Privacy Notice

This Privacy Notice explains how personal data is processed by JUDr. et Mgr. Barbora Potůčková, Ph.D., attorney-at-law, Czech Bar Association registration number 12245, as the controller of personal data, in connection with the operation of the website, communication with persons interested in legal services and the provision of legal services. The controller may be contacted by telephone at +420 737 286 485 or by e-mail at bpotuckova@akpotuckova.com. Personal data is processed in particular in accordance with Regulation (EU) 2016/679 (GDPR), Act No. 110/2019 Coll., on the Processing of Personal Data, and with regard to the rules governing the legal profession under Act No. 85/1996 Coll., on the Legal Profession, in particular the duty of confidentiality under Section 21 of that Act.

Purpose and scope of processing

Personal data is processed only to the extent necessary for the relevant purpose. This typically includes identification and contact details, the content of a message or materials sent by e-mail or another communication channel, information required to assess a legal matter, data necessary for entering into and performing an agreement on the provision of legal services, and data required by applicable legal regulations. If sensitive data or special categories of personal data are voluntarily provided, they are processed only where necessary for the assessment or assertion of legal claims, compliance with legal obligations or the provision of legal services. No automated decision-making, including profiling, that would produce legal effects concerning data subjects or similarly significantly affect them is carried out. Providing personal data is generally necessary to assess whether legal services can be provided and to enter into and perform an agreement on the provision of legal services; if the necessary data is not provided, it may not be possible to deal with the enquiry or to provide legal services.

Purposes and legal bases of processing

Personal data may be processed in particular for the purpose of responding to an enquiry or a request for consultation, preliminary assessment of whether legal services can be provided, entering into and performing an agreement on the provision of legal services, maintaining client files and records, complying with statutory obligations applicable to attorneys, accounting and tax obligations, protecting rights and legitimate interests, ensuring the security of the website and basic administration of communication.

The legal basis for processing is usually steps taken prior to entering into an agreement or the performance of an agreement, compliance with a legal obligation, legitimate interest in protecting rights and ensuring the proper practice of law, or consent where required in a specific situation. The Czech Bar Association states that contractual performance, compliance with legal obligations and legitimate interests are the most commonly used legal bases in legal practice, while consent is used more exceptionally.

Retention period and recipients

Personal data may be disclosed only to persons involved in the provision of legal services or in ensuring the operation of the law office and the website, such as IT service providers, accountants, tax advisers, translators, experts, cooperating attorneys or public authorities, where required by law or where necessary to protect the client’s rights. Such persons are granted access only to the necessary extent and under conditions ensuring appropriate protection of personal data and confidentiality.

Personal data is retained for the period necessary to fulfil the purpose for which it was obtained and, subsequently, for the period required by applicable legal regulations or for the period necessary to protect rights and legitimate interests. The retention period may vary depending on the nature of the matter, the legal relationship, statutory obligations applicable to attorneys, accounting and tax regulations and any applicable limitation periods.

Attorney-client confidentiality and data security

When personal data is processed, the duty of attorney-client confidentiality is observed and appropriate technical and organisational measures are adopted to protect personal data against unauthorised access, loss, misuse or unauthorised disclosure. The duty of confidentiality is one of the essential characteristics of the legal profession and must be taken into account when fulfilling obligations under the GDPR. The Czech Bar Association has confirmed that the GDPR applies to attorneys, while also taking into account the specific features of the legal profession, in particular the guaranteed duty of confidentiality. Since 1 April 2025, Section 3a of the Act on the Legal Profession also protects, as confidential, information forming the content of communication between an attorney and a client, where this is in the client's interest; the controller takes this protection into account when processing personal data.

Your rights

Subject to the conditions laid down by applicable legal regulations, you have the right to request access to personal data, rectification or erasure of personal data, restriction of processing, data portability, to object to processing based on legitimate interests and to lodge a complaint with the Office for Personal Data Protection. Article 13 of the GDPR provides that, when personal data is collected, the data subject must be informed, among other things, of the purposes and legal basis of processing, the recipients of the data, the storage period and their rights. Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal. In certain cases, these rights may be limited by statutory obligations of an attorney, the protection of client rights or the duty of attorney-client confidentiality.

Questions concerning the processing of personal data or the exercise of data protection rights may be sent to bpotuckova@akpotuckova.com or discussed by telephone at +420 737 286 485. The supervisory authority is the Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, Czech Republic.

Cookies and technical website data

The website processes technical data needed for its operation and content delivery. No analytics tools or advertising pixels have been added to the website. Details of temporary storage, hosting and external services are provided in the cookie information.

Cookies and technical website data

This Privacy Notice may be updated from time to time, in particular if the technical tools used, the scope of services provided or applicable legal regulations change.