We are Blockchain Legal, a law firm specializing in providing services to entrepreneurs and individuals, with a particular focus on innovative and technological sectors. We recognize that privacy is important to our clients, and our collaboration requires mutual trust. Confidentiality is therefore key to our operations.
Providing legal services to our clients and carrying out our other activities involves the exchange of information, documents, and various records. Therefore, we would like to inform you about how we process personal data within our law firm in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
Who Manages Your Personal Data?
The data controller is Blockchain Legal, advokátní kancelář s. r. o., through which we provide legal services in accordance with the law on advocacy. The controller determines the purposes of processing and is responsible for processing personal data. From a legal perspective, the controller is also the entity responsible for ensuring compliance with data protection laws. Below are our full company details:
Blockchain Legal, advokátní kancelář s. r. o.
ID No.:
062 97 013
Registered Office:
Dukelských hrdinů 567/52, Holešovice, 170 00 Praha 7
Registered in the Commercial Register maintained by the Municipal Court in Prague under file number C 279720
How Do We Process Personal Data?
The processing of personal data is a term used in legal regulations to protect privacy. But what does it actually mean, and what constitutes personal data?
Simply put, personal data includes any information relating to a specific individual. Processing of personal data refers to all activities involving such data, including its storage.
Processing personal data is an integral part of many routine activities. In what situations do we process your personal data? Let’s take a look.
If You Are Our Client or Request Our Services
Providing legal services is a complex activity that inevitably involves processing a wide range of your personal data.
To properly provide the services you request, we need to communicate with you, work with the information you provide, interact with other parties (such as opposing parties, courts, and authorities), process documents and information from third parties, and produce the required legal outputs.
These core activities are accompanied by other tasks such as bookkeeping, maintaining legal case files, and other internal processes within our firm. In specific cases, we are also legally obliged to verify your identity and conduct due diligence under anti-money laundering regulations.
-
We fulfill the contract for the provision of legal services, including all related activities; if our client is a company, we process the relevant data of its representatives and other concerned individuals based on the client's legitimate interest in receiving legal services.
We fulfill our legal obligations in bookkeeping, tax compliance, legal practice, anti-money laundering measures, and other regulatory requirements.
As part of our legitimate interests in ensuring the operations of our law firm, we process data in accordance with our internal procedures, particularly in maintaining records, statistics, reporting, service management, and handling complaints.
Based on your consent – in specific cases, we may request your consent to process personal data.
-
Identification and contact details, mutual communication, provided documents, service outputs, communication with third parties, acquired documents, content of court files, accounting records, records of completed work, receivables, and others.
-
We retain your data for the duration of our cooperation and for 10 years after its termination.
If You Visit Our Website
Our website operates on a modern platform that uses cookies and related technologies. Some technical information must be processed and stored in your browser to ensure proper website functionality. Other data is processed to measure marketing campaign effectiveness, website traffic, and to enhance the user experience. You can choose to decline analytical and marketing cookies when visiting our website. More details about cookies can be found in a dedicated section below.
-
Based on legitimate interests to ensure the functionality and security of the website.
Based on your consent for storing additional cookies.
-
Technical information about the browser, preferences, geographic location, IP address, website activity, and others.
-
It varies depending on the specific tools – some are retained for the duration of the browsing session, while others for days, months, or several years. However, you can configure your browser settings to manage cookie storage and delete stored cookies.
If You Are Our Business Partner or Supplier
If you are one of our business partners, suppliers, or collaborate with us in any way, we process your personal data to the extent necessary for our business relationship. We typically enter into a contract that governs our cooperation, and data processing takes place within the scope of that agreement. We usually process mutual communication, information on performance and payments, and other relevant business-related data.
-
We fulfill the contract defining the framework of our cooperation; if the contract is concluded by a company, we process the relevant data of its representatives and other concerned individuals based on the legitimate interest of the contracting parties in ensuring cooperation.
We fulfill our legal obligations in bookkeeping, tax compliance, and other regulatory requirements.
As part of our legitimate interests in ensuring the operations of our law firm, we process data in accordance with our internal procedures, particularly in maintaining records, statistics, reporting, service management, and handling complaints.
-
Identification and contact details, mutual communication, information on contractual performance, accounting records, records of completed work, receivables, and others.
-
We retain your data for the duration of our cooperation and 10 years after its termination.
If Your Data Is Involved in a Case We Handle
When providing legal services to our clients, we may process data of third parties. This data is subject to our legal duty of confidentiality, just like client data. We process such data in connection with handling client cases based on their legitimate interest.
-
As part of the legitimate interest of our clients and our law firm in properly handling their cases, in which we provide legal services and related activities.
We fulfill our legal obligations in the performance of legal practice, compliance with anti-money laundering measures, and other regulatory requirements.
-
Identification and contact details, mutual communication, documents, content of court files, and others.
-
We retain your data for the duration of our client relationship and 10 years after its termination.
You Contacted Us or We Contacted You
If we start communicating outside of the above-mentioned cases (for example, if you reach out to us with a general inquiry via email), we need to process the data that arises from such communication.
-
As part of the legitimate interests of both parties to address the matters related to the communication.
-
Identification and contact details, content of communication, and other data depending on the nature of the communication.
-
For a period of 3 years from the last communication.
Access to Personal Data
Like any modern company, we use a range of outsourced services in our operations. To properly provide some of these services, their providers may need to engage in the processing of personal data to a certain extent, depending on the specific service. Our suppliers, partners, and other collaborators always have access only to the personal data necessary to deliver the specific service and only to the extent required. When selecting service providers, we also consider how they handle the provided data, striving to ensure maximum security for the processed information.
The main categories of entities involved in the processing of personal data include:
Providers of technical IT services, including infrastructure (hosting service providers and various IT tools),
Accountants, legal, and tax advisors,
Providers of online analytics tools (as specified in the cookies section below),
External collaborators, including other lawyers, translators, and specialized service providers.
A special category of collaborators includes our permanently cooperating attorneys, whose current list can be found on our website or on the website of the Czech Bar Association (https://www.cak.cz/firma-detail/340f9852-507b-e711-80d7-00155d642329). We also cooperate with JUDr. Tomáš Elbert, attorney reg. no. 16037, and Mgr. Bc. Pavel Urbaczka, attorney reg. no. 16329.
Our main IT technology providers include Proton AG (email and other tools – https://proton.me/legal/privacy) and Single Case, s.r.o. (law firm information system – https://www.singlecase.com/), whereas we particularly value both providers for their approach to secure data storage, including thorough encryption. Under standard conditions, employees of these providers do not have access to the content of processed data.
The security of personal data with our suppliers is ensured through their contractual obligations, including confidentiality agreements. In cases where data is transferred to locations outside the European Union, we provide additional protection through contracts based on Standard Contractual Clauses (SCCs) approved by the European Commission or other legal instruments in compliance with applicable regulations.
Your Rights
In connection with the processing of your personal data, you have the following rights: (1) the right to access your personal data, (2) the right to rectification of inaccurate personal data, (3) the right to restriction of processing, (4) the right to erasure of personal data, (5) the right to object to the processing of personal data, (6) the right to withdraw consent, (7) the right to data portability, and (8) the right to lodge a complaint with a supervisory authority.
If you make a GDPR request, then we may need to verify your identity and we are entitled to request additional information before we can process it properly.
If we process your personal data in connection with the provision of legal services to our clients, your rights are generally limited. We are legally required to maintain attorney-client confidentiality and retain documentation related to legal services, and therefore, we are usually unable to comply with your requests under the GDPR.
The Right to Access Personal Data
In connection with the processing of personal data, you have the right, upon request, to receive information about the processing of your personal data and to obtain a copy of the processed personal data.
The Right to Rectification
If you believe that your personal data is inaccurate, outdated, or otherwise incorrect, you can contact us, and we will ensure the necessary correction.
The Right to Restrict Processing
In cases where the processed data is inaccurate or you have raised an objection, you have the right to request a restriction on processing.
During the restriction period, personal data will only be stored and no operations will be performed on them without your consent. The restriction on processing lasts for as long as one of the above-mentioned situations applies (e.g., the assessment of an objection or until the correction is made). You will be informed of any termination of the restriction.
The Right to Erasure
If you withdraw your consent for the processing of personal data or if the personal data is no longer necessary, you have the right to request the erasure of such personal data.
However, in some cases, the right to erasure is limited. For example, personal data processed based on legal obligations cannot be erased before the legally mandated retention period expires.
The Right to Object
You may submit a justified objection to the processing of personal data based on legitimate interest or for direct marketing purposes. The legitimacy of the objection will be assessed, and you will be informed of the decision via your chosen contact method.
The Right to Withdraw Consent to Data Processing
If your personal data is processed based on your consent, you may withdraw this consent at any time.
The Right to Data Portability
If the personal data you have provided is processed automatically in connection with contract performance or based on your consent, you have the right to receive it in a structured, machine-readable format.
The Right to File a Complaint with a Regulatory Authority
If you believe that your personal data is not being handled in accordance with the law, you have the right to contact the relevant supervisory authority in your place of residence, place of work, or where the violation of your rights occurred. In the Czech Republic, the supervisory authority is the Office for Personal Data Protection.
Changes to the Privacy Policy
We reserve the right to modify this privacy policy as needed in response to changes in data processing conditions. Any updates will be published on our website.
Contact Information
If you have any questions or you wish to exercise any of the above rights, you can contact us at: