Who processes your personal data and what are the contact details of our company?

The company, bpv Braun Partners s.r.o., ID No.: 27948994, with registered office at Prague 1, Ovocný trh 1096/8, Postal Code 11000, registered in the Commercial Register maintained by the Municipal Court in Prague under file No. C 128700, tel.: +420 224 490 000, e-mail: info@bpv-bp.com (hereinafter referred to as the “Company”), hereby, in its capacity as controller in accordance with Regulation (EU) No. 2016/679 on the protection of natural persons with regard to the processing of personal data, (hereinafter referred to as ” the Regulation” or “GDPR”), informs natural persons about the processing of their personal data in connection with the practice of law.

At the same time, the Company hereby informs visitors to the website www.bpv-bp.com (hereinafter referred to as the “Website”) about the storage of files generally known as cookies on their terminal devices (e.g. computer) in the event of a visit to the Website.

The following information does not concern the processing of data of legal entities, including the name, legal form and contact details of the legal entity, which are not personal data within the meaning of the GDPR.

Which of your data do we process?

Our Company processes the following categories of personal data:

(a) Identification and contact data;

b) Financial data (e.g. billing data, payment data);

c) Data contained in the lawyer’s file;

d) Data acquired through correspondence (whether in person, in writing, by telephone or otherwise);

e) Contact details required for registration at an event organised by the Company (e.g. business breakfast, client party) and details of (non-)attendance at a specific event organised by the Company;

f) Recordings (photographs and/or video recordings) may be made at events organised by the Company;

g) If you are our client or have consented to receive commercial communications (e.g. newsletters and invitations to Company events), details of your wishes and preferences for receiving such communications;

h) An indication of the language version of the Website you have chosen.

Our Company intends to process up-to-date and accurate personal data. If there have been any changes regarding your personal data, please inform us and provide us with your current data. You can contact us either via email at info@bpv-bp.com or via post at our registered office

Are you obligated to provide personal data?

Providing the data listed under a) to d) in the section “Which of your data do we process?” is mandatory, as this data is necessary for the performance of contractual obligations and/or for the performance of obligations imposed on our Company by law in connection with the practice of law. Without the processing of this data, legal advice cannot be provided, so the provision of this data is a contractual and legal requirement of the Company.

The data listed under e) in the section “Which of your data do we process?” is mandatory if you register for an event organised by the Company, as without it, it is not possible to ensure your attendance at the event.

Pictures at any event of the Company are taken to capture the atmosphere of the event and not to directly capture individual participants. Targeted image recordings of individuals are only taken if you request the photographer/ videographer to do so or actively provide assistance for the image recording.

The processing of the data listed under (g) of the section “Which of your data do we process?” is voluntary.

The processing of the data listed under (h) in the section “Which of your data do we process?” is necessary to ensure the operation and basic functions of the Website, specifically to display the selected language version of the Website.

Where do we get your personal data from?

The above mentioned personal data processed by the Company comes from the following sources:

(a) Data provided to the Company by our client, its representative or you yourself, e.g. when concluding a contract with the Company or during its implementation;

b) From public sources, lists and registers, such as the Commercial Register, Trade Register, Insolvency Register;

c) From a file kept by a public authority in the context of a procedure (e.g. judicial, administrative, criminal);

d) The data was obtained with the help of files called cookies (for more information on cookies, see the section “What are cookies?”).

For what purpose do we process your personal data?

Our Company processes your personal data for the following reasons:

(a) The performance of a contract concluded with you or with our client,

b) Maintaining and developing our relationship with you;

c) The performance of our obligations under the law in connection with the practice of law;

(d) For direct marketing purposes, in particular in the form of sending commercial communications (e.g. newsletters and invitations to Company events), either (i) on the basis of our legitimate interest, if you are our client and have not objected to such processing to date or (ii) on the basis of your consent, if you are not our client;

(e) To promote our services externally (this applies only to clients and their employees and associates with whom this has been individually agreed);

f) To ensure the operation and basic functioning of the Website, namely the display of the selected language version of the Website, for more information on cookies please see below in the section “What are cookies?”;

g) Handling your request or enquiry.

On what legal basis do we process your personal data?

We process your data because:

• The processing is necessary for the performance of a contract of which you are a party (e.g. a contract for legal advice);
• The processing is necessary for the performance of a legal obligation to which our Company, as controller, is required to in the exercise of its legal profession (e.g. the maintenance of a lawyer’s file);
• The processing is necessary for the purposes of the legitimate interests of our Company, consisting for example in:

a) the performance of a contract concluded with our client;

b) dealing with your enquiries and/or requests,

c) supporting our business activities, in particular by sending electronic commercial communications (e.g. newsletters and invitations) to our clients who have
not objected to this processing;

d) ensuring the operation of the Website, including the possible processing of personal data by means of technical cookies (for more information on cookies, see the
section “What are cookies?”);
e) establishing, exercising or defending (including the enforcement of) any legal claims against the Company;

f) records of our Company’s events;

• You have given your consent to the processing, for example, to the electronic sending of commercial communications (e.g. newsletters and invitations to our Company’s events) if you are not our client.

How is your personal data processed?

Your personal data is/will be processed automatically and by our employees or our contractors. However, our Company does not use your personal data for decisions based purely on automated processing, including profiling in accordance with Article 22(2) of the Regulation.

To whom can your personal data be made accessible?

In justified cases and to the extent necessary, your personal data may be made accessible to

•  IT service providers or other contractors used by our Company to perform advocacy work;
•  A postal service provider or courier to the extent of name and address if you are the addressee of the parcel;
• (on an ongoing basis) Cooperating solicitors who are involved in providing legal advice to the client;
• Translators and translation agencies;
• Marketing consultants and marketing agencies – if it has been individually agreed with the client that the Company may use the client’s identification data for its marketing  purposes;
• Experts and expert institutes;
• Entities and/or authorities specified by law in cases where the disclosure of such data to the Company is required by law (e.g. on certain measures against the laundering of money and terrorist financing), or to other entities in cases where it is necessary to protect the legitimate interests of the Company, if the transfer is in accordance with our duty of confidentiality;
• if it is necessary for the implementation of legal advice for the client and if the transfer is in accordance with our duty of confidentiality, our Company is entitled to transfer personal data to the extent necessary abroad to a cooperating lawyer/law firm, in particular in the context of cooperation between law firms that form the bpv Legal alliance. Within the framework of this cooperation, personal data may be transferred exclusively within the European Union, in particular to Belgium, Austria, Slovakia, Hungary and Romania;
• If it is agreed with you, our Company may transfer your contact and identification data to rating agencies (e.g. Chambers, Legal 500) in order to provide references about our Company and its cooperating lawyers;
• If you are a client of ours and it has been individually agreed with you, our Company may disclose your identifying information in its promotional material.

Our Company does not intend to transfer your personal data to a third country (a country outside the EU) or an international organisation. Our Company will also never, under any circumstances, disclose your personal data to other entities for further commercial use!

For how long will we process your data?

We will only ever process your personal data for a strictly necessary period of time.

Processing for the necessary period of time means:

(a) For the duration of a contractual relationship with you or our client;

b) For the period specified by the law applicable to the practice of law;

c) For the period specified by other legislation;

d) Processing after the termination of the contractual relationship between our Company and you or our client for the duration of any limitation periods of any potential claims of our Company, you as an individual, other data subjects concerned and/or our client;

e) For the time necessary to process your request and subsequently for the duration of the limitation period of any related claim.

We will also retain your personal data for the duration of any litigation for which it is relevant.

If you are a client of ours, the processing of your personal data for direct marketing purposes carried out on the basis of our Company’s legitimate interest will be carried out for the duration of the provision of legal advice by our Company and thereafter for a period of 3 years, but no longer than the time you object to such processing.

If we process your personal data for direct marketing purposes on the basis of your consent, we will carry out this processing for the period specified in your consent and, if the period is not specified in the consent, then for a period of 3 years from the date of consent, but at the latest until you withdraw that consent if you do so before the expiry of the period for which you have given your consent.

We keep the personal data processed by means of cookies for as long as each cookie is valid (for more information on cookies, see the section “What are cookies?”).

What rights do you have in relation to the processing of your personal data?

Under the conditions set out in the Regulation, you may exercise the following rights in relation to the processing of your personal data:

(a) RIGHT TO ACCESS – the right to access your personal data and to obtain a copy of the personal data processed (unless the rights and freedoms of others are adversely affected);

b) RIGHT TO CORRECTION – the right to have inaccurate personal data relating to you corrected. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by providing an additional declaration;

c) RIGHT TO ERASE – the right to have your personal data erased if any of the following situations occur:

(i) The personal data is no longer necessary for the purposes for which it was collected or otherwise processed;

(ii) You have withdrawn the consent on the basis of which your personal data was processed and there is no further legal basis for processing it;

(iii) You have objected to the processing of your personal data and there are no overriding legitimate grounds for such processing; or you have objected to the processing of your personal data for direct marketing purposes;

(iv)Your personal data has been unlawfully processed;

(v) Your personal data must be erased to comply with a legal obligation under European Union or Member State law to which our Company is subject;

(vi) Your personal data has been collected in connection with the offering of information society services;

d) RIGHT TO LIMIT PROCESSING – the right to request that our Company restrict the processing of your personal data if:

(i) You dispute the accuracy of your personal data, for such time as is necessary to enable our Company to verify the accuracy of such personal data;

(ii) The processing is unlawful and you refuse to erase your personal data and request instead that we restrict its use;

(iii) Our Company no longer needs your personal data for the stated purposes of the processing but you require it for the establishment, exercise or defence of legal claims;

(iv) You have objected to the processing pursuant to Article 21(1) of the Regulation, pending verification that the Company’s legitimate grounds outweigh your legitimate grounds;

e) RIGHT TO TRANSFERABILITY – the right to transfer your personal data processed on the basis of consent or contract and also by automated means;

f) RIGHT TO OBJECT – the right to object free of charge to processing carried out on the basis of the legitimate interest of the Company, in particular to direct marketing carried out on the basis of the legitimate interest of the Company. You can send your objection either by email to info@bpv-bp.com or by post to the address of our registered office. In the case of electronic commercial communications sent on the basis of our legitimate interest, you may also object by clicking on the relevant link in the commercial communication sent;

(g) RIGHT TO BE INFORMED OF A HIGH-RISK BREACH OF SECURITY – the right to be informed if there has been a breach of security of your personal data where it is likely to result in a high risk to your rights and freedoms; and

h) THE RIGHT TO WITHDRAW CONSENT YOU HAVE ALREADY GIVEN – you may withdraw your consent you have already given at any time with future effect by email to info@bpv-bp.com or by post by letter sent to our registered office address. You may also withdraw your consent to receive electronic commercial communications by clicking on the relevant link in the commercial communication sent;

i) RIGHT NOT TO BE SUBJECT TO A DECISION BASED SOLELY ON AUTOMATED PROCESSING – the right not to be subject to a decision based solely on automated processing, including profiling, which has legal effects on you or significantly affects you in a similar way;

j) RIGHT TO COMPLAINT – the right to lodge a complaint if you believe that the processing of your personal data has violated or is violating the Regulation, whereby you may lodge a complaint with the supervisory authority, which in the Czech Republic is the Office for Personal Data Protection, based in: Pplk. Sochor 27, 170 00 Prague 7, website: www.uoou.cz

In order to exercise your rights under the Regulation or in case of any questions or uncertainties regarding the handling of your personal data, you can contact our Company in writing at its registered office or by e-mail at info@bpv-bp.com. At the same time, we would like to inform you that our Company has not appointed a Data Protection Officer.

What are cookies?

Cookies are small text data files that your browser saves and which are used to make the presentation of our Website more user-friendly, efficient and secure.

Our Website www.bpv-bp.com only uses so-called technical cookies, which are strictly necessary to ensure its operation and basic functions.

It is not necessary to obtain the consent of the visitor to the website to store technical cookies.

In the following overview you will find which cookies are and/or may be used on the Website:

Cookie name	Cookie type	Provider	Validity	Purpose
pll_language   cookieyes-consent	technical   technical	Company   Company	1 year   1 year	It is used to remember your chosen language version of the Website. It is used to remember to close the bar and not to display it again.

Please note that cookies may be used to process your personal data in accordance with this “Privacy Notice”.

All common browsers offer the option to delete existing cookies or prevent their storage or, conversely, to allow their storage. These operations are usually carried out in your browser settings, the specific procedure depending primarily on your browser and its version. If you do not know how to perform any of these operations, please consult your browser’s help. You can also find information on setting up your specific browser at the addresses below:

 www.microsoft.com for Internet Explorer and Microsoft Edge;

 support.google.com for Google Chrome;

 support.mozilla.org for Mozilla Firefox;

 help.opera.com for the Opera browser;

 support.apple.com for Safari.

Please note, however, that if you deactivate the installation of all cookies, including technical cookies, it cannot be excluded that you will not be able to use all the functions of our Website or that the Website will not be displayed correctly.