Privacy Policy
What personal data we process, why, for how long and what rights you have. Effective from 13 October 2026.
Controller
Bold Legal s.r.o., Company ID No. (IČO) 072 14 901, with its registered office at Karlínské náměstí 235/13, 186 00 Prague 8, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 296879. Contact for data protection matters: [email protected], tel. +420 608 758 625.
As attorneys, we are bound by the duty of confidentiality under the Legal Profession Act. This duty covers all information we learn in connection with the provision of legal services.
Purposes, legal basis and storage period
| Purpose | Data | Legal basis | Storage period |
|---|---|---|---|
| Booking an initial consultation, replying to enquiries and handling call-back requests | name, e-mail, telephone, company, description of the situation, documents you send us | steps prior to entering into a contract (Article 6(1)(b) GDPR) | until the enquiry has been dealt with; if no engagement follows, no longer than 12 months |
| Free trade mark clearance search and the related quote | trade mark name, goods and services, name, e-mail and, where applicable, telephone and company | steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) | unconfirmed request: 7 days; after the report has been sent: 90 days; contact in the CRM: no longer than 12 months if no engagement follows |
| Provision of legal services | identification and contact data, information about the matter | performance of a contract (Article 6(1)(b) GDPR) | for the term of the contract and thereafter for the period for which attorneys' files are archived under the professional rules of the Czech Bar Association |
| Compliance with legal obligations (client identification and due diligence, accounting) | identification data, copies of identity documents, billing data | legal obligation (Article 6(1)(c) GDPR) | for the period laid down by law, e.g. 10 years under Act No. 253/2008 Coll. |
| Website traffic measurement (Google Analytics) | browser identifier in cookies, information about the device and approximate location, pages visited and actions on the website (e.g. submitting a form) – without name, e-mail or form content | your consent (Article 6(1)(a) GDPR and Section 89(3) of Act No. 127/2005 Coll.) | no longer than 14 months; cookies no longer than 13 months |
| Operation and security of the website | IP address, browser data and time of access (technical logs) | legitimate interest in the secure operation of the website (Article 6(1)(f) GDPR) | as a rule, no longer than 30 days |
Providing data for bookings and for the provision of services is voluntary, but without them we cannot provide the consultation or the service. You are required to provide the data needed to comply with legal obligations.
Recipients of personal data
Personal data are processed only by the firm's attorneys and employees, who are bound by confidentiality. For technical operation, we use the following processors:
- Wix.com Ltd. (Israel) – website content management, booking system and storage of booking data. Israel is a country covered by a European Commission adequacy decision.
- Google Ireland Limited (EU) – the firm's e-mail account (Google Workspace), including confirmation e-mails and clearance search reports.
- Google Ireland Limited (EU) and Google LLC (USA) – website traffic measurement (Google Analytics), only with your consent. Transfers to the USA take place on the basis of the EU–U.S. Data Privacy Framework.
- Artificial intelligence tools – to assist in assessing trade mark search results; the outcome is always reviewed by an attorney.
- Cloudflare, Inc. (USA) – website hosting and security (technical logs). Transfers to the USA take place on the basis of the EU–U.S. Data Privacy Framework.
We also disclose personal data to public authorities where required to do so by law and, in the course of providing our services, to opposing parties, courts and authorities to the extent necessary for your matter.
Cookies and traffic measurement
Strictly necessary: a technical access token for the booking system and forms (Wix) and storage of your consent choice in the browser. The website does not work without them; no consent is required for them.
Analytics: we use Google Analytics (cookies _ga and _ga_*, valid for no longer than 13 months) only with your consent, which you give in the cookie banner on your first visit. It helps us find out which pages and forms are useful to people. You can withdraw your consent at any time via the “Cookie settings” link in the website footer; the withdrawal does not affect processing carried out before it.
We do not use advertising cookies.
Your rights
Under the GDPR, you have the right:
- to withdraw consent, where processing is based on consent (Article 7(3))
- of access to personal data (Article 15)
- to rectification (Article 16)
- to erasure (Article 17)
- to restriction of processing (Article 18)
- to data portability (Article 20)
- to object to processing based on legitimate interest (Article 21)
- not to be subject to a decision based solely on automated processing (Article 22)
Send your request to [email protected]. We will reply without undue delay and within one month at the latest. Some rights are limited by the attorney's duty of confidentiality and other statutory obligations of attorneys.
Supervisory authority
You have the right to lodge a complaint with the Office for Personal Data Protection (Úřad pro ochranu osobních údajů), Pplk. Sochora 27, 170 00 Praha 7, uoou.gov.cz, tel. +420 234 665 111.
Changes to this policy
We may update this policy, for example when our services or processors change. The current version, with its effective date, is always available on this page.