Information on processing of clients’ personal data
1. act Řanda Havel Legal advokátní kancelář s.r.o., ID No.: 276 36 836, with its registered office at Praha 1 – Nové Město, Truhlářská 13-15, Postal Code 110 00, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 120572 (“RHL”) as a controller processes personal data of its clients who are natural persons (“clients”).
2. The processing of clients’ personal data is carried out in accordance with generally applicable law, in particular REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; the “GDPR”)
3. Clients may contact RHL with queries related to personal data processing via e-mail office.prague (at) randalegal.com.
4. RHL processes identification and contact details of clients and further data collected by RHL when providing legal services under the contract entered into between RHL and the respective client (the “contract”).
5. RHL processes clients’ personal data for the following purposes:
5.1. performing the contract based on Article 6 (1) b) GDPR;
5.2. complying with RHL’s obligations under generally binding legislation based on Article 6 (1) c) GDPR (e.g. obligation of RHL to maintain accounting and tax documents);
5.3. establishing, exercising and defending legal claims of RHL based on Article 6 (1) f) GDPR; and
5.4. marketing purposes based on Art. 6 (1) f) GDPR.
6. Personal data shall be processed for a period no longer than necessary for the respective purpose. If RHL processes personal data for two or more purposes, it will retain personal data until the purpose with the latest period expires. However, RHL will stop using personal data for the purpose with a shorter period once that period expires. RHL uses the following criteria to determine the processing period:
6.1. for the purpose of performing the contract, until the termination of the contractual obligations;
6.2. for the purpose of complying with RHL’s statutory obligations, for the duration of the applicable legal obligation;
6.3. for the purpose of establishing, exercising and defending RHL’s legal claims, RHL shall process personal data until the lapse of 5th calendar year following the termination of obligations under the contract. However, in case of judicial, administrative or other proceedings dealing with the rights or obligations of RHL vis-à-vis the client, the processing shall not terminate before the end of such proceedings;
6.4. for the purpose of direct marketing under Article 5.4 above, personal data shall be processed until the client disapproves such processing.
7. No later than by the end of the calendar quarter following the expiry of the processing period, personal data which no longer need to be processed shall be anonymized or destroyed (by shredding or other way that would secure the personal data against unauthorized access).
8. RHL is entitled to disclose clients’ personal data to respective public authorities and other recipients under generally binding legislation. RHL is also entitled to transfer personal data to recipients processing personal data on behalf of RHL as its processors under concluded agreement on personal data processing.
9. In connection with the processing of their personal data, clients have a number of rights. However, some exceptions may apply to the exercise of such rights and, therefore, clients may not be able to exercise them in all situations. If the client legitimately exercises his/her rights, RHL will take the required action without undue delay and within one month at the latest (this period may be extended for another two months in justified cases). The clients’ rights under the GDPR include:
9.1. right of access to personal data (under the terms set forth in Article 15 of the GDPR);
9.2. right to rectification or erasure (under the terms set forth in Article 16 or Article 17 of the GDPR);
9.3. right to restriction of processing (under the terms set forth in Article 18 GDPR);
9.4. right to object to processing (under the terms set forth in Article 21 GDPR); and
9.5. right to data portability (under the terms set forth in Article 20 GDPR).
10. If the client assumes that processing of his/her personal data is in breach with legal regulation, please contact RHL to remedy the situation. This is without prejudice to the client’s right to lodge a complaint directly with the supervisory data protection authority (www.uoou.cz).
11. The provision of personal data by the client is a contractual requirement. The client has no statutory obligation to provide personal data; however, RHL needs the data to conclude and perform the contract.
