Information for Clients Regarding the Collection of Personal Data

Pursuant to Article 13 of Regulation (EU) 2016/679 (the “ GDPR“).

Data Controller

Name
OK LEGAL

Company ID
06718558

Address
nám. Republiky 679/5, 746 01 Opava

E-mail
ondrej.kurka@oklegal.cz

Phone number
+420 608 871 181

Legal Basis for Data Processing

- Contract for the provision of legal services (Article 6 para (1) let. (b) GDPR)
- Compliance with legal obligations (Article 6 para (1) let. (c) GDPR)
- Legitimate interest of the controller (Article 6 para (1) let. (f) GDPR)

Purpose of Data Processing

The primary purpose of data processing is to enable us to render legal services to our clients in particular based on written or oral agreements on the provision of legal services.

In relation to our legal services, we are obliged to fulfill certain legal obligations that also require the processing of personal data. Such obligations include, without limitation, legal obligations arising in particular from the Act on Advocacy and related legislation, Anti-Money- Laundering legislation, legal regulations governing mandatory payments and accounting, as well as other regulations that the attorney is obliged to follow when providing legal services.

In certain cases, we process personal data based on our legitimate interests, such as the legitimate interest in the exercise of rights and the assertion of claims arising from the contract concluded with the client and past legal services rendered.

Recipients of Personal Data

- Partners and managing directors of OK LEGAL
- Employees of OK LEGAL
- Cooperating attorneys of OK LEGAL
- Public authorities (e.g. courts, administrative authorities)
- Providers of the necessary auxiliary services (e.g. e-mail storage provider or accounting firm)
- Other recipients as required and instructed by the client

Duration of Personal Data Processing

Personal data will be processed for the duration necessary to fulfil the respective purpose of data processing. Upon the expiry of this period, we will handle the personal data in accordance with applicable legal regulations, in particular Act No. 85/1996 Coll. (the Act on Advocacy), Act No. 499/2004 Coll. (the Act on Archiving and Records Management), and the GDPR.

Client’s Rights

Right to Access Personal Data – The client has the right to obtain from us the following information: (i) whether their personal data are being processed, or not, (ii) which data are involved in the processing, and (iii) how they are being processed.

Right to Rectification of Personal Data – The client has the right to have us rectify inaccurate personal data concerning them upon request without undue delay. The client has the right to correct any inaccurate incomplete personal data at any time.

Right to the Erasure of Personal Data – Upon the client’s request, we are obligated to destroy personal data concerning the client, provided that certain conditions are met.

Right to Restrict Personal Data Processing – The client has the right to request that we restrict the processing of their personal data in certain cases. The client also has the right to object at any time to processing based on our legitimate interests, legitimate interests of third parties or for a task carried out in the public interest.

Right to Data Portability – The client is entitled to obtain the personal data they have provided to us in a commonly used and machine-readable format. The client may subsequently transmit such data to another personal data controller or, if technically feasible, request that the data be transmitted directly to such controller. - Right to File Complaint – In the event that the client is dissatisfied in any way with the processing of their personal data by us, they may lodge a complaint directly with the controller or with the Office for Personal Data Protection.

Further information regarding the client’s rights is available on the website of the Office for Personal Data Protection. (https://uoou.gov.cz/poradna/poradna-gdpr/prava-subjektu-udaju)

The provision of personal data is a legal and contractual requirement. While the client is not obliged to provide personal data to OK LEGAL, the failure to provide them to the extent necessary for the proper provision of legal services may result in refusal or discontinuation of legal services.

In Opava, on 25 May 2018

Mgr. Ondřej Kurka, attorney-at law and managing director of the data controller