Rules of personal data processing
Personal data processing policy of Advokátska kancelária MCL, s.r.o., with its registered seat at Mostová 2, 811 02 Bratislava, IČO: 50074369, registered in the Commercial Register of the Bratislava I District Court, Section: Sro, File No.: 107926/B, and in this document in accordance with Regulation No. 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR“), hereby.
These rules apply to all situations in which personal data may be processed, including (i) through our website, (ii) during telephone and email communication, (iii) during contractual relationships with our clients and suppliers, (iv) when fulfilling our legal obligations and (v) when protecting our legitimate interests.
If you have any additional questions or something is not clear to you, please contact us at email@example.com
Purpose of personal data processing
We may process your personal data for the following purposes:
|Purpose||Legal basis with explanation|
|Performance of contracts, including pre-contractual relations||Performance of contracts, including pre-contractual relationships, in particular with our (i) clients to whom we provide our services in accordance with the Advocacy Act and (ii) contractors who provide services to us.|
|Fulfilment of legal obligations||Fulfilment of legal obligations, especially obligations arising from accounting and tax legal regulations, as well as the Advocacy Act (archiving of client files).|
|Performance of marketing activities||With your consent, we will send you marketing materials, offers and newsletters via email.|
|Protecting our legitimate interests||The protection of our legitimate interests applies to the protection of our property, the enforcement of legal claims, including receivables, as well as the performance of marketing activities, with the exception of automatically sent messages, which we will only send with your consent.|
|Processing your requests||If you send us a request, such as a question by email which is not connected with the fulfilment of a contract or pre-contractual relations, we will consider that it represents your consent to our processing of your data in order to deal with your request.|
Categories of personal data processed
|Personal information||Purpose of processing|
|Name and surname||Performance of contracts, including pre-contractual relations performance of legal obligations, performance of marketing activities, protection of our legitimate interests, handling of your requests.|
|Contact address||Performance of contracts, including pre-contractual relations, performance of legal obligations, performance of marketing activities, protection of our legitimate interests, handling of your requests.|
|Performance of contracts, including pre-contractual relations, performance of legal obligations, performance of marketing activities, protection of our legitimate interests, handling of your requests.|
|Telephone contact||Performance of contracts, including pre-contractual relations, performance of legal obligations, performance of marketing activities, protection of our legitimate interests, handling of your requests.|
|Account number||Performance of contracts, including pre-contractual relations, performance of legal obligations.|
|Birth number and date of birth||Performance of contracts, including pre-contractual relations, performance of legal obligations.|
|Information relating to a provided or received service||Performance of contracts, including pre-contractual relations, performance of legal obligations, marketing.|
Length of personal data retention
|Purpose||Length of retention|
|Performance of contracts, including pre-contractual relations||For the duration of the contractual relationship and 10 years after its termination.|
|Fulfilling legal obligations||For the period of time necessary under the relevant legislation, for example, 10 years in the case of accounting documents under the Accounting Act.|
|Performance of marketing activities||For the duration of the consent to the processing of personal data for marketing purposes, or until its revocation.|
|Protection of our legitimate interests||For the period of time necessary to protect our legitimate interests.|
|Handling your requests||For as long as necessary to process your request.|
Provision of personal data
We will only disclose your personal data to the extent necessary, e.g. to our employees, to persons we contractually instruct to perform individual acts of our services, to accounting and tax advisors, or to our IT support providers, or where permitted or required by law, e.g. to law enforcement authorities.
Transfer of personal data to third countries
The free movement of personal data is guaranteed within the EU/European Economic Area. We do not intend to transfer your personal data to countries outside the EU/EEA (third countries). However, if we do so in the future, it will be in accordance with the GDPR, and if so, it will be transferred to a country that provides an adequate level of protection according to a decision of the European Commission or pursuant to the conclusion of so-called contractual clauses.
If you are a data subject, you have certain rights, including the right of access to personal data, the right to the rectification, erasure or restriction of processing, the right to object to processing, the right to data portability, the right to withdraw your consent to the processing of personal data and the right to file a complaint with a supervisory authority.
Due to the specific nature of our activity (provision of legal services), the exercise of some of your rights may be restricted.
Scope of these rights
Right of access
You have the right to obtain confirmation from us as to whether your personal data is being processed and, if so, the right to access and obtain a copy of that data. Upon your request, we will provide you with any information regarding the processing of your personal data.
Right of correction
You have the right to request that we correct or supplement your personal data.
Right to deletion (right to be forgotten)
We will delete your personal data (i) if it is no longer necessary for the purposes for which they were collected, (ii) in the event of your withdrawal of consent, (iii) on the basis of objections to processing if no legitimate grounds for such processing exist, (iv) if necessary to comply with a legal obligation, or (v) if it is established that your personal data have been processed unlawfully. However, this does not apply to all cases; for example, we will not delete your personal data if it is necessary for the establishment, exercise or defence of legal claims.
Right to restriction of processing of personal data
You have the right to request that we restrict processing if (i) you have challenged the accuracy of the personal data (as a result, such processing will be suspended for the period of time that it takes us to verify the accuracy of the personal data), (ii) the processing is unlawful and you object to the deletion of the personal data but you request that we restrict its use; (iii) we no longer need personal data for the purposes of the processing, but you need them to establish, exercise or defend legal claims; (iv) you object to the processing, pending verification that the legitimate grounds on our side outweigh your legitimate grounds.
Right to object to processing
You have the right to object at any time to the processing of your personal data which is carried out on the legal basis of necessity for the purposes of legitimate interests pursued by us or a third party.
Right to transferability
Where we process personal data about you that you have provided to us in electronic form on the basis of a contract or consent, you have the right to have it transferred to a third party in a commonly used and machine-readable form.
Right to withdraw consent
If the processing is based on your consent, you have the right to withdraw your consent at any time. However, your withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal.
Right to file a complaint
If you believe that the processing of your personal data is in breach of the GDPR or other data protection legislation, you have the right to file a complaint with the supervisory authority that oversees our activities. In the Slovak Republic this is:
Office for Personal Data Protection of the Slovak Republic
820 07 Bratislava 27
+421 /2/ 3231 3214
Changes to the rules
These rules may be changed from time to time. The current version can be found on our website at https://www.akmcl.sk