GDPR

Electronic GDPR Appendix to Mandate Agreements for Legal Services Provided by Attorneys in the Law Firm ŠINDELÁŘ KOVAŘÍK SÝKORA, ADVOKÁTNÍ KANCELÁŘ

Controller of Personal Data:

Controller of Personal Data:    Mgr. Petr Šindelář, LL.M., Attorney/Managing Partner
ŠINDELÁŘ KOVAŘÍK SÝKORA, ADVOKÁTNÍ KANCELÁŘ

Company Registration No.: 433 08 988
Registered Office: Chebská 355/49, Dvory, 360 06 Karlovy Vary
Contact details – see the "Contacts"

Legal Basis for Processing

• The contract for the provision of legal services.
• Providing personal data is an obligation of the data subject – the client (hereinafter referred to as the "Client"), arising from the aforementioned contract.

Purpose of Processing

The provision of legal services under the contract concluded with the Client and in accordance with specific AML regulations (see the AML section on this website for details of additional rights and obligations beyond this GDPR appendix).

Recipients of Personal Data

• Public authorities (e.g., courts, administrative bodies)
• Information system maintenance providers
• Other recipients as required and instructed by the Client

Retention Period for Personal Data

Personal data will be processed for the duration of the aforementioned contract. After the contract ends, the data will be handled in accordance with applicable laws, especially Act No. 85/1996 Coll. (the Advocacy Act), Act No. 499/2004 Coll. (the Archiving and Records Management Act), and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons regarding the processing of personal data and the free movement of such data, repealing Directive 95/46/EC (GDPR).

Client’s Rights

• Right to Access Personal Data: The Client has the right to obtain information from the Controller – the Attorney, regarding whether their personal data is being processed, and if so, what data is being processed and how.
• Right to Rectification: The Client has the right to request the Controller – the Attorney, to rectify inaccurate personal data without undue delay and to complete any incomplete data.
• Right to Erasure: The Client has the right to request the Controller – the Attorney, to erase their personal data under certain conditions.
• Right to Restriction of Processing: The Client has the right to request that the Controller – the Attorney, restrict the processing of their data in certain cases.
• Right to Object: The Client may object to processing based on the Controller’s legitimate interests, third-party interests, or processing necessary for tasks carried out in the public interest or in the exercise of official authority.
• Right to Data Portability: The Client can request their personal data in a commonly used and machine-readable format for transfer to another controller or request direct transfer between controllers, where technically feasible.
• The Right to Withdraw Consent does not apply, as personal data is processed based on the fulfilment of the contract with the Client, not based on consent.
• If the Client is dissatisfied with the processing of their personal data by the Controller – the Attorney, they may file a complaint directly with the Controller or contact the Office for Personal Data Protection.

More information on the Client's rights as a consumer is available on the Office for Personal Data Protection’s website (https://uoou.cz).