Mgr. Bc. Michaela Garguláková, registration No. ČAK 19584, ID No. 09930051, with registered office at Dukelských hrdinů 567/52, 170 00 Prague 7, Czech Republic ("Attorney") is a personal data controller within the meaning of the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council) ("Regulation").

1. PROCESSING OF PERSONAL DATA

1.1 I process personal data in the following cases:
1.1.1. you have communicated with me in writing or electronically (e.g. by email) and have provided me with personal data;
1.1.2. you are my client - a natural person or a natural person doing business;
1.1.3. you are an employee or other representative of my client - a legal entity;
1.1.5. you are an entrepreneurial natural person or an employee of a legal person with whom I have entered into a contract as a client for services or goods;
1.1.6. you are an employee or job applicant.

2. CATEGORIES OF PERSONAL DATA

I process the following categories of personal data:
2.1. identification and address data: academic title, first name, surname, date of birth, details of identity documents, permanent home address, delivery or other contact address, place of business, registration number.
2.2. Electronic contact details: telephone, mobile phone, e-mail address, mailbox ID.
2.3 Other personal data required for the performance of the contract: bank account number, payment amounts and payment history, or other similar data.
2.4 Other personal data provided by you in the contract or an addendum or in other documents and negotiations, including subsequent updates.
2.5 For employees and job applicants, I process CVs, data required for payroll and tax processing.
2.6 For persons for whom I process personal data pursuant to Act No. 253/2008 Coll., on Certain Measures against the Legalization of the Proceeds from Crime and the Financing of Terrorism ("AML Act"), I also process a copy of the identity card or other personal data that you provide to me in accordance with the AML Act.

3. LEGAL TITLE AND PURPOSE OF PROCESSING

I process personal data for the following reasons:
3.1. the provision of legal services and the performance of obligations under agreements or other arrangements
3.1.1 I process personal data because it is necessary for entering into and performing a contract with you and exercising the rights agreed in the contract.
3.2 Performance of legal obligations
3.2.1 The legal obligations imposed on me include, in particular, issuing, receiving and archiving tax documents, maintaining employee files, maintaining payroll records, maintaining and archiving attorney files including email communications, contact details and records of services provided, and fulfilling obligations under the AML Act.
3.3 Reaching out to clients through direct marketing, sending invitations and requests for feedback on our events
3.3.1 I process clients' personal data as it is my legitimate interest. If this still bothers you, please let me know as soon as possible.
3.4 Processing of personal data based on your consent
3.4.1 I may also process personal data if you give me your explicit and free consent to do so. You can withdraw this consent at any time.

4. PROCESSORS, RECIPIENTS AND TRANSFER OF PERSONAL DATA

4.1 For the effective provision of services and performance of contracts, I have contracts with other service providers to whom I may transfer your personal data for processing. In particular, the following may process your personal data:
4.1.1. postal service providers;
4.1.2. software and IT service providers;
4.1.3. accounting service providers;
4.1.4. other service providers that I do not currently use.
4.2 For debt recovery purposes, your personal data may be passed to a debt recovery company or other solicitors.
4.3 We only process your personal data in European Union countries. Outside the European Union countries, I might process your personal data only if it is necessary for the provision of legal services.

5. STORAGE PERIOD

5.1 I only process personal data for as long as necessary to fulfil the purpose of the processing or as required by law. The storage period varies depending on the legal title of the processing of personal data:
5.1.1. If the legal title for the processing of personal data is the performance of contractual obligations, I process personal data for the duration of the contractual relationship in the case of the provision of legal services and for a maximum of 10 years after the termination of the contractual relationship, otherwise I process personal data for the period of time imposed by law.
5.1.2. If the legal basis for processing personal data is the performance of my legal obligations, I process personal data for the period of time required by law.
5.1.3. Where the legal basis for processing personal data is our legitimate interest, I process personal data for the duration of the legitimate interest or until you notify me that you do not wish me to process the personal data further.
5.1.4 Where the legal basis for processing personal data is your consent, I process personal data for no longer than the period for which you have given your consent.


6. YOUR RIGHTS

6.1 In particular, you have the following rights in relation to your personal data:
6.1.1. the right of access to personal data - you can contact me at any time to ask if I am processing your personal data and, if so, to request further information about this processing.
6.1.2. Right to rectify or complete personal data - if your personal data changes during the processing or you feel that the data processed by me is incorrect, please do not hesitate to contact me.
6.1.3 Right to request restriction of processing - in the cases referred to in Article 18 of the Regulation, you have the right to request restriction of the processing of your personal data.
6.1.4 Right to erasure of personal data - in the cases referred to in Article 17 of the Regulation, you have the right to request that I erase personal data concerning you without undue delay.
6.1.5 Right to request data transfer - under the conditions set out in Article 20 of the Regulation, you have the right to ask us to transfer your personal data to a third party.
6.1.6 Right to object - where I process your personal data on the basis of our legitimate interest, you have the right to object to such processing at any time.
6.1.7 Right to lodge a complaint - if you are in doubt about my compliance with my obligations in relation to the processing of your personal data, you have the right to lodge a complaint with the Data Protection Authority.

7. CONTACT

7.1 If you wish to contact me to ask us anything about the processing of your personal data or to tell me that you do not wish me to process your personal data, you can use the following contact details:

Mgr. Bc. Michaela Garguláková
Dukelských hrdinů 567/52, 170 00 Prague 7, Czech Republic
E-mail: gargulakova@mglegal.cz

8. OTHER AND FINAL PROVISIONS

8.1 If you refuse to provide the personal data necessary for the above purposes, I may not be able to provide you with the relevant services (e.g. to provide legal advice).
8.2 I do not carry out any personal data processing activities that involve profiling.
8.3 I process personal data by means of software, so there is at least some automated processing.