PRIVACY POLICY
This document provides you with basic information on how we handle your personal data, specifically, what data we process, why we do so, and in what situations the processing occurs. You will also find our contact details should you wish to exercise your rights or request further information regarding the processing of your personal data.
We process your personal data exclusively in accordance with applicable and effective legal regulations. The protection and processing of personal data are primarily governed by Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, effective from 25 May 2018.
We only process personal data when we have a valid legal basis to do so and take appropriate measures to ensure their security and prevent misuse.
1. Who is the controller of your personal data?
The controller of your personal data is JUDr. Robert Hošťálek, attorney, with a registered office at Českomoravská 2408/1a, 190 00 Prague 9, Czech Republic, ID No.: 714 63 259 (hereinafter referred to as the “Attorney”).
If you have any questions regarding the processing of your personal data or wish to exercise your rights, you can contact us at: office@akhostalek.cz.
2. What personal data do we process and why?
We process the following personal data:
- Name and surname;
- Address;
- Contact details – especially email and phone number;
- Billing information and bank account details;
- Any other information you provide in relation to our legal services.
3. When do we process your personal data?
We typically process personal data that you provide to us yourself or that come from publicly available sources. These situations include:
- Provision of legal services;
- Visiting our website www.akhostalek.cz;
- Communicating with us via contact form, email, telephone, or social media;
- Applying for a job position.
We process your data in both paper form (e.g. physical case files) and electronically (e.g. email or IT systems). We always ensure secure and responsible handling.
4. For what purpose and for how long do we process your data?
a. Performance of a contract
In connection with the provision of legal services, we process personal data both about you and about individuals whose data you provide to us (e.g. employees or clients). We process this data for the purpose of fulfilling obligations arising from the contractual relationship and applicable legal regulations. This typically includes name, surname, date of birth, personal ID number, company ID, tax ID, residential or registered address, contact details, bank account number, and other information you provide to us.
The legal basis for processing is thus the performance of a contract, and personal data is stored for the duration of the contractual relationship or provision of legal services, and subsequently for up to ten (10) years after its termination.
b. Responding to your requests based on contact
If you have contacted us via the contact form on our website, by phone, email, through our social media profiles, or in any other unspecified way, we process your personal data in order to respond to your request. This typically includes name, surname, and contact details.
The legal basis for such processing is the implementation of measures taken prior to the conclusion of a contract at your request. Personal data is stored for the time necessary to process your request and for additional three (3) years.
c. Fulfilment of legal and professional obligations
The Attorney is subject to a number of obligations arising from legal and professional regulations. Their fulfilment is often associated with the obligation to process personal data. These regulations include, for example, Act No. 85/1996 Coll., on Advocacy, or Act No. 253/2008 Coll., on Certain Measures Against the Legalisation of Proceeds of Crime and Terrorist Financing. In fulfilling these statutory obligations, we process only such personal data as is required by the relevant legal or professional regulations. This typically includes name, surname, date of birth, personal ID number, company ID, tax ID, permanent residential or registered address.
The legal basis for this processing is the fulfilment of a legal obligation. Personal data is stored for the period specified by the relevant legal regulations.
d. Our legitimate interest
We may also process your personal data for the purpose of protecting legitimate interests -ours, those of our clients, or of other persons. This typically includes name, surname, date of birth, personal ID number, company ID, tax ID, residential or registered address, contact details, bank account number, and any other necessary data provided to us.
The legal basis for this processing is legitimate interest. The data is stored for a period of three (3) years from the start of processing, unless otherwise specified by legal regulations (e.g. those governing the practice of law), or unless the circumstances of a specific case require the legitimate interest in processing the data to last longer.
e. Recruitment activities
If you apply for employment or another form of cooperation with us, we process personal data provided by you during the recruitment process. This usually includes name, surname, date of birth, personal ID number, residential address, contact details, information about your education, and prior work experience.
The legal basis for this processing is the implementation of measures taken prior to the conclusion of a contract at your request. Personal data is stored for the duration of the recruitment process, but no longer than three (3) months from the first contact, unless another legal reason arises for further processing.
5. To whom do we transfer your personal data?
In some cases, your personal data may also be processed by other entities. In addition to public authorities to whom we are obliged to disclose data by law, we may also transfer your personal data to trusted third parties - our contractual partners. Such transfers are always carried out in accordance with applicable legal regulations and are safeguarded by appropriate measures to protect your data.
List of our contractual partners who may have access to your personal data:
- Devehope Technologies s.r.o., Company ID: 19549997, registered office: Nové sady 988/2, Staré Brno, 602 00 Brno, registered with the Regional Court in Brno under file number C 135094;
- Microsoft Corporation, 1 Microsoft Way, Redmond, WA 98052, USA.
If your personal data is handled by the Attorney’s employees or cooperating attorneys, they do so exclusively to the extent necessary for the performance of their duties and are bound by the duty of confidentiality under the applicable legal and professional regulations.
6. What rights do you have in relation to your personal data?
In connection with the processing of personal data, you have the following rights under applicable legal regulations. We fully respect these rights and will accommodate them to the fullest extent possible:
- Right of access to personal data - you have the right to ask us what personal data we process about you;
- Right to rectification of personal data - if you find that the personal data we process about you is not up to date or is incorrect, you may ask us to correct it;
- Right to erasure (“right to be forgotten”) - upon your request, we must delete all personal data we process about you. However, there may be another reason that entitles or obliges us to retain this data (e.g. a legal obligation), in which case we cannot carry out the erasure;
- Right to restriction of processing - you have the right to request restriction of the processing of your personal data for the time necessary to resolve your complaint, especially if you dispute the accuracy of the data, the reason for its processing, or have objected to the processing;
- Right to data portability - you have the right to receive your personal data in a structured, commonly used, and machine-readable format. This right applies to personal data you have provided to us and that we process on the basis of your consent or a contract. Where technically feasible, you also have the right to request the transfer of this data to another controller. This right may be limited if it would compromise the rights and freedoms of others;
- Right to object - if you believe that we are processing your personal data beyond the scope of our legitimate interest, you may object to such processing. If we do not demonstrate that there is a compelling legitimate reason for processing that overrides your interests, rights, or freedoms, we will cease processing based on your objection without undue delay;
- Right to lodge a complaint - if you believe that your personal data has been processed in violation of the law, or if we have not properly handled your request or exercised right, you have the right to lodge a complaint with the Office for Personal Data Protection, registered at Pplk. Sochora 727/27, Holešovice, 170 00 Prague 7, Czech Republic (see https://www.uoou.cz/).
If you have any questions regarding this document, you can contact us by email at office@akhostalek.cz.
7. Conclusion
This document is subject to regular review and updates. We recommend checking this page regularly, where the current version is always published.
This privacy policy is effective as of 1 June 2025.
JUDr. Robert Hošťálek, attorney