Logo of the Surmanová law office Mgr. Barbora Surmanováattorney-at-law | Znojmo ← Back to the home page

Personal data processing and cookies policy

As at 22 August 2026
This English text is a translation provided for your convenience. The Czech version is binding.

1. Who is the controller of your data

The controller of personal data is Mgr. Barbora Surmanová, attorney-at-law, entered in the register of attorneys of the Czech Bar Association under No. 13930, company ID 72524243, with her registered office at Rooseveltova 1011/39, 669 02 Znojmo, Czech Republic.

Contact: e‑mail ak@surman.cz, telephone +420 776 253 056, Czech data box mgd65fi.

2. What data I process and why

  1. Enquiries from the contact form, by e‑mail or by telephone (name, contact detail, content of the message): I process them in order to deal with your enquiry and to negotiate the provision of legal services, that is, in order to take steps prior to entering into a contract under Article 6(1)(b) of Regulation (EU) 2016/679 (GDPR).
  2. Client data in the provision of legal services: I process them for the performance of the contract for the provision of legal services (Article 6(1)(b) GDPR) and for compliance with the legal obligations of an attorney (Article 6(1)(c) GDPR), in particular under Act No. 85/1996 Coll., on the Legal Profession.
  3. Data required under anti-money-laundering legislation (typically in escrow matters): I process identification data in order to comply with the obligations under Act No. 253/2008 Coll. (the AML Act), Article 6(1)(c) GDPR.
  4. Legitimate interests (Article 6(1)(f) GDPR): the establishment, exercise and defence of legal claims and ensuring the security of this website.

3. Duty of confidentiality of the attorney

As an attorney-at-law I am bound by the duty of confidentiality under Section 21 of Act No. 85/1996 Coll., on the Legal Profession. The duty of confidentiality covers all facts of which I become aware in connection with the provision of legal services, and it continues after the representation has ended.

4. How long I keep the data

  1. Enquiries that do not lead to us working together: no longer than 1 year after they have been dealt with.
  2. The client file and related documents: for the duration of the representation and thereafter for the period laid down by legislation and by the professional rules of the Bar.
  3. Data processed under the AML Act: 10 years (Section 16 of Act No. 253/2008 Coll.).
  4. Accounting and tax records: for the period laid down by tax and accounting legislation.

5. Who may be given access to the data

I do not sell the data to anyone and I do not pass them on for marketing. Access may be given only to: (a) providers of IT services and of the hosting of this website, acting as processors, (b) public authorities where the law so provides, (c) persons taking part in the provision of the legal service (for example a court interpreter), in every case only to the extent necessary and subject to the duty of confidentiality. I do not transfer the data to third countries outside the EU/EEA.

6. Your rights

Under Articles 15 to 21 of the GDPR you have the right of access to your data, to their rectification or erasure, to restriction of processing, to data portability and the right to object to processing based on a legitimate interest. You may exercise these rights using the contact details given in point 1. The scope of some rights may be limited by the statutory duty of confidentiality of an attorney.

You also have the right to lodge a complaint with the supervisory authority: Úřad pro ochranu osobních údajů (the Office for Personal Data Protection), Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.

7. Cookies and similar technologies

This website uses no cookies and no other tracking technologies, and it stores nothing in your browser. Nor does it load any third-party services (analytics, advertising systems or social plugins); the fonts and all files are stored directly on our server in the EU.

Should optional technologies (for example traffic measurement) be deployed in the future, this will happen solely with your prior consent given in a cookie banner, and this policy will be updated.

8. Final provisions

I may update this policy from time to time; the version published on this page is always the decisive one. I will be glad to answer any questions about the processing of personal data at the contact details given above.