Protection of personal data of our clients and of other natural persons is of our primary importance. This text is intended to explain the way we at the law office Ulianko & partners, s.r.o., registered office: Nám. SNP 37 960 01 Zvolen, company ID number: 36856517 (hereinafter referred to as “We”) process the personal data in connection with the provision of legal services. Should you have any questions, please contact us by telephone at: +421 908 888 990, by e-mail at: email@example.com or by a letter sent to our registered office.
We process the personal data primarily in compliance with the general data protection regulation of the EU (“GDPR”) that defines the rights you have as the data subject, in compliance with provisions of the Act on the Protection of Personal Data that apply to us (especially section 78), Act on Advocacy (section 18) as well as other regulations. We follow the Code of Conduct adopted by the Slovak Bar Association (“SAK”) that defines in detail the way lawyers process personal data. The Code of Conduct of SAK is available at: www.sak.sk/gdpr.
We need to process the personal data to be able to:
|Purpose||Legal basis according to GDPR||Related regulations|
|Professional performances (provision of legal services)||Fulfilment of legal obligation pursuant to art. 6, par. 1c) of GDPR (additional conditions may apply to special categories of personal data pursuant to art. 9, par. 2f) GDPR)||Act on Advocacy, Rules of Professional Conduct for Lawyers, Civil Code and Commercial Code|
|Provision of other services than the legal ones||Fulfilment of legal obligation pursuant to art. 6, par. 1b) of GDPR or, as the case may be, also fulfilment of legal obligation according to pursuant to art. 6, par. 1c) of GDPR||Act on the register of public sector partners, Act on e-Government, Civil Code and Commercial Code, Act on the Lease of Non-residential premises|
|Purposes in relation to protection of legitimate interests||Legitimate interest of lawyers or third parties pursuant to art. 6, par. 1f) of GDPR||GDPR, Civil Code and Commercial Code, Criminal Procedure Code, Criminal Code, Code of Contested Civil Procedure, Code of Non-contested Civil Procedure, Code of Administrative Court Procedure, Code of Judicial Administrative Procedure, Act on Offences|
|Providing compliance with legal regulations and other regulations of the Slovak Bar Association||Fulfilment of legal obligation pursuant to art. 6, par. 1c) of GDPR, legitimate interest of lawyers or third parties pursuant to art. 6, par. 1f) of GDPR, public interest pursuant to art. 6, par. 1e) of GDPR or defending legal claims pursuant to art. 9, par. 2f) of GDPR||Act on Advocacy, Rules of Professional Conduct for Lawyers, Act on the prevention of legalization of proceeds of criminal activity and terrorist financing, Act on Certain Measures Related to Reporting of anti-social behaviour, GDPR|
|Accounting and tax documents||Fulfilment of legal obligation pursuant to art. 6, par. 1c) of GDPR||Special acts from the field of accounting and tax administration|
Pursuant to section 18, par. 6 of the Act on Advocacy: “An advocate processes personal data of clients and other natural persons in the extent needed for the performance of advocacy in compliance with this Act and with the special regulation.”
Pursuant to section 18, par. 7 of the Act on Advocacy: “An advocate shall be entitled to collect and process the personal data needed for the performance of advocacy by copying, scanning or by recording otherwise official documents in data carriers without a consent by the data subject”.
Pursuant to section 18, par. 8 of the Act on Advocacy: “An advocate shall be obligated neither to inform about the processing of personal data, nor to give access to or to permit transfer of the personal data according to the special regulation, if it could lead to a breach of the advocate’s obligation of confidentiality in accordance with this Act.”
We disclose the personal data of our clients and other natural persons in the necessary extent only e.g. to our employees to persons authorised by us to perform individual legal performances, to deputy advocates or cooperating advocates, to our accounting consultants, to Slovak Bar Association (e.g. in case of an disciplinary proceedings) or to software providers or office support providers, including employees of such persons, while the data recipients shall keep such information confidential.
Although our obligation to disclose your personal data to public authorities is restricted due to our confidentiality obligation, we shall prevent any offence, and, at the same time, we shall provide information with the aim to prevent money laundering and terrorist financing.
We do not intend to transfer your personal data across border to any third parties outside the European Economic Area (EU, Iceland, Norway and Lichtenstein).
“Automated decision-making” means decision-making based exclusively on automated processing, including profiling, having legal effects on you or influencing you otherwise to a significant extent. Our law office does not use automated decision-making and profiling to process your personal data.
The personal data are kept as long as necessary for the purposes, for which the personal data have been processed. We keep the personal data in compliance with the recommended periods in accordance with the Resolution of the Slovak Bar Association No. 29/11/2011, e.g.:
Professional rules that apply to advocates describe the advocates’ obligations pursuant to the Act on Advocacy and define that under certain circumstances the retention period should be extended or shredding should be disallowed due to obvious reasons. E.g.:
If you are our client, we usually collect your personal data from you. In such case you submit your personal data voluntarily. Depending on the particular case, a client’s failure to provide his or her personal data can influence our ability to provide legal services of high quality or, in exceptional cases, we can refuse to provide legal service in such case. We can collect personal data about our clients from public sources, from public authorities or from other persons, too.
If you are not our client, we can collect your personal data from our clients or from other public or legal sources, such as from public authorities, from copies of public register records, gathering evidence in favour of a client, etc. In such case we can collect personal data without informing you and even against your will, based on our legitimate authorisation and obligation to perform advocacy in compliance with the Act on Advocacy.
If we process your personal data based on your approval, you are entitled to withdraw such approval anytime.
Without prejudice to the above-mentioned, you shall be entitled anytime to demur the processing of your personal data based on a legitimate interest or public interest, as well as for the purpose of direct marketing, including profiling.
As a client you shall be entitled to request access to your personal data and to rectify such data. If we process any personal data during the provision of legal services, you as the client or as other natural person (e.g. a counterparty) shall not be entitled to demur any such processing pursuant to article 22 of GDPR. Other persons shall not have the right of access to the personal data of any other client (regardless whether the client is a natural person or legal entity), or the right to data portability due to our statutory confidentiality obligation and with reference to art. 15, par. 4 of GDPR; art. 20, par. 4 of GDPR and section 18, par. 8 of the Act on Advocacy: “An advocate shall not be obligated to provide information about processing of the personal data, to allow access to personal data or portability of personal data in compliance with the special regulation, if it could breach the advocate’s confidentiality obligation in accordance with this act.” At the same time, you shall be entitled anytime to file a complaint to the Office for Personal Data Protection or to the Slovak Bar Association.
 See art. 12 to 22 of GDPR: http://eur-lex.europa.eu/legal-content/SK/TXT/HTML/?uri=CELEX:32016R0679&from=EN
 That are not considered as recipients in accordance with art. 4, par. 9 of GDPR.