Privacy policy of Advokátska kancelária LYSO&PARTNERS, spol. s r.o.
Version: 2.0 | Effective date: 1 July 2018
Part 1: Introductory provisions
1.1. Identity and contact details of the controller
Protecting the personal data of our clients and other individuals is a key priority for us. This privacy policy (hereinafter referred to as the "Policy") explains how we process personal data when providing our services. The controller determining the purposes and means of processing your personal data is:
Name: Advokátska kancelária LYSO&PARTNERS, spol. s r.o.
Registered office: Nám. Sv. Michala 30/27, 920 01 Hlohovec, Slovak Republic
Company ID (IČO): 36862347
Registration: Commercial Register of the District Court Trnava, Section: Sro, Insert number: 23307/T 1
If you have any questions regarding the processing of your personal data or exercising your rights, you can contact us at:
Email: ak@lyso.sk
Phone: +421 905 978 956
Postal address: Advokátska kancelária LYSO&PARTNERS, spol. s r.o., Nám. Sv. Michala 30/27, 920 01 Hlohovec, Slovak Republic
1.2. Our commitment and applicable legal framework
We are committed to processing personal data lawfully, fairly and transparently. Our activities are governed by a comprehensive legal framework ensuring the highest standards of protection for your rights:
Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as "GDPR").
Act No. 18/2018 Coll. on the protection of personal data (hereinafter referred to as the "Data Protection Act").
Act No. 586/2003 Coll. on Advocacy (hereinafter referred to as the "Advocacy Act"), which regulates our key obligation of confidentiality.
Code of Conduct adopted by the Slovak Bar Association (hereinafter referred to as the "SBA Code"), available at www.sak.sk/gdpr. This code is binding for us and balances the rights of data subjects with the advocate's duty to maintain confidentiality and protect the legitimate interests of clients.
1.3. Principles of personal data processing
We strictly adhere to the fundamental principles of personal data processing set out in Article 5 of the GDPR for every processing activity:
Lawfulness, fairness and transparency
Purpose limitation
Data minimisation
Accuracy
Storage limitation
Integrity and confidentiality
Accountability
Part 2: Overview of processing activities
Processing personal data is an essential part of our activities to properly provide legal services, fulfil legal and professional obligations, and protect the legitimate interests of ourselves, our clients, and third parties.
Purpose of processing
Legal basis (GDPR)
Relevant key legislation
Provision of advocacy and legal services
Performance of contract (Art. 6(1)(b)), Compliance with legal obligation (Art. 6(1)(c)), Defence of legal claims (Art. 9(2)(f))
Advocacy Act, Civil and Commercial Codes, procedural rules (Civil Procedure Code, Criminal Procedure Code, etc.)
Fulfilment of statutory obligations (e.g. AML, accounting)
Compliance with legal obligation (Art. 6(1)(c))
Anti-Money Laundering Act, Accounting Act, tax laws
Personnel and payroll administration
Performance of contract (Art. 6(1)(b)), Compliance with legal obligation (Art. 6(1)(c))
Labour Code, Social Insurance Act, Health Insurance Act
Protection of legitimate interests (e.g. security)
Legitimate interest (Art. 6(1)(f))
Advocacy Act, GDPR
Marketing communication
Consent (Art. 6(1)(a)), Legitimate interest (Art. 6(1)(f))
Electronic Communications Act, Advertising Act
Applicant records
Consent (Art. 6(1)(a))
Labour Code
Part 3: Recipients and transfer of personal data
3.1. Categories of recipients
We disclose personal data to other entities only to the necessary extent and always under the recipient's confidentiality obligation. Depending on the nature of the case, your personal data may be provided to:
Court, law enforcement authorities, and other public authorities,
Opposing parties and their legal representatives,
Experts, interpreters, notaries or court executors,
Slovak Bar Association (e.g. in disciplinary proceedings).
3.2. Processors
In our operations, we use trusted partners (processors) who process personal data on our behalf. We ensure they provide adequate safeguards for protecting your data in accordance with the GDPR. Our processors mainly include:
Providers of accounting and tax services,
Providers of IT services and software,
Providers of web hosting and email services (Websupport s.r.o.).
3.3. Transfer of data to third countries
We do not normally transfer your personal data across borders to countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein).
Part 4: Retention period of personal data
We retain personal data only as long as necessary for the purposes for which they are processed. Advocates are subject to specific professional regulations that define minimum retention periods:
Client file: The retention period is 10 years starting from the date all conditions for archiving the file are met.
Accounting documents: 10 years following the year to which they relate.
Documents with permanent archival value: Some documents cannot be destroyed at all (e.g. protocols of client files or files containing original documents provided by clients).
Part 5: Rights of the data subject
5.1. Your rights under the GDPR
The GDPR grants you several rights as a data subject. However, please note that exercising some of these rights is significantly limited by our legal obligation to maintain confidentiality in the context of providing legal services.
Right of access (Article 15 GDPR): You have the right to obtain confirmation whether we process your personal data.
Limitation: This right is limited by the advocate's confidentiality obligation under the Advocacy Act. We cannot provide information if it could breach this obligation.
Right to rectification (Article 16 GDPR): You have the right to have inaccurate personal data corrected.
Right to erasure (Article 17 GDPR): You have the right to have your personal data deleted if one of the conditions in the GDPR is met.
Limitation: This right does not apply if processing is necessary for compliance with a legal obligation (e.g. archiving files) or for the defence of legal claims.
Right to restriction of processing (Article 18 GDPR): You have the right to restrict processing in legally defined cases.
Right to data portability (Article 20 GDPR): This right generally does not apply to the content of client files and is also limited by the duty of confidentiality.
Right to object (Article 21 GDPR): If we process data to defend the legal claims of our client, this involves demonstrating overriding legitimate grounds, which outweigh your interests. In such cases, objections cannot be accommodated.
Right to lodge a complaint (Article 77 GDPR): If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27.
You can exercise your rights by email at info@lyso.sk or by post to our registered office address.
Part 6: Data processing on the website
6.1. Cookies
Our website www.lyso.sk uses cookies — small text files stored on your device. We use essential (functional) cookies to ensure basic site functionality and analytical cookies to measure traffic. Analytical cookies are used only with your consent, which we request via the cookie banner.
6.2. Google Analytics
We use Google Analytics to analyse website traffic, which collects anonymised data on your use of our site. Further details on data processing by Google can be found in its privacy policy.
6.3. Websupport platform provider
Our website is hosted on servers operated by Websupport s.r.o., which acts as a processor in this relationship. Further information about how Websupport processes data is available in its privacy policy.
Part 7: Final provisions
We reserve the right to modify and update this Policy at any time. The current version will always be published on our website. In case of significant changes, we will notify you appropriately.
Version: 2.0 | Effective date: 1 July 2018