Privacy policy
What personal data we process when you visit our website or contact us through it, why and for how long we keep it, and what your rights are.
Who processes your data
The data controller is Mgr. David Běhal, advokát (attorney-at-law), business ID (IČO) 71445706, with registered office at Fügnerovo nábřeží 2809, 760 01 Zlín, Czech Republic. On this website we present ourselves as Advokátní kancelář Mgr. Davida Běhala.
For anything concerning your data, contact us by email at sekretariat@behal.eu, by phone on +420 775 562 537 or by post at our office address.
We have not appointed a data protection officer.
What this policy covers
This policy applies to the behal.eu website and to your first contact with us, meaning messages sent through the form, emails, phone calls and consultation bookings.
If you become our client, the processing of your data is also governed by the Czech Legal Profession Act and by the agreement we make with you. Everyone at our firm is bound by professional confidentiality.
Contact form, email and phone
When you write to us through the form, we process your name, email address, phone number if you provide it, whether you are writing for a business or as a private individual, and the text of your message. Your phone number is optional. We cannot reply without the other details. We receive similar details when you email or call us.
We need this data to reply to you and arrange a consultation. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in replying to an enquiry you send us (Article 6(1)(f) GDPR).
Messages from the form are stored in the website database and delivered to the shared email inbox of our office.
Please do not include sensitive details in your message, for example about health or criminal matters. We will discuss them in person.
Consultation booking
You can choose a time for your consultation in the Microsoft Bookings booking system. We process your name, email address, phone number, the time you choose and any note you add to the booking.
We use this data to arrange and confirm the meeting. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR).
Newsletter
When you subscribe to our newsletter, we process your email address. We send the newsletter through the SmartEmailing service.
The legal basis is your consent (Article 6(1)(a) GDPR). You can unsubscribe at any time using the link in every newsletter email or by writing to sekretariat@behal.eu.
Website protection and technical logs
The form is protected by Cloudflare Turnstile. It uses your IP address and technical details about your browser to tell whether a message comes from a person or a bot.
The website server keeps technical access logs, namely the IP address, time and page address. We keep them only for as long as we need them to run the website securely.
Both serve to protect the website against misuse, which is our legitimate interest (Article 6(1)(f) GDPR).
How long we keep your data
- Messages from the form stored in the website database are deleted automatically 24 months after they are sent.
- Enquiries in our email inbox that do not lead to working together are kept for as long as we need them to deal with the enquiry.
- If we start working together, we keep your data for the period that the law and the rules of the Czech Bar Association require of attorneys.
- Your newsletter email address is kept until you unsubscribe.
- The record of your choice in the cookie banner is kept for four years as evidence of consent.
Who has access to your data
Only the people at our firm see your data.
We are supported by suppliers who process data only on our instructions. They are our website hosting and maintenance provider, Microsoft (email and Microsoft 365 applications, appointment booking and sending emails from the website), Cloudflare (form protection) and SmartEmailing (newsletter). The analytics tools that the website loads only with your consent are listed on the Cookies page.
If your enquiry leads to working together, we also keep your data in our firm's case management system.
We do not sell your data or pass it on to anyone else unless the law requires us to.
Some suppliers may also process data outside the European Union, particularly in the United States. Such transfers are then subject to safeguards under the GDPR, for example the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
- You can ask for access to the data we process about you and for a copy of it.
- You can ask us to correct inaccurate data.
- You can ask us to erase data we no longer need or process without a legal basis.
- You can ask us to restrict processing.
- You can object to processing based on our legitimate interest.
- You can receive the data you have given us in a machine-readable format.
- You can withdraw your consent at any time. This does not affect processing carried out before you withdrew it.
Simply write to sekretariat@behal.eu. We will reply without undue delay and within one month at the latest.
Some rights may be limited by duties the law places on us as a law firm, such as professional confidentiality or the duty to keep case files.
Where you can complain
If you believe we are not handling your data properly, you can lodge a complaint with the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7.
We would be glad, though, if you contacted us first.
Automated decision-making
A person always decides on your enquiry. We do not carry out automated decision-making or profiling under Article 22 GDPR.
Changes to this policy
We will update this policy when the website, our suppliers or the law change. The current version is always on this page.