Privacy Notice | Matúš Mesarčík

Controller

Who is responsible for your personal data?

The controller is Matúš Mesarčík, attorney at law, registered with the Slovak Bar Association under registration number 9428 (the “Law Office”, “I”, “me” or “my”).

Official business name: doc. JUDr. Matúš Mesarčík, PhD., LL.M - advokát
Office address: Záborského 18, 05201, Spišská Nová Ves
Business ID / IČO: 51480573
Email: matus@mesarcik.com

You may use the above contact details for questions about this notice or to exercise your data-protection rights.

Legal framework

Rules governing the processing

Personal data are processed in accordance with Regulation (EU) 2016/679 (the “GDPR”), Act No. 18/2018 Coll. on Personal Data Protection, Act No. 586/2003 Coll. on the Legal Profession, the professional rules of the Slovak Bar Association and other applicable legislation.

Processing connected with legal services is also subject to the statutory duty of professional confidentiality. This duty may affect whether and to what extent information can be disclosed in response to a data-subject request.

Purposes and legal bases

Why personal data are processed

Provision of Legal Services

Personal data are processed to assess requests for legal assistance, conduct conflict checks, establish and manage the attorney–client relationship, provide legal advice, prepare legal documents, represent clients, communicate with clients and other participants, and comply with professional and statutory duties applicable to attorneys.

The legal bases are Article 6(1)(b) GDPR, where processing is necessary to take steps at the request of a prospective client or to perform a contract for legal services, and Article 6(1)(c) GDPR, where processing is necessary to comply with a legal obligation.

Where the provision of legal services requires the processing of personal data relating to persons other than the client, processing may also be based on Article 6(1)(f) GDPR and the legitimate interest in properly protecting and representing the client’s rights and interests.

Establishment, Exercise or Defence of Legal Claims

Personal data may be processed where necessary to establish, exercise or defend the legal claims of the Law Office, including in connection with contractual disputes, unpaid fees, complaints, professional-liability matters, judicial or administrative proceedings, and out-of-court negotiations.

The legal basis is Article 6(1)(f) GDPR. The legitimate interest pursued is the protection and enforcement of the Law Office’s legal rights and the defence against claims asserted against it.

Special categories of personal data and criminal-offence data

If a legal matter requires the processing of special categories of personal data, such processing is carried out only where an exception under Article 9 GDPR applies, in particular where processing is necessary for the establishment, exercise or defence of legal claims under Article 9(2)(f) GDPR. Personal data relating to criminal convictions and offences are processed only where permitted by Article 10 GDPR and applicable Slovak law.

Data and sources

What information may be processed?

Depending on the nature of the legal matter, the following categories of personal data may be processed:

identification and contact data;
information necessary for conflict checks and client identification;
contractual, billing and payment-related information connected with legal services;
communications, instructions, documents and evidence relating to a legal matter;
information about professional, family, financial or other circumstances relevant to the matter;
special categories of personal data or criminal-offence data where necessary and legally permitted;
procedural information and records of interactions with courts, public authorities and other participants.

Personal data may concern clients, prospective clients, representatives and employees of clients, counterparties, witnesses, experts, authorised representatives, participants in proceedings and other persons connected with a legal matter.

Sources of personal data

Personal data are obtained primarily from clients and prospective clients. They may also be obtained from the data subject, counterparties, courts and public authorities, other participants in proceedings, cooperating professionals, publicly accessible registers and databases, publicly available sources, and documents or evidence provided in connection with a legal matter.

Is providing personal data mandatory?

Providing personal data is generally voluntary. However, certain information may be necessary to take pre-contractual steps, provide legal services or comply with statutory and professional duties. If the necessary information is not provided, the Law Office may be unable to accept an instruction, may have to limit the services provided, or may be legally required to refuse or discontinue the provision of legal services.

Recipients

Who may receive personal data?

Personal data are disclosed only where necessary, proportionate and legally permitted, and with due regard to professional confidentiality. Recipients may include:

authorised staff, cooperating attorneys and other persons participating in the provision of legal services;
courts, law-enforcement bodies, administrative authorities, the Slovak Bar Association and other public bodies;
notaries, enforcement officers, experts, translators, interpreters and other regulated professionals;
counterparties and their representatives where disclosure is necessary for a legal matter;
providers of secure IT, hosting, cloud-storage, email, document-management and technical-support services acting under appropriate contractual and confidentiality safeguards;
insurers, auditors or external advisers where necessary for the establishment, exercise or defence of legal claims.

Transfers outside the European Economic Area

No transfer of personal data outside the European Economic Area is intended as part of the ordinary provision of legal services. If a transfer becomes necessary, it will take place only in accordance with Chapter V GDPR, for example on the basis of an adequacy decision, appropriate safeguards under Article 46 GDPR, or another applicable legal mechanism.

Retention

How long are personal data kept?

Personal data are retained only for as long as necessary for the relevant purpose and in accordance with statutory duties, professional rules, limitation periods and archiving requirements applicable to attorneys.

Provision of legal services

Data are retained for the duration of the engagement and afterwards for the period required by applicable legislation and the rules of the Slovak Bar Association. Client files are generally subject to a ten-year retention period after the conditions for placing the file in the archive have been met, unless a longer or different period applies or destruction is prohibited.

Legal claims of the Law Office

Data are retained for the duration of the relevant negotiations, dispute or proceedings and, afterwards, until the expiry of the applicable limitation or prescription periods. Data may be retained longer where this is necessary because of pending or reasonably anticipated proceedings, a legal hold, a professional obligation or another statutory requirement.

Your rights

Data-subject rights

Subject to the conditions and limitations laid down by the GDPR and applicable Slovak law, you may have the right to:

obtain confirmation as to whether your personal data are processed and request access to them;
request rectification of inaccurate or incomplete personal data;
request erasure of personal data where the legal requirements are met;
request restriction of processing;
receive personal data in a portable format where processing is based on a contract and carried out by automated means;
object, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR.

These rights are not absolute. In particular, access, information, portability, erasure or other requests may be restricted where compliance would prejudice professional confidentiality, the rights and freedoms of another person, or the establishment, exercise or defence of legal claims. The Law Office may need to verify your identity before acting on a request.

Requests may be sent to matus@mesarcik.com. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.

Automated decision-making

The Law Office does not use automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you within the meaning of Article 22 GDPR.

Website and email

Contact through this website

This website does not provide a contact form. If you select an email link, your email application will open and any information you decide to send will be processed in accordance with the relevant purpose described in this notice.

The website is not intended to collect personal data for marketing, newsletter distribution, behavioural profiling or advertising. Information about cookies and similar technologies is provided separately in the Cookies Notice.

Updates

Changes to this notice

This notice may be updated where processing activities, professional rules or applicable legislation change. The current version will always be published on this page.

Last updated: 5 October 2026