Privacy Policy
Last updated: 1 January 2026
1. Data Controller
The data controller is JUDr. Tomáš Fara, attorney-at-law, ID No.: 71447881, with registered office at Táborská 411/34, 140 00 Praha 4 — Nusle, Czech Republic (hereinafter the "controller" or the "law firm").
Contact: info@advokatfara.com, WhatsApp: +420 739 191 555.
2. Legal Basis for Processing
We process personal data on the following legal grounds pursuant to Article 6(1) of Regulation (EU) 2016/679 (GDPR):
- Performance of a contract (Art. 6(1)(b)) — processing necessary for the provision of legal services
- Legal obligation (Art. 6(1)(c)) — obligations under the Advocacy Act, AML legislation
- Legitimate interest (Art. 6(1)(f)) — protection of the lawyer's rights, debt recovery
- Consent (Art. 6(1)(a)) — contact form and marketing communications
3. Purposes of Processing
- Provision of legal services and performance of contracts with clients
- Communication with prospective clients (contact form, email, telephone)
- Fulfilment of statutory obligations (archiving, accounting, AML)
- Protection of the controller's legitimate interests (records, insurance, defence of claims)
4. Categories of Data Processed
- Identification data: name, surname, date of birth, address, ID number
- Contact data: email, telephone, correspondence address
- Contact form data: name, email, telephone, case description
- Data relating to the legal matter: documents, correspondence
5. Retention Periods
- Client files: 5 years from termination of legal services
- Accounting documents: 10 years (Accounting Act)
- Contact form submissions: 1 year from submission, unless a client relationship is established
- Cookies and analytics: per cookie consent settings
6. Recipients of Personal Data
Personal data may be disclosed only to the extent necessary: to public authorities (courts, police, tax authorities), to processors under a processing agreement (hosting, email services), and to insurers under professional liability insurance.
The lawyer is bound by the duty of confidentiality pursuant to § 21 of Act No. 85/1996 Coll., on the Legal Profession.
7. Data Subject Rights
Under the GDPR, you have the right to:
- Access your personal data (Art. 15 GDPR)
- Rectification of inaccurate data (Art. 16 GDPR)
- Erasure — "right to be forgotten" (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Object to processing (Art. 21 GDPR)
- Withdraw consent (Art. 7(3) GDPR)
- Lodge a complaint with the Office for Personal Data Protection (www.uoou.cz)
8. Contact for Exercising Rights
You may exercise your rights in writing at Táborská 411/34, 140 00 Praha 4, or by email at info@advokatfara.com. We will respond without undue delay, within 30 days at the latest.