top of page


The protection of your personal data is very important to us, so we take all due care to ensure that your personal data is processed securely. We process your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR) and in accordance with the principles below.

Personal data controller

CTIBOR LEGAL v.o.s., advokátní kancelář

Václavské náměstí 2132/47

110 00 Praha

Czech Republic

 ID No.: 17851165

Purpose of personal data processing

The purpose for which we process your personal data is to provide legal and related services, such as training or sending newsletters.

Legal basis for processing personal data obtained for the above purposes

The basic reason for the processing of personal data is the performance of the agreement. Another reason is the fulfilment of legal obligations, especially arising from the Advocacy Act, the Act on Selected Measures against the Legalization of Proceeds of Crime (AML), the Act on Archives and Records Management or tax laws.

Processed personal data

Identification and contact details (name and surname, place of residence, date of birth, telephone number, e-mail address, account number). In justified cases, also so-called sensitive personal data.

Location data – in particular: IP addresses, information about the device used, website visits (cookies).

Transfer of personal data

Personal data will be processed manually and automatically by us, as well as by ITC providers, tax and similar services, on the basis of personal data processing agreements. 

Personal data will not be transferred to countries outside the European Economic Area.

Rights related to the processing of personal data

You have the right to request information about the purpose of personal data processing, information about the scope and categories of personal data that are the subject of processing, including data on the source from which the personal data were obtained, the planned retention period, whether automated decision-making takes place and information about potential recipients of personal data. 

You have the right to request rectification of personal data if it is inaccurate.

You have the right to erasure of personal data ("right to be forgotten").

You have the right to obtain personal data concerning you that has been provided. 

You have the right to restrict the processing of your personal data.

You have the right to object, request an explanation and remedy any illegal situation, in particular request the correction, completion, or disposal of personal data. 

You have the right to the portability of the personal data provided.

Consent to the processing of personal data is voluntary and you have the right to withdraw it at any time for any of the above purposes. To withdraw consent, it is necessary to specify the purpose for which the consent is withdrawn and send it to our address. The withdrawal of consent shall not affect the lawfulness of processing based on consent given prior to its withdrawal.


If you believe that there is an unauthorized processing of personal data, you can file a complaint with the supervisory authority, which is the Office for Personal Data Protection (Office for Personal Data Protection, with its registered office at Pplk. Sochora 27, 170 00 Praha 7, Czech Republic, e-mail:

Security of personal data 

We use security measures, including encryption and authentication tools, to ensure the protection and preservation of the security, integrity and availability of personal information.


We will process personal data for a period of 10 years from the conclusion of the contract or the provision of consent. We will also keep your personal data for the period stipulated by each law. 


We may change this policy. If necessary or necessary, we will inform you of the changes and/or ask for your consent. 

Last update: 1.3.2023.

bottom of page