Who processes your personal data

Your personal data will be processed by ACCEPTUM, s. r. o., with its registered office at Záhradnícka 36, 821 08 Bratislava – Ružinov district, Company ID No.: 36 863 459.

Our contact details are:

• Mailing address: Záhradnícka 36, 821 08 Bratislava – Ružinov district
• Phone: +421905972198
• Email: office@acceptum.sk
• Contact person: Juraj Zachar, Esq., attorney and managing director.

 Why We Process Personal Data

The processing of personal data is necessary for us primarily so that we can:

• provide legal services to our clients and practice law in accordance with the Act on the Legal Profession, as well as provide non-legal services in accordance with Act No. 315/2016 Coll. on the Register of Public Sector Partners and on Amendments to Certain Acts, as amended (hereinafter also referred to as the “Act on the Register of Public Sector Partners”) (hereinafter, legal services and non-legal services collectively referred to as “services”);
• fulfill various statutory, professional, and contractual obligations; and
• protect the legitimate interests of us, our clients, and other people.

Email: office@acceptum.sk

We process personal data for the following purposes

1. Provision of legal services

• Purpose: Provision of legal advice, representation, and other legal services
• Legal basis: Performance of a contract (Article 6(1)(b) of the GDPR) and compliance with the statutory obligations of an attorney under Act No. 586/2003 Coll. on the Legal Profession (Article 6(1)(c) of the GDPR)
• Data categories: First name, last name, date of birth, personal identification number, address, contact information, details of the legal matter
• Retention period: For the duration of the provision of legal services and subsequently for 10 years from the termination of representation (Section 23(8) of the Act on the Legal Profession)

2. Booking a consultation via the website

• Purpose: Processing the request for a legal consultation, scheduling an appointment, and processing payment
• Legal basis: Performance of a contract (Article 6(1)(b) of the GDPR)
• Data categories: First name, last name, email, phone number, preferred date, brief description of the legal situation
• Retention period: 3 years from the provision of the consultation

3. Accounting and tax obligations

• Purpose: Bookkeeping, issuing invoices, fulfilling tax obligations
• Legal basis: Compliance with a legal obligation (Article 6(1)(c) of the GDPR) – Act No. 431/2002 Coll. on Accounting, Act No. 222/2004 Coll. on VAT
• Data categories: Billing information, payment transactions
• Retention period: 10 years (statutory retention period for accounting documents)

4. Analytical cookies (Google Analytics)

• Purpose: To analyze website traffic and improve the user experience
• Legal basis: Consent (Article 6(1)(a) of the GDPR)
• Data categories: IP address (anonymized), browser data, pages visited, time spent on the site
• Retention period: 26 months (Google Analytics)
• Note: Analytical cookies are activated only after you give your consent via the cookie banner

5. Communication with potential clients

• Purpose: Handling inquiries, phone calls, and email communication from individuals interested in legal services
• Legal basis: Legitimate interest in the controller (Article 6(1)(f) of the GDPR) — handling inquiries related to the scope of business
• Data categories: Name, email address, phone number, message content
• Retention period: 1 year from the last communication, unless a contract is concluded

Use of Personal Data for Marketing or Other Business Purposes

With regard to the processing of personal data that you send us via the contact form, we do not process your personal data for marketing purposes, but only for the purpose of responding to the inquiry you have submitted. Of course, in some cases this may result in commercial communication.

Visiting our website

When visiting our website, you are not required to provide us with your personal data. Of course, you may do so voluntarily by filling out the contact form.

Filling out the contact form

If you fill out the contact form, we will process the personal data you provide in the contact form.

Profiling

Profiling refers to any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a specific natural person.

We do not engage in automated individual decision-making or profiling within the meaning of Article 22 of the GDPR.

Transfer of Personal Data to Third Countries

We process your personal data primarily within the European Union and the European Economic Area. We do not intend to transfer your personal data to third countries. Your personal data is not processed outside the territory where the common rules set forth by the General Data Protection Regulation apply. The free movement of data within the member states of the European Union is guaranteed by this Regulation.

Your Rights

The General Data Protection Regulation (GDPR) provides you with extensive options for exercising your rights regarding the protection of your personal data and control over how it is processed.

As a data subject, you have the following rights under the GDPR:

• Right of access (Article 15 of the GDPR) — You have the right to obtain confirmation as to whether your personal data is being processed, and if so, you have the right to access it. If you ask us to do so, we will provide you with information on whether and to what extent we are processing your personal data. You also have the right to request a copy of the data being processed. We may charge a reasonable fee corresponding to our administrative costs for any additional copies you request. If you submit your request electronically, we will provide the information to you in a commonly used electronic format as a standard practice, unless you expressly request a different method of delivery.
• Right to Rectification (Article 16 of the GDPR) — you have the right to have inaccurate personal data corrected and to have incomplete data completed. We strive to ensure that all personal data we process is up-to-date, accurate, and complete. However, if you discover any inaccuracies in our data, you may request the rectification of personal data (if you find that it is incorrect) or request the completion of incomplete data (if you find that it is incomplete).
• Right to erasure (Article 17 of the GDPR) — you have the right to request the erasure of your personal data if the purpose of processing no longer applies or if the processing is not justified by a legal basis
• Right to restriction of processing (Article 18 of the GDPR) — You have the right to request that processing be restricted in the cases specified by the GDPR. Restriction of processing means that, with the exception of storage, such personal data is processed only with your consent or only to the extent necessary to establish, exercise, or defend legal claims, or to protect the rights of another natural or legal person, or for reasons of substantial public interest of the European Union or a Member State.

If we restrict the processing of your data and the reasons for the restriction later cease to exist, we will inform you of this before the restriction on processing is lifted.

• Right to data portability (Article 20 of the GDPR) — you have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object (Article 21 of the GDPR) — you have the right to object to processing based on a legitimate interest.
• Right to withdraw consent (Article 7(3) of the GDPR) — if the processing is based on consent, you have the right to withdraw that consent at any time without affecting the lawfulness of the processing prior to its withdrawal. You may withdraw your consent in writing to our mailing address or by sending an email to office@acceptum.sk, stating that you are withdrawing your consent to the processing of personal data.

Withdrawing consent does not affect the lawfulness of the processing we carried out prior to the withdrawal of consent; however, it prevents us from further processing your data for the purposes for which we required your consent to the processing of personal data.

• Right to lodge a complaint — If you believe that your rights regarding personal data have been violated, you have the right to lodge a complaint with the supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27 (www.dataprotection.gov.sk).

You can exercise your rights in person, by mail to our mailing address, or by email at office@acceptum.sk.

We will endeavor to process your request as soon as possible, typically within one month of receiving it. If your request is complex and its processing will be time-consuming, we may (in accordance with the General Data Protection Regulation) extend this period by an additional two months if necessary. We will inform you of the extension within one month of receiving your request and provide you with the reasons justifying the extension.

If we have doubts about your identity, we may, for security reasons, ask you to provide additional information necessary to confirm your identity, e.g., submitting a request with an officially certified signature or presenting an identity document.

In accordance with the General Data Protection Regulation, we have the right to refuse manifestly unfounded or excessive requests (particularly due to their repetitive nature) or to charge a reasonable fee taking into account the administrative costs of providing the information, notification, or taking the requested action.

Data Protection Officer

The controller is not required to appoint a data protection officer under Article 37 of the GDPR, as it does not meet the conditions set forth in that article. For matters related to personal data protection, you may contact the controller directly using the contact information provided in the section titled “Who Processes Your Personal Data.”

Changes to Processing Information

We may update this information regarding the processing of personal data from time to time. The current version is always available on this page. We will notify you of any significant changes via our website.

Sources of personal data

We primarily obtain personal data directly from the data subjects (clients). While providing legal services, we may also obtain personal data from publicly available sources (land registry, commercial register, debtors’ register) and from public authorities (courts, administrative authorities) to the extent necessary to protect the client’s rights and legitimate interests.

Security of Personal Data Processing

We employ various security, technical, and organizational measures to ensure the security of the data we process, including personal data, and to prevent unauthorized access, alteration, misuse, deletion, or loss of such data. At the same time, we ensure that such measures are also used by third parties to whom we have entrusted your personal data, and that they respect the confidential nature of any data entrusted to them, particularly your personal data, and strictly adhere to their duty of confidentiality in relation to it.

Changes to the Privacy Policy

For us, the protection of personal data is not a one-time or merely formal matter. The information we are required to provide to you regarding the processing of personal data in connection with our services may change or become outdated due to technical, technological advancements, and/or changes in legal regulations governing personal data protection, or changes in the enforcement practices of relevant public authorities, particularly the Slovak Data Protection Authority. For these reasons, we reserve the right to amend and modify these terms at any time and to any extent. If we make a material change to these privacy terms, we will notify you of such change, e.g., through a public announcement on this website or a specific notice addressed to you, sent via email.

If you would like more information regarding the processing of your personal data, please contact us at office@acceptum.sk.

This Privacy Policy is effective as of May 31^st, 2026.