Personal Data Processing and Protection Policy
1 Introduction
1.1 Our company LAWCA PARTNERS s.r.o., Company ID No.: 09849751, with its registered office at Dvořákovo nábřeží 1690, 539 01 Hlinsko, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Hradec Králové under File No. C 50816 (hereinafter the “Company” or “we”) hereby informs the public how it, as the controller of personal data, obtains and processes the personal data of natural persons.
1.2 The rules on the processing and protection of personal data set out below (hereinafter the “Policy”) follow in particular from the following legislation:
1.2.1 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”);
1.2.2 Act No. 110/2019 Coll., on Personal Data Processing;
1.2.3 Act No. 480/2004 Coll., on Certain Information Society Services and on the amendment of certain acts (the Information Society Services Act); and
1.2.4 Act No. 127/2005 Coll., on Electronic Communications and on the amendment of certain related acts (the Electronic Communications Act).
1.3 This Policy applies to all persons visiting our company’s website www.lawcapartners.com (hereinafter the “Website”), to newsletter subscribers, to all existing and prospective clients, to applicants for employment or professional cooperation, and to participants in events organised by us.
1.4 In this Policy we aim to explain how we process your personal data. Should you have any further questions about the processing, please feel free to write to us at lawca@lawcapartners.com.
1.5 In accordance with the GDPR, personal data means any information relating to an identified or identifiable natural person (and therefore not to a legal entity). In principle, it is any information which, whether on its own or in combination with other information, may serve to identify a particular natural person (hereinafter “personal data”).
2 Rules on the processing of personal data
2.1 Website visitors
2.1.1 If you visit our Website and complete the contact form, or if you book a meeting with our lawyers, we will collect and process the following personal data:
(i) Name and surname
(ii) E-mail
(iii) Telephone contact
(iv) Content of our mutual communication
2.1.2 We will process this personal data in order to receive your enquiries, answer your questions and coordinate our dealings to our mutual satisfaction. We will also use it to improve our services and our Website. The legal basis is our company’s legitimate interest.
2.1.3 In this case we will process your personal data for the period strictly necessary, but no longer than 1 year.
2.2 Clients to whom we provide legal services, and prospective clients
2.2.1 In the course of negotiating a cooperation and also after entering into an oral or written agreement on the provision of legal services, our company will collect and process the following personal data:
(i) Name and surname
(ii) Date of birth, or birth registration number
(iii) Company ID No., VAT ID
(iv) Registered office address or permanent residence address and correspondence address
(v) E-mail
(vi) Telephone number
(vii) Place of birth
(viii) Sex
(ix) Citizenship
(x) Data shown in the identity document
(xi) Content of our mutual communication
(xii) Information and documents you provide to us for the purpose of providing legal services
(xiii) Your feedback and evaluation of our legal services
(xiv) Photographs from our events
2.2.2 We will process this personal data for the following reasons:
(i) So that our company can present you with the most suitable offer for the provision of legal services and so that we can perform those services to the highest standard. The legal basis is the performance of a contract (including steps taken prior to entering into a contract).
(ii) So that our company can comply with obligations imposed by law and by other legal or professional regulations, in particular tax and accounting legislation, the Legal Profession Act, the professional rules on the verification of signatures, and the Act on Certain Measures against the Legalisation of Proceeds of Crime and Financing of Terrorism. The legal basis is compliance with legal obligations.
(iii) So that our company can send you our newsletter and collect and evaluate your feedback. The legal basis is our company’s legitimate interests.
(iv) So that our company can defend itself or enforce its rights and claims in the event of litigation. The legal basis is our company’s legitimate interests.
2.2.3 In this case we will process your personal data for the period strictly necessary, but no longer than 10 years after the end of our cooperation (unless legislation provides for a longer archiving period).
2.3 Job applicants
2.3.1 Where our company is approached by an applicant for employment (for example for the position of assistant, paralegal, trainee attorney or attorney), we will collect and process the following personal data:
(i) Name and surname
(ii) Date of birth, or birth registration number
(iii) Permanent residence address and correspondence address
(iv) E-mail
(v) Telephone number
(vi) Content of our mutual communication
(vii) Photograph
(viii) Information on education attained and professional experience
2.3.2 We will process this personal data for the following reasons:
(i) So that our company can offer you the most suitable terms of employment. The legal basis is taking steps prior to entering into a contract.
(ii) So that our company can contact you in the future with an offer of cooperation. The legal basis is your consent to the processing, which you may withdraw at any time.
2.3.3 In this case we will process your personal data for the period strictly necessary, but no longer than for the duration of the recruitment process. If you give us your express consent (which you may withdraw at any time), we will retain the data from your CV for a further 3 years so that we may contact you again regarding possible cooperation.
2.4 Cooperating attorneys
2.4.1 Where our company enters into negotiations with you on professional cooperation (as a cooperating attorney), we will collect and process the following personal data:
(i) Name and surname
(ii) Date of birth, or birth registration number
(iii) Permanent residence address and correspondence address
(iv) E-mail
(v) Telephone number
(vi) Company ID No., VAT ID
(vii) Bank account number
(viii) Content of our mutual communication
2.4.2 We will process this personal data for the following reasons:
(i) So that our company can propose the most suitable terms for professional cooperation. The legal basis is the performance of a contract (including steps taken prior to entering into a contract).
(ii) So that our company can comply with obligations imposed by law and by other legal or professional regulations, in particular tax and accounting legislation, the Legal Profession Act and the resolutions of the Board of Directors of the Czech Bar Association. The legal basis is compliance with legal obligations.
(iii) So that our company can defend itself or enforce its rights and claims in the event of litigation. The legal basis is our company’s legitimate interests.
2.4.3 In this case we will process your personal data for the period strictly necessary, but no longer than 10 years after the end of our cooperation (unless legislation provides for a longer archiving period).
2.5 Participants in our events
2.5.1 If you register for an event we hold for the public or for selected participants (for example a professional breakfast, webinar, lecture or training course), our company will collect and process the following personal data:
(i) Name and surname
(ii) Permanent residence address and correspondence address
(iii) E-mail
(iv) Telephone contact
(v) Content of our mutual communication
(vi) Information about the company you work for
(vii) Photographs from our events
(viii) Bank account number
2.5.2 We will process this personal data for the following reasons:
(i) So that our company can enable you to attend the event and prepare the necessary materials. The legal basis is the performance of a contract.
(ii) So that our company can comply with obligations imposed by law and by other legal or professional regulations, in particular tax and accounting legislation, the Legal Profession Act and the resolutions of the Board of Directors of the Czech Bar Association. The legal basis is compliance with legal obligations.
(iii) So that our company can send you our newsletter and collect and evaluate your feedback. The legal basis is our company’s legitimate interests.
(iv) So that our company can promote itself in public. The legal basis is our company’s legitimate interests.
(v) So that our company can defend itself or enforce its rights and claims in the event of litigation. The legal basis is our company’s legitimate interests.
2.5.3 In this case we will process your personal data for the period strictly necessary, but no longer than 5 years after the end of your participation in the event (unless legislation provides for a longer archiving period).
2.6 Newsletter subscribers
2.6.1 If you request our newsletter, or if you are already our client, we may use your e-mail address and your name and surname to send you these newsletters.
2.6.2 We will process this personal data so that we can send you regular newsletters containing news from our field of law, case studies, references from other clients, recommendations, commentary, observations or other marketing communications of our company.
2.6.3 If you are our client, this processing of personal data is permitted directly by Section 7(3) of the Information Society Services Act (unless you have expressly objected). Where the newsletter is subscribed to outside the provision of legal services, we process personal data on the basis of your consent. You may withdraw your consent at any time, or unsubscribe directly through the newsletter sent to you.
2.6.4 In this case we will process your personal data for the period strictly necessary, but no longer than 2 years after your consent was given or after legal services were last received.
3 Common provisions
3.1 Where you give us your consent to the processing of personal data, you may withdraw that consent at any time by sending an instruction to: lawca@lawcapartners.com.
3.2 Depending on the nature of the matter, personal data may also be disclosed to other controllers, in particular to courts and other public authorities, to opposing parties and their representatives, to banks, to escrow providers and to our insurer. Such disclosure only ever takes place where there is a legal ground for it. The attorney’s duty of confidentiality under Section 21 of Act No. 85/1996 Coll., on the Legal Profession, remains unaffected.
3.3 Who will have access to your personal data:
3.3.1 Members of our company’s statutory body
3.3.2 Employees and cooperating attorneys
3.3.3 Providers of our IT infrastructure
3.3.4 The provider of the iDoklad invoicing tool (Seyfor, a.s.)
3.3.5 Our accountant (UOL a.s.)
3.3.6 Our bank (Česká spořitelna, a.s.)
3.3.7 Our insurer, for the purpose of any payment of insurance benefits under our professional liability insurance (Generali Česká pojišťovna a.s.)
3.3.8 The provider of text editing software (Microsoft)
3.3.9 The provider of document handling software (Adobe)
3.3.10 The provider of remote data storage and cloud services (Dropbox)
3.3.11 The provider of analytics tools (Google)
3.3.12 The provider of enterprise office applications and artificial intelligence tools (Google – Google Workspace services including Gemini and Gemini Notebook)
3.3.13 The provider of an enterprise artificial intelligence tool (Anthropic PBC – the Claude Team service)
3.3.14 Public authorities, where required by law or permitted by our company’s legitimate interest.
3.4 All the recipients listed above are obliged to protect your personal data in the same way as our company. Personal data will not be transferred to third countries, with the exception of the United States of America (the providers Microsoft, Adobe, Dropbox, Google and Anthropic). Any such transfer is safeguarded by standard contractual clauses approved by the European Commission, by a European Commission adequacy decision, or by another appropriate instrument under Chapter V of the GDPR. We will provide you with the current list of providers and details of the safeguards on request.
3.5 Our company may entrust the processing of personal data to a third party acting as a processor, in each case on the basis of a data processing agreement under Article 28 of the GDPR. The processor is entitled to process personal data solely on our documented instructions, is bound by confidentiality, and is not entitled to use the data for its own purposes or to train artificial intelligence models.
3.6 To the extent that we comply with obligations under Act No. 253/2008 Coll., on Certain Measures against the Legalisation of Proceeds of Crime and Financing of Terrorism, we process personal data on the basis of compliance with a legal obligation. No consent is required for this processing and its withdrawal has no effect on the statutory retention period. In addition to the data listed above, we process in this context in particular data on the transaction and its value, on the origin of funds and assets, the outcome of the check as to whether you are a politically exposed person and whether international sanctions apply to you, and the outcome of the risk assessment. We retain this data for 10 years. Providing it is a statutory requirement; without it we cannot carry out the transaction or establish a business relationship.
3.7 The documents you provide to us usually also contain personal data of other persons, in particular opposing parties, witnesses or your employees. We process such data for the same purpose and for the same period as your own data. We do not comply with the information duty towards those persons to the extent that the attorney’s duty of confidentiality prevents it; this exemption follows from Article 14(5)(d) of the GDPR.
3.8 We do not carry out any profiling of personal data.
3.9 In providing legal services we use artificial intelligence tools as a working aid. We use them exclusively on accounts which we ourselves administer and in respect of which the use of your data for the provider’s own purposes and for training models is contractually excluded. The attorney is always responsible for the content and accuracy of every output. No automated decision-making, including profiling, which would produce legal effects concerning you within the meaning of Article 22 of the GDPR takes place.
3.10 Where your documents are to be disclosed to a provider of an artificial intelligence tool in a form that allows you or your matter to be identified, we will first request your written release from the duty of confidentiality to the extent necessary for the given tool and purpose. You may also tell us at any time that you do not wish such tools to be used in your matter.
3.11 Personal data will be stored in electronic or paper form.
3.12 In order to protect personal data and minimise the risk of unauthorised access to it, our company has adopted organisational and technical measures. These measures include in particular the technical securing of servers and of the Website against unauthorised access. Persons coming into contact with personal data are also bound by confidentiality in accordance with Article 28(3)(b) of the GDPR.
3.13 Our company uses the Google Analytics service provided by Google LLC on the Website. Google Analytics allows our company to collect, process and evaluate data (including personal data) on Website traffic. Google Analytics also uses cookies, which are, however, stored on the servers of Google LLC, to which the Company has no access. For information on the protection of personal data by Google LLC see https://policies.google.com/privacy.
3.14 For further information on the protection and processing of personal data, and for your requests and complaints, you may use the following e-mail address: lawca@lawcapartners.com.
3.15 Our company has not appointed a data protection officer.
4 Rights of data subjects
In connection with the protection of their personal data, data subjects have the following rights:
4.1 the right to withdraw consent to the processing of personal data where the processing is based on consent;
4.2 the right to request access to personal data and to the information specified in Article 15(1) of the GDPR;
4.3 the right to rectification of inaccurate personal data and, where applicable, to completion of incomplete personal data;
4.4 the right to erasure of personal data under the conditions laid down in Article 17 of the GDPR;
4.5 the right to restriction of processing of personal data under the conditions laid down in Article 18 of the GDPR;
4.6 the right, under the conditions laid down in Article 20 of the GDPR, to receive the personal data concerning them which they have provided to our company in a structured, commonly used and machine-readable format, and the right to transmit that data to another person;
4.7 the right to be informed of a personal data breach under the conditions laid down in Article 34 of the GDPR;
4.8 the right to object to the processing of personal data under the conditions laid down in Article 21 of the GDPR;
4.9 the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, or via data box qkbaa2n;
4.10 the right to judicial protection in the event of a breach of our obligations in the processing of personal data.
4.11 These rights are not absolute. In particular, the right to erasure, the right to restriction of processing and the right to object cannot be exercised to the extent that we are obliged to continue retaining the personal data under legal or professional regulations – in particular under the Legal Profession Act and under the Act on Certain Measures against the Legalisation of Proceeds of Crime and Financing of Terrorism – or to the extent that the processing is necessary for the establishment, exercise or defence of legal claims.
4.12 This English version is a courtesy translation of the Czech original. In the event of any discrepancy between the Czech and English versions, the Czech version prevails.
In Hlinsko, on 17 August 2026
Ondřej Šváb
Managing Director, LAWCA PARTNERS s.r.o.
1.1 Our company LAWCA PARTNERS s.r.o., Company ID No.: 09849751, with its registered office at Dvořákovo nábřeží 1690, 539 01 Hlinsko, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Hradec Králové under File No. C 50816 (hereinafter the “Company” or “we”) hereby informs the public how it, as the controller of personal data, obtains and processes the personal data of natural persons.
1.2 The rules on the processing and protection of personal data set out below (hereinafter the “Policy”) follow in particular from the following legislation:
1.2.1 Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “GDPR”);
1.2.2 Act No. 110/2019 Coll., on Personal Data Processing;
1.2.3 Act No. 480/2004 Coll., on Certain Information Society Services and on the amendment of certain acts (the Information Society Services Act); and
1.2.4 Act No. 127/2005 Coll., on Electronic Communications and on the amendment of certain related acts (the Electronic Communications Act).
1.3 This Policy applies to all persons visiting our company’s website www.lawcapartners.com (hereinafter the “Website”), to newsletter subscribers, to all existing and prospective clients, to applicants for employment or professional cooperation, and to participants in events organised by us.
1.4 In this Policy we aim to explain how we process your personal data. Should you have any further questions about the processing, please feel free to write to us at lawca@lawcapartners.com.
1.5 In accordance with the GDPR, personal data means any information relating to an identified or identifiable natural person (and therefore not to a legal entity). In principle, it is any information which, whether on its own or in combination with other information, may serve to identify a particular natural person (hereinafter “personal data”).
2 Rules on the processing of personal data
2.1 Website visitors
2.1.1 If you visit our Website and complete the contact form, or if you book a meeting with our lawyers, we will collect and process the following personal data:
(i) Name and surname
(ii) E-mail
(iii) Telephone contact
(iv) Content of our mutual communication
2.1.2 We will process this personal data in order to receive your enquiries, answer your questions and coordinate our dealings to our mutual satisfaction. We will also use it to improve our services and our Website. The legal basis is our company’s legitimate interest.
2.1.3 In this case we will process your personal data for the period strictly necessary, but no longer than 1 year.
2.2 Clients to whom we provide legal services, and prospective clients
2.2.1 In the course of negotiating a cooperation and also after entering into an oral or written agreement on the provision of legal services, our company will collect and process the following personal data:
(i) Name and surname
(ii) Date of birth, or birth registration number
(iii) Company ID No., VAT ID
(iv) Registered office address or permanent residence address and correspondence address
(v) E-mail
(vi) Telephone number
(vii) Place of birth
(viii) Sex
(ix) Citizenship
(x) Data shown in the identity document
(xi) Content of our mutual communication
(xii) Information and documents you provide to us for the purpose of providing legal services
(xiii) Your feedback and evaluation of our legal services
(xiv) Photographs from our events
2.2.2 We will process this personal data for the following reasons:
(i) So that our company can present you with the most suitable offer for the provision of legal services and so that we can perform those services to the highest standard. The legal basis is the performance of a contract (including steps taken prior to entering into a contract).
(ii) So that our company can comply with obligations imposed by law and by other legal or professional regulations, in particular tax and accounting legislation, the Legal Profession Act, the professional rules on the verification of signatures, and the Act on Certain Measures against the Legalisation of Proceeds of Crime and Financing of Terrorism. The legal basis is compliance with legal obligations.
(iii) So that our company can send you our newsletter and collect and evaluate your feedback. The legal basis is our company’s legitimate interests.
(iv) So that our company can defend itself or enforce its rights and claims in the event of litigation. The legal basis is our company’s legitimate interests.
2.2.3 In this case we will process your personal data for the period strictly necessary, but no longer than 10 years after the end of our cooperation (unless legislation provides for a longer archiving period).
2.3 Job applicants
2.3.1 Where our company is approached by an applicant for employment (for example for the position of assistant, paralegal, trainee attorney or attorney), we will collect and process the following personal data:
(i) Name and surname
(ii) Date of birth, or birth registration number
(iii) Permanent residence address and correspondence address
(iv) E-mail
(v) Telephone number
(vi) Content of our mutual communication
(vii) Photograph
(viii) Information on education attained and professional experience
2.3.2 We will process this personal data for the following reasons:
(i) So that our company can offer you the most suitable terms of employment. The legal basis is taking steps prior to entering into a contract.
(ii) So that our company can contact you in the future with an offer of cooperation. The legal basis is your consent to the processing, which you may withdraw at any time.
2.3.3 In this case we will process your personal data for the period strictly necessary, but no longer than for the duration of the recruitment process. If you give us your express consent (which you may withdraw at any time), we will retain the data from your CV for a further 3 years so that we may contact you again regarding possible cooperation.
2.4 Cooperating attorneys
2.4.1 Where our company enters into negotiations with you on professional cooperation (as a cooperating attorney), we will collect and process the following personal data:
(i) Name and surname
(ii) Date of birth, or birth registration number
(iii) Permanent residence address and correspondence address
(iv) E-mail
(v) Telephone number
(vi) Company ID No., VAT ID
(vii) Bank account number
(viii) Content of our mutual communication
2.4.2 We will process this personal data for the following reasons:
(i) So that our company can propose the most suitable terms for professional cooperation. The legal basis is the performance of a contract (including steps taken prior to entering into a contract).
(ii) So that our company can comply with obligations imposed by law and by other legal or professional regulations, in particular tax and accounting legislation, the Legal Profession Act and the resolutions of the Board of Directors of the Czech Bar Association. The legal basis is compliance with legal obligations.
(iii) So that our company can defend itself or enforce its rights and claims in the event of litigation. The legal basis is our company’s legitimate interests.
2.4.3 In this case we will process your personal data for the period strictly necessary, but no longer than 10 years after the end of our cooperation (unless legislation provides for a longer archiving period).
2.5 Participants in our events
2.5.1 If you register for an event we hold for the public or for selected participants (for example a professional breakfast, webinar, lecture or training course), our company will collect and process the following personal data:
(i) Name and surname
(ii) Permanent residence address and correspondence address
(iii) E-mail
(iv) Telephone contact
(v) Content of our mutual communication
(vi) Information about the company you work for
(vii) Photographs from our events
(viii) Bank account number
2.5.2 We will process this personal data for the following reasons:
(i) So that our company can enable you to attend the event and prepare the necessary materials. The legal basis is the performance of a contract.
(ii) So that our company can comply with obligations imposed by law and by other legal or professional regulations, in particular tax and accounting legislation, the Legal Profession Act and the resolutions of the Board of Directors of the Czech Bar Association. The legal basis is compliance with legal obligations.
(iii) So that our company can send you our newsletter and collect and evaluate your feedback. The legal basis is our company’s legitimate interests.
(iv) So that our company can promote itself in public. The legal basis is our company’s legitimate interests.
(v) So that our company can defend itself or enforce its rights and claims in the event of litigation. The legal basis is our company’s legitimate interests.
2.5.3 In this case we will process your personal data for the period strictly necessary, but no longer than 5 years after the end of your participation in the event (unless legislation provides for a longer archiving period).
2.6 Newsletter subscribers
2.6.1 If you request our newsletter, or if you are already our client, we may use your e-mail address and your name and surname to send you these newsletters.
2.6.2 We will process this personal data so that we can send you regular newsletters containing news from our field of law, case studies, references from other clients, recommendations, commentary, observations or other marketing communications of our company.
2.6.3 If you are our client, this processing of personal data is permitted directly by Section 7(3) of the Information Society Services Act (unless you have expressly objected). Where the newsletter is subscribed to outside the provision of legal services, we process personal data on the basis of your consent. You may withdraw your consent at any time, or unsubscribe directly through the newsletter sent to you.
2.6.4 In this case we will process your personal data for the period strictly necessary, but no longer than 2 years after your consent was given or after legal services were last received.
3 Common provisions
3.1 Where you give us your consent to the processing of personal data, you may withdraw that consent at any time by sending an instruction to: lawca@lawcapartners.com.
3.2 Depending on the nature of the matter, personal data may also be disclosed to other controllers, in particular to courts and other public authorities, to opposing parties and their representatives, to banks, to escrow providers and to our insurer. Such disclosure only ever takes place where there is a legal ground for it. The attorney’s duty of confidentiality under Section 21 of Act No. 85/1996 Coll., on the Legal Profession, remains unaffected.
3.3 Who will have access to your personal data:
3.3.1 Members of our company’s statutory body
3.3.2 Employees and cooperating attorneys
3.3.3 Providers of our IT infrastructure
3.3.4 The provider of the iDoklad invoicing tool (Seyfor, a.s.)
3.3.5 Our accountant (UOL a.s.)
3.3.6 Our bank (Česká spořitelna, a.s.)
3.3.7 Our insurer, for the purpose of any payment of insurance benefits under our professional liability insurance (Generali Česká pojišťovna a.s.)
3.3.8 The provider of text editing software (Microsoft)
3.3.9 The provider of document handling software (Adobe)
3.3.10 The provider of remote data storage and cloud services (Dropbox)
3.3.11 The provider of analytics tools (Google)
3.3.12 The provider of enterprise office applications and artificial intelligence tools (Google – Google Workspace services including Gemini and Gemini Notebook)
3.3.13 The provider of an enterprise artificial intelligence tool (Anthropic PBC – the Claude Team service)
3.3.14 Public authorities, where required by law or permitted by our company’s legitimate interest.
3.4 All the recipients listed above are obliged to protect your personal data in the same way as our company. Personal data will not be transferred to third countries, with the exception of the United States of America (the providers Microsoft, Adobe, Dropbox, Google and Anthropic). Any such transfer is safeguarded by standard contractual clauses approved by the European Commission, by a European Commission adequacy decision, or by another appropriate instrument under Chapter V of the GDPR. We will provide you with the current list of providers and details of the safeguards on request.
3.5 Our company may entrust the processing of personal data to a third party acting as a processor, in each case on the basis of a data processing agreement under Article 28 of the GDPR. The processor is entitled to process personal data solely on our documented instructions, is bound by confidentiality, and is not entitled to use the data for its own purposes or to train artificial intelligence models.
3.6 To the extent that we comply with obligations under Act No. 253/2008 Coll., on Certain Measures against the Legalisation of Proceeds of Crime and Financing of Terrorism, we process personal data on the basis of compliance with a legal obligation. No consent is required for this processing and its withdrawal has no effect on the statutory retention period. In addition to the data listed above, we process in this context in particular data on the transaction and its value, on the origin of funds and assets, the outcome of the check as to whether you are a politically exposed person and whether international sanctions apply to you, and the outcome of the risk assessment. We retain this data for 10 years. Providing it is a statutory requirement; without it we cannot carry out the transaction or establish a business relationship.
3.7 The documents you provide to us usually also contain personal data of other persons, in particular opposing parties, witnesses or your employees. We process such data for the same purpose and for the same period as your own data. We do not comply with the information duty towards those persons to the extent that the attorney’s duty of confidentiality prevents it; this exemption follows from Article 14(5)(d) of the GDPR.
3.8 We do not carry out any profiling of personal data.
3.9 In providing legal services we use artificial intelligence tools as a working aid. We use them exclusively on accounts which we ourselves administer and in respect of which the use of your data for the provider’s own purposes and for training models is contractually excluded. The attorney is always responsible for the content and accuracy of every output. No automated decision-making, including profiling, which would produce legal effects concerning you within the meaning of Article 22 of the GDPR takes place.
3.10 Where your documents are to be disclosed to a provider of an artificial intelligence tool in a form that allows you or your matter to be identified, we will first request your written release from the duty of confidentiality to the extent necessary for the given tool and purpose. You may also tell us at any time that you do not wish such tools to be used in your matter.
3.11 Personal data will be stored in electronic or paper form.
3.12 In order to protect personal data and minimise the risk of unauthorised access to it, our company has adopted organisational and technical measures. These measures include in particular the technical securing of servers and of the Website against unauthorised access. Persons coming into contact with personal data are also bound by confidentiality in accordance with Article 28(3)(b) of the GDPR.
3.13 Our company uses the Google Analytics service provided by Google LLC on the Website. Google Analytics allows our company to collect, process and evaluate data (including personal data) on Website traffic. Google Analytics also uses cookies, which are, however, stored on the servers of Google LLC, to which the Company has no access. For information on the protection of personal data by Google LLC see https://policies.google.com/privacy.
3.14 For further information on the protection and processing of personal data, and for your requests and complaints, you may use the following e-mail address: lawca@lawcapartners.com.
3.15 Our company has not appointed a data protection officer.
4 Rights of data subjects
In connection with the protection of their personal data, data subjects have the following rights:
4.1 the right to withdraw consent to the processing of personal data where the processing is based on consent;
4.2 the right to request access to personal data and to the information specified in Article 15(1) of the GDPR;
4.3 the right to rectification of inaccurate personal data and, where applicable, to completion of incomplete personal data;
4.4 the right to erasure of personal data under the conditions laid down in Article 17 of the GDPR;
4.5 the right to restriction of processing of personal data under the conditions laid down in Article 18 of the GDPR;
4.6 the right, under the conditions laid down in Article 20 of the GDPR, to receive the personal data concerning them which they have provided to our company in a structured, commonly used and machine-readable format, and the right to transmit that data to another person;
4.7 the right to be informed of a personal data breach under the conditions laid down in Article 34 of the GDPR;
4.8 the right to object to the processing of personal data under the conditions laid down in Article 21 of the GDPR;
4.9 the right to lodge a complaint with the supervisory authority, i.e. the Office for Personal Data Protection, at Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, or via data box qkbaa2n;
4.10 the right to judicial protection in the event of a breach of our obligations in the processing of personal data.
4.11 These rights are not absolute. In particular, the right to erasure, the right to restriction of processing and the right to object cannot be exercised to the extent that we are obliged to continue retaining the personal data under legal or professional regulations – in particular under the Legal Profession Act and under the Act on Certain Measures against the Legalisation of Proceeds of Crime and Financing of Terrorism – or to the extent that the processing is necessary for the establishment, exercise or defence of legal claims.
4.12 This English version is a courtesy translation of the Czech original. In the event of any discrepancy between the Czech and English versions, the Czech version prevails.
In Hlinsko, on 17 August 2026
Ondřej Šváb
Managing Director, LAWCA PARTNERS s.r.o.