Legal and Regulatory - Grodl Weiss & Co.

Introduction

Grodl Weiss & Co., advokátní kancelář, s.r.o., ID No.: 23491825, with its registered office at Mezírka 775/1, 602 00 Brno, the Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno under file number C 146203 (the "Company"), as the controller of personal data, protects all processed personal data as strictly confidential and handles it in accordance with applicable personal data protection laws.

This Personal Data Processing Policy applies to:

aProcessing of personal data carried out by the Company during your use of the Website

bProcessing of personal data during communication with you via email or telephone

cProcessing of personal data during the course of business relationships with clients and suppliers

dProcessing in the performance of the Company's legal obligations

eProcessing necessary for protecting the legitimate interests of the Company

This Policy describes the purposes and methods of processing, categories of personal data, potential recipients, retention periods, and your rights in relation to personal data protection.

Processing Purposes

Your personal data may be processed for the following purposes:

aPerformance of the contract, including its negotiation (legal services; partner/supplier relationships)

bCompliance with legal obligations (e.g., Act No. 85/1996 Coll.; Act No. 253/2008 Coll.)

cSending commercial communications, offering services/products (e.g., newsletters) via email

dProtection of legitimate interests of the controller (rights protection, security, misuse prevention, market monitoring)

eProtection of the legitimate interests of third parties, in particular clients

fProcessing requests sent via electronic forms (e.g., employment or cooperation interest)

Data We Process

The Company is authorized to process the following personal data depending on the purpose:

aName and surname

bContact address

cE-mail

dTelephone number

eAccount number and other transaction details

fCompany ID number, VAT number

gBirth number

hDate of birth

iOther information relating to the client or third parties (as needed for stated purposes)

jInformation provided in the CV (pre-contractual measures for job/cooperation applicants)

Personal data is processed both manually and automatically. The Company may collect, store, and use certain information through automated means (e.g., statistical information) when you visit the Website.

Recipients of Personal Data

aPersonal data is made available only to authorized employees, cooperating lawyers/advisors, or contracted processors, to the necessary extent and on a valid legal basis

bIn cases established by law, the Company may be required to disclose certain personal data to law enforcement or other public authorities

Personal Data of Third Parties

Personal data of third parties (e.g., employees/customers of clients or suppliers, or other natural persons involved in cooperation) received in connection with contract conclusion/performance will be processed in accordance with law, for the duration of the contractual relationship and further as required by special legal regulations, or longer if justified by a specific case.

Retention Period

Data is processed/stored for the period necessary to safeguard rights and duties from the relevant contractual relationship and further for periods required by law or covered by consent.

aContract performance (including negotiation): duration of the relationship and 10 years thereafter

bLegal obligations: for periods specified by applicable regulations

cCommercial communications/offers: duration of consent or until revocation, or per special regulations (e.g., Act No. 480/2004 Coll.)

dProtection of legitimate interests (controller/third parties): up to 3 years from start of processing, unless legal rules for practice of law provide otherwise, or longer if justified by a specific case

eRequests via electronic forms: time necessary to process the request

Your Rights

You have rights arising from legal regulations that you can exercise at any time:

aRight of access to personal data

bRight to correct inaccurate and incomplete data

cRight to erasure (subject to specified conditions)

dRight to restrict processing

eRight to data portability

fRight to object (public interest/official authority/legitimate interests)

Final Provisions

For repeated or manifestly unfounded requests, the Company may charge a reasonable fee or refuse the request. Given the Company's legal practice, exercising certain rights may be restricted, particularly where processing relates to specific legal cases.

Supervisory authority: Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Prague 7, +420 234 665 111, www.uoou.gov.cz.

Personal Data Processing Policy