1. Personal data controller

Advokátní kancelář Rovenská & partners, s.r.o., with registered office at U Prašné brány 1078/1, Prague 1, ID No.: 03555844, registered in the Commercial Register maintained by the Municipal Court in Prague, file No. C 233500. E-mail:, tel: +420 226 235 900.

2. Legal basis and purpose of processing

  • Performance of the contract with the client for the provision of legal services
  • To fulfil a legal obligation of the controller
  • The legitimate interests of the controller in protecting its rights

The provision of personal data is necessary for the fulfilment of the controller's obligations under the law or under the contract and without such personal data the controller is unable to provide the services or carry out the necessary identification of the client.

3. Recipients of personal data

  • The lawyers collaborating with the controller on a permanent basis
  • Public authorities (e.g. courts, administrative authorities)
  • Other recipients according to the needs and instructions of the client

4. Duration of processing of personal data

Personal data will be processed for the duration of the aforementioned contract and after its termination they will be handled in accordance with the applicable legislation, in particular Act No. 85/1996 Coll. (Act on Advocacy), Act No. 499/2004 Coll. (Act on Archives and File Service and on Amendments to Certain Acts) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR).

5. Rights of clients

The right of access to personal data means that the client has the right to obtain information from the controller as to whether the controller processes his/her personal data and, if so, what the data is and how it is processed. The client also has the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay at his or her request. The client has the right to complete incomplete personal data at any time.

The right to erasure of personal data is, in other words, an obligation on the controller to erase the personal data it processes about the client if certain conditions are met and the client so requests.

The client has the right to have the controller restrict the processing of his/her personal data in certain cases. The client has the right to object at any time to processing which is based on the legitimate interests of the controller, a third party or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority.

The right to data portability gives the client the possibility to obtain the personal data he has provided to the controller in a common and machine-readable format. The client may subsequently transmit such data to another controller or, if technically feasible, request that the controllers transmit it between themselves.

The right to object to processing based on the legitimate interests of the controller.

The right to withdraw consent to the processing of personal data at any time does not apply as the client's personal data is not processed on the basis of consent to processing.

In the event that the client is in any way dissatisfied with the processing of their personal data carried out by the controller, they may lodge a complaint directly with the controller or contact the Data Protection Authority.

More information about the client's rights is available on the website of the Data Protection Authority (in Czech).