Personal Data Processing Policy

On 25 May 2018, Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) entered into force. This regulation sets obligations for data controllers and rights for data subjects.

Advokáti3v1 s.r.o. (the “Controller”) prepared this policy to explain how personal data are processed when you use our website or legal services.

1. Data controller

The data controller is Advokáti3v1 s.r.o., registered office Horní 1642/55a, 700 30 Ostrava - Hrabůvka, Company ID 198 80 421, registered in the Commercial Register kept by the Regional Court in Ostrava, file no. C 94126.

• E-mail: info@advokati3v1.cz
• Phone: +420 730 161 032
• Data box: djrkxdp

2. Basic terms

Personal data means any information relating to an identified or identifiable natural person. A data subject is the natural person to whom the personal data relate.

3. Categories of processed data

We process only data necessary for the specific purpose, in particular:

• identification data (name, surname, date of birth or national ID number, academic title, and where relevant employment/corporate position),
• contact data (residential/correspondence/invoicing address, phone, e-mail),
• payment-related data, bank account details and tax documents,
• data contained in documents submitted by you or communicated in relation to a legal matter,
• data concerning court, enforcement, criminal or other proceedings, where relevant,
• data about legal services provided and case progress,
• other data necessary for contractual and legal obligations.

Where justified by the nature of legal services, special categories of personal data may also be processed.

4. Purposes and legal bases

• performance of a contract and pre-contractual measures (provision of legal services),
• consent, where required for a specific purpose,
• compliance with legal obligations (including advocacy, AML, accounting and tax legislation),
• legitimate interests of the Controller (office operation, protection of property/reputation, establishment, exercise or defence of legal claims; including website contact form data).

5. Recipients and sharing of data

Personal data may be shared only to the extent necessary with processors/recipients, especially:

• cooperating attorneys,
• AVE soft, s.r.o. (EVOLIO), Company ID 25378392, Dostálova 882/63, 713 00 Ostrava,
• IT service and storage providers,
• accounting and tax service providers,
• notaries, court experts and bailiffs where instructed by the client,
• public authorities (courts, administrative authorities) where required by law.

6. Retention period

Data are retained for the period necessary to fulfill the purpose of processing, contractual duties and legal obligations, typically at least 5 years after legal services end; in some cases up to 10 years. The exact retention period depends on the nature of the legal service and related documentation.

7. Consent

Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect processing carried out before withdrawal and does not affect processing based on another legal basis.

8. Your rights

Under GDPR, you have in particular the right to:

• access your personal data,
• rectification of inaccurate/incomplete data,
• erasure (where GDPR conditions are met),
• restriction of processing,
• object to processing,
• data portability,
• lodge a complaint with the Czech Data Protection Authority (www.uoou.cz).

9. Additional information

Personal data are not subject to automated individual decision-making including profiling with legal or similarly significant effects. Data obtained in connection with legal services are not transferred to third countries.

In case of a personal data breach likely to result in a high risk to your rights and freedoms, you will be informed without undue delay where required by GDPR.

This policy is effective from 26 January 2026.