We wish to inform you of the rights and obligations rising from the personal data protection regulation which applies to you if you are our clients and we receive your personal data.
I. Personal data protection
The lawyer, as the controller of the personal data that shall be provided to him or her by the client under this agreement, undertakes to process such personal data in accordance with legislation, above all Act No. 85/1996 Coll. (Act on the Legal Profession) and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
II. Personal data controller
III. Legal basis for processing
- Agreement for the provision of legal services
- Provision of personal data is the obligation of the data subject – client (hereinafter the “Client”), which arises from the above agreement.
IV. Purpose of the processing
- The provision of legal services under the agreement concluded with the Client
- Recipient of personal data
- Public authorities (such as courts, administrative authorities)
- Providers of information system maintenance
- Further recipients according to the needs and instruction of the client
V. Period of personal data processing
Personal data are processed for a period of the validity of the above agreement and once it is terminated the personal data is handled according to valid legislation, particularly Act No. 85/1996 Coll. (Act on the Legal Profession), Act No. 499/2004 Coll. (Act on Archiving and Records Management and on the Amendment of Selected Acts) and the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR).
VI. Rights of the Client
The right of access to personal data means that the Client has the right to gain information from the controller – lawyer about whether the lawyer is processing his or her personal data, and if so, what data and in what manner are they processed. The Client also has the right to request that the controller-lawyer corrects without undue delay any inaccurate personal data that concerns him or her. The Client has the right to make additions to incomplete personal data at any time.
The right to erasure of personal data, in other words, means the expressed obligation of the controller – lawyer to delete personal data which it processes about the Client provided that certain conditions are met and the Client so requests.
The Client has the right to request that the controller - lawyer restricts the processing of his or her personal data. The Client has the right at any time to object to the processing which is based on the authorised interest of the controller - lawyer, third party or is necessary for fulfilling a task carried out in the public interest or in the exercise of official authority.
Right to data portability provides the Client with the possibility of gaining personal data which he or she provided to the controller in a commonly used and machine-readable format. He or she can then transmit such data to another controller or, if this is technically possible, request that the controllers transmit them between each other.
The right to withdraw consent to the processing of personal data at any time shall not be applied because the Client’s personal data are processed in order to fulfil the agreement concluded with the Client but not on the basis of consent to the processing.
In case that the Client shall be dissatisfied in any way with the processing of his or her personal data carried out by the controller – lawyer, he or she can lodge a complaint against him or her or refer to the Office for Personal Data Protection.
More information about client rights is available at the website of the Office for Personal Data Protection. (https://www.uoou.cz/6-prava-subjektu-udaj/d-27276)