminal proceedings authorities, and other public authorities to the extent required by law.
- The Czech Bar Association in the scope of its oversight of the practice of law.
- The bank or notary in connection with attorney escrow.
- External IT, hosting, and accounting providers — always under a data processing agreement and within the EU/EEA.
- Cooperating attorneys and external advisors whose involvement the client has explicitly approved.
6. Transfers outside the EU
We do not routinely transfer personal data outside the EU/EEA. Where this exceptionally occurs (we typically use Microsoft cloud services — Microsoft 365 in the EU region), it is done subject to standard contractual clauses approved by the European Commissiokou Commission a in subject to further safeguards dle čl. 46 GDPR.
7. Rights of data subjects
You have the following rights in relation to your personal data:
- Right of access to the data we process about you.
- Right to rectification of incorrect or incomplete data.
- Right to erasure („right to be forgotten") — applicable to the extent that it does not conflict with the attorney's statutory archiving duty.
- Right to restrict processing.
- Right to data portability where processing is based on consent or contract.
- Right to object to processing based on legitimate interest.
- Right to lodge a complaint with the Office for Personal Data Protection (www.uoou.cz).
You may exercise your rights by emailing [email protected]. The Firm will typically respond within one month.
8. Automated decision-making and profiling
The Firm does not use personal data for automated decision-making with legal effects, nor for profiling within the meaning of Article 22 GDPR. When providing legal services, we use AI tools only as auxiliary tools — the final outputs are always reviewed and authorized by an attornesuzuje a schvaluje attorney personally.
9. Cookies
Our website uses technical and analytical cookies. Details can be found in our Cookie policy.
10. Changes to this document
We may update this document due to legal developments or operational reasons. The current version is always available on this page with the effective date indicated.