PRINCIPLES OF PERSONAL DATA PROCESSING
1. GENERAL INFORMATION
1.1 CONTENT OF THE DOCUMENT
These principles of personal data processing describe how we process visitors' personal data on the website accessible at kma.legal ("Website"). In this document, you will learn, in particular, what personal data we process, why and on what legal basis we do so, to whom we transfer the data, and what rights you have concerning its processing. All processing of personal data is carried out under the General Data Protection Regulation of the European Union No. 2016/679, commonly referred to as GDPR.
1.2 OUR ROLE
All personal data processing activities described herein are carried out by Kačerová Měkota advokáti s.r.o., ID No.: 250 13 512, with its registered office at Pařížská 127/20, 110 00 Prague 1 – Josefov ("we") in the role of data controller. This means that we are responsible for determining the specific purposes, as outlined below, for which your data is collected, selecting the means of processing, and ensuring its proper execution.
1.3 SCOPE OF PERSONAL DATA PROCESSING
The personal data we process includes:
a) Identification data (such as name and surname or identification number and tax identification number in the case of entrepreneurs);
b) Contact details (such as address, email address, and telephone number);
c) information provided through contact or other forms available on the Website, including your inquiries, requests, or questions;
d) Information from registration forms, in particular, information about the event you are registering for, as well as your requirements or preferences, including audio, video, or text recordings from these events; and
e) Data related to mutual communication (including the content and other data associated with communication between you and us).
2. WHY AND HOW DO WE PROCESS YOUR DATA?
2.1 PERFORMANCE AND CONCLUSION OF CONTRACTS
We process your personal data on the basis of and for the purpose of fulfilling our obligations arising from contracts concluded between you and us, as well as for the conclusion of such contracts.
2.2 FUNCTIONING OF THE WEBSITE, PLATFORM, AND ANALYSIS
When you visit our Website, we process your data to ensure its proper functioning and to understand user behaviour, based on our legitimate interest in providing our services via the Internet.
2.3 ADVANCED ANALYTICS
To better understand how you use the Website, we may conduct advanced analytics of your behaviour. This processing will only take place if you provide your consent.
2.4 PROTECTION OF LEGAL CLAIMS AND INTERNAL CONTROL
We process your data based on our legitimate interests to protect legal claims and maintain our internal records and control systems.
2.5 MAINTENANCE OF THE APPLICANT DATABASE
Based on your consent, we process your identification and contact data and information related to your experience and qualifications, to include you in our applicant database and potentially contact you with relevant job or collaboration offers. We may also use applicant database data for evaluations and analyses to understand who is interested in working or collaborating with us, their experience, etc. If consent is not given, we will process these data only until the recruitment process is completed. If consent is provided, we will retain the data for a maximum of three years after the recruitment process ends.
2.6 SENDING COMMERCIAL COMMUNICATIONS
If we obtain your electronic contact details in connection with the operation of the Website, we may also process your personal data for the purpose of offering our services through commercial communications, based on our legitimate interest in promoting our services in accordance with the Advocacy Act, unless you refuse such communications.
2.7 FULFILLMENT OF OUR LEGAL OBLIGATIONS
We also process your data to fulfil our legal obligations, particularly those related to providing information to public authorities
2.8 DATA RETAINMENT PERIOD
We store personal data only for the period necessary to achieve the stated purposes of processing. Once the purpose of the processing ceases to exist, we will promptly dispose of the personal data. As a general rule, we retain personal data for the duration of the limitation period (typically 3 years) and one year after its expiration about possible claims made at the end of the limitation period. Beyond this, the following specific storage periods apply:
a) In the case of court or other proceedings, we process your data to the extent necessary for the entire duration of such proceedings and the remaining part of the limitation period after their conclusion.
b) For sending commercial communications to customers, we process your data until you refuse such communications, but no longer than 3 years.
c) To fulfil legal obligations, we process personal data for the period necessary to fulfil these obligations.
d) Personal data necessary for advanced analytics, advertising display, and remarketing purposes are processed until you withdraw your consent, but for a maximum of 3 years.
TO WHOM ARE PERSONAL DATA DISCLOSED?
3.1 PROCESSORS
For the processing of personal data, we also use the services of other entities in the position of processors, who process personal data only according to our instructions. These are in particular:
a) IT service providers and other technology suppliers;
b) operators of analytical tools.
3.2 TRANSFERS OUTSIDE THE EU
In some cases, your data may be transferred outside the European Economic Area. If your data is transferred to such third countries, such transfers occur exclusively based on standard contractual clauses, i.e., the model contract issued by the European Commission, and will only be transferred to companies that guarantee adequate protection of personal data under the European Commission's regulations. These countries may include, among others, the USA
WHAT ARE YOUR RIGHTS?
4.1 If you find that the personal data we process about you is inaccurate or incomplete, you have the right to request that we correct or supplement it without delay.
4.2 You have the right to request confirmation as to whether the processing is taking place and, if so, information regarding such processing to the extent set out in Article 15 of the GDPR, as well as a copy of the processed data (we are entitled to charge a fee for copies to cover the necessary costs).
4.3 In some cases, you have the right to have your data erased. We will erase your data without undue delay if:
a) we no longer need them for the purposes for which we processed them; or
b) you exercise your right to object to the processing, and we find that we no longer have any legitimate interests justifying such processing; or
c) it is established that our processing of personal data is no longer in compliance with applicable regulations.
However, this right does not apply if the processing of your data remains necessary for compliance with our legal obligations, archival purposes, scientific or historical research, statistical purposes, or for the establishment, exercise, or defence of our legal claims.
4.4 You have the right to request the restriction of processing of your data. This right allows you, in certain cases, to request that your data be marked and not subjected to further processing operations. We must restrict processing:
a) If you object to the processing. Until the objection is resolved, processing will be automatically restricted.
b) If you need the restriction to establish, exercise, or defend your legal claims, and we no longer need the data.
c) If you contest the accuracy of the personal data and request a restriction to verify and correct such inaccuracies.
d) If the processing is unlawful, and you choose to restrict processing instead of requesting erasure.
4.5 You have the right to request the transfer of your data in cases where processing is based on your consent or a contract.
4.6 You have the right to object to the processing of your data based on our legitimate interest. We will cease processing your data unless we demonstrate compelling legitimate grounds for continuing such processing. In the case of objections to marketing activities, we will cease such activities.
4.7 You have the right to withdraw your consent to the processing of personal data at any time unless the processing is necessary for the performance of our contractual obligations, compliance with our legal obligations, or other purposes based on our legitimate interests.
4.8 HOW TO EXERCISE YOUR RIGHTS
You can exercise your rights by emailing us at office@kma.legal.
4.9 RIGHT TO FILE A COMPLAINT WITH A SUPERVISORY AUTHORITY
If you believe we have violated the GDPR in processing your data, you have the right to file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7 (http://www.uoou.cz).