+420 777 182 185

[email protected]

Privacy Policy

Home » Privacy Policy

Effective from 25 September 2026

1. Controller

The controller of personal data is Zaripov & Partners s.r.o., advokátní kancelář (law firm), Company ID (IČO) 080 08 647, VAT ID CZ08008647, registered office at Václavské náměstí 775/8, 110 00 Prague 1, Czech Republic (the “firm”, “we” or “us”).

Contact details for data protection matters:

  • e-mail: [email protected]
  • phone: +420 777 182 185
  • postal address: Václavské náměstí 775/8, 110 00 Prague 1

This policy explains how we process the personal data of visitors to www.zaripovpartners.cz, people who contact us, and our clients. We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, “GDPR”) and Czech Act No. 110/2019 Coll., on the Processing of Personal Data.

2. Personal data we process

  • Contact form data: name, e-mail address, phone number and the content of your message.
  • Other communication: data you provide to us by e-mail, by phone or via WhatsApp, Telegram or Viber (in particular your name, contact details and the content of the communication).
  • Client data: identification and contact details, data necessary to provide legal services, billing details, and data we are required to obtain when identifying and verifying clients under Act No. 253/2008 Coll.
  • Website usage data: data obtained through cookies and similar technologies, as described in our Cookie Policy.

3. Purposes, legal bases and retention periods

a) Handling enquiries sent via the contact form, by e-mail, by phone or via messaging apps

We process your data to respond to your enquiry and, where relevant, to offer you our legal services. The legal basis is taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR) and, where the enquiry is not aimed at concluding a contract, our legitimate interest in handling it (Article 6(1)(f) GDPR).

We keep the data for as long as necessary to handle the enquiry. If no contract for legal services is concluded, we delete the data within 12 months at the latest.

b) Providing legal services to clients

We process data to perform the contract for legal services (Article 6(1)(b) GDPR) and to comply with our legal obligations (Article 6(1)(c) GDPR), in particular under:

  • Act No. 85/1996 Coll., on the Legal Profession;
  • Act No. 253/2008 Coll., on Certain Measures against the Legitimisation of Proceeds of Crime and Financing of Terrorism (the “AML Act”), to the extent the firm is an obliged person under Section 2(1)(g) of that Act when providing certain services;
  • Act No. 563/1991 Coll., on Accounting;
  • Act No. 235/2004 Coll., on Value Added Tax.

We keep the data for the duration of the contractual relationship and afterwards for the periods required by law, in particular:

  • data obtained during client identification and due diligence – 10 years from the execution of an occasional transaction or from the end of the business relationship with the client (Section 16(1) of the AML Act), to the extent the firm is an obliged person;
  • tax documents (invoices) – 10 years from the end of the tax period in which the supply took place (Section 35(2) of the VAT Act);
  • accounting documents and accounting books – 5 years from the end of the accounting period to which they relate (Section 31(2)(b) of the Accounting Act).

c) Website analytics and advertising measurement

We store analytics and advertising cookies of Google Analytics 4 and Google Ads, and transmit data for these purposes, only with your consent (Article 6(1)(a) GDPR and Section 89(3) of Act No. 127/2005 Coll., on Electronic Communications). You give and manage your consent via the cookie banner. We process the data until you withdraw your consent, but no longer than the period stated for each cookie in our Cookie Policy.

For basic visit statistics we also use Umami, which does not use cookies and does not store IP addresses. It provides us only with aggregated, anonymised visit statistics. The tool is operated for us by our processor. We use it on the basis of our legitimate interest in running and improving the website (Art. 6(1)(f) GDPR); no consent is required because it does not store anything on your device.

d) Protecting legal claims

We may also process data to establish, exercise or defend our legal claims. The legal basis is our legitimate interest (Article 6(1)(f) GDPR). We keep data for this purpose for the duration of the applicable limitation periods and of any court or other proceedings.

4. Attorney confidentiality

As attorneys, we are bound to keep confidential all facts we learn in connection with providing legal services (Section 21 of Act No. 85/1996 Coll., on the Legal Profession). This obligation also covers the personal data of clients and other persons that we process when providing legal services. Your rights under the GDPR may be restricted where exercising them would conflict with this duty of confidentiality or with another legal obligation of the firm.

5. Recipients and processors

We disclose personal data only to the extent necessary to the following recipients:

  • our web hosting provider – INTERNET CZ, a.s. (Forpsi service);
  • IT and website maintenance service providers;
  • Google Ireland Limited, if you have consented to analytics or advertising cookies (see our Cookie Policy);
  • accountants and tax advisers bound by confidentiality;
  • public authorities where required by law.

We conclude agreements with our processors that ensure the protection of your personal data.

6. Transfers outside the EU

When Google tools are used, personal data may be transferred to Google LLC in the USA. Google LLC is certified under the EU–U.S. Data Privacy Framework. Transfers are therefore based on Commission Implementing Decision (EU) 2023/1795 of 10 July 2023 on the adequate level of protection of personal data (Article 45 GDPR).

7. Messaging apps and third-party services

If you contact us via WhatsApp, Telegram or Viber, your data is also processed by the operator of the respective app under its own terms and privacy policy. The same applies to the Google map embedded on our Contacts page. We have no influence over how these operators process data.

8. Automated decision-making

We do not carry out automated individual decision-making or profiling that would produce legal effects concerning you or similarly significantly affect you.

9. Your rights

In connection with the processing of your personal data, you have the right to:

  • access your personal data (Article 15 GDPR);
  • rectification of inaccurate data (Article 16 GDPR);
  • erasure (Article 17 GDPR);
  • restriction of processing (Article 18 GDPR);
  • data portability, where processing is based on consent or a contract and carried out by automated means (Article 20 GDPR);
  • object to processing based on legitimate interest (Article 21 GDPR);
  • withdraw your consent at any time, without affecting the lawfulness of processing before its withdrawal (Article 7(3) GDPR). You can change or withdraw your cookie consent via the cookie banner or the “Cookie settings” link.

You can exercise your rights by e-mail at [email protected] or in writing at the firm’s address. We will respond without undue delay and in any event within one month of receiving your request; in justified cases this period may be extended by a further two months (Article 12(3) GDPR).

10. Right to lodge a complaint

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority (Article 77 GDPR). In the Czech Republic, this is:

  • Úřad pro ochranu osobních údajů (Office for Personal Data Protection)
  • address: Pplk. Sochora 27, 170 00 Prague 7
  • e-mail: [email protected]
  • website: www.uoou.gov.cz

11. Changes to this policy

We may update this policy. The current version, with its effective date, is always published on this website.

This is a translation; in case of any discrepancy, the Czech version prevails.