This policy explains how Martiník advokátní kancelář, s.r.o. processes the personal data of prospective clients for legal services, website visitors, and other individuals with whom it comes into contact in the course of providing legal services.

We process personal data in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Act No. 110/2019 Coll., on the Processing of Personal Data, Act No. 85/1996 Coll., on the Legal Profession, and related legal regulations.

1. Data Controller

The controller of your personal data is:

Martiník advokátní kancelář, s.r.o.

Registered office: Uruguayská 380/17, Vinohrady, 120 00 Prague 2

ID No. (IČ): 11635975

VAT No. (DIČ): CZ11635975

Registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 352121

Registered with the Czech Bar Association

E-mail: pavel@martinik.legal

Telephone: +420 773 706 807

The Data Controller has not appointed a data protection officer. For inquiries regarding the processing of personal data, please contact us at the e-mail or postal address specified above.

2. Categories of Personal Data Processed

We process only such personal data as is necessary for a specific purpose. Depending on the circumstances, this includes, in particular, the following categories of data:

• Identification data: first name, surname, academic title, date of birth, personal identification number, commercial registration ID, VAT registration number, or other data necessary for the identification of a client or other individuals.

• Contact details: address, e-mail, telephone number, registered office address, delivery address, or other contact information.

• Inquiry form data: first name and surname, e-mail, telephone number, selected legal service, and a brief description of the matter.

• Data relating to the legal matter: information, documents, and correspondence provided in the context of an inquiry, consultation, legal advice, or legal representation.

• Data of third parties: data of opposing parties, witnesses, family members, employees, business partners, or other individuals, to the extent necessary for the resolution of the legal matter.

• Data for the fulfillment of statutory obligations: data required by legal regulations, in particular regulations governing the legal profession, accounting, taxation, and measures against money laundering and terrorist financing.- Technical data regarding website visits: IP address, device type, browser, operating system, visited pages, source of transfer, and similar technical data processed through cookies or comparable technologies.

• Data of candidates for cooperation or employment: contact details, curriculum vitae, information on education, professional experience, and other information provided by the candidate.

In the description of your matter, please do not provide more personal data than is necessary for an initial assessment of your inquiry. In certain legal matters, however, it may be necessary to process special categories of data, such as data concerning health status, family situation, social situation, criminal matters, or other sensitive information. We process such data only where necessary for the assessment of an inquiry, the provision of legal services, the establishment, exercise, or defense of legal claims, or for the fulfillment of the statutory duties of an attorney.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Handling Inquiries from the Contact Form

We process the data from the form in order to assess your inquiry, contact you, and propose a course of action.

The legal basis is the performance of measures taken prior to entering into a contract at your request, and our legitimate interest in maintaining records and defending against potential claims.

Provision of Legal Services

We process data for the purposes of providing legal advice, representation, maintaining client files, communicating with clients, courts, administrative authorities, and other parties involved in the legal matter.

The legal basis is the performance of a contract for the provision of legal services, compliance with the statutory obligations of an attorney, and legitimate interest in protecting rights and legal claims. If necessary, we process special categories of data and data related to criminal matters for the establishment, exercise, or defense of legal claims and for the provision of legal services.

Compliance with Statutory Obligations

We process certain data because we are required to do so by law. This relates, in particular, to obligations under the Act on the Legal Profession, accounting and tax regulations, and AML/CFT legislation.

The legal basis is the compliance with a legal obligation.

Website Operation and Security

We process technical data to ensure the secure and reliable operation of the website, prevent misuse, and resolve technical incidents.

The legal basis is our legitimate interest in the secure operation of the website. Technical cookies strictly necessary for the operation of the website do not require consent.

Analytics and Marketing Tools

If you grant consent via the cookie banner, we may use analytical and marketing tools, in particular Google Analytics 4, Google Tag Manager, LinkedIn Insight Tag, and X/Twitter Pixel. These tools help us measure website traffic, evaluate content performance, and optimize our online presentation.

The legal basis is your consent, which you can withdraw at any time.

Recruitment and Professional Cooperation

If you send us a curriculum vitae or other documents in connection with a career or cooperation opportunity, we process them for the purpose of the recruitment process and related communication.

The legal basis is the execution of measures prior to entering into a contract, or our legitimate interest. Retaining documents for future opportunities for a longer period is only possible with your consent.

4. Sources of Personal Data

We collect personal data primarily directly from you, in particular via the contact form, e-mail, telephone, in-person meetings, and documents you provide to us.

In the course of providing legal services, we may also obtain data from clients, opposing parties, courts, administrative bodies, public registers, records, databases, and other parties, provided it is necessary for the resolution of the legal matter.

5. Disclosures of Personal Data

We disclose personal data only to the extent necessary for the purposes set out above and in strict accordance with the professional duty of confidentiality.

Recipients of personal data may include, in particular:

• courts, administrative authorities, law enforcement authorities, bailiffs, notaries, insolvency administrators, and other public authorities,

• opposing parties, legal representatives of opposing parties, witnesses, court-appointed experts, interpreters, and other individuals involved in a specific legal matter,

• cooperating attorneys, law firms, tax advisors, accountants, auditors, and other professional advisors,

• providers of IT services, hosting, e-mail services, CRM systems, accounting or office systems,

• operators of analytical and marketing tools, provided you have consented to the respective cookies,

• persons and institutions to whom we are required to disclose data on the basis of legal regulations.

Contractors who process personal data on our behalf are bound by contractual obligations regarding personal data protection and professional confidentiality.

6. Transfers of Personal Data Outside the EU/EEA

We process personal data primarily within the European Union or the European Economic Area. In the case of certain technical, analytical, or marketing tools, data processing may also occur outside the EU/EEA.

Where such transfers occur, we utilize mechanisms required by the GDPR, in particular adequacy decisions, standard contractual clauses, or other appropriate safeguards.

7. Personal Data Retention Period

We retain personal data only for as long as is necessary for the respective purpose or as required by applicable legal regulations.

• Inquiry form data that does not result in the establishment of professional cooperation is generally retained for a maximum of 24 months from the last communication, unless a longer retention period is necessary for the protection of legal claims.

• Client documentation and client files are retained in accordance with legal and professional regulations and with regard to potential legal claims, generally for at least 5 years from the termination of the provision of legal services.

• Accounting and tax documents are retained for the period prescribed by legal regulations, which is typically 10 years.

• Data processed for AML/CFT purposes is retained for the period prescribed by law, typically 10 years from the termination of the business relationship or the execution of the respective transaction.

• Data of candidates for cooperation or employment is retained for the duration of the selection procedure. We retain it longer only with the candidate's consent or if necessary for the protection of legal claims.

• Cookie data is retained for the period specified for the respective tool or according to your consent settings.

Upon expiry of the relevant retention period, we erase, anonymize, or securely destroy the personal data, unless there is another legal basis for its continued retention.

8. Cookies and Comparable Technologies

Cookies are small files stored on your device when you visit a website. Some cookies are necessary for the functioning of the website and cannot be deactivated via the cookie bar. We use other cookies only with your consent, in particular to measure traffic, evaluate content performance, and, where applicable, measure online campaigns.

We may use Google Tag Manager to manage tracking and marketing tags. Through this system, tools such as Google Analytics 4, LinkedIn Insight Tag, and X/Twitter Pixel may be deployed once you have provided your consent.

You can change or withdraw your consent to analytical and marketing cookies at any time via the "Adjust my cookie preferences" link available on the website. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can also manage cookies in your browser settings. If you block certain cookies, the functionality of the website may be restricted.

9. Your Rights

In connection with the processing of personal data, you have the following rights under the GDPR:

• the right of access to personal data,

• the right to rectification of inaccurate or incomplete data,

• the right to erasure, provided the conditions of GDPR are met,

• the right to restriction of processing,

• the right to data portability,

• the right to object to processing based on a legitimate interest,

• the right to withdraw consent, where processing is based on consent,

• the right to file a complaint with the Office for Personal Data Protection.

You may exercise your rights by e-mail at pavel@martinik.legal or in writing at the registered office of the Data Controller. We will respond to your request without undue delay, generally within 30 days.

Certain rights may be restricted due to the statutory duties of an attorney, the duty of confidentiality, professional files retention obligations, or the necessity to protect the rights and legal claims of a client or the Data Controller.

You may file a complaint with:

The Office for Personal Data Protection

Pplk. Sochora 27

170 00 Prague 7

Website: www.uoou.cz

10. Voluntariness of Providing Data

The provision of data via the contact form is voluntary. However, without your contact details and a basic description of the matter, we will not be able to handle your inquiry.

For the provision of legal services, the disclosure of certain data may be necessary for entering into and performing a contract, complying with legal obligations, or properly delivering the legal service. If you fail to provide us with the necessary data, it may restrict or prevent the provision of legal services.

11. Automated Decision-Making

In the processing of personal data, we do not engage in automated individual decision-making within the meaning of the GDPR, including profiling, which would have legal effects on you or similarly significantly affect you.

12. Security of Personal Data

We have implemented appropriate technical and organizational measures to protect personal data from unauthorized access, loss, misuse, destruction, or disclosure. Access to the data is restricted of only those persons who require it for the performance of their professional or contractual duties and who are bound by a duty of confidentiality.

The professional attorney-client privilege applies to all facts about which the law firm becomes aware in connection with the provision of legal services, and it persists after the termination of the legal services.

13. Amendments to this Policy

We may update this policy, in particular if there are changes to legal regulations, the technologies we utilize, or the methods of processing personal data. The current version is always available on this page.

14. Contact

Should you have any questions regarding the processing of personal data, please contact us at:

Martiník advokátní kancelář, s.r.o.

Uruguayská 380/17, Vinohrady, 120 00 Prague 2

E-mail: pavel@martinik.legal

Telephone: +420 773 706 807