Privacy Policy

This Privacy Policy (" Policy ") applies to the use of the Website and the processing of personal data specified below by the controller of personal data, which is the business corporation MAAARS advokáti s.r.o., ID: 09785817, with its registered office at Kubelíkova 1089/22, 130 00 Prague 3 (" Law Office ").

The law firm strictly observes strict protection of privacy and processed data, especially of its clients and their personal data. This Policy contains information for data subjects (ie natural persons whose personal data are processed) on the conditions and manner in which their personal data is processed.

This Policy applies to the processing of personal data of (i) users of the wwwmaaars.cz website, (ii) third parties when contacting the Law Office, (iii) subscribers to newsletters and other business communications (iv) clients, suppliers and other business partners Law firms in the performance of the contract, (v) processing of personal data in the performance of the legal obligations of the Law Office and (vi) processing of personal data due to the so-called legitimate interests of the Law Office.

Use of the website www.maaars.cz

The purpose of processing is to optimize the operation of websites and improve the comfort of their use. The law firm processes personal data containing the IP address, information concerning the operating system and type of browser as well as the terminal device, as well as information concerning the user's activity on the website, registered and stored via cookies. The website uses GTM, PHPSESSID PHP native cookie and Google Analytics.

The legal basis for the processing of personal data for these purposes is the legitimate interest of the Law Office (Article 6 (1) (f) of the GDPR) in optimizing the functioning of the website, including:

• • Estimating the number of subscribers and website usage habits.
• • Recognize users when they return to the site.

Personal data will be kept for this purpose for no longer than 2 years.

Cookies can be written to the terminal by changing the browser settings accordingly. However, this may limit the functionality of the website, including disabling access to some parts of the website. If the user has not made the appropriate changes in the browser settings, the system will automatically send cookies the moment he logs in to the website again. Some information on how cookies work can be found at this link: https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage.

The user can delete cookies written on their device by clearing the search history on the computer. It can also choose to browse the web in "private" mode, which limits the amount of data registered by the computer.

Communication

For the purpose of handling electronic correspondence, either via an electronic form or directly to an e-mail address, the Law Office processes the sender's personal data containing the e-mail address, telephone number and any data it decides to provide when filling in the inquiry form for ) contacting the Law Office, (ii) providing an answer to an inquiry, or (iii) taking other steps in connection with a message received by the Law Office from the sender. The legal basis for the processing of your personal data for these purposes is a legitimate interest (Article 6 (1) (f) of the GDPR), consisting in ensuring the proper service of the website user and the client.

Personal data will be kept for the time necessary to provide an answer to the question or to take other steps in relation to the message received, but not longer than 1 year.

Performance of the contract

The law firm may process personal data containing name, surname, birth number, date of birth, contact address, e-mail address, telephone number, ID number, VAT number, bank account number and possibly other data for the purposes of performance of the contract. Typically, it will be a contract for the provision of legal services or fulfillment of client requirements, ie. actual performance of legal services according to legal regulations governing the performance of advocacy, relations with business partners (suppliers of products and services), recruitment activities - recruitment of candidates.

The processing of personal data for the purpose of performance of the contract lasts for the entire duration of the contract and for a further 10 years from its termination.

Newsletters and other business communications

The law firm processes personal data in the scope of name and contact data for the purpose of sending within the newsletter service regarding legal news or internal news of the law firm, or offers of legal services. By signing up for the mailing list, the user's consent to the processing of the stated personal data for these purposes is assumed. In connection with this legal basis for the processing of personal data, the implementation of the contract, respectively. user consent (Article 6 (1) (a), (b) of the GDPR), depending on how the law firm obtained the contact details.

Consent to send commercial communications can be withdrawn at any time without any negative consequences. The consent can be withdrawn by sending an e-mail or letter to the contact address of the Law Office.

Personal data will be kept for up to 5 years or until revoked.

Compliance with a legal obligation

The law firm may process personal data containing name, surname, birth number, date of birth, contact address, e-mail address, telephone number, ID number, VAT number, bank account number and possibly other data for the purposes of fulfilling legal obligations, in particular obligations within the meaning of accounting and tax legislation, ie the transfer of personal data to financial administration bodies or other public authorities in accordance with the relevant legal regulations; proper maintenance of the legal file, including e-mail communication, contact list and services provided.

Therefore, the legal basis for the processing of personal data for this purpose is a legal obligation (Article 6 (1) (c) of the GDPR).

Protection of legitimate interests

In order to protect the legitimate interests of the Law Office and / or the Law Office client, personal data are processed in the scope of name, surname, birth number, date of birth, contact address, e-mail address, telephone number, ID number, VAT number, bank account number. and possibly more information. The protection of the law firm's legitimate interests means, for example, the identification of persons in the reception area, the identification of the client in the sense of Act No. 85/1996 Coll., On Advocacy and Act No. 253/2008 Coll., On Certain Measures against the Legalization of Proceeds from Crime. , protection of the network against harmful conduct or protection against misuse of the website.

The protection of the legitimate interest of third parties may be, for example, the protection of clients in accordance with the rules governing the practice of advocacy.

Personal data processing time

The law firm processes personal data only for the time strictly necessary for the given purpose of processing and also for the statutory archiving period.

Disclosure of personal data

The law firm makes personal data available to the extent necessary in the following cases:

• where this obligation arises from the rules of applicable law, in particular at the request of the Public Prosecutor's Office, the Police and other public authorities;
• where necessary to meet their needs, in particular:
  • cooperating lawyers;
  • Other law firms, counterparties, tax specialists.

In addition, personal information may be passed on to service providers, such as:

• Suppliers of teleinformatics services such as hosting, newsletter management, delivery or maintenance of IT systems and applications;
• Postal and delivery service providers.

Personal data is disclosed to third parties only after obtaining sufficient guarantees to ensure the security and integrity of personal data. The law firm uses a cloud solution for data storage, using Amazon's servers located within the EHS.

Data subject rights

The data subject may exercise the following rights:

• Access to your personal data (based on Article 15 of the GDPR);
• Obtain a copy of the transferred personal data and transfer it back or to another specified entity in a generally used format if the Law Firm processes your data on the basis of consent or for the purpose of implementing the contract 20 GDPR);
• Correction of inaccurate or incomplete personal data (based on Article 16 of the GDPR);
• Deletion of all or some of the personal data (pursuant to Article 17 of the GDPR) if:
  • The consent has been withdrawn and there is no other legal basis for processing this data;
  • personal data are no longer necessary for the purposes for which they were collected or for which they were used;
  • A justified disagreement with the processing was expressed;
  • Personal information is being used illegally.
• Restrictions on the processing of personal data (pursuant to Article 18 of the GDPR), ie requesting the Law Office to stop using them; however, this does not apply to the storage or processing of personal data on the basis of the law firm's legal obligations;
• Expressing disagreement with the processing for reasons related to the emergency situation with regard to the processing of personal data based on the legitimate interests of the Law Office (pursuant to Article 21 (1) of the GDPR);
• Revoke your consent to the processing of personal information. Withdrawal of consent does not affect other processing carried out on another legal ground (under Article 7 of the GDPR).

In the case of questions, comments and requests concerning this Policy, in order to revoke consent or exercise rights, the e-mail address may be used: info@maaars.cz. The law firm does not have a data protection officer (so-called DPO), as this is not required by law with regard to the scope and method of processing.

For more detailed information on the rights and obligations related to the processing of personal data or to exercise the rights of the data subject, you can contact the Office for Personal Data Protection, www.uoou.cz.