Data processing privacy policy

the following information is provided as part of the controller’s obligation to inform according to Articles 13 and 14 of the REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the “GDPR Regulation”).

01. Who processes my personal data?

The entity that processes your personal data as the data controller under the GDPR is the Attorney´s office:

JUDr. Gerhard Gross – LEGGAL advokátska kancelária, s. r. o. 

Seated: Záhradnícka 4882/46, 821 08 Bratislava – mestská časť Ružinov
ID No.: 56 755 694
Registered in: Commercial Register of City Court Bratislava III, Section: Sro, Insert No.: 184766/B

(hereinafter referred to as „Attorney´s office”)

When processing your personal data, the Attorney´s office primarily, but not exclusively, follows the GDPR Regulation, which regulates the conditions for the processing of personal data as well as your rights as a data subject, the provisions of Act No. 18/2018 Coll. on the Protection of Personal Data (to the extent that this Act applies to these relationships according to § 3(2)), Act No. 586/2003 Coll. on Advocacy and on the Amendment and Supplementation of Act No. 455/1991 Coll. on Trade Licensing (Trade Licensing Act) as amended (also referred to as the “Law on Advocacy”) and other relevant generally binding legal regulations.

The Attorney´s office also adheres to the Code of Conduct adopted by the Slovak Bar Association, which elaborates and specifies the processing of personal data by Attorney´s office, particularly the purposes of processing personal data listed below, and which can be found on the Attorney´s office website in the “Data Protection” section.

1.1 Who can I contact with my comments?

Since the Attorney´s office processes your personal data, you are a data subject. As a data subject, you can address your comments and requests regarding the processing of personal data to the Attorney´s office at the following contact:

Meno and surname: JUDr. Gerhard Gross
Email: leggal@leggal.sk
Tel. č.: +421944629549

02. For what purposes and on what legal basis are my personal data processed?

We process your personal data for the following purposes:

  1. For the purpose of performing the profession (providing legal services) on the legal basis of fulfilling a legal obligation according to Article 6(1)(c) of the GDPR, fulfilling a contract according to Article 6(1)(b) of the GDPR Regulation, or legitimate interest according to Article 6(1)(f) of the GDPR.
  2. For the purpose of providing services other than legal services on the legal basis of fulfilling a legal obligation according to Article 6(1)(c) of the GDPR Regulation, fulfilling a contract according to Article 6(1)(b) of the GDPR Regulation, or legitimate interest according to Article 6(1)(f) of the GDPR Regulation and the Act on the Register of Public Sector Partners, the Act on E-Government, the Act on Lease and Sublease of Non-residential Premises, the Civil Code, and the Commercial Code;
  3. For the purpose of ensuring compliance with legal regulations and the regulations of the Slovak Bar Association on the legal basis of fulfilling a legal obligation according to Article 6(1)(c) of the GDPR Regulation, legitimate interest of Attorney´s office or third parties according to Article 6(1)(f) of the GDPR Regulation, or public interest according to Article 6(1)(e) of the GDPR Regulation, as well as the Act on Advocacy, the Bar Association Code, the Act on the Protection against Money Laundering, the Act on Whistleblowing, and the GDPR Regulation.;
  4. For purposes related to the protection of legitimate interests on the legal basis of the legitimate interest of the Attorney´s office or third parties according to Article 6(1)(f) of the GDPR Regulation.;
  5. For the purpose of protecting and asserting the Attorney´s office rights against the client on the legal basis of Article 6(1)(f) of the GDPR Regulation, and the Civil Code, the Commercial Code, the Criminal Procedure Code, the Criminal Code, the Civil Procedure Code, the Non-Contentious Civil Procedure Code, the Administrative Court Procedure Code, the Administrative Procedure Code, the Misdemeanor Act, and the GDPR Regulation.;
  6. For statistical purposes, archiving purposes in the public interest, and purposes of historical and scientific research on the legal basis that allowed the collection of personal data for original purposes in accordance with the provisions of Article 89 of the GDPR Regulation and the Archives Act.;
  7. For the purposes of payroll and human resources, personal data are processed based on the legal basis of fulfilling a legal obligation according to Article 6(1)(c) of the GDPR, legitimate interests according to Article 6(1)(f) of the GDPR, and possibly also the performance of a contract according to Article 6(1)(b) of the GDPR, as well as the Labor Code, the Law on Advocacy, and other relevant regulations.
  8. For accounting and tax purposes on the legal basis of fulfilling a legal obligation according to Article 6(1)(c) of the GDPR Regulation and specific laws in the field of accounting and tax administration.;
  9. For marketing purposes on the legal basis of Article 6(1)(a) of the GDPR Regulation or for direct marketing purposes on the legal basis of Article 6(1)(f) of the GDPR Regulation, and in accordance with the Act on Advocacy, the Act on Electronic Communications, the Act on Advertising, the Consumer Protection Act, and the Civil Code.;
  10. For the purpose of the proper and correct functioning of the Attorney´s office website (such as cookies) on the legal basis of Article 6(1)(a) of the GDPR Regulation, and on the legal basis of Article 6(1)(f) of the GDPR Regulation.;
  11. For the purpose of processing your email request for a consultation or handling another email inquiry on the legal basis of Article 6(1)(a) of the GDPR Regulation.

03. For how long is my personal data processed?

The period for processing your personal data for each purpose is defined as follows:

  1. For the purpose specified in paragraph 2(a), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations,
  2. For the purpose specified in paragraph 2(b), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations,
  3. For the purpose specified in paragraph 2(c), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations,
  4. For the purpose specified in paragraph 2(d), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations,
  5. For the purpose specified in paragraph 2(e), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations,
  6. For the purpose specified in paragraph 2(f), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations,
  7. For the purpose specified in paragraph 2(g), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations;
  8. For the purpose specified in paragraph 2(h), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations;
  9. For the purpose specified in paragraph 2(i), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations;
  10. For the purpose specified in paragraph 2(j), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations;
  11. For the purpose specified in paragraph 2(k), until an objection is raised by the data subject or for the time necessary to achieve the purpose for which the data is processed; but at least for the duration required by legal regulations.

04. Why is it necessary to process my personal data?

Processing of personal data for the purpose of performing the Attorney´s office profession (providing legal services) is essential for the proper execution of the Attorney´s office duties in accordance with the Act on Advocacy and other relevant regulations, including, but not limited to, regulations adopted by the Slovak Bar Association, such as the Bar Association Code, which can be found on the Slovak Bar Association’s website. The Attorney´s office is authorized to collect and process personal data necessary for the performance of their duties by copying, scanning, or otherwise recording official documents onto an information carrier without the consent of the data subject. The Attorney´s office is not required to provide information about the processing of personal data, allow access, or facilitate data portability under the GDPR Regulation if it could lead to a breach of the Attorney´s office obligation to maintain confidentiality under the Act on Advocacy.

Processing of your personal data for other purposes, excluding those specified in paragraph 2(j) and (k), as described above, is necessary for fulfilling the Attorney´s office obligations imposed by law, other generally binding legal regulations, and the rules issued by the Slovak Bar Association, or for the protection or enforcement of the Attorney´s office or third parties’ legitimate interests.

Processing of your personal data according to paragraph 2(j) involves the use of cookies. Cookies are small text files that enhance the use of the Attorney´s office website (www.leggal.sk) by, for example, recognizing previous visitors when logging into the user environment, remembering visitor choices when opening a new window, measuring website traffic, or analyzing its usage to improve user experience. The Attorney´s office website (www.leggal.sk) uses cookies to ensure its proper functioning. The processing of cookies is based on your consent. When you first visit the Attorney´s office website (www.leggal.sk), a pop-up window will display information about cookie processing and various action options. By selecting the “Accept” option, you consent to the use of all categories of cookies and plugins that you have indicated in the pop-up window as described in the pop-up window and this document. You can prevent cookies from being stored on your device at any time by adjusting your web browser settings; however, in such a case, the Attorney´s office website (www.leggal.sk) may not function properly.

05. What rights do I have as a data subject?

Please note that the Attorney´s office is not obligated to provide information about the processing of personal data, grant access, or facilitate data portability  under the GDPR Regulation if it could lead to a breach of the Attorney´s office obligation to maintain confidentiality under the Act on Advocacy, even if this document states otherwise.

  1. As a data subject, you have the right to access your personal data. Upon your request, the Attorney´s office will provide confirmation of whether your personal data is being processed. If the Attorney´s office processes your personal data, they will provide you with a copy of this data upon request. The first copy provided under the previous sentence is free of charge. For any additional copies you request, the Attorney´s office will charge a fee corresponding to the administrative costs incurred in providing the copy. If you request information electronically, it will be provided in a commonly used electronic format, such as via email, unless you request another method. The Attorney´s office may refuse to provide a copy mentioned in this paragraph if granting this right could negatively impact the rights and freedoms of others or if it could lead to a breach of the Attorney´s office obligation to maintain confidentiality under the Act on Advocacy.
  2. As a data subject, you have the right to have your personal data corrected if the Attorney´s office holds incorrect personal data about you. You also have the right to complete any incomplete personal data. The Attorney´s office will make the correction or addition of personal data without undue delay after you request it.
  3. As a data subject, you have the right to have your personal data erased, provided that:
 
  • The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • You withdraw the consent on which the processing is based;
  • You object to the processing of your personal data;
  • The personal data has been processed unlawfully;
  • The erasure is required to comply with a legal obligation, specific regulation, or international agreement to which the Slovak Republic is bound; or
  • The personal data was collected in relation to the offer of information society services to a person under the age of 16.
 
As a data subject, you will not have the right to erasure of personal data if the processing is necessary:
 
  • For the exercise of the right to freedom of expression and information;
  • To fulfill a legal obligation, specific regulation, or international agreement to which the Slovak Republic is bound, or to carry out a task performed in the public interest or in the exercise of official authority vested in the controller;
  • For reasons of public interest in the area of public health;
  • For archiving purposes in the public interest, for scientific or historical research, or for statistical purposes, where it is likely that the right to erasure would seriously impede or hinder the achievement of the objectives of such processing; or
  • For the establishment, exercise, or defense of legal claims by the Attorney´s office.
 
The Attorney´s office will carry out the erasure of personal data for you as a data subject upon request, and without undue delay after determining that your request is justified.

  1. As a data subject, you have the right to restrict the processing of your personal data if:
 
  • You contest the accuracy of the personal data by raising an objection under paragraph 5(f), during a period enabling the accuracy of the data to be verified;
  • The processing is unlawful and you, as the data subject, request restriction of the use of the data instead of erasure;
  • The personal data is no longer needed for processing purposes, but you need it for the establishment, exercise, or defense of legal claims;
  • You, as the data subject, have objected to the processing of your personal data based on the legitimate interest of the Attorney´s office, pending verification of whether the Attorney´s office legitimate reasons outweigh your rights as the data subject.
 

If you request the restriction of processing your personal data, the Attorney´s office will not carry out any processing operations on the restricted data, except for storage, without your consent. The Attorney´s office office will inform you if the restriction on processing these data is lifted.

  1. As a data subject, you have the right to data portability, which means obtaining the personal data you have provided to the Attorney´s office. You have the right to transfer this data to another controller in a commonly used and machine-readable format, provided that the personal data was obtained based on your consent or another legal basis, and their processing is carried out by automated means.
  2. As a data subject, you have the right to object at any time to the processing of your personal data on grounds relating to your particular situation. The Attorney´s office will assess your objection within a reasonable time. The Attorney´s office must cease processing your personal data if they do not demonstrate the necessity of legitimate interests for processing such data that outweigh your rights or interests, or reasons for establishing a legal claim.
  3. As a data subject, you have the right to withdraw your consent to the processing of personal data at any time, if the processing was based on this legal basis. You can withdraw your consent by contacting the Attorney´s office using the contact details provided at the beginning of this document, in any manner you choose. However, the legality of the processing of personal data based on the given consent is not affected by its withdrawal.
  4. As a data subject, you have the right to submit a complaint to the Office for Personal Data Protection of the Slovak Republic if you believe that your rights related to the protection of personal data have been violated.

06. Who receives my personal data?

The Attorney´s office discloses clients’ and other individuals’ personal data only to the extent necessary and always while maintaining the confidentiality of the recipient, such as to the Attorney´s office employees, individuals authorized by the Attorney´s office to perform specific legal services, representing or collaborating Attorney´s office, the Attorney’s accounting advisor, the Slovak Bar Association (e.g., in the case of disciplinary proceedings), or providers of software and office support, including their employees.

Personal data processing does not involve cross-border transfers to third countries that do not provide adequate data protection guarantees.

Although the Attorney´s office has a limited obligation to disclose your personal data to public authorities due to confidentiality, the Attorney´s office is obligated to prevent the commission of a crime and must also report information related to the prevention of money laundering and terrorist financing.

07. More information

The security of your personal data is paramount. To ensure the protection of your personal data, necessary technical and organizational measures have been implemented.

Personal data processing does not involve automated processing, including profiling, or behavioral advertising.

According to the Law on Advocacy, the Attorney´s office is obliged to maintain confidentiality about all matters learned in the course of performing their legal profession, unless otherwise provided by specific regulations in the field of preventing and detecting money laundering and financing terrorism.