Privacy Policy

This page explains how we process the personal data of website visitors, people who contact us, clients and other persons we deal with in practising law. We do so under Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

Who processes your data

Skalka & Grepl & Černý Law Firm is an association of attorneys under Section 14 of Act No. 85/1996 Coll., on the Legal Profession. The joint controllers of personal data (Art. 26 GDPR) are the attorneys:

• JUDr. Ondřej Skalka, Company ID 71333631, Czech Bar Association Reg. No. 10585
• Mgr. Tomáš Grepl, Company ID 71463020, Czech Bar Association Reg. No. 11409
• Mgr. David Černý, Company ID 71469095, Czech Bar Association Reg. No. 12055

They practise law under a common name, in a shared office and with shared technical means. Under their mutual arrangement, questions and requests concerning personal data are handled by the firm at the contact below. You may also exercise your rights against any of them.

Contact: Law Firm Skalka & Grepl & Černý, Horní nám. 365/7, 779 00 Olomouc,e-mail advokati@aksgc.cz, tel. +420 585 221 111.

No data protection officer has been appointed.

Visiting the website

The website is operated by WEDOS Internet, a.s., Hluboká nad Vltavou, Czech Republic, including its protection and delivery network. To deliver the pages and protect against attacks, technical data are processed on each visit: IP address, time, requested page and browser type. The legal basis is our legitimate interest in the secure operation of the website (Art. 6(1)(f) GDPR). We do not keep access logs ourselves. The hosting provider processes the technical data only to run and secure the service.

Fonts are loaded from our own server. The map links (Mapy.com, Google Maps) take you to services of other operators only when you click them. Any further processing is then governed by their terms.

Enquiries via the form or by e-mail

We process the data you give us: your e-mail and the content of your message (needed to answer your enquiry) and, optionally, your name and phone number. We use them to reply and to discuss providing legal services. Where this concerns steps towards a contract at your request, the legal basis is Art. 6(1)(b) GDPR; otherwise it is our legitimate interest in answering your enquiry (Art. 6(1)(f) GDPR). Form messages are delivered by e-mail to the firm's mailbox; the website does not store them.

Please do not include details of your health or the circumstances of a criminal matter in your first enquiry. We will discuss them once we have agreed to represent you.

If you do not become our client, we delete your message within 1 year at the latest.

To protect the form against floods of unsolicited messages, the server keeps a pseudonymised (hashed) fingerprint of your IP address and the sending times for 1 hour (legitimate interest, Art. 6(1)(f) GDPR).

If we represent you

We process identification and contact data, data about your matter, payment data and other data needed to provide the legal service. The legal basis is the performance of a contract (Art. 6(1)(b) GDPR) and compliance with legal obligations under the Legal Profession Act and other laws (Art. 6(1)(c) GDPR), as well as our legitimate interest in protecting our own claims and preventing conflicts of interest (Art. 6(1)(f) GDPR).

The nature of a matter often requires processing data relating to criminal offences or special categories of data, such as health data. We process them only to the extent necessary for the establishment, exercise or defence of legal claims and for practising law (Art. 9(2)(f) and Art. 10 GDPR in conjunction with the Legal Profession Act).

For services covered by Act No. 253/2008 Coll., on certain measures against the legitimisation of proceeds of crime and financing of terrorism, we are required to identify you and carry out due diligence, including making a copy of your identity document. Providing these data is a statutory requirement. Without them we cannot provide these services.

Retention periods:

• Case file: 5 years after the legal services end (professional rules of the Czech Bar Association). Longer only if another law, pending proceedings or the protection of our claims require it.
• Data under Act No. 253/2008 Coll.: 10 years after the business relationship ends or the transaction is carried out.
• Accounting and tax records: for the period set by accounting and tax laws, usually 10 years.
• Conflict-of-interest data (client's name, opposing party, brief subject of the matter, end date): 15 years after the matter ends, even if the case file has already been destroyed. This ensures we never act against a former client in the same or a related matter.

Opposing parties and other persons

In providing legal services we also process data of persons who are not our clients: opposing parties, witnesses, injured parties and other participants. We obtain them from clients, public registers and case files. We process them only to the extent necessary to provide the service, usually on the basis of the client's legitimate interest in asserting or defending their rights (Art. 6(1)(f) GDPR). We do not inform these persons individually, because the data are subject to attorney-client confidentiality (Art. 14(5)(d) GDPR, Section 21 of the Legal Profession Act).

Who receives your data

All attorneys and staff of the firm are bound by confidentiality under Section 21 of the Legal Profession Act. We disclose data only to:

• suppliers who, under a contract and a duty of confidentiality, provide our hosting and e-mail (WEDOS Internet, a.s.), IT administration and bookkeeping,
• the bank that holds our attorney escrow account,
• our professional liability insurer, if a claim for damages is made against us,
• courts, public authorities and the Czech Bar Association, where the law requires it or the matter demands it,
• other persons only on the client's instructions or where necessary to handle the matter.

We never sell data and do not transfer it outside the European Economic Area.

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing and to data portability. We handle requests without undue delay, within 1 month at the latest. To avoid disclosing data to the wrong person, we may ask you to verify your identity. We make no automated decisions about your data.

These rights may be limited to the extent necessary to comply with attorney-client confidentiality and statutory retention periods for records, and to protect clients' rights (Art. 17(3)(b) and (e) and Art. 23 GDPR).

Right to object

You may object at any time, on grounds relating to your particular situation, to processing based on legitimate interest (Art. 6(1)(f) GDPR). Just write to us at advokati@aksgc.cz.

Complaints

You may lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Prague 7, www.uoou.gov.cz.

Effective from 8 November 2026.