Privacy policy
The protection of your personal data is the highest priority for our law firm. For this reason, you will find all the necessary information below, in particular which personal data of natural persons we process, what is the reason of the processing, which rights you have as a data subject and other related information.
Company Advokátska kancelária BÁNOS & KOŠÚTOVÁ s. r. o., having its registered office at Hlavná 979/23, Galanta 924 01, Identification No. (IČO): 47 551 372, registered in Commercial Register of the District Court Trnava, Section.: Sro, Identification No.: 33725/T, represented by: JUDr. Róbert Bános – managing director, contact: email advokat@banos.sk, phone number +421 917 540 003 („controller“) inform the data subject about information below, according to Article 13 of the Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (,,GDPR“) and Article 19 of the Act No. 18/2018 Coll. on the protection of personal data and on the amendment of certain acts („Act“).
- Identification and contact details of the controller:
Commercial name: Advokátska kancelária BÁNOS & KOŠÚTOVÁ s. r. o.
Registered office: Hlavná 979/23, Galanta 924 01
Identification No.: 47 551 372
Registration: Commercial Register of the District Court Trnava, Section.: Sro, Identification No.: 33725/T
Representation: JUDr. Róbert Bános – managing director
Contact: phone number: +421 917 540 003, e- mail: advokat@banos.sk
- Purpose of processing of personal data and Legal basis of personal data:
PURPOSE | LEGAL BASIS | RELATED LEGISLATION | DATA RETENTION PERIOD |
Advocate practise | Performance of a contract according to Art. 6 (1) (b) GDPR and compliance with a legal obligation according to Art. 6 (1) (c) GDPR and regulations of the Slovak Bar Association | Regulations of the Slovak Bar Association, Civil Code, Commercial Code and other regulations | 10 years since the case documents is placed in the archive |
Provision of other services to clients- e.g. services od an authorized person of a public sector partner | Performance of a contract according to Art. 6 (1) (b) GDPR and compliance with a legal obligation according to Art. 6 (1) (c) GDPR | Act No. 315/2016 on the Register of Public Sector Partners and on the Amendment of Certain Acts, Act No. 305/2013 on e-government, Civil Code, Commercial Code, Act No. 116/1990 on the lease and sublease of non-residential premises | 10 years since the case documents is placed in the archive, personal data of the end user of benefits are keeping 5 years from the date of termination of the position of the end user in the relevant company, if the data are not part of the verification document on the Internet |
Evidence of received and sent documents and e-mails | Compliance with a legal obligation according to Art. 6 (1) (c) GDPR, | Act No. 395/2002 on archives and registries and on the amendment of certain laws | Period according under the Act |
Ensuring compliance with legal regulations and regulations of the Slovak Bar Association | Compliance with a legal obligation according to Art. 6 (1) (c) GDPR, the legitimate interest of our law firm or third parties in defending legal claims | GDRP, Act on Protection against Money Laundering, Act on Reporting Anti-Social Activities, Regulations of the Slovak Bar Association | 10 years since the case documents is placed in the archive |
Accounting and tax purposes | Compliance with a legal obligation according to Art. 6 (1) (c) GDPR | Special acts in the field of accounting and tax administration
| 10 years since year to which they relate |
Equipment of another request or question sent via the contact form to the website www.banos.sk | The consent given by data subject according to Art. 6 (1) (a) GDPR | the Act on advocacy Civil Code, Commercial Code | Necesssary time to provide an answer |
Employee selection process | Processing is necessary for take steps at the request of the data subject prior to entering into a contract according to Art. 6 (1) (b) GDPR | Labour Code, the Act on advocacy and other regulations | Until the end of the selection process |
List of job applicants | The consent given by data subject according to Art. 6 (1) (a) GDPR | Labour Code, the Act on advocacy and other regulations | 1 year from the consent was given |
The legitimate interest of controller is to inform clients through legal notifications about changes, amendments to laws, etc. (in case legal services or defense were provided to the client). The controller provides to the client legal service and therefore it is a legitimate interest of the controller and the client to be informed about facts that may affect the rights and obligations of the client and may have a major impact on his quality of life and quality of life of his family. In accordance with the principle of proportionality, the controller has come to the conclusion that informing the clients through notifications outweigh the interest in protecting the privacy of the person. To process the email address for this purpose, the operator has taken appropriate technical and organizational measures to protect it.
- Retention period of personal data
We preserve personal data as long as its necessary for the purposes for which the personal data are processed. The controller determines the processing time of personal data in accordance with the principles of minimizing the retention period of personal data, while processing personal data during the following period:
- during a period laid down by generally binding legislation, when personal data are processed on the basis of compliance with the legal obligation of the controller,
- during the duration of the contractual relationship or the duration of the pre-contractual measures, in the case where personal data are processed in performance of a contract or pre-contractual measures,
- during the controller’s legitimate interest, where the processing of personal data by the controller is carried out on the legal basis of the controller’s legitimate interest,
- during the period of consent given to the processing of personal data, if the controller processes personal data with the consent of the data subject.
The controller has determined the data retention period of personal data on the basis of the above criteria, in accordance with the Resolution of the Presidency of the Slovak Bar Association on the recommended method of keeping the file agenda. Individual retention period of personal data processing is specified in the internal regulations of the controller. The data subjects may ask the controller for information how long are their personal data processed.
After the relevant personal data processing period has elapsed, the controller may only process personal data for special purposes, such as archiving or statistics.
- Categories of recipients
Personal data is processed directly by our law firm, in written and electronic form. We make the personal data of our clients and other natural persons available only to the extent necessary and always while strictly maintaining the confidentiality of the data recipient, e.g. our employees, persons we entrust with the performance of individual acts of legal services, representing or cooperating lawyers, our accounting adviser, our professional adviser (e.g. auditor), the Slovak Bar Association (e.g. in the case of disciplinary proceedings) or the providers of our web interface, IT services, or the support of our office, including the employees of these persons. We can also provide your personal data to legally authorized entities, which may include e.g. include courts, law enforcement agencies, the tax office, etc. Although we have a limited duty of confidentiality to provide your personal information to public authorities, we are required to prevent the commission of a criminal offense and we also have a duty to report information in the area of money laundering prevention and terrorist financing.
- Cross-border transfer of personal data outside the EU
In order to send legal notifications, changes and amendments to laws, etc., the operator processes the email address through a company in a third country that has a decision of the European Commission on the adequacy of the level of personal data protection. This company is a company called: The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, Georgia 30308, United States of America (controller of MailChimp.com).
The Office for Personal Data Protection stated that the third country guaranteeing an adequate level of personal data protection is the country designated by the European Commission with this status in its decision. Such is the United States (Privacy Shield certified companies):
https://dataprotection.gov.sk/uoou/sk/content/prenos-do-krajin-zarucujuc…
The Rocket Science Group, LLC is a Privacy Shield certified company:
https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG
The transfer of the email address of The Rocket Science Group, LLC to a third country does not endanger the rights of the data subject.
- Automated decision-making (profiling)
The controller does not perform the processing of personal data based on automated individual decision-making or perform profiling.
- Rights of the data subject
The data subject has a right to:
- request access to personal data concerning the data subject. As the data subject, you have the right to demand a list of your personal which we have received from you, as well as information on how do we process your personal data.
- the right to correct personal data. We have taken steps to keep your accurate, complete and up-to-date personal data. If you think that the personal information we hold is inaccurate, complete and current, please let us know.
- for the erasure of personal data. As the data subject, you can also ask us to delete your personal data if the reasons given by law are met, e.g. if the purpose of the processing has already ended.
- to limit the processing of personal data. As the data subject, you can ask us to stop processing your personal data, e.g. in situations if you think that your personal data that we process is inaccurate, etc.
- object to the processing of personal data. As the data subject, you have the right to object to the processing of your data, if you have become convinced that we have no legal reason to process personal data; e.g. if our legitimate interests in the processing of personal data do not outweigh the rights or interests of the data subject.
- for the portability of personal data. As the data subject, you have the right, in certain circumstances, to request us to transfer the personal data you have provided to us. However, this right of portability applies only to personal data that we have provided to us with your consent or under a contract to which you are a party.
- to file a motion to initiate proceedings or complaint to the supervisory authority.
As the data subject, you have the right to file a request to initiate proceedings or complaint to the Office for Personal Data Protection of the Slovak Republic, https://dataprotection.gov.sk , Hraničná 12, 820 07 Bratislava 27; phone number.: +421 /2/ 3231 3214; e-mail: statny.dozor@pdp.gov.sk
The data subject may exercise of the above rights at any time by e-mail advokat@banos.sk or on phone number.: +421 917 540 003, or in writing to the postal address of the controller’s registered office. The controller shall process the request of the person concerned in connection with the above rights within the statutory time limits.
Advokátska kancelária BÁNOS & KOŠÚTOVÁ s. r. o.
