Legal services. JUDr. Zuzana Skýpalová, attorney, with registered office at: Ota Holúska 7 C, 841 06 Bratislava – Záhorská Bystrica, Slovak Bar Association registration no.: 6962 (hereinafter referred to as “Attorney”), is an attorney registered in the list of attorneys maintained by the Slovak Bar Association. The Attorney is authorized to provide legal services pursuant to Act No. 586/2003 Coll. on the Legal Profession and on amendments and supplements to Act No. 455/1991 Coll. on Trade Licensing (the Trade Licensing Act), as amended (hereinafter referred to as “Act on the Legal Profession”). SKYLEX and/or SKYLEX ATTORNEYS is a marketing designation – a brand. Legal services pursuant to the Act on the Legal Profession are provided by the Attorney, and possibly by the Attorney’s trainees and/or other attorneys associated with the Attorney, in accordance with the Act on the Legal Profession. In performing their profession, the Attorney acts in accordance with the Act on the Legal Profession and regulations issued by the Slovak Bar Association (hereinafter referred to as “SBA”). Pursuant to the applicable legislation, the Attorney has liability insurance covering damage within the scope of insurance arranged through the Slovak Bar Association.
Personal data protection and compliance with personal data protection regulations
The information below concerning personal data protection and compliance with personal data protection regulations is intended to inform you about how the Attorney processes your personal data and what rights you have in connection with such processing under the applicable legislation. We care about protecting you when processing personal data, and therefore, if you have any questions concerning it, please write to us at skypalova@skylex.sk, or contact us by telephone at +421 910 826 935, or by post at: JUDr. Zuzana Skýpalová, Ota Holúska 7 C, 841 06 Bratislava – Záhorská Bystrica.
When processing personal data, we are guided primarily by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation) (Text with EEA relevance) (hereinafter referred to as “GDPR”), which also governs your rights as a data subject, and by the provisions of Act No. 18/2018 Coll. on Personal Data Protection and on amendments and supplements to certain acts applicable to us (in particular Section 78) (hereinafter referred to as “Personal Data Protection Act“), Act on the Legal Profession), as well as other regulations. We also act in accordance with the Code of Conduct adopted by the SBA, which provides information on the processing of personal data by attorneys (available at: www.sak.sk/gdpr).
Personal data processed by the Attorney and the Attorney’s reason for processing personal data.
The Attorney processes personal data necessary for the performance of the contract for the provision of legal services (hereinafter referred to as “Contract”). This includes your first name, surname, title before and after your name, date of birth, birth number, email address, telephone number, and data concerning the conclusion and performance of the Contract in relation to the legal services provided by the Attorney, which will be processed for the purpose of performing the Contract.
The Attorney processes the data in order to (i) practice law and provide legal services to clients, (ii) fulfil various statutory (in particular tax, accounting, and other), professional and contractual obligations, (iii) protect the legitimate interests of the Attorney, the Attorney’s clients and other persons, (iv) for the Attorney’s marketing purposes – to inform clients and/or potential clients about legal developments, or about the Attorney’s news and successes, competitions announced by the Attorney, the announcement of results of competitions announced by the Attorney, and to invite them to events, seminars and other activities organized by the Attorney and/or in which the Attorney participates.
Purposes and legal basis for processing personal data.
Legal basis: Compliance with a legal obligation under Article 6(1)(c) of the GDPR, and possibly also the establishment, exercise or defence of legal claims under Article 9(2)(f) of the GDPR
Related regulations: Act on the Legal Profession, Attorney’s Code, Act No. 40/1964 Coll. Civil Code, as amended, and Act No. 513/1991 Coll. Commercial Code, as amended
Categories of data subjects and personal data processed: clients, clients’ counterparties and other data subjects whose personal data must necessarily be processed when providing legal services
Scope of personal data processed: personal data to the extent strictly necessary for the provision of legal services.
Processing period: the client register and the electronically maintained client file log as of the end of the calendar year, and its printed form at the Attorney’s office, for an unlimited period; in the case of other data, 10 years from the date on which all conditions for storing the file in the archive under the applicable regulations have been met
Legal basis: Performance of a contract under Article 6(1)(b) of the GDPR, and possibly also compliance with a legal obligation under Article 6(1)(c) of the GDPR
Related regulations: Act No. 215/2016 Coll. on the Register of Public Sector Partners and on amendments and supplements to certain acts, Act No. 305/2013 Coll. on the electronic form of exercise of the powers of public authorities and on amendments and supplements to certain acts (the e-Government Act), Act No. 40/1964 Coll. Civil Code, as amended, and Act No. 513/1991 Coll. Commercial Code, as amended, Act No. 116/1990 Coll. on the lease and sublease of non-residential premises, as amended
Categories of data subjects and personal data processed: data subjects serving on the statutory bodies of companies or cooperatives, shareholders, cooperative members, employees, close persons and other data subjects whose personal data must necessarily be processed when providing services.
Scope of personal data processed: personal data to the extent strictly necessary for the provision of services
Processing period: 10 years from the date on which all conditions for storing the file in the archive under the applicable regulations have been met; data on the beneficial owner for 5 years from the date on which the beneficial owner’s status in the relevant company ceases, unless the data form part of a verification document available on the internet
Legal basis: Compliance with a legal obligation under Article 6(1)(c) of the GDPR, the legitimate interest of attorneys or third parties under Article 6(1)(f) of the GDPR, the public interest under Article 6(1)(e) of the GDPR, or the defence of legal claims under Article 9(2)(f) of the GDPR
Related regulations: Act on the Legal Profession, Attorney’s Code, Act No. 297/2008 Coll. on protection against the legalization of proceeds from criminal activity and protection against the financing of terrorism and on amendments and supplements to certain acts, Act No. 583/2008 Coll. on the prevention of crime and other anti-social activity and on amendments and supplements to certain acts, GDPR
Categories of data subjects and personal data processed: data subjects serving on the statutory bodies of companies or cooperatives, shareholders, cooperative members, employees, close persons and other data subjects whose personal data must necessarily be processed for the relevant processing purpose
Scope of personal data processed: personal data to the extent strictly necessary to fulfil obligations arising from the relevant legislation
Processing period: 10 years from the date on which all conditions for storing the file in the archive under the applicable regulations have been met
Legal basis: The legitimate interest of attorneys or third parties under Article 6(1)(f) of the GDPR
Related regulations: GDPR, Act No. 40/1964 Coll. Civil Code, as amended, and Act No. 513/1991 Coll. Commercial Code, as amended, Act No. 301/2005 Coll. Criminal Procedure Code, as amended, Act No. 300/2005 Coll. Criminal Code, as amended, Act No. 160/2015 Coll. Civil Litigation Code, as amended, Act No. 161/2015 Coll. Civil Non-Contentious Procedure Code, as amended, Act No. 162/2015 Coll. Administrative Judicial Procedure Code, as amended, Act No. 71/1967 Coll. on Administrative Proceedings (Administrative Procedure Code), as amended, Act No. 372/1990 Coll. on Offences, as amended
Categories of data subjects and personal data processed: data subjects recorded in footage from the camera system
Scope of personal data processed: image recording of the data subject
Processing period: 15 days after the recording is made
Legal basis: Art. 89 GDPR
Related regulations: Art. 89 GDPR and the Archives Act
Categories of data subjects and personal data processed: clients, clients’ counterparties and other data subjects whose personal data must necessarily be processed in the provision of legal and other services
Scope of personal data processed: personal data in archival documents
Processing period: 10 years from the date on which all conditions for storing the file in the archive under the applicable regulations have been met
Legal basis: Fulfilment of a legal obligation pursuant to Article 6(1)(c) of the GDPR
Related regulations: Specific laws in the field of accounting and tax administration
Categories of data subjects and personal data processed: employees, cooperating persons, suppliers and customers and their employees, and data of other data subjects arising from tax and accounting documents
Scope of personal data processed: personal data of data subjects in accounting and tax documents
Processing period: 10 years following the year to which they relate
Legal basis: Legitimate interest of the attorneys under Art. 6(1)(f) GDPR
The Attorney’s legitimate interest in this case is to find the most suitable service provider possible for the needs of the Attorney’s office
Categories of data subjects and personal data processed: suppliers and customers and their employees, or other persons communicating on their behalf
Scope of personal data processed: ordinary personal data of data subjects (in particular identification and contact details)
Processing period: 5 years after the year in which the communication ended
Legal basis: Legitimate interest of the attorneys under Art. 6(1)(f) GDPR or consent under Art. 6(1)(a) GDPR
The Attorney’s legitimate interest is to provide clients, former clients and data subjects who have given us their consent with updates from the legal environment and, in the case of the contact form, to establish communication between the individual and the Attorney for the purpose of further cooperation
Categories of data subjects and personal data processed: clients and persons who have consented to the processing of their email address for the purpose of sending legal updates, news about the Attorney, news about the Attorney’s successes and other marketing material of similar significance, clients and persons who contacted the Attorney via the contact form at www.skylex.sk
Scope of personal data processed: email address and, in the case of the contact form, also first and last name and data provided by the individual in the message text
Processing period: 3 years from the date on which the data subject gave consent to the processing of their personal data for the stated purpose (newsletter) and, in the case of the contact form, 3 years from the date on which the data subject gave consent to the processing of their personal data for the stated purpose, unless a longer period follows from applicable legal regulations (SAK regulations, accounting regulations)
Legal basis: Consent of the data subject under Art. 6(1)(a) GDPR
Categories of data subjects and personal data processed: managing directors, employees, self-employed persons and cooperating persons
Scope of personal data processed: contact details and photograph of the data subject
Processing period: until the end of the calendar year in which the employment relationship, cooperation agreement or contractual relationship ended
Legal basis: Legitimate interest of the attorneys under Art. 6(1)(f) GDPR Our legitimate interest is to respond to inquiries from potential clients
Categories of data subjects and personal data processed: potential clients
Scope of personal data processed: email address and personal data provided in mutual communication
Processing period: for the necessary period required to provide a response
Legal basis: Compliance with a legal obligation under Art. 6(1)(c) GDPR, legitimate interest under Art. 6(1)(f) GDPR
The Attorney’s legitimate interest is to respond to inquiries, offers and other correspondence from potential clients, service providers or employees
Related regulations: The Act on the Legal Profession, the Bar Association Regulations, Act No. 305/2013 Coll. on the electronic form of exercising the powers of public authorities and on amendments to certain acts (the e-Government Act), Act No. 395/2002 Coll. on archives and records management and on amendments to certain acts
Categories of data subjects and personal data processed: data subjects – senders and recipients of correspondence and other data subjects whose personal data are recorded in the mail records
Scope of personal data processed: title, first name, last name, email address, possibly other identification data, possibly information about an outstanding amount, any enforcement proceedings, any litigation conducted for or against the data subject, and other personal data forming part of the correspondence or electronic mailbox
Processing period: 10 years after the incoming mail book and outgoing mail book are filled, i.e. from the date of receipt or dispatch of the last item recorded in the book
Legal basis: Compliance with a legal obligation under Art. 6(1)(c) GDPR, performance of a contractual obligation under Art. 6(1)(b) GDPR, in order to take steps at the request of the data subject prior to entering into a contract to which the data subject is to be a party
Related regulations: Act No. 311/2001 Coll., the Labour Code, as amended
Categories of data subjects and personal data processed: Job applicants
Scope of personal data processed: personal data in the CV and, where applicable, in proof of the highest level of education attained
Processing period: 6 months from the date on which the selection process ended
Legal basis: Compliance with a legal obligation under Art. 6(1)(c) GDPR, legitimate interest under Art. 6(1)(f) GDPR
Related regulations: Act No. 311/2001 Coll., the Labour Code, as amended, Act No. 586/2003 Coll. on the Legal Profession and on amendments to Act No. 455/1991 Coll. on Trade Licensing (the Trade Licensing Act), as amended, other regulations in the field of labour law, including the Social Insurance Act, the Old-Age Pension Savings Act and the Health Insurance Act, as amended
Categories of data subjects and personal data processed: Employees, former employees, cooperating persons and close persons
scope of personal data processed: employee personal number, title, first name, last name, maiden name, permanent residence, temporary residence, date of birth, birth number, ID card number, place of birth, age, marital status, nationality, citizenship, all data and other records stated in an official education document, signature, contact details (in particular telephone number and email), job position, basic salary, personal evaluation, performance-related salary component and other components related to the job position, data on hours worked, data on the individual’s bank account, amounts subject to enforcement of a decision ordered by a court or administrative authority, monetary penalties and fines, as well as compensation imposed on an employee by an enforceable decision of the competent authorities, improperly received amounts of social insurance benefits and old-age pension savings benefits or advances thereof, state social benefits, benefits in material need and contributions to benefits in material need, monetary contributions to compensate for the social consequences of severe disability which the employee is obliged to return on the basis of an enforceable decision under a special regulation, data on incapacity for work, data on important personal obstacles at work, data on changed working capacity, data on employers, job position and the date of commencement of work in the public interest or employment activity, data on family members to the extent of: first name, last name, address, date of birth, school attended, data on the spouse, children, parents of the children to the extent of: first name, last name, date of birth, birth number, address, data from the employment certificate, data on the employee’s registration in the register of unemployed citizens, data on taking maternity leave and parental leave, data on the award of a pension and the type of pension, name of the health insurance company with which the employee is insured, personal data processed on certificates, certificates of completed examinations and educational activities, data stated in the CV, language skills, personal data to the extent of copied official documents: marriage certificate, birth certificate, proof of the highest level of education attained
Processing period: personal files until the age of 70, payroll records – 50 years after termination of employment, payroll sheets, sickness insurance (registrations, deregistrations, changes, benefits), incapacity for work and other payroll documentation – 10 years following the year to which they relate, payroll tax declarations, payroll deductions, payroll documents – 5 years, holidays, occupational health and safety, attendance records – 5 years after termination of employment
Legal basis: Compliance with a legal obligation pursuant to Article 6(1)(c) of the GDPR
Related regulations: GDPR
Categories of data subjects and personal data processed: data subjects exercising the rights to which they are entitled as data subjects
Scope of personal data processed: identification and contact personal data to the extent of the request and the response to the request
Processing period: 5 years following the year in which the request was handled
To whom does the Attorney make your personal data available?
We make clients' and other natural persons' personal data available only to the necessary extent, for example, to :
Due to the obligation to maintain confidentiality, the Attorney has a limited obligation to provide your personal data to public authorities; HOWEVER, the Attorney is obliged to prevent the commission of a criminal offence, and we are also obliged to report information relating to the prevention of money laundering and terrorist financing.
If we cooperate with other attorneys/law firms, the relationship concerning personal data is ensured as follows:
On the basis of contractual cooperation in the provision of legal services with attorneys/law firms (we will provide you with information about the cooperating attorneys/law firms upon receipt of your request at the e-mail address: skypalova@skylex.sk), we act as joint controllers, as we jointly process your personal data. By means of an arrangement between the joint controllers, we have determined the joint purposes and means of processing your personal data and have also determined the respective responsibilities for fulfilling the obligations of the joint controllers under the GDPR. The parties to the currently effective arrangement are Us and the above-mentioned attorneys/all the above-mentioned law firms.
A fundamental part of the above-mentioned arrangement between the joint controllers is that We are the controller who provides data subjects with information pursuant to Articles 13 and 14 of the GDPR, as well as the controller who receives all data subject requests addressed to any joint controller. This does not affect the data subject's right under Article 26(3) of the GDPR to exercise their rights under the GDPR against any of the cooperating attorneys/law firms.
To which countries does the Attorney transfer your personal data?
The personal data of newsletter recipients containing legal news is provided to the USA for the purpose of technically ensuring the delivery of such newsletter through a marketing platform operated by Ecomail CZ, with its registered office in the Czech Republic, Na Zderaze 15, Prague 2 (“Ecomail“).
With regard to other purposes of processing your personal data, the Attorney does not plan to transfer your personal data across borders to third countries outside the European Economic Area (EU, Iceland, Norway and Liechtenstein). If the Attorney makes such a transfer in the future, it will always ensure compliance with the GDPR rules to maintain an adequate level of protection of your personal data.
Length of retention of your personal data by the Attorney
Personal data will be retained for no longer than necessary for the purposes for which it is processed. Pursuant to Resolution of the Presidium of the Slovak Bar Association No. 29/11/2011, recommended retention periods for personal data have been established, which the Attorney also applies as appropriate, for example:
Attorneys are subject to professional regulations interpreting their obligations under the Attorneys Act, according to which certain circumstances extend our personal data retention periods or prevent us from destroying certain documents for understandable reasons. For example:
Method of obtaining your personal data.
Directly from you. If you are a client of the Attorney, the Attorney most often obtains personal data directly from you. In such a case, providing your personal data is voluntary. The Attorney may also obtain personal data about clients from publicly available sources, public authorities or other persons.
If you are not a client of the Attorney, we most often obtain your personal data from our clients or from other public or statutory sources, such as by requesting it from public authorities, obtaining extracts from public registers, gathering evidence for the benefit of the client, etc. In such a case, we may obtain personal data about you without informing you and even against your will, on the basis of our legal authorisation and obligation to practise law in accordance with the Attorneys Act.
In both cases (whether or not you are a client of the Attorney), we obtain your personal data by having you enter it through our website www.skylex.sk, to the extent that you enter it (the form for sending a message to the Attorney, subscribing to the newsletter).
We protect your personal data to prevent its destruction, loss, alteration, unauthorised dissemination, unauthorised disclosure and/or unauthorised access to it.
What rights do you have as a data subject – information about your rights in connection with the processing of personal data.
If we process your personal data on the basis of your consent to the processing of personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Regardless of this, you have the right to object at any time to the processing of personal data for direct marketing purposes, including profiling. As a client, you have the right to access your personal data as well as to have it rectified.
In other cases, pursuant to the GDPR, you have the right to access personal data, the right to rectify, erase and restrict its processing, the right to object to its processing, the right to data accuracy, the right to withdraw consent to the processing of personal data and the right to lodge a complaint with a supervisory authority.
If we process personal data when providing legal services, you, as a client or another natural person (e.g. an opposing party), do not have the right to object to such processing under Article 22 of the GDPR. If the personal data concern a client (regardless of whether the client is a legal entity or a natural person), other persons do not have the right of access to the data or the right to data portability due to our statutory obligation to maintain confidentiality and pursuant to Article 15(4) of the GDPR, Article 20(4) of the GDPR and Section 18(8) of the Advocacy Act: “An attorney is not obliged to provide information on the processing of personal data or to enable access to or portability of personal data under a special regulation if this could lead to a breach of the attorney’s obligation to maintain confidentiality under this Act.” You also have the right to lodge a complaint at any time with the Office for Personal Data Protection or the Slovak Bar Association.
Processing of cookies
Cookies are:
Small text files stored on your computer that enable analysis of your use of the website. The information stored in cookies may be read by the website when you visit it again later. Cookies are also necessary to ensure that all processes on the website run smoothly. In addition, cookies make it easier for users to reuse the website: information stored in cookies during the first visit, such as the language setting, does not need to be entered again. This allows the website to adapt to your individual needs to a certain extent (if you use the same device to access it).
We use cookies for the following reasons:
Providing an optimal service tailored to the client’s requirements. For example, some information displayed to you during your first visit will not be displayed to you again.
Of course, we implement organisational and technical procedures to protect your personal data and prevent the loss of information and unlawful conduct.
We use the following cookies:
Changes to the privacy policy
We intend to protect your personal data. Legislation in this area is evolving, and therefore the Attorney reserves the right to amend and change these terms at any time and to any extent. In the event of such a change, we will notify you of the change, for example, by means of a general notice on this website or a separate notice sent by email.
Consent to the processing of personal data – newsletter
By subscribing to electronic newsletters, I confirm that I have reached the age of 16 and I grant consent to the processing of my following personal data: email (hereinafter referred to as “Personal Data”), which are complete, truthful, accurate and up to date, for:
JUDr. Zuzana Skýpalová, attorney, place of business: Ota Holúska 7 C, 841 06 Bratislava, 42 414 687, SAK registration number: 6962 (hereinafter referred to as “Attorney”), as the controller.
I grant consent for the purpose of direct marketing, which includes providing information about legal information and interesting developments, legal news, news concerning the Attorney, as well as information about events organised by the Attorney.
I am aware that my consent is the legal basis for processing Personal Data for the stated purpose. I acknowledge that automated decision-making, including profiling, does not apply to the processing of Personal Data. I confirm that I am authorised to grant consent to the processing of the Personal Data concerned.
I grant this consent for a fixed period until it is withdrawn.
I acknowledge that, for the purposes of technically ensuring the delivery of the newsletter, the Personal Data of newsletter recipients are provided to the following recipients:
I declare that I provide my consent freely, voluntarily and seriously, and I am aware that I may withdraw the consent granted for the processing of Personal Data at any time, in particular in the following ways: (i) at any time and free of charge by clicking on the relevant link contained in each newsletter; (ii) via the telephone line at + 421 910 826 935 (iii) via email: skypalova@skylex.sk; or (iv) by post to the address: JUDr. Zuzana Skýpalová, attorney-at-law, Ota Holúska 7 C, 841 06 Bratislava. I hereby confirm that I am aware that the withdrawal of consent does not affect the lawfulness of the processing of Personal Data based on consent prior to its withdrawal.
I also declare that I have been provided with all information and have been instructed about, and am aware of, my rights under the applicable and effective legislation governing the protection of personal data, including:
The Attorney reserves the right to limit or suspend the provision of services associated with the electronic newsletter, including without prior notice and unilaterally.
Consent to the processing of personal data – contact form
By sending a message via the contact form available at www.skylex.sk I confirm that I have reached the age of 16 and I grant consent to the processing of my following personal data: provided my email, first name, surname, data relevant to the practice of law and the provision of legal services if I become a client of the Attorney, which I include in the text of the message (hereinafter referred to as “Personal Data”), which are complete, truthful, accurate and up to date, for:
JUDr. Zuzana Skýpalová, attorney, place of business: Ota Holúska 7 C, 841 06 Bratislava, 42 414 687, SAK registration number: 6962 (hereinafter referred to as “Attorney”), as the controller.
I grant consent for the purpose of contacting the Attorney, processing the information from the message text by the Attorney, and for the purposes of possible further cooperation. I understand that sending the message does not oblige me to become a client of the Attorney.
I am aware that my consent is the legal basis for processing Personal Data for the stated purpose. I acknowledge that automated decision-making, including profiling, does not apply to the processing of Personal Data. I confirm that I am authorised to grant consent to the processing of the Personal Data concerned.
I grant this consent for a fixed period until it is withdrawn.
I acknowledge that, for the purposes of technically ensuring the operation of the form, my Personal Data are also provided to the following recipients:
I declare that I provide my consent freely, voluntarily and seriously, and I am aware that I may withdraw the consent granted for the processing of Personal Data at any time, namely in particular in the following ways: (i) via the telephone line at telephone number + 421 910 826 935 (ii) via e-mail: skypalova@skylex.sk; or also (iii) by post at the address: JUDr. Zuzana Skýpalová, attorney, Ota Holúska 7 C, 841 06 Bratislava. I hereby confirm that I am aware that withdrawal of consent does not affect the lawfulness of the processing of Personal Data based on consent prior to its withdrawal.
I also declare that I have been provided with all information and have been instructed about, and am aware of, my rights under the applicable and effective legislation governing the protection of personal data, including:
I also confirm that I am aware of the limitations regarding the scope of the destruction of personal data, as described in the section Legal Notices and Personal Data Protection Information.
The Attorney reserves the right to limit or suspend the provision of services associated with the contact form, even without prior notice and unilaterally.