Privacy

A controller for the purposes of personal data is any company that is provided with your personal data and that defines the purposes and means used to process it.

The controller of personal data is the law firm KORABOVA & LOVICH s.r.o., Org. ID: 50 131 931, with registered office at Laurinská 4, 811 01 Bratislava, Slovakia, registered in the Commercial Register at Bratislava III City Court, Section: Sro, File no. 108217/B.

Our law firm collects, stores and manages your personal data and is responsible for handling it lawfully. You are authorised to exercise your rights with respect to the processing of personal data; these rights are specified in section 9 below under "Your rights as a data subject".

We only process your personal data to the extent necessary for the specific purpose of such processing.

Our processing of personal data is necessary so that we may:

• provide legal services to our clients and conduct our profession as lawyers;
• fulfil various legal, professional and contractual obligations; and
• protect the legitimate interests of ourselves, our clients and other parties.

The personal data of our clients and other natural persons are disclosed only to the minimum extent necessary, and always in a way that ensures the recipient maintains confidentiality. This may include our employees or other parties responsible for performing individual activities within our legal services, deputising or collaborating lawyers, our collaborating mediation office KORABOVA & LOVICH MEDIATION s.r.o., Org. ID: 47 963 247, registered office Laurinská 4, 811 01 Bratislava, Slovakia, Section: Sro, File no. 101364/B, our accounting advisers, other professional advisers (e.g. auditors, experts), the Slovak Bar Association (in disciplinary proceedings), or the providers of software or other support to our office, including their employees.

Although our obligation to provide your personal data to public authorities is limited by confidentiality, we are still required to attempt to prevent the commission of a crime and to report information to authorities with respect to money laundering and the financing of terrorism.

We have no intention of transmitting your personal data to any third country outside of the European Economic Area (which includes the EU, Norway, Iceland and Liechtenstein). Our law firm uses a secure cloud service from a proven provider with servers located in EU jurisdiction.

Our law firm does not carry out any processing as identified in Article 22 GDPR.

We store personal data for as long as necessary to accomplish the purposes for which it is processed. We follow the recommended archiving periods laid down in Board of Directors of the Slovak Bar Association Resolution No. 29/11/2011, for example:

• The log of incoming and outgoing post shall be stored by a lawyer, once complete, for a period of ten years after receipt or dispatch of the final consignment in the log.
• A lawyer shall archive an inventory list for a period of 10 years after its completion.
• If a lawyer keeps the client register and client-file log electronically, they print a copy covering that calendar year at the end of the year and retain it in the office indefinitely.
• A client file has a retention period of 10 years, starting on the date when all conditions for archiving the file are met.

Lawyers are also subject to professional rules that clarify their duties under the Act on Advocacy. In certain circumstances, these rules extend retention periods or prevent the destruction of particular documents. For instance:

• A client file containing original documents furnished by the client to the lawyer may not be shredded.
• Client-file logs and registers of client files must not be destroyed.
• Shredding of client files (or parts thereof) that lawyers are obliged to turn over to the state archive is not permitted.
• Shredding of a client file is not permitted if there are any active proceedings before a court, state authority, law enforcement, the Slovak Bar Association, etc. that materially relate to the contents of the client file, or that concern actions or omissions on the part of the lawyer in providing legal assistance.

If you are our client, we most often obtain your personal data directly from you. In that case, your personal data is provided voluntarily. Depending on the specific case, failure on the part of a client to provide personal data may impact our ability to provide qualified legal counsel or, in extraordinary cases, may force us to refuse to provide legal counsel. We may also obtain the personal data of our clients from publicly accessible sources, from public authorities and from other parties.

If you are not our client, we typically obtain such personal data from our clients or from other public or lawful sources, for instance by making requests of public authorities, through excerpts from public registers, by obtaining evidence to the benefit of a client, and so on. In this case, we may obtain your personal data without informing you and against your will, based on our statutory powers and the duty to practise in accordance with the Act on Advocacy.

If we process your personal data on the basis of consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

Subject to the conditions in Articles 15 to 20 GDPR, you have the right to access, rectify and erase your personal data, restrict its processing and exercise data portability. The scope of these rights depends on the legal basis and circumstances of the processing.

Under Article 21(1) GDPR, you may object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(e) or (f) GDPR, including related profiling. We will then stop that processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or grounds for establishing, exercising or defending legal claims.

You may object at any time to processing for direct marketing, including related profiling. Following such an objection, we will no longer process your data for those purposes.

The right to obtain a copy of your data and the right to data portability must not adversely affect the rights and freedoms of others (Articles 15(4) and 20(4) GDPR). When handling requests, we also observe our duty of professional secrecy under §18(8) of the Act on Advocacy:

A lawyer has no obligation to provide information on the processing of personal data, to provide access to or enable the portability of personal data under a specific regulation, if such action could result in a violation of the lawyer’s duty to maintain confidentiality under this Act.

— §18 (8), Act on Advocacy

If you believe that the processing of your personal data infringes the GDPR, you have the right to complain to the competent supervisory authority, which in Slovakia is the Office for Personal Data Protection of the Slovak Republic. You may also submit a complaint about a lawyer’s professional conduct to the Slovak Bar Association.

The protection of your personal data is not a one-off affair. The information we are obliged to provide may change or may no longer be current. We therefore reserve the right to modify these terms at any time and to change their scope. If we make substantial changes, we will notify you, for instance via a general notice on our website https://korabova.com or by a special notification by email.

If you have any questions or comments regarding this information on the processing of personal data, do not hesitate to contact our law firm directly by phone at +421 905 599 139, by email at office@korabova.eu, or in writing at our registered office: Laurinská 4, 811 01 Bratislava, Slovakia.