FINREG PARTNERS, Law Firm, s.r.o.
Last updated: August 2026
This Policy explains how FINREG PARTNERS, law firm, s.r.o. (“FINREG PARTNERS” or “we”) processes personal data in connection with the provision of legal services, communications with clients and other individuals, marketing, recruitment and the operation of our website. We process personal data in accordance with the GDPR, relevant legislation and the rules governing the practice of law, including the duty of professional secrecy.
1. Data controller and contact details
The data controller is FINREG PARTNERS, law firm, s.r.o., with its registered office at Revoluční 1003/3, Staré Město, 110 00 Prague 1, registration number: 07123949, registered in the Commercial Register maintained by the Municipal Court in Prague under file no. C 295019 and on the register maintained by the Czech Bar Association.
For enquiries regarding the protection of personal data, please contact us at office@finregpartners.cz or at our registered office address.
2. What data do we process and where do we obtain it from
We process personal data to the extent necessary for our relationship with you and the nature of the specific matter, in particular identification and contact details, details of employment or professional status, data contained in documents and communications relating to legal services, data necessary for client identification, conflict of interest checks and the fulfilment of any AML obligations, data on the business relationship, invoicing and payments, data relating to marketing and events, and, in the case of job applicants, data on qualifications and work experience.
We obtain data directly from you or, particularly when providing legal services, from our clients and their representatives, counterparties and their advisers, courts and other public authorities, from public registers and databases, or from other sources relevant to the specific matter. We may therefore also process data relating to individuals who are not our clients. Depending on the nature of the matter, client files may also contain special categories of personal data or data relating to criminal convictions and offences; we process such data only to the extent permitted by law.
We fulfil our duty to provide information to the extent required by the GDPR. We are not obliged to provide individual information if any of the exceptions under the GDPR apply, in particular where the data must remain confidential in view of a statutory duty of professional secrecy.
3. Purposes and legal bases for processing
- The provision of legal services, negotiations regarding their provision, client relationship management and the monitoring of conflicts of interest: performance of a contract or pre-contractual measures (Article 6(1)(b) of the GDPR), compliance with legal obligations (Article 6(1)(c) of the GDPR) and/or the legitimate interests of FINREG PARTNERS, the client or another person (Article 6(1)(f) of the GDPR).
- Client identification and verification, AML/KYC, accounting, tax and other legal obligations: compliance with legal obligations (Article 6(1)(c) of the GDPR).
- Protection of legal claims, handling of complaints, risk management, system security and day-to-day office administration: the legitimate interests of FINREG PARTNERS or third parties (Article 6(1)(f) of the GDPR) and, where applicable, compliance with legal obligations (Article 6(1)(c) of the GDPR).
- Communication with clients and business contacts, legal updates, information about our services and events: legitimate interest (Article 6(1)(f) of the GDPR), or consent (Article 6(1)(a) of the GDPR) where required; we send electronic marketing communications in accordance with the relevant legislation.
- Recruitment of employees and contractors: pre-contractual measures (Article 6(1)(b) of the GDPR) and legitimate interest (Article 6(1)(f) of the GDPR); where data is retained for future recruitment processes, the legal basis may be consent (Article 6(1)(a) of the GDPR).
- Website operation and security, and the use of cookies: legitimate interest (Article 6(1)(f) of the GDPR) for technically necessary operation and security, and consent (Article 6(1)(a) of the GDPR) where required by law.
If the provision of data is necessary for the conclusion or performance of a contract or to comply with a legal obligation, and you do not provide us with the data, we may not be able to conclude a contract with you or provide the requested services.
4. Recipients and disclosure of data
We disclose personal data only to the extent necessary, in particular to our attorneys-at-law, employees and associates, IT providers, cloud, communications, accounting and other support services, and other specialist advisers involved in the client’s matter, clients, counterparties and their representatives, and courts or other public authorities, where this is necessary for the provision of legal services or the fulfilment of a legal obligation. In doing so, we always respect legal professional privilege.
Where personal data is transferred outside the European Economic Area, we do so only in accordance with the GDPR, in particular on the basis of an adequacy decision, standard contractual clauses or another mechanism permitted by the GDPR. We will provide you with further information on the safeguards used upon request, provided this is not prevented by a statutory duty of confidentiality.
5. Retention period and security
We retain personal data for as long as is necessary for the specific purpose and for any further period required by law or professional regulations, or as necessary to protect our rights and those of our clients. We determine the retention period primarily on the basis of the nature of the data and the matter in question, the relevant legal and professional obligations, and the applicable limitation periods. We retain data for marketing purposes until the relevant legal basis ceases to apply, in particular until consent is withdrawn or an objection is raised; we retain applicants’ data for the duration of the selection process and for a reasonable period thereafter.
We take appropriate technical and organisational measures to protect personal data and restrict access to it to those persons who need it to perform their duties and who are bound by a duty of confidentiality or professional secrecy.
6. Your rights
Under the terms of the GDPR, you have, in particular, the right to access your personal data, to have it rectified or erased, to restrict its processing, to data portability, and the right to object to processing based on a legitimate interest. Where processing is based on consent, you may withdraw your consent at any time. You may object to processing for direct marketing purposes at any time. You also have the right to lodge a complaint with the Office for Personal Data Protection (www.uoou.gov.cz).
These rights are not absolute and their exercise may be restricted in specific cases where permitted by the GDPR or other legislation, in particular with regard to the duty of professional secrecy, the protection of the rights and freedoms of others, or the protection of legal claims. We may carry out reasonable checks to verify your identity before processing your request.
7. Cookies, contact details and changes to the Policy
Details regarding cookies can be found in our separate Cookie Policy. Please send any enquiries regarding the processing of personal data and requests to exercise your rights to office@finregpartners.cz or to the address of our registered office. We may update this Policy; the current version will always be published on our website.