Personal Data Processing Information

+ Who is the controller of your personal data and contact information for our company

bpv Braun Partners s.r.o., Business ID No.: 27948994, with its registered office at Praha 1, Ovocný trh 1096/8, Post Code 11000, registered in the Commercial Register maintained by the Municipal Court in Prague under File No. C 128700, tel. +420 224 490 000, email: (hereinafter the “Company”), as the controller, in accordance with Regulation No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (hereinafter the “Regulation” or “GDPR”), hereby informs natural persons of the processing of their personal data in connection with the practice of law.

This information does not apply to processing the data of legal entities, including their name, legal form and contact information for the legal entity, which do not constitute personal data pursuant to the GDPR.

+ What data do we process on you?

Our Company processes the following categories of personal data:

a) identification and contact data,
b) financial data (e.g. invoicing and payment information),
c) data in the legal file,
d) data shared in mutual communication (whether in person, in writing, over the telephone or otherwise),
e) contact information needed to sign up for an event organized by the Company (e.g. business breakfast, client party); and information on (non)participation in a specific event organized by the Company,
f) photographs or video recordings may be made at events organized by the Company,
g) if you are our client or if you subscribed to our newsletter, data on your wishes and preferences for receiving the newsletter and invitations to Company events.

Our Company plans to keep the data we process up-to-date and accurate. In the event of changes to your personal data, please inform us and inform of us of the new data. You can contact us by email at info(at) or by letter sent to our postal address.

+ Are you required to provide your personal data?

Points a) through d) are mandatory, as that data is necessary for fulfilling contractual obligations or the obligations imposed on our Company by legal regulations on the practice of law. We cannot provide legal advice without processing this data.

The data under e) is mandatory if you sign up for an event organized by the Company.

Photographs and video recordings are taken at Company events in order to capture the atmosphere of the event, but not specific participants. Photographs and video recordings targeting individuals are only taken if you request the photographer or camera operator to take it or actively cooperate in having the picture taken.

The data under g) is voluntary.

+ From what sources do the personal data come?

The above-stated personal data processed by the Company comes from the following sources:

a) data provided to our Company by our client or by you, e.g. when entering into a contract with the Company or during the performance of said contract,
b) data from public sources, lists and records, e.g. the Commercial Register, Trade Licensing Register, Insolvency Register,
c) data from a file in proceedings held by a public authority (e.g. judicial, administrative, criminal).

+ For what purpose do we process your personal data?

Our Company processes your personal data for the following purposes:

a) performance under a contract made with you or our client,
b) maintaining and developing our relationship with you,
c) upholding our obligations under legal regulations in connection with the practice of law,
d) for the purposes of direct marketing, e.g. sending commercial communications (newsletters) and invitations to Company events (only if you are our client), and if you are not our client then processing for this purpose is only possible if you have consented to receive the newsletter and invitations to Company events,
e) to promote our services externally (only applies to clients and their employees and partners as individually agreed).

+ On what legal grounds do we process your personal data?

We process your personal data because:

a) processing is necessary for performance under a contract to which you are party (e.g. agreement on legal advisory services),
b) processing is necessary to meet the legal obligations imposed on our Company as controller in the practice of law (e.g. keeping a legal file), processing is necessary for the legitimate interests of our Company (e.g. sending out newsletters and invitations to our clients, photographs and video recordings from events organized by our Company), or
c) you consented to the processing (e.g. sending newsletters and invitations to events at our Company if you are not our client).

+ Who can be granted access to your personal data?

Your personal data may be disclosed in justified cases and in the scope absolutely necessary to the following:

- IT service providers our Company uses in the practice of law,
- postal providers or couriers in the scope of name and address if we send you a letter or parcel,
- (permanently) cooperating attorneys participating in the provision of legal advice to the client,
- translators and translation agencies,
- marketing advisors and agencies – if individually agreed with the client that the Company can use the client’s identification data for marketing purposes,
experts and expert institutions,
- the subjects and/or authorities stipulated by legal regulation in the cases where the Company is required to provide such data pursuant to legal regulations (e.g. the act on certain measures against money laundering and financing terrorism) and if disclosure is in compliance with our duty of confidentiality,
- if necessary for providing legal advice to the client and if disclosure is in compliance with our duty of confidentiality, our Company is entitled to disclose personal data in the scope absolutely necessary to a cooperating attorney / law firm outside the Czech Republic, especially within the bpv Legal alliance; this cooperation involves only disclosure of personal data within the European Union, in particular to Belgium, Austria, Slovakia, Hungary and Romania,
- our Company can also agree with you to disclose your contact and identification data to ratings agencies (e.g. Chambers, Legal 500) to provide references on our Company and attorneys who cooperate with us,
- our Company can also agree with you, if you are our client, that we can publish your identification data in our promotional materials.

Our Company will never under any circumstances disclose your personal data to other subjects for further commercial use!

+ How long will we process your data?

We will process your personal data only for the time absolutely necessary.

Processing for the time absolutely necessary means

a) processing for the duration of the contractual relationship with you or our client,
b) processing for the period designated by legal regulation relating to the practice of law,
c) processing for the period designated by another legal regulation,
d) processing after the termination of the contractual relationship between our Company and you or our client for the duration of any statutes of limitations on any potential claims that could be made by our Company, you as a natural person, and/or our client.

If you are our client, then processing your personal data for the purposes of direct marketing on the basis of the legitimate interests of our Company will continue for the duration of providing legal advice by our Company and for an additional three years thereafter.

If you are not our client, then we will process your personal data for the purposes of direct marketing for the period indicated in the consent you provided, and if the consent does not specify a time period, then for three years after the date of granting consent, or until you withdraw your consent, whichever occurs first. For more information on withdrawing your consent, please see here.

+ What rights do you have in relation to the processing of your personal data?

Under the conditions stipulated in the GDPR you can exercise the following rights in connection with processing your personal data:

a) RIGHT TO ACCESS - the right to access your personal data and receive a copy of the processed personal data (provided that this does not negatively impact the rights and freedoms of other persons),

b) RIGHT TO CORRECTION - the right to correct inaccurate personal data that apply to you. Depending on the purpose of processing, you have the right to add any incomplete personal data, including providing an additional statement,

c) RIGHT TO ERASURE – the right to erasure of your personal data in one of the following situations:
(i) the personal data is no longer needed for the purposes for which it was collected or otherwise processed,
(ii) you revoked the consent based on which the personal data was processed, and there are no other legal grounds for processing it,
(iii) you objected to being the subject of a decision based on automated processing of your personal data, and there is no overriding legitimate reason for their processing in this manner, or you objected to the processing of your personal data for the purposes of direct marketing,
(iv) your personal data was processed unlawfully,
(v) your personal data must be deleted in order to meet the legal obligations stipulated in EU law or a member state’s law applying to our Company,
(vi) your personal data was collected in connection with an offer of information society services,

d) RIGHT TO RESTRICTED PROCESSING - the right to request that our Company restrict the processing of your personal data if:
(i) you deny the accuracy of your personal data, for the period necessary for our Company to verify the accuracy of said data,
(ii) the data processing is unlawful, and you refuse the erasure of your personal data and request instead that its use be restricted,
(iii) our Company no longer needs your personal data for processing, but you request the personal data in order to determine, exercise or defend your legal claims, and
(iv) you raised an objection against processing pursuant to Article 21(1) of the Regulation, then until it can be verified whether the Company’s legitimate reasons outweigh yours,

e) RIGHT TO TRANSFERABILITY - the right to transferability of your personal data processed both on the basis of consent or a contract and also in automated form,

f) RIGHT TO OBJECT - the right to file a free objection to the processing on the basis of the Company’s legitimate interests, in particular against direct marketing on the basis of the Company’s legitimate interests; you can send the objection by email to info(at) or by post to our Company address,

g) RIGHT TO INFORMATION ON HIGH-RISK SECURITY BREACH - the right to be informed in the event of a security breach affecting your personal data that is likely to result in a high risk for your rights and freedoms, and

h) RIGHT TO REVOKE CONSENT ALREADY GRANTED - you can revoke consent you already granted at any time by email sent to info(at) or by letter sent to our Company’s postal address.

You can contact our Company in order to exercise your rights under the GDPR or to get answers to any questions or clarify any ambiguities regarding how we handle your personal data in writing at our Company’s postal address or by email at You also have the right to file a complaint at the Personal Data Protection Office, with its registered office at Pplk. Sochora 27, 170 00 Praha 7 (other contact information here: