Powered by Smartsupp
0910 580 273

The protection of clients’ personal data, as well as the data of other individuals, is extremely important to the law office. The following terms explain how I process your personal data when providing legal services. I provide legal services as an independent attorney: JUDr. Zuzana Nespalová, with a registered office at Saratovská 6/D, 841 02 Bratislava – Dúbravka District, ID No.: 30866359, Tax ID No.: 1072985793, registered in the list of attorneys maintained by the Slovak Bar Association under No. 4530 (hereinafter referred to as the “Attorney”).

Privacy Terms

When processing personal data, the Attorney primarily complies with the EU General Data Protection Regulation (GDPR), which also defines your rights as a data subject, with the relevant provisions of the Personal Data Protection Act (especially § 78), the Act on Advocacy (§ 18), and other applicable regulations. The Attorney adheres to the Code of Conduct adopted by the Slovak Bar Association (“SBA”), which further explains data processing by attorneys. The Code is available at www.sak.sk/gdpr.

Why does the Attorney process personal data?

The Attorney processes personal data mainly to:

  • Provide legal services and perform the legal profession;
  • Fulfil legal, professional, and contractual obligations;
  • Protect legitimate interests of the Attorney, clients, and third parties.
Purposes and Legal Bases for Processing

Purpose

Legal Basis

Relevant Regulations

Provision of legal services

Legal obligation under Art. 6(1)(c) GDPR, performance of a contract under Art. 6(1)(b), vital interests under Art. 6(1)(d), and establishment/defense of legal claims under Art. 9(2)(f)

Advocacy Act, Bar Rules, Civil and Commercial Codes

Provision of non-legal services (e.g. registration of public sector partners, subleases)

Contractual obligation under Art. 6(1)(b), legal obligation under Art. 6(1)(c)

Various Acts incl. AML Law, Whistleblower Protection Act

Compliance with legal and SBA rules

Legal obligation under Art. 6(1)(c), legitimate interest under Art. 6(1)(f), public interest under Art. 6(1)(e), legal claims under Art. 9(2)(f)

As above

Accounting and tax purposes

Legal obligation under Art. 6(1)(c)

Accounting and tax laws

Protection of legitimate interests

Legitimate interest under Art. 6(1)(f)

Civil, Criminal, Administrative procedural laws, GDPR

Who Has Access to Your Personal Data?

Personal data are disclosed only when necessary and under confidentiality obligations, to:

  • Employees,
  • Individuals entrusted with legal service tasks,
  • Substitute or cooperating attorneys,
  • Accountants and tax advisors,
  • The Slovak Bar Association (e.g., in disciplinary proceedings),
  • Software and IT service providers (and their employees).

The Attorney has a legal duty to prevent criminal activity and to report certain information under anti-money laundering laws, even if otherwise bound by confidentiality.

Personal data may also be made public in legally required cases such as:

  • Land registry,
  • Commercial Register,
  • Notarial Register of Pledges,
  • Registers maintained by the Industrial Property Office.
Does the Attorney Transfer Your Data Abroad?

No, your data is not transferred to third countries outside the European Economic Area (EEA) (EU, Iceland, Norway, Liechtenstein).

The Attorney does not engage in automated decision-making or profiling under Art. 22 GDPR.

How Long Are Personal Data Stored?

The Attorney keeps personal data only as long as necessary. Retention periods follow the Slovak Bar Association Resolution No. 29/11/2011, e.g.:

  • Incoming/outgoing mail logs – 10 years;
  • Inventory lists – 10 years;
  • Client lists (if in paper form) – indefinitely;
  • Client files – 10 years after archiving conditions are met.

Certain documents must not be discarded, e.g.:

  • Files containing original documents from the client;
  • Client file protocols;
  • Files subject to state archive submission;
  • Files involved in ongoing court or administrative proceedings.
How Are Your Personal Data Obtained?

If you are a client, your data are usually obtained directly from you. If not provided, the Attorney may be unable to provide services or may have to refuse.

The Attorney may also obtain your data from:

  • Public sources,
  • Government authorities,
  • Other individuals (e.g., as part of case preparation or evidence gathering).

If you are not a client, your personal data may be obtained:

  • From clients,
  • From public/legal sources (e.g., registers, official files),
    without your knowledge or consent, under the legal mandate to practice law.
What Are Your Rights as a Data Subject?

If your data is processed based on consent (Art. 6(1)(a)), you may withdraw your consent at any time.

You may object to direct marketing or any processing based on legitimate interest (Art. 6(1)(f)).

As a client, you have the right to:

  • Access and correct your data;
  • File a complaint with the Office for Personal Data Protection (under Act No. 18/2018 Coll.).

However, when personal data are processed for legal services, clients do not have:

  • The right to object (Art. 22 GDPR),
  • The right to restrict processing (Art. 18(2)),
  • The right to deletion or “right to be forgotten” (Art. 17(3)(b, d, e)),
  • The right to data portability (Art. 20(1), §18(8) Advocacy Act).

If you are not a client but your data is processed in relation to legal services, you may:

  • Request correction of your data,
  • File a complaint with the Office.

You do not have the right:

  • To access the data (Art. 15, §18(8)),
  • To restrict processing or erasure,
  • To object (Art. 21),
  • To portability.
What Legitimate Interests Are Pursued by the Attorney?

Legal services help clients pursue their rights. The Attorney also has:

  • A right to process personal and sensitive data independently as a data controller (not merely as a processor),
  • A legitimate interest in protecting their property or asserting legal claims (e.g., for damages or unpaid fees).

Providing personal data may be legally required or necessary to form a contract. Failure to provide it may prevent the conclusion of such contracts.

Cookies

Cookies are small text files that improve website usability (e.g., remembering user preferences or login sessions). The Attorney’s website uses cookies to:

  • Store browser settings (text size, language),
  • Gather analytics (e.g., visitor count).

You can disable cookies anytime in your browser settings. By doing so, you withdraw your consent in line with § 55(5) of the Electronic Communications Act.

Changes to the Privacy Policy

Personal data protection is an ongoing responsibility. Information provided here may change or become outdated. Therefore, the Attorney reserves the right to modify these terms at any time.