Privacy Policy
Declaration on personal data protection and conditions for their processing
issued by LegisPro law firm, s.r.o.
Controller Identification
The controller of your personal data processing is the law firm LegisPro, s.r.o., Business ID: 56709901, with registered office at Sládkovičova 1, 949 01 Nitra, a company registered in the Commercial Register of the District Court of Nitra, Section Sro, File No. 64948/N (hereinafter also referred to as "LegisPro" or "We" in the appropriate grammatical form).
Regarding matters relating to the processing and protection of personal data, you may contact us at the address LegisPro, s.r.o., law firm, Sládkovičova 1, 949 01 Nitra or by email at dpo@legispro.sk.
This declaration informs you about the conditions and principles of protection of your personal data that we obtain from you through our interaction with you, specifically about how and what personal data we obtain from you, how we process this personal data, and what your rights are in connection with the processing of your personal data.
LegisPro as a controller takes the protection of your personal data very seriously. In protecting them, we proceed carefully according to applicable law, in particular according to Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "the Regulation"), Act No. 18/2018 Coll. on personal data protection and on amendments to certain acts, as well as Act No. 586/2003 Coll. on advocacy and on amendments to Act No. 455/1991 Coll. on trade licensing (Trade Licensing Act) as amended and other applicable legal regulations (hereinafter also "the Advocacy Act"). In addition to the aforementioned legal framework, we also proceed in the protection of your personal data according to the Code of Conduct for the Processing of Personal Data by Lawyers, which was adopted by the Slovak Bar Association and which is binding for every lawyer and law firm. The text of this code can be found on the website of the Slovak Bar Association here: https://www.sak.sk.
Why do we process your personal data?
One of our main goals is to provide you – our clients – with quality legal services in the exercise of our profession. This requires close cooperation between us and you and a high degree of trust. We process your personal data to achieve this goal, so that we can provide you with comprehensive and unique services in the legal field, e.g., develop solutions for various situations, represent you in dispute resolution, contract negotiations, or help you in various legal cases. Within these processes, we must fulfill legal, contractual, or other obligations. Our effort is always and to the greatest possible extent to protect you and your interests.
What does personal data actually mean?
Your personal data is any information or characteristic based on which we know or can identify you. It does not matter whether it is direct or indirect identification. Identifying information can be a certain general identifier such as name, surname, date of birth, personal number, or online identifier. An identifying characteristic can be a certain physiological, genetic, but also psychological or cultural characteristic or trait that is typical for you. Personal data can also be information about your preferences, e.g., consumer or interest-related, relating to your person.
How do we obtain your data?
As an introduction to this section, we would like to inform you that according to the relevant provisions of Section 18 of the Advocacy Act, a lawyer (law firm):
- processes personal data of clients and other natural persons to the extent necessary for the purposes of practicing law and when processing personal data for purposes related to the provision of legal services always has the position of data controller according to Article 4 paragraph 7,
- is authorized to obtain and process personal data necessary for the purposes of practicing law by copying, scanning, or otherwise recording official documents on an information medium without the consent of the data subject,
- does not have the obligation to provide information about personal data processing, allow access or portability of personal data according to special regulations, if this could lead to a violation of the lawyer's obligation to maintain confidentiality according to the Advocacy Act (and in such a case we will not inform you about the processing of your personal data).
If you are our client
If you are our client, we obtain your personal data primarily from you. The provision of your personal data is completely voluntary, however, in some cases it is necessary for us to provide you with legal services in accordance with the Advocacy Act as amended. In exceptional cases, failure to provide your personal data may result in refusal to provide legal services.
In some cases, we also obtain your personal data from sources other than you, for example from public authorities, from publicly available sources, or from other persons.
How do we obtain your personal data if you are not our client?
If you are not our client, we obtain your personal data mostly directly from our clients, from public sources, or from public authorities (e.g., if you are an opposing party in proceedings). In this case, we may obtain your personal data even against your will (based on legal authorization and obligation to practice law and provide legal services in accordance with the Advocacy Act).
We also obtain your personal data from your visits to our website www.legispro.sk. Collection of your personal data also occurs by filling out the contact form on our website in the scope of name, surname, email address, and personal data contained in the message.
For what purposes do we process your personal data?
We process your personal data primarily for the following purposes:
| Purpose | Legal Basis | Description |
|---|---|---|
| conducting selection procedures concluding and fulfilling contracts for the provision of legal services with clients concluding and fulfilling contracts with suppliers of goods and services organizing webinars, seminars and training | fulfillment of contractual obligations under Article 6 para. (1) letter b) of the Regulation, including the performance of pre-contractual relations | For this purpose, we process your personal data if you have concluded a contract with us, or so that we can take measures before concluding a contract based on your requirements (pre-contractual relations). This will mainly concern a contract for the provision of legal services or a cooperation agreement. |
| processing of accounting documents registration and handling of received and sent mail (including electronic mailbox) maintaining records of sent and received mail preparation of legal services offers at the client's request representation of clients in proceedings before courts, public authorities and other entities defense in criminal proceedings providing legal advice to clients preparation of legal opinions and analyses drafting documents on legal acts communication with clients and other natural persons regarding the practice of law or contractual relationship with the client searching for evidence in favor of the client establishing the identity of affected persons through witnesses, statements or other documentary evidence authorization of contracts including searching for information about persons who could be harmed by the conclusion of the contract performing conversion and guaranteed conversion recording time, acts and advice provided to the client maintaining the lawyer's file agenda, including administrative activities related to the provision of legal and other services fulfillment of obligations in protection against money laundering (identification of suspicious operations) handling complaints handling exercised rights of data subjects | fulfillment of legal obligations under Article 6 para. (1) letter c) of the Regulation | In certain cases, we are obliged to process your personal data also when fulfilling our legal obligations. Such obligations arise primarily from accounting regulations, tax regulations and from the Advocacy Act and related regulations. |
| record keeping of contracts, clients and business partners. The legitimate interest is the record keeping of contracts for the purpose of maintaining an overview of concluded contracts, for accounting needs, ensuring internal control activities and for enforcing claims arising from contracts. conducting other business communication (except communication with clients regarding the practice of law or fulfillment of contractual relationship). The legitimate interest is conducting business communication with our suppliers and clients in order to ensure the fulfillment of our contractual obligations, proper performance of our activities or informing affected persons acting on behalf of our business partners. record keeping of exercised rights of data subjects. The legitimate interest is recording exercised rights of data subjects for the purpose of demonstrating compliance with obligations arising from legal regulations. Sending advertising and marketing announcements to clients and former clients in cases where relevant legal regulations allow this based on legitimate interest. The legitimate interest is the interest in making our law firm and our work more visible. | legitimate interest under Article 6 para. (1) letter f) of the Regulation, which is specified separately for each purpose | We also process your personal data for the purposes of our legitimate interests, exclusively in cases where processing is necessary to pursue our legitimate interests or the legitimate interests of a third party. However, the condition is that your interests or your fundamental rights and freedoms do not override these interests. |
| market research and marketing statistical measurement of website traffic and online marketing | consent under Article 6 para. (1) letter a) of the Regulation granted by the data subject, which the data subject is entitled to withdraw at any time | In these cases, we process your personal data based on your freely given consent. |
To whom do we disclose your personal data?
We may provide your personal data for the achievement of the above-mentioned purposes to the minimally necessary extent also to our processors, who are external entities processing your personal data on our behalf. We ensure that processors protect your personal data through the adoption of appropriate technical and security measures against unauthorized use, accidental loss, deletion or damage. Processors include companies providing accounting, payroll and HR services, companies providing advertising, marketing services and managing the website and social media, companies providing hosting services.
In addition to the aforementioned companies, we may also disclose your personal data to our cooperating lawyers, notaries, experts, economic advisors or public administration authorities.
In some cases, the recipient of your personal data is also Google, LLC, which is the parent company of the European provider of online services using cookies that our website stores on your device based on your consent, and parent companies of European social network operators – Meta, Inc., which is the parent company of the European operator of the Facebook social network, and LinkedIn Corporation, which is the parent company of the European operator of the LinkedIn social network, if you contact us through social networks.
We never trade with your personal data and carefully consider each disclosure, always in accordance with the law. At the same time, if your personal data is transferred, it is carefully secured through appropriate security measures in accordance with relevant safeguards, especially through the use of standard contractual clauses.
What categories of personal data do we process and to what extent?
We process your personal data to the extent that is minimally necessary for fulfilling our obligations or pursuing our legitimate interests towards you and always within the given purpose. We do not require personal data from you that is not necessary to achieve the given purpose. We process your personal data to the extent of: name, surname, permanent residence address, date of birth, email address and telephone number. If the nature of the matter requires it to achieve a specific purpose, we may also process data on the type and number of your identity document, your personal number and other personal data.
In certain specific cases, we may also process special categories of personal data in the practice of law, e.g., information about health status or other personal status, always only to a minimal extent and for the given purpose.
In the practice of law, we have legal authorization to obtain and process your personal data necessary for the purposes of practicing law by copying, scanning or otherwise recording official documents on an information medium, even without your consent.
How long do we retain your personal data?
We retain your personal data in a form that allows your identification no later than as long as it is necessary for the purpose for which the personal data is processed. After achieving this purpose, we immediately delete your data. We may retain personal data for longer if it is to be processed exclusively for archival purposes, for scientific purposes, for historical research purposes or for statistical purposes to fulfill legal obligations. Throughout the entire retention period of your personal data, we take care of their protection.
In retaining your personal data, we proceed in accordance with Resolution of the Presidium of the Slovak Bar Association No. 29/11/2011, which stipulates the recommended retention period for the law firm's case files and related documents, and thus also for the processed personal data, for example:
- the lawyer shall store the incoming and outgoing mail register for ten years from the date of receipt or dispatch of the last item recorded in the register after it has been filled;
- the lawyer shall archive the inventory list for ten years from the date of its compilation;
- if the lawyer keeps a list of clients and a client file protocol electronically, at the end of the calendar year, they shall create a printed form for the calendar year and store it in the office indefinitely;
- the retention period for a client file is 10 years and runs from the day when all conditions for placing the file in the archive are met.
In accordance with the same resolution, we cannot delete a client file at all if it contains original documents that you have handed over to us. We also cannot shred and/or otherwise dispose of the following documents:
- a client file containing original documents handed over to the lawyer by the client;
- protocols of client files and lists of client files;
- a client file or part thereof which the lawyer is obliged to hand over to the state archive;
It is not possible to shred a client file if any proceedings are ongoing before a court, state administration body, law enforcement authorities, or the Slovak Bar Association, which are substantively related to the content of the client file, or the subject of which was the conduct or omission of the lawyer in providing legal assistance to the client in the matter. In addition, we process personal data for a period determined based on various criteria as follows:
- for the period stipulated by generally binding legal regulations, in cases where we process your personal data in fulfilling our legal obligations;
- for the duration of the contractual relationship, or the duration of pre-contractual measures, in cases where we process your personal data based on the fulfillment of a contract or pre-contractual measures;
- for the duration of our legitimate interest, in cases where the processing of personal data is carried out for the purposes of our legitimate interests or the legitimate interests of a third party;
- for the duration of the granted consent to the processing of your personal data, in cases where we process your personal data based on the consent of the data subject.
As a data subject, you can contact us at any time with a request to specify the exact processing period for your personal data.
Do we use automated individual decision-making and profiling when processing your personal data?
When processing your personal data, we do not use any automated individual decision-making or profiling that would involve processing your personal data by using personal data to evaluate certain of your personal characteristics or traits.
To which countries do we transfer your personal data?
We may also transfer your personal data to countries outside the European Economic Area for the purpose of our presentation and advertising, for which we use the services of Google, LLC, Meta, Inc. and LinkedIn Corporation.
What are your rights?
Your legal rights and, conversely, our obligations are:
- Right to access information: upon your request, we will issue a confirmation of whether we are processing your personal data. If we are processing your personal data, you have the right to access it, and we will provide it to you in the form you request. You have the right to obtain information about the purpose and legal basis of the processing of your personal data, as well as about the category, recipients, and retention period thereof.
- Right to rectification: We will rectify your personal data or supplement your incomplete personal data without undue delay after we become aware of their inaccuracy or incompleteness. We always keep your personal data up-to-date and accurate.
- Right to erasure, or "right to be forgotten": Upon your request, or to fulfill legal obligations, we will erase your personal data without undue delay. This may include cases where the processing of your personal data is contrary to the legal principles of its processing, or the erasure of personal data is necessary for the purpose of fulfilling legal obligations, or an international agreement to which the Slovak Republic is bound. In certain legal cases, we cannot proceed with the erasure of your personal data immediately, as we must respect the minimum legal retention periods, or we cannot erase your personal data at all, see the section of this document regarding retention periods.
- Right to restriction of processing: If you find that your personal data processed by us is incorrect, we will restrict its processing upon your initiative. We will also restrict processing if such processing is unlawful, you object to the erasure of your personal data and request instead the restriction of its use. If we no longer need your personal data, but it is necessary for you to assert your legal claims, we will restrict its processing upon your initiative. If you exercise the right to object, we will also process your personal data only to a limited extent. In these cases, we will only store your personal data or process it only with your consent, or for the demonstration, exercise, or defense of legal claims, or for the protection of the rights of other persons, or for reasons of important public interest.
- Right to data portability: if we process your personal data based on your granted consent, or its processing is necessary for the performance of a contract to which you are bound, we will provide your personal data to you upon your request in a commonly used, structured format. If technically possible, you have the right to transfer your recorded personal data to another controller.
- Right to object: if we process your personal data based on a legitimate interest, you have the right to object to such processing. If you object to processing for direct marketing purposes, we will no longer process your data.
- Right to withdraw consent: You may withdraw your consent to the processing of your personal data, which you have granted to us, at any time. Upon receipt of the withdrawal of consent, we will no longer process your personal data.
- Right to lodge a complaint or submission with the Office for Personal Data Protection: if you suspect that your personal data has been handled unlawfully or your personal data is at risk, you may contact the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, with its registered office at Hraničná 12, 820 07 Bratislava 27.
You can exercise your rights by sending a written request to the address of our company's registered office or via the email address provided below. We will assess and process your request within one month of its receipt. In specific cases, e.g., a large number of requests, or their substantive complexity, we are entitled to extend this period by a maximum of two months. We will inform you in writing about the extension of the period.
We protect your privacy
It is important to us that your personal data is secure. For its protection, we use various antivirus programs and a multi-level firewall. Our websites use secure https:// protocol. On the other hand, we do not underestimate the human factor. Our employees or intermediaries who come into contact with your personal data are instructed on the principles of processing your data, have an obligation to maintain confidentiality, and are regularly trained. Electronic documents containing your personal data are protected by strong passwords for the necessary period of their retention. If it is necessary for us to retain some documents in their physical form, these are stored in secured storage areas, without the possibility of access by third parties.
Changes to the terms of personal data protection and processing
These terms become valid and effective on January 01, 2025.
The terms of personal data protection may change dynamically, and we are prepared for these changes. We always strive to provide you with up-to-date information in this area, as the area of protection of your personal data is important to us. Therefore, we reserve the right to update these terms to always be in accordance with current legal regulations. In case of their update, we will inform you of this fact through our website.
Contact us
In case of any questions regarding the protection and processing of personal data, you can contact us at the contact addresses provided above.