Information for the client upon receipt of personal data by the attorney
The attorney, as the controller of the personal data that are/will be provided to the attorney on the basis of the contract with the client, undertakes to process this personal data in accordance with legal regulations, in particular with Act No. 85/1996 Coll. (Advocacy Act) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on free movement of such data and on the repeal of Directive 95/46/EC.
Controller of personal data
Name: JUDr. Ludmila Winkel, advokátka
Id. No. (IČO): 05018927
Adress: Uruguayská 11, 120 00 Praha 2
E-mail: ludmila.winkel@lwlaw.cz
Phone: + 420 604 233 882
Scope and basis of personal data processing
Legal basis for data processing is an agreement on provision of legal services / provision of legal services.
Provision of personal data is a legal obligation of data subject – the client (hereinafter referred to as the “client“) based on the above agreement.
The scope of personal data processing is the scope legitimate and necessary for provision of legal services to the client.
Purpose of processing
Provision of legal services according to the agreement on provision of legal services concluded with / provision of legal services to the client.
Recipients of personal data
• Public authorities (e.g., courts, administrative bodies);
• Information system maintenance providers;
• Other beneficiaries according to the client’s needs and instructions.
Duration of personal data processing
All personal data shall be processed for the entire period of provision of legal services / for the entire duration of the contractual relationship between me as the attorney and the client, and for a certain period after its termination. Personal data needed for protection of attorney’s right and data necessary to fulfil attorney’s statutory obligations shall be processed for the period specified in individual legal regulations for example statutory limitation period, regulations governing taxes and accounting, and AML regulations.
After the end of duration of processing personal data will be handled in accordance with applicable legislation, in particular Act No. 85/1996 Coll., Advocacy Act, as amended; Act No. 499/2004 Coll., Act on Archiving and File Service and on the Amendment of Certain Acts, as amended; and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with the processing of personal data and on the free movement of such data and on the repeal of Directive 95/46/EC (GDPR Regulation).
Client’s rights regarding the processing of his/her personal data
The right to access personal data means that the client has the right to obtain information from the controller – the attorney on whether personal data is being processed and, if so, what kind of data it is and how it is processed. The client also has the right to request the attorney-controller to correct inaccurate personal data concerning the client without undue delay. The client has the right to complete incomplete personal data at any time.
The right to require erasure of personal data means that the controller – the attorney is obliged to dispose of client’s personal data that is being processed pursuant to specified legal conditions and the client requests it.
The right to require a restriction of processing of client’s personal data. The client has the right to object at any time to processing of his/her personal data that is based on the legitimate interests of the controller – attorney, a third party, or is necessary to fulfill a task carried out in the public interest or in the exercise of public authority.
The right to data portability gives the client an opportunity to obtain personal data provided to the controller – attorney in common and machine-readable format; such data can also be transferred to another administrator or, if technically possible, request the administrators transfer it to each other.
The right to revoke consent to the processing of personal data at any time does not apply, when client’s personal data is processed for the purpose of fulfilling the agreement concluded between the client and attorney, and not based solely on consent with processing of such data.
In the event that the client is in any way dissatisfied with the processing of his personal data carried out by the controller – attorney, the client can file a complaint directly with the attorney or contact supervisory authority. In the Czech Republic the relevant supervisory authority is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).
For more information see www.uoou.cz.
More information about client rights is available here: https://www.uoou.cz/6-prava-subjektu-udaj/d-27276.