Privacy Policy

These are the personal data processing principles of the Baroch Sobota law firm, advokátní kancelář s.r.o., ID number: 242 74 593, with registered office at Londýnská 59, 120 00 Prague 2 (hereinafter also referred to as the “law firm”) in order to inform you about the processing of personal data in a transparent and straightforward manner , which occurs within the scope of or in connection with the activity of the law firm.

Personal data is processed by the law firm in accordance with legal regulations, in particular Act No. 85/1996 Coll., on Advocacy, as amended, and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (General Regulation on the Protection of Personal Data).

If, as a person whose personal data is or may be processed by our law firm, after reading these policies, you have further questions regarding the processing of your personal data, please do not hesitate to contact us via email: info@baroch-sobota.cz.

1. To whom this personal data processing policy applies

These principles apply in particular to the following persons:

• (potential) clients of the law firm
• recipients of emails sent by the law firm
• law firm employees
• other persons with whom the law firm cooperates, who themselves contact the law firm or whose personal data the law firm further processes within the scope of its activity or in connection with it.

These persons may be collectively referred to collectively as “clients” in this policy.

2. For what reason and for what purpose we process your personal data

Our law office processes personal data of clients only within the scope of the given purpose of their processing, i.e. for what purpose it obtained this personal data, or for the purposes listed below, and continuously checks whether personal data is processed in a legal manner. If the given personal data are no longer needed for the purpose in question, we will dispose of them.

These are the reasons and purposes for processing personal data:

• fulfillment of the contract
  • in the case of the provision of legal services, it is the processing and legal solution of the given case
  • in other cases, it is the fulfillment of rights and obligations arising from the contract
  • conclusion of employment relations
  • invoicing services
• pre-contractual process
  • processing of personal data before the conclusion of the contract
  • selection of candidates for vacancies in the law firm
• fulfillment of obligations imposed by law
  • archiving obligation established by law
  • obligations established by status regulations regarding identification and archiving
  • prevention of money laundering and terrorist financing
  • labor law agenda concerning employees
• legitimate interest of the law firm (taking into account reasonable invasion of privacy)
  • protection of law firm property
  • improving internal processes within the organization and work efficiency
  • maintaining contacts within the client database
• consent to the processing of personal data
  • in exceptional cases, the law firm may process personal data on the basis of consent to the processing of personal data. This legal reason for personal data processing will only be chosen if no other legal reason for personal data processing can be used. In the case of processing personal data based on consent, clients will be given the opportunity to revoke this consent at any time without any penalty.

Clients who provide the law firm with personal data for processing do so voluntarily. However, if clients do not provide personal data to the law firm in some cases, e.g. for the purposes of providing legal services, services cannot be provided for the stated purpose.

3. What personal data we process

The scope of personal data processing as well as the categories of personal data that we process depend on the purpose of their processing or on the legal case in which we provide legal services.

We primarily process the following personal data:

• address and identification data: for example, name, surname, title, telephone number, e-mail address, date of birth, address of residence (permanent, temporary), social security number, passport number, ID number, nationality
• descriptive data: academic degrees
• other personal data: camera recordings, photos, audio recordings.

4. Sources of Personal Information

• personal data provided to the law firm
  • clients, or persons authorized by clients or the client’s employer or business partner
  • by the opposing party, or by its legal representatives
  • at negotiations, meetings or other similar events
  • courts, state authorities and other institutions
  • business partners
• personal data obtained from other sources
  • web platforms containing personal data published on the basis of a legitimate interest or the law (in particular the commercial register, insolvency register, real estate cadastre)
  • third parties including administrative authorities or other publicly or restricted databases
  • websites of business corporations, administrative authorities, organizations or other entities.

5. Who can process your personal data

The law firm transfers personal data to other persons only if it is necessary for the provision of legal services or for the fulfillment of the purposes of processing personal data specified in Article 2 of these policies and only to the extent strictly necessary.

Persons who may receive personal data of clients may include, in particular, lawyers cooperating with the law firm, service providers, auditors, experts, accountants, experts who are authorized to issue professional statements and assessments, notaries and document deliverers.

6. Security of personal data

The law firm declares that it treats all personal data it receives from clients as strictly confidential in accordance with legal regulations governing the protection of personal data.

The law firm has adopted all necessary security and organizational measures to protect clients’ personal data from misuse, loss, destruction or damage.

The law firm is aware of the value of its clients’ personal data and processes them in such a way that they are protected to the maximum extent. The law firm protects clients’ personal data and thus their privacy.

Clients’ personal data will not be subject to automated individual decision-making during processing, including profiling.

7. Time of personal data processing

We process personal data of clients for the time necessary to fulfill the purposes of personal data processing according to Article 2 of these principles. Before the expiration of this period, the processing of personal data is suspended or interrupted to the maximum extent possible, as soon as the client exercises any of his rights listed in Article 8 of this policy, if this exercise will result in the restriction, interruption or suspension of the processing of personal data.

If a fact occurs that will result in the restriction, interruption or cessation of the processing of personal data, the law firm will process the client’s personal data only to the extent necessary, for the necessary length of time and only for the purpose of protecting the rights and legally protected interests of the law firm. As soon as this purpose of personal data processing has passed, the law firm will dispose of them.

8. Client Rights

Right of access. The client has the right to obtain confirmation from the law firm as to whether his personal data is being processed, and if so, he has the right to access this information and, in connection with this, also to request, in particular, notification of the recipients to whom this personal data has been or will be made available.

Copy right. In the event that the rights and freedoms of third parties are not adversely affected, the client has the right to request from the law firm a copy of the processed personal data concerning him.

Right to correction and addition. The client has the right to have the law firm correct inaccurate personal data concerning him without undue delay, on the basis of his own notification or other reliable findings of the law firm. In addition to the right to correct personal data concerning him, the client also has the right to supplement them if the personal data already provided and processed are incomplete.

Right to erasure. At the moment when the law firm no longer needs the processed personal data relating to the client for the above-mentioned purposes and there is no other legitimate reason for their processing by the law firm, these personal data are processed unlawfully, the consent to their processing has been revoked, or there are no reasons after an objection has been raised for their further processing, the client has the right to demand from the law firm that such personal data be deleted, or Sufficiently secured before their processing, or made inaccessible. The law firm has the right to refuse this request if there is still a reason for their processing. Deletion will not be carried out if the personal data relating to the client must be processed by the law firm for the purpose of determining, exercising or defending claims, or fulfilling the law firm’s legal obligations.

Right to limited processing. In the event that the client learns that his personal data processed by the law firm are inaccurate, or that their processing is illegal or unnecessary, or if an objection has been filed, the client may, until the law firm’s duly justified procedure or decision about the objection, to request that the law firm limit the processing of this personal data to the specified extent, but only to the smallest permissible extent.

Right to portability. The client has the right to receive the personal data that he has provided to the law firm in a structured, commonly used and machine-readable format and the right to transfer this data to another law firm. Likewise, the client has the right to have the law firm transfer this personal data directly to another administrator, if this is technically feasible.

The right to object. The law firm hereby expressly informs the client of the possibility to file an objection against the processing of personal data concerning him, but only in the event that such processing of personal data is carried out in the legitimate interest of the law firm or in the public interest. Furthermore, the client has the right to object if his personal data is processed for the purpose of direct marketing, and for this marketing, which includes profiling. This objection is submitted directly to the law firm. In the objection, the client must describe the negative impact the processing of personal data has on him.

The right not to be subject to automated decision-making. The client has the right not to be the subject of any decision based solely on automated processing, including profiling, which has legal effects for him or significantly affects him in a similar way.

The right to file a complaint. The client has the right to file a complaint with the Office for the Protection of Personal Data, based in Pplk. Sochora 27, 170 00 Prague 7, telephone number +420 234 665 111, e-mail: posta@uoou.cz, if he believes that there has been a violation of legal regulations on the protection of personal data during the processing of personal data concerning him.

The right to revoke consent. If the client’s personal data will be processed based on consent to the processing of personal data, the client has the right to revoke this consent at any time by sending an email to the address info@baroch-sobota.cz with information that the client does not want his personal data to be further processed for purpose of processing based on this consent. However, this does not affect the legality of processing personal data before such withdrawal of consent.

9. Exercise of Rights

All client rights stated in these policies and further resulting from the processing of personal data that concern them can be exercised by the client via email at the address: info@baroch-sobota.cz.