GDPR terms

Mgr. Karel Němec, attorney, with its registered office at Na Pankráci 332/14, 140 00 Prague 4 – Nusle, processes personal data in accordance with applicable legal regulations, in particular Act No. 101/2000 Coll., on the Protection of Personal Data, and since May 25, 2018, also in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). This document provides information on the manner, scope, and purposes of personal data processing that the attorney collects in connection with the provision of legal services.

1. Data Controller

The data controller is:
Mgr. Karel Němec, attorney (hereinafter referred to as the “Controller”)
Na Pankráci 332/14140 00 Prague 4 – Nusle
Tel.: +420 739 588 734
E-mail: nemec@advokatnemec.cz

2. What Personal Data Is Processed

The Controller processes personal data that the client provides in connection with an inquiry or the use of legal services, both during in-person meetings and through electronic or telephone communication. This primarily includes identification data (first name, last name, date of birth, and, if applicable, personal identification number), contact information (address, phone number, e-mail), payment details, and other information necessary for the proper provision of legal services.Special categories of data are processed only if necessary to protect the client’s rights and to the extent required by legal regulations.

3. Purpose and Legal Basis of Processing

Personal data are processed without the client’s consent primarily for the purposes of:
- Negotiating and concluding contracts and providing legal services
- Fulfilling the Controller’s contractual and legal obligations
- Maintaining accounting and tax records
- Protecting the legitimate interests of the client or the Controller

Personal data may be used for marketing or informational purposes only based on the client’s explicit consent.

4. Sources of Personal Data

Personal data are primarily obtained directly from the client. They may also come from publicly available registers or from public authorities, if necessary for the provision of legal services.

5. Provision of Personal Data

Providing personal data is voluntary; however, in some cases it is necessary for concluding a contract and providing legal services. Without providing certain data, it may not be possible to properly provide the services.

6. Rights of the Data Subject

The client has, in particular, the right to:
- Access their personal data
- Request correction or deletion of their data
- Request restriction of processing
- Object to the processing of their data
- Exercise the right to data portability
- File a complaint with the supervisory authority
The supervisory authority is the Office for Personal Data Protection.

7. Transfer of Personal Data

Personal data may be made available to third parties only to the extent necessary for the provision of legal services or if required by law. The Controller has concluded appropriate contractual agreements with all processors.

8. Retention Period of Personal Data

Personal data are retained for the duration of the contractual relationship and subsequently for the period required by law, usually for 10 years after its termination.

9. Security of Personal Data

The Controller implements technical and organizational measures to ensure the protection of personal data against unauthorized access, loss, or misuse. All persons who come into contact with personal data are bound by a confidentiality obligation.

10. Final Provisions

These principles are available to clients upon request and may be updated periodically in connection with changes in legal regulations.