Thank you for visiting our website. Below, we would like to inform you about what personal data we collect, how we process it, and for what purposes, all in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter referred to as the “GDPR”). This policy applies to the processing of data concerning our clients - that is, you, if you are a natural person, and/or your employees or members of your governing bodies, if you are a legal entity - as well as visitors to the ozanalegal.cz website.

Who is the data controller?

The data controller for the ozanalegal.cz website is JUDr. Jan Ožana, attorney-at-law, ID No.: 054 17 902, with its registered office at AK Zikmunda Wintra 1208/7, 301 00 Plzeň, e-mail: kancelar@ozanalegal.cz.

No Data Protection Officer has been appointed.

What personal information do we collect about you?

In connection with the provision of our services, the following personal data may be processed:

• basic identification information - title, first and last name, role/position in the company, home address/registered office address, date of birth/birth number/company ID number;
• contact information - phone number, email address, mailing address, data box ID;
• payment information - bank account name and number, details of payments made;
• information related to the provision of legal services - in particular, information regarding health status, income, family circumstances, financial circumstances, etc.; and
• data collected when accessing the website: IP address, date and time of the request, time difference from Greenwich Mean Time (GMT), request content (specific page), access status/HTTP status code, amount of data transferred, referring website, browser, operating system and its interface, language, and browser version.

For what purpose do we collect your personal information?

We process your personal data for the following reason:

• performance of a contract under Article 6 (1) (b) of the GDPR, as without processing your personal data, we would not be able to enter into and perform a contract for the provision of services, both with you and with third parties, in particular the counterparty. We obtained your personal data directly from you or from publicly available registers and records (Commercial Register, Land Registry, etc.);
• compliance with a legal obligation under Article 6 (1) (c) of the GDPR, as the processing of your personal data is necessary to comply with legal obligations applicable to attorneys, in particular under the Act on the Legal Profession and professional regulations, the Accounting Act, the Income Tax Act, the Value-Added Tax Act, and the AML Act;
• legitimate interest under Article 6 (1) (f) of the GDPR, since (i) in the event of a delay in fulfilling your obligations (in particular, payment for the provision of services) or the occurrence of damage or harm, we may assert our rights through legal and other means, and (ii) when you access our website at ozanalegal.cz, your browser automatically sends the above-mentioned information to our website’s server, where it is temporarily stored in a so-called log file until it is automatically deleted, in order to ensure a smooth connection and a user-friendly experience on our website, to ensure network and information security, to analyse system security and stability, and for administrative purposes; and
• your consent under Article 6 (1) (a) of the GDPR, if the processing of personal data is not based on any of the reasons listed above, in particular the use of cookies (for more details, see the Cookie Policy) - providing such consent is voluntary; however, depending on the nature of the consent, it is possible that without it, we will not be able to provide our services to you at all or only to a limited extent.

When do we share your personal information with third parties?

We will disclose your personal information to third parties if:

• it is necessary for the performance of a contract with you as a client pursuant to Article 6 (1) (b) of the GDPR (in particular when entering into contracts and agreements or filing lawsuits and other legal documents);
• there is a legal obligation to disclose information under Article 6 (1) (c) of the GDPR;
• the disclosure is necessary under Article 6 (1) (f) of the GDPR for the purpose of asserting or defending our legal claims, and there is no reason to believe that you have an overriding and legitimate interest in not disclosing your personal data; or
• you have given your consent to this in accordance with Article 6 (1) (a) of the GDPR.

Third parties include, in particular, your counterparty and its legal representative, courts, other public authorities, and supervisory authorities. They may also include external tax or accounting advisors, IT system and computer network administrators, and postal or courier service providers. This does not affect a lawyer’s duty of confidentiality.

How long do we process personal data?

The personal data we collect in connection with the performance of the contract and our legal obligations will be retained for as long as attorneys are required to retain it under the Act on the Legal Profession and professional regulations. After the contractual relationship ends, we will process your personal data for a period of 5 years, or 10 years in the case of escrow, AML, and tax and accounting obligations. After that, it will be deleted.

What are your rights?

You have:

• the right to withdraw your consent under Article 7 (3) of the GDPR: you may withdraw your consent to the processing of your personal data at any time;
• the right of access to information under Article 15 of the GDPR: you may request information about the personal data we process about you, and you may also request that we provide you with access to that data;
• the right to rectification under Article 16 of the GDPR: you may request that we correct any inaccurate personal data we process or complete any incomplete personal data;
• the right to erasure under Article 17 of the GDPR: you may request the erasure of the personal data we process, in particular if it is no longer necessary for the purpose for which it was processed and if its processing is not necessary to comply with a legal obligation;
• the right to restriction of processing under Article 18 of the GDPR: you may request that the processing of your personal data be restricted if (i) you contest the accuracy of the data, for the period necessary to verify the accuracy of the data; (ii) the processing is unlawful and you do not consent to the erasure of the personal data; (iii) we no longer need the data, but you require it for the establishment, exercise, or defence of legal claims; or (iv) you have objected to the processing pursuant to Article 21 of the GDPR;
• the right to data portability under Article 20 of the GDPR: you may receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or request that this data be transferred to another data controller;
• the right to object under Article 21 of the GDPR: you may object to the processing of your personal data based on Article 6 (1) (e) and (f) of the GDPR;
• the right not to be subject to automated decision-making under Article 22 of the GDPR: you have the right not to be subject to any decision based solely on automated processing - in our case, we do not engage in automated decision-making or profiling;
• the right to be informed of a personal data breach involving your personal data under Article 34 of the GDPR: if a breach of our security is likely to result in a high risk to your rights and freedoms, we will notify you of the breach; and
• the right to lodge a complaint under Article 77 of the GDPR: you may lodge a complaint if you believe that the processing of your personal data has violated the GDPR with the Office for Personal Data Protection, located at Pplk. Sochora 27, 170 00 Prague 7, website: www.uoou.gov.cz.

Where can I exercise my rights?

If you wish to exercise the rights listed above, you may do so by e-mailing to kancelar@ozanalegal.cz.

This information was updated on July 13, 2026.