LGP Slovakia / privacy policy

Personal Data protection principals

Personal Data protection principals

1. Introduction

Protection of personal data is particularly important for Lansky, Ganzger & Partner Rechtsanwälte, spol. s r.o. (hereinafter referred to as "LGP"). The duty of confidentiality means imperatives to maintain the highest confidentiality for any and each of our legal activities. In addition, while processing personal data, we are primarily guided by the EU General Data Protection Regulation (hereinafter referred to as "GDPR"), which governs, inter alia, your rights as data subject, also by those provisions of the Privacy Act that apply to us (in particular, Section 78), the Advocacy Act (Section 18) and other regulations. How we process these personal data in detail, for what purpose we process it, what rights you have and how you can exercise those rights, is in accordance with the relevant provisions of Art. 13 and 14 GDPR, described in more detail in this Privacy Policy.

2. Personal Data Processing Purposes

Under a mandate contract, a contractual relationship is established between the client and the LGP, which is the basis for processing of your personal data. Therefore, we process your personal data on the legal basis of performance of the contract in order to provide legal services in accordance with this mandate contract. However, we only process data that are absolutely necessary for us to provide our legal services. If you do not provide us with your data and information, we may not be able to properly fulfil your request. Failure to provide data may also lead to a denial of legal representation. If you enter into a mandate or contract with us, you may provide us with personal information, business secrets, information about your family and employees. However, the processing of these personal data will only take place to the extent necessary for the extent of our legal representation or within contractual relationship. Such notification may be required before courts, state authorities or defendants in civil proceedings, as well as prosecutors in criminal proceedings and other parties. In any event, we shall not process the data for any purpose other than that provided under the mandate or within your consent. Anonymized data that we process for statistical purposes is excluded. In addition, we process your personal data for the purpose of sending our Bulletin on the legal basis of our legitimate interest. In our Bulletin we do provide you with information on current legal issues, company events, company workers and many other legal issues. You can revoke the receiving of magazine at any time without giving any reason in the manner specified in the Bulletin. We hereby subsequently declare for what purposes and on the legal basis of we process personal data.

Purpose
Legal Basis According to GDPR
Professional Indemnity (Legal Services Provision) Performance of a legal obligation according to Art. 6 par. 1 (a) (c) GDPR or performance of the contract under Art. 6 para. 1 (a) b) GDPR
Other Services Provision PPerformance of a contract according to Art. 6 par. 1 b) GDPR eventually fulfilment of the legal obligation under Art. 6 para. 1 (a) c) GDPR
Ensuring compliance with the laws and regulations of the Slovak Bar Association Compliance of a legal obligation according to Art. 6 par. 1 c) GDPR
Establishment, Exercise  and Defense of Law Firm's Legal Claims (Legal Agenda) Legitimate interest of the law firm according to Art. 6 par. 1 f) GDPR: establishment, exercise and defense of the law firm's legal claims
Publication and Adaptation of Content Through Social Networks and Webpage of Law Firm   Legitimate interest of the law firm according to Art. 6 par. 1 f) GDPR: Increase of awareness about law firm in online activity  
Increase of Awareness About Law Firm Online   Legitimate interest of the law firm according to Art. 6 par. 1 f) GDRP or consent of data subject according to Art. 6 par. 1 a)
Marketing Communication Consent of data subject according to Art. 6 par. 1 a) or legitimate interest of the law firm according to Art. 6 par. 1 f) GDPR: purposes of direct marketing  
HR and Wages Compliance of legal obligation according to Art. 6 par. 1 c) GDRP, also possible performance a contract according to Art. 6 par. 1 b) GDRP
Accounting and Tax Purposes

Compliance of legal obligation according to Art. 6 par. 1 c) GDPR 

Statistical Purposes

Any legal bases for the above purposes (compatible purposes) within the meaning of Art. 89 GDPR)

Purposes of Historical and Scientific Research

Any legal bases for the above purposes (compatible purposes) within the meaning of Art. 89 GDPR)

 

We use the following legitimate interests when processing personal data:

Legitimate Interests Explanation
Establishment, Exercise  and Defense of Law Firm's Legal Claims We rely on our legitimate interest in litigation or out-of-court disputes, negotiation and communication on contractual relationships, debt collection, reporting to the public authorities, and similar activities where we do not represent clients but demonstrate, and enforce our law firm's claims.
Increase of Awareness About Law Firm Online Personal data may be processed, including profiling, when we publish content on our social networks (Facebook, Google, and LinkedIn). We use basic analytical tools such as Google Analytics and Facebook Business Manger especially to track traffic, trends, success of our campaigns and content, and so on.
Purpose of Direct Marketing Purposes of direct marketing may present legitimate interested in meaning of recital 47 GDPR. We rely on these legitimate interests especially when we are sending marketing communications, for example in the form of a Bulletin or by post, in cases where the prior consent of a recipient of the communication in accordance with the applicable legal regulations is not necessary. Of course, we do not rely on this legitimate interest if consent is needed.

3. Data Subject Rights

Any person whose personal data we process, i.e. the data subject (mainly clients, employees and cooperating persons) has the right to obtain information on which personal data are processed by LGP. In connection with request about information we also provide you more information on the origin of personal data, possible existing recipients of your personal data, the time of retention and the purpose of the data processing. However, we can only comply with the exercising of this right if it is not contrary to the attorney-client privilege. If you believe that we have processed your information incorrectly or incompletely in connection with the information request, you have the right to request a correction. You also have the option to request deletion of your data. However, this is only possible if the data has been processed illegally, incorrectly or incompletely, or if the legal basis has no longer been necessary for their further processing. LGP retains the highest level of care when processing your data. If you believe that we have not complied with this level of care and have processed your data incorrectly, incompletely or illegally, we will limit the processing of such data to determine whether your claim is correct. In the case that your complaint will be assessed as justified, in spite of our high level of care, we will provide remedy. If you submit an objection against the processing of your personal data by our law firm, we will review the reasons for which you have filed your objection. Depending on the result of the review, LGP will either suspend, or modify the processing of the respective data; otherwise we will provide you with sufficient reasons for further processing of the data. Please, do note that your rights are complementary, and therefore you can request authorization or termination of your data processing or even their deletion. You have the right to obtain the processed data in a machine-readable format, or to order us to transfer this data to a third party you designate yourself. However, such disclosure of data to a third party you have selected shall not cause undue costs to LGP or cause conflict with attorney-client privilege or other confidentiality. You are kindly requested to note that you shall identify yourself with an ID with your photo before we provide you with the information. This is to protect your personal information. At the same time, we kindly ask you to inform us immediately of any change of your personal data. LGP seeks to maintain data integrity at the highest level. We also meet the latest technical safety standards. If, however, you believe that we have processed your data in an unacceptable way, you have the opportunity to file a complaint to the Data Protection Office of the Slovak Republic or the Slovak Bar Association. If we process personal information about you on the basis of your consent on the processing of personal data, you have the right to revoke your consent at any time. The withdrawal of consent does not affect the legality of the processing based on consent prior to its withdrawal. Notwithstanding the abovementioned, you have the right to object at any time against the processing of personal data based on legitimate or public interest, as well as for direct marketing purposes, including profiling.

4. Processing Security

To protect your privacy, we have taken organizational and technical measures in accordance with Article 32 of the GDPR, and we protect your data, in particular against unauthorized, illegal or accidental access, processing, loss, use or manipulation. Unfortunately, adhering to the highest security standards and due diligent requirements cannot exclude the situation when someone else views and uses the information which you have sent to us through the Internet. External attacks that lead to compromise of personal data cannot lead to any responsibility of our company for maintaining high standards of security.

5. Third Parties Data Transfer

5.1 Legal Service Processing

Sometimes we use the services of other companies to process your personal information. However, without exception, we ensure that the processing of your personal data is in accordance with our high technical and organizational security standards. By using personal data processing agreements, we set the same technical and organizational measures for these companies as those we adhere to within our high security standards and the integration of the latest IT technology. Where data processing is needed in a country that is not a member of the European Union or part of the European Economic Area, we ensure that this data processor complies with all the standards set by the GDPR, particularly within its Articles 44-49.

5.2 Client Relationship

We disclose personal data of our clients and other natural persons only to the extent necessary and always with the confidentiality of the recipient of the data e.g. to our employees, to those we instruct to carry out individual legal services, to represent or cooperate attorneys, our accounting or tax advisors, server storage providers, accounting software providers, the Slovak Bar Association, or software equipment or our office support. Besides the fact that we have a limited obligation to disclose your personal data to public authorities due to the attorney-client privilege, we are obliged to prohibit the commitment of future crime and we also have a duty to report money laundering and terrorist financing. In addition, within legal services, it is often necessary to obtain information about our clients from third parties. Depending on the case, we use available information from social networks, search engines, company websites, or other sources. It may also be necessary to ask the competent authorities or courts to provide your personal data. In all these cases, we will always ensure that all European Union legislation, national data protection rules and the confidentiality obligations of the attorney are respected.

6. LGP Website

When you visit our website for security and optimization purposes, our web servers temporarily store remote computer connection data, visited website content, visit date and time, browser identification and operating system used, type, URL, host name of the respective computer, the device, time, server and website from which you visited us. Other personal data such as your name, address, e-mail will not be collected unless you voluntarily provide such information in the case of filling the contact form or entering into the contract. We do not perform a combination of these data with other data groups. We reserve the right to review these data retrospectively if we are aware of specific indications of illegal use.

7. Cookies

Our website uses so-called cookies. Cookies are small text files that improve the use of a website, e.g. by enabling previous visitors to be recognized when logging into the user environment, by memorizing a visitor's choice when opening a new window, by measuring website traffic, or by using it to improve user experience. Most cookies on this website are session cookies or so-called temporary cookies. Session cookies files are stored on the device only for the duration of the connection to our website. After leaving our website the data will be automatically deleted. However, the permanent cookie files are stored in the computer, unless you delete them manually from your web browser. These permanent cookies are used to recognize you during your next visit of our website. Such cookies are valid for 6 to 12 months. During your first visit of our website, we do ask you to consent the use of cookies. Without your consent we do use only such cookies, which are technically necessary for the operation of website. You are entitled to revoke your consent with use of cookies collected by us in any time without stating the reason. We do inform you that blocking or deleting of cookie files may have impact on your online activities and may prohibit you from comprehensive use of website.

8. Contact Form

If you send us questions via the contact form, your data from the contact form, including the contact details provided by you to LGP, will be stored for further processing. When entering into a contract with us, these data will be used for the purpose of their implementation. We will never transfer these data to third parties without your consent.

9. Bulletin

If you would like to receive the Bulletin offered on the website, we need an e-mail address from you, as well as information that allows us to verify that you are the owner of the e-mail address which you have entered and that you agree with receiving of the Bulletin. We use these data exclusively to deliver the requested information we never provide them to third parties. You may withdraw your consent on the storage of your personal data, including your e-mail address, at any time, for example by sending an e-mail message to mailinglist@lansky.sk.

10. Job Seekers Data Processing

It is always a pleasure for us to accept your job applications for the respective vacancies. Of course, we need to process your personal data to contact you and assess your qualifications. If your request is not successful, your data will be stored for 12 months after which they will be deleted.

11. Personal Data Storing Length

We retain personal data as long as necessary for the purposes for which the personal data are processed. Our law firm applies a retention policy specifically tailored to individual categories of personal data. All retention periods considered by us meet the need for optimal customer care. At the same time, the statutory rules for the retention of personal data are maintained. The data resulting from confirmed invoices that are not yet time-barred are e.g. stored until the statutory limitation period expires and then deleted. When storing personal data, we follow the recommended retention periods in accordance with the Resolution of the Bureau of the Slovak Bar Association No. 29/11/2011, e.g.:

  • The Inbox and Outgoing Mail Book, after filling it, is kept by the attorney for ten years from the date of receipt or dispatch in the Book of Last Record;
  • The inventory list is archived by the attorney for ten years since it was written If the attorney has a client's morphology and a client file protocol electronically, at the end of a calendar year, he / she will produce a printed form for the calendar year and save it in the office without any time limit.  The shredding period of the client file is 10 years and runs from the day when all the conditions for filing the file in the archive are met. The profession of attorney shall be regulated by the legal acts providing the interpretation of the obligations of attorney pursuant to Attorneys Act, according to which there may exist certain circumstances, which prolong our periods for the retention of personal data, or which prohibit the shredding of certain documents for the understandable reasons. These reasons shall be e.g. as follows:
  • File of client, which contains the original copies of the deeds provided to the attorney by the client shall not be shredded;
  • Protocols of the files of clients and the list of the files of clients shall not be shredded;
  • File of client or its part which shall be submitted to the public archive shall not be shredded;
  • File of client in connection with which there are being maintained any proceedings before the court, state administration body, criminal prosecution body, Slovak Bar Association, which relates with the content of the file of client, or the subject of which has been the action or omission of the attorney during the provision of the legal aid to the client, shall not be shredded.

12. Google Analytics Related Data Protection Principles

Our website uses Google Analytics, Web Analytics services provided by the company Google Inc. 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter as “Google“). The service Google Analytics uses Cookies files. Your data are in this case being processed on the basis of your justified interest with the purpose to create simple-use statistics of the traffic of our websites in cost-efficient manner. Thus, through the Cookies obtained data on the use of our website (including the IP address and URL of websites visited) are transferred to the servers of Google in the USA and are stored there. We shall not store any of Your data collected in connection with the service Google Analytics. This website uses the function of anonymization of IP address provided by the service Google Analytics. Your IP address shall be therefore shortened / anonymized by the Google immediately after it is obtained by Google. The company Google shall use these data on our behalf for the evaluation of your use of website, preparation of overview of activity of websites and provision of other services related to the activity on the websites and internet. Generally, you may prohibit the collection of user’s data from our websites by setting the item “Do not Track” in your web browser. Our website accepts such “Do not Track” setting, which is being sent by your web browser to all websites. You can prohibit collection of user data by Google Analytics in general on any websites by downloading add-on to the web browser available under the following link and installing it. - https://tools.google.com/dlpage/gaoptout?hl

13. Privacy Protection Conditions Amendments

The setting of processes for the purpose of personal data protection is ongoing process, which shall be duly updated and adjusted. The extent information on processing of your personal data, which we pursuant to GDPR shall provide to you may be amended in the future. Due to this reason, we do reserve the option to adjust and amend these conditions in any extent and in any time. In case that these conditions would be amended substantially, we shall inform you on this fact e.g. by the general notice on this website or special notice addressed through the e-mail.

14. Contact

In case of any questions, please feel free to contact us by the phone on +421-02-5930-8218, by e-mail on office@lansky.sk, or by the post addressed to the seat of our company.

Lansky, Ganzger & Partner Rechtsanwälte, spol. s r.o. Dvořákovo nábrežie 8A 811 02 Bratislava Slovak Republic