Privacy Policy

Privacy Policy

The protection of the personal data of our clients and other individuals is important to us. These terms and conditions explain how we process personal data in the provision of legal services within Grand Oak Legal, s.r.o., with registered office at Konventná 6, 811 03 Bratislava - Staré Mesto, ID No.: 51673541 (hereinafter referred to as "We"). If you have any questions, you may contact us by telephone at +421 911 345 245, by e-mail at info@grandoaklaw or by post to our registered office.

When processing personal data, we are primarily governed by the EU General Data Protection Regulation ("GDPR"), which also regulates your rights as a data subject, those provisions of the Data Protection Act that apply to us (in particular Section 78), the Advocacy Act (Section 18) as well as other regulations. We comply with the Code of Conduct adopted by the Slovak Bar Association ("SAK"), which explains in more detail the processing of personal data by attorneys. The SAK Code of Conduct can be found atwww.sak.sk/gdpr.

Why do we process personal data?

The processing of personal data is necessary on our part in order to:

• To provide legal services to our clients and to practice law;
• Fulfill various statutory, union and contractual obligations;
• protect the legitimate interests of us, our clients and others.

For what purposes and on what legal basis do we process personal data?

Purpose - Legal basis under GDPR

• ‍Identification of the contracting party

§ Section 13(1)(b) of the GDPR or Article 6(b) of the GDPR , where the processing of personal data is necessary for the performance of a contract to which the data subject is a party or for the performance of a pre-contractual measure at the request of the data subject.

• ‍Practice of profession (provision of legal services)

Compliance with the legal obligation under Article 6(1) of the Can. (c) GDPR (in relation to special categories of personal data, this may be additional conditions pursuant to Article 9(2)(f) GDPR)

• ‍Provision of non-legal services

The performance of the contract pursuant to Article 6(1)(b) GDPR or, where applicable, the performance of the legal obligation pursuant to Article 6(1) of the GDPR. (c) GDPR

• ‍Ensuring compliance with legal regulations and Slovak Bar Association regulations

Compliance with the legal obligation under Article 6(1) of the Can. (c) GDPR, the legitimate interest of lawyers or third parties pursuant to Art. 6 para. 1 lit. f) GDPR, the public interest pursuant to Art. 6 para. 1 lit. e) GDPR or the defence of legal claims pursuant to Art. 9 para. 2 lit. f) GDPR

• ‍Purposes relating to the protection of legitimate interests

Legitimate interest of lawyers or third parties pursuant to Article 6(1)(f) GDPR

• ‍Marketing purposes

Consent of the data subject pursuant to Article 6(1)(a) GDPR or legitimate interest of lawyers or third parties pursuant to Article 6(1)(f) GDPR

• ‍Statistical purposes, archival purposes in the public interest and historical and scientific research purposes

Art. 89 GDPR

• ‍Personnel and payroll

Compliance with the legal obligation under Article 6(1) of the Can. (c) GDPR, legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR or, where applicable, performance of a contract pursuant to Art. 6 para. 1 lit. b) GDPR (in relation to special categories of personal data, this may be additional conditions pursuant to Art. 9 para. 2 lit. b) GDPR)

• ‍Accounting and tax purposes

Compliance with the legal obligation under Article 6(1) of the Can. (c) GDPR

Who do we disclose your personal data to?

We disclose personal data of our clients and other natural persons only to the extent necessary and always under confidentiality of the recipient of the data, e.g. to our employees, to persons whom we entrust to perform individual acts of legal services, to representing or cooperating attorneys, to our accounting advisors, to the Slovak Bar Association (e.g. in the case of disciplinary proceedings) or to providers of software equipment or support of our office, including employees of these persons.

Although we have a limited obligation to disclose your personal data to public authorities due to confidentiality, we are obliged to prevent the commission of a criminal offence and we also have an obligation to report information in the field of prevention of money laundering and terrorist financing.

Which countries do we transfer your personal data to?

We do not intend to transfer your personal data across borders to third countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein).

How long do we keep your personal data?

We retain personal data for no longer than is necessary for the purposes for which the personal data is processed. When storing personal data, we follow the recommended retention periods in accordance with the Resolution of the Presidium of the Slovak Bar Association No. 29/11/2011, e.g.:

• The book of incoming mail and the book of outgoing mail shall be kept by the lawyer for ten years from the date of receipt or dispatch of the last item entered in the book;

• The inventory list shall be archived by the lawyer for ten years from the date on which it was drawn up

• If the lawyer maintains the client directory and the client file log electronically, he shall, at the end of the calendar year, make a hard copy of the client directory for the calendar year and store it in the office without time limitation.

• The shredding period of a client file is 10 years and runs from the date on which all the conditions for placing the file in the archive are met.

• The book of incoming mail and the book of outgoing mail shall be kept by the lawyer for ten years from the date of receipt or dispatch of the last item entered in the book;
• The inventory list shall be archived by the lawyer for ten years from the date on which it was drawn up
• If the lawyer maintains the client directory and the client file log electronically, he shall, at the end of the calendar year, make a hard copy of the client directory for the calendar year and store it in the office without time limitation.
• The shredding period of a client file is 10 years and runs from the date on which all the conditions for placing the file in the archive are met.

Attorneys are subject to state statutes interpreting attorneys' obligations under the Advocacy Act, under which there are certain circumstances that extend our retention periods or prevent us from shredding certain documents for obvious reasons. For example:

• A client file containing the original documents handed over to the lawyer by the client cannot be shredded;
• Client file logs and client file menus cannot be shredded;
• A client file or a part thereof which the lawyer is obliged to hand over to the State Archives may not be shredded;
• It is not possible to shred a client file if there is any proceeding before a court, a state administration authority, law enforcement authorities, the Slovak Bar Association, which is related to the content of the client file or the subject of which was the act or omission of the lawyer in providing legal assistance in the case to the client.

How do we collect personal data about you?

If you are our client, we most often obtain your personal data directly from you. In this case, the collection of your personal data is voluntary. Depending on the specific case, failure to provide personal data to clients may impact our ability to provide quality legal advice or, in exceptional cases, our obligation to refuse to provide legal advice. We may also obtain personal data about our clients from publicly available sources, from public authorities or from other persons.

If you are not our client, we most often obtain your personal data from our clients or from other public or lawful sources, such as by requesting it from public authorities, obtaining extracts from public registers, obtaining evidence in favour of the client, etc. In this case, we may obtain personal data about you without informing you and also against your will on the basis of our legal authority and obligation to practise law in accordance with the Advocacy Act.

What rights do you have as a data subject?

If we process personal data about you on the basis of your consent to the processing of your personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its processing.

Notwithstanding this, you have the right to object at any time to the processing of personal data on the basis of legitimate or public interest as well as for direct marketing purposes, including profiling.

As a client, you have the right to access your personal data as well as to have it corrected. If we process personal data in the provision of legal services, you do not have the right to object to such processing as a client or as another natural person (e.g. counterparty) under Article 22 of the GDPR. If the personal data relates to a client (regardless of whether the client is a legal entity or a natural person), other persons do not have the right of access or the right to data portability due to our legal obligation of confidentiality and by reference to Article 15(4) GDPR, Article 20(4) GDPR and Article 18(4) GDPR, Article 18(4) GDPR, Article 20(4) GDPR and Article 18(4) GDPR. 8 of the Advocacy Act: "The advocate has an obligation to provide information on the processing of personal data, to allow access to or portability of personal data pursuant to a special regulation, if this could lead to a breach of the advocate's duty of confidentiality under this Act." You also have the right to lodge a complaint with the Office for Personal Data Protection or the Slovak Bar Association at any time.

Processing of cookies  

Cookies are small text files that improve the use of a website by, for example, allowing recognition of previous visitors when logging into the user environment, remembering a visitor's choice when opening a new window, measuring website traffic or how the website is used to improve its user experience. You can prevent the storage of these files on your device at any time by adjusting your web browser settings. Your browser settings are deemed to be your consent to the use of cookies on our website within the meaning of section 55(5) of the Electronic Communications Act.

Changes to the Privacy Policy

Data protection is not a one-off issue for us. The information we are required to provide you with in respect of our processing of your personal data may change or cease to be up to date. For this reason, we reserve the right to modify and change these terms and conditions to any extent at any time. If we change these terms and conditions in a material way, we will also bring this change to your attention, for example, by a general notice on our website or by a special notice via email.