Legal services Blog Our team Publications Contacts
CS EN DE

Data protection

Privacy Policy

Information on the processing of personal data pursuant to Article 13 of the GDPR.

1. Data controller

The controller of your personal data is Equity Legal s.r.o., ID No. (IČO): 07410441, with its registered seat at Chrudimská 1418/2, 130 00 Praha 3 – Vinohrady, Czech Republic ("the firm" or "we").

You can contact us regarding the processing of your personal data:

2. What personal data we process

We process personal data that you provide to us yourself, in particular through the contact form on our website, by e-mail, by telephone, or in connection with the provision of legal services.

This may in particular include:

  • identification data, in particular your name and surname;
  • contact details, in particular your e-mail address and telephone number;
  • data provided in the contact form, in particular the area of law you selected and the content of your message;
  • any further information you provide to us as part of your enquiry or subsequent communication;
  • where cooperation is established, further identification, contact and case-related data necessary for the provision of legal services;
  • technical data related to the use of the website and the contact form, in particular your IP address, the date and time of the request, and other standard technical operational data.

Given the nature of legal services, the content of communication may in individual cases also include more sensitive information. We process such data only to the extent necessary to handle your enquiry, assess the case, or provide legal services, and in accordance with applicable legal regulations.

3. Purposes of processing

We process your personal data in particular for the purposes of:

  • receiving, handling and responding to your enquiry;
  • communicating with you;
  • assessing whether we can provide legal services;
  • negotiating the conclusion of a contract for the provision of legal services;
  • concluding and performing a contract for the provision of legal services;
  • complying with our legal and professional (Bar Association) obligations;
  • maintaining accounting, tax and other mandatory records;
  • protecting and asserting our rights and legal claims;
  • ensuring the proper, secure and reliable operation of our website and contact form.

4. Legal basis for processing

Depending on the specific situation, we process your personal data in particular on the basis of:

  • the performance of measures taken at your request prior to entering into a contract, and the performance of the contract, pursuant to Art. 6(1)(b) GDPR, in particular where you contact us with a request for legal services or where we are already providing legal services to you;
  • compliance with legal obligations pursuant to Art. 6(1)(c) GDPR, in particular obligations arising from legal regulations governing the practice of law, accounting, taxes, or measures against the legalisation of proceeds of crime;
  • our legitimate interests pursuant to Art. 6(1)(f) GDPR, in particular the interest in handling routine enquiries, protecting and asserting our legal claims, and ensuring the security and proper operation of the website.

If, in a specific case, processing were to be based on your consent, you will be informed of this separately in advance, and you will be able to withdraw your consent at any time.

5. Retention period

Personal data provided through the contact form or in the course of routine communication is retained only for the time necessary to handle your enquiry and any subsequent communication, generally for no longer than 12 months from the last communication, unless a contractual relationship arises in connection with your enquiry or another reason exists for its further retention.

If a contract for the provision of legal services is concluded, we retain personal data for the duration of the provision of legal services and thereafter for the period required by applicable legal regulations and the professional rules of the Czech Bar Association, or for the period necessary to protect and assert our legal claims.

Accounting and tax documents are retained for the period stipulated by applicable legal regulations.

Technical operational data is retained only for the time necessary to ensure the security and proper operation of the website.

6. Recipients of personal data

Your personal data may, to the necessary extent, be accessed in particular by:

  • our attorneys, trainee attorneys, employees and other cooperating persons bound by an obligation of confidentiality;
  • providers of IT, hosting, e-mail and other technical services;
  • the provider of the contact form's technical solution, Web3Forms (Web3Creative);
  • accountants, tax advisors, auditors and other professional advisors, where necessary;
  • public authorities, courts or other persons, where we are required by law to provide personal data to them, or where doing so is necessary to protect our rights.

We do not sell personal data to third parties and do not use it for unrelated marketing purposes.

7. Contact form and the Web3Forms service

For the technical processing and delivery of messages sent via the contact form, we use the Web3Forms service, operated by Web3Creative.

When the contact form is submitted, the data entered in the form is transmitted to Web3Forms for the purpose of processing and delivering it to the firm.

According to the provider's current terms, Web3Forms may, in connection with providing its service, process in particular:

  • data entered in the individual form fields;
  • the content of the message;
  • the sender's contact details;
  • the IP address, time of submission and other technical metadata.

Web3Forms acts as a personal data processor with respect to data from the contact form.

According to the provider's currently published terms, data from form submissions may be retained for the period set out in the settings and terms of the relevant service, but no longer than the period stated by the provider in its current terms.

8. Transfers of personal data outside the EU/EEA

In connection with the use of the Web3Forms service, personal data may be processed and transferred outside the European Union and the European Economic Area, in particular to the United States of America and India.

The operator of Web3Forms states that, when transferring personal data from the European Economic Area to third countries, it uses appropriate legal mechanisms, including standard contractual clauses approved by the European Commission (SCCs).

In providing its service, Web3Forms also uses other technical infrastructure providers and sub-processors.

Other than in connection with the use of such technical services, we do not routinely transfer personal data outside the EU/EEA.

9. Obligation to provide personal data

Providing personal data through the contact form is voluntary.

However, we need the data marked as mandatory in the form in order to accept your enquiry, identify its basic subject matter and respond to it. Without providing this data, it may not be possible to submit the form or to handle your enquiry.

The telephone number is optional, unless expressly stated otherwise in the form.

If you enter into a contract for the provision of legal services with us, providing certain personal data may be necessary for the conclusion or performance of the contract, or for compliance with our legal obligations.

10. Your rights

In connection with the processing of your personal data, subject to the conditions laid down by applicable law, you have in particular the right to:

  • request access to your personal data pursuant to Art. 15 GDPR;
  • request the rectification of inaccurate or the completion of incomplete personal data pursuant to Art. 16 GDPR;
  • request the erasure of personal data pursuant to Art. 17 GDPR;
  • request the restriction of processing pursuant to Art. 18 GDPR;
  • data portability pursuant to Art. 20 GDPR, where the statutory conditions are met;
  • object to processing based on our legitimate interest pursuant to Art. 21 GDPR;
  • withdraw your consent, where certain processing is based on your consent, without affecting the lawfulness of processing carried out before its withdrawal.

You can exercise your rights using the contact details listed in Section 1.

If you believe that the processing of your personal data infringes applicable law, you also have the right to lodge a complaint with the supervisory authority:

Office for Personal Data Protection (Úřad pro ochranu osobních údajů)
Pplk. Sochora 27
170 00 Praha 7
uoou.gov.cz

11. Automated decision-making

We do not carry out automated individual decision-making or profiling that would have legal or similarly significant effects on you as part of our processing of personal data.

12. Cookies and technical data

Our website currently does not use analytical or marketing cookies.

Only technically necessary cookies and similar technical means may be used, where needed for the correct and secure functioning of the website.

When visiting the website, standard technical operational data may also be automatically processed, in particular the IP address, device or browser type, the time of the request, and information necessary to ensure the security and proper functioning of the website.

13. Changes to this policy

We may update this policy in the event of changes to the way we process personal data, the technologies used, or applicable legal regulations.

The current version is always published on this website.

Last updated: September 2026