Privacy policy

Who we are

We are TULINSKY LEGAL s.r.o., a law firm with its registered office at Hrnčiarska 933/8, 040 01 Košice, company ID 57 465 339. Lawyer Mgr. Patrik Tulinský, LL.M. is registered with the Slovak Bar Association under registration no. 300422 and the Czech Bar Association under registration no. 19654. We are the controller of the personal data described on this page (referred to below as “we”).

For any question, request or exercise of rights concerning your personal data, contact us at advokat@tulinsky.sk or by post at our registered office.

When we process your data

As a law firm, we encounter your personal data mainly when:

• you send us an enquiry through our website form, by email, by telephone or through WhatsApp;
• you request a downloadable resource, such as a checklist or guide, in exchange for your email address;
• you submit a question to our legal Q&A;
• you book a consultation through our online calendar;
• we provide you with legal services; or
• you are involved in a client’s matter as an opposing party, business partner, witness or employee of the client.

We process data electronically and in paper files. We use appropriate technical and organisational measures for each processing activity. In addition to the GDPR, lawyers are bound by a statutory duty of confidentiality under Section 23 of Act No. 586/2003 Coll. on the Legal Profession.

How and why we process your data

1. Handling enquiries

Data we process: the information you send us in an enquiry: your name, email address, telephone number, description of the matter and any attachments. Attachments are stored in a protected, non-public folder on our server, and the enquiry is delivered to us by email.

Purpose and legal basis: assessing your enquiry, checking for conflicts of interest and preparing a response or proposal. The legal bases are steps taken before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in the proper practice of law (Article 6(1)(f) GDPR).

Retention: if the enquiry does not lead to an engagement, no longer than 12 months after it has been handled. We need this information to check for conflicts of interest in subsequent matters.

2. Providing legal services

Data we process: identification, contact and transaction data needed for your matter, typically your name, surname, date of birth or personal identification number, address, company ID, bank account number and the contents of documents you provide. Case files may also contain data about third parties, including opposing parties, witnesses, your employees or business partners. We use this data solely to conduct your matter.

Purpose and legal basis: performance of a legal services agreement (Article 6(1)(b) GDPR). For third-party data, the basis is our and our client’s legitimate interest in the practice of law and pursuing legal claims (Article 6(1)(f) GDPR). Processing personal data by a lawyer in the practice of law is also governed by Act No. 586/2003 Coll. on the Legal Profession.

Retention: during the engagement and subsequently for the period required by the rules governing the legal profession for retaining client files, usually 10 years after the matter ends.

3. Complying with legal obligations

Data and purpose: we must process some data because the law requires it (Article 6(1)(c) GDPR), particularly under accounting and tax legislation and, for specified services, anti-money laundering legislation (Act No. 297/2008 Coll.), under which lawyers are obliged entities and must identify clients.

Retention: for the period prescribed by the relevant legislation. We retain accounting records for 10 years (Section 35(3) of Act No. 431/2002 Coll. on Accounting) and data obtained through customer due diligence under AML rules for 5 years after the contractual relationship ends (Section 19(2) of Act No. 297/2008 Coll.).

4. Sending downloadable resources

Data we process: your email address and information about which resource you requested and from which page. This enables us to send the correct file and information on the topic that interests you.

Purpose and legal basis: sending the resource and marketing emails, including legal updates and offers of legal services, based on your consent (Article 6(1)(a) GDPR). You confirm your consent by clicking a link in a verification email (double opt-in). We will not send anything without that confirmation.

Retention: until you withdraw consent. You can unsubscribe at any time using the link in the footer of each email or by writing to us.

5. Questions for the legal Q&A

Data and purpose: we process the information in your question to answer it, on the basis of steps taken before entering into a contract and our legitimate interest (Article 6(1)(b) and (f) GDPR). We publish selected questions in the Q&A on this website only in anonymised form, without names, contact details or anything that could identify you. If publication were to include identifying information, we would do so only with your consent (Article 6(1)(a) GDPR), which you may withdraw at any time.

6. Booking consultations

Data and purpose: when booking through our online calendar, you provide your name, email address and chosen time. We need this information to hold the consultation (Article 6(1)(b) GDPR). Online booking is voluntary; you can also contact us by email, telephone or WhatsApp.

7. Protecting our rights

Data and purpose: we may also process data to establish, exercise or defend legal claims of our own or our clients (Article 6(1)(f) GDPR), for the duration of the limitation periods applying to those claims.

Who receives your data

We do not sell data. Access is limited to those who need it, and lawyers’ duty of confidentiality applies in relation to everyone:

• Hosting provider: the website and forms run on WebSupport servers in the European Union. Enquiry attachments are also stored there in a protected folder.
• Brevo email platform: we use it to send downloadable resources and follow-up emails. It acts as our processor under Article 28 GDPR.
• Cal.com booking tool: it processes appointment data as our processor.
• Courts and public authorities: where required by law or the practice of law, for example in submissions and representation in your matter.
• Cooperating lawyers and experts: where your matter requires it, for example substitute representation or cooperation with a foreign lawyer. They are always bound by confidentiality.

We have data processing agreements with our processors and use them only with appropriate safeguards.

Your rights

You have the right of access to your data, including information about what we process; rectification of inaccurate data; erasure; restriction of processing; portability of data you provided; and the right to object to processing based on legitimate interests. You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

Exercise your rights by emailing advokat@tulinsky.sk. We handle requests free of charge. Only where requests are manifestly unfounded or excessive, particularly because they are repetitive, may we charge a reasonable fee or refuse the request (Article 12(5) GDPR). Some rights may be limited by lawyers’ confidentiality obligations and the rules governing legal practice. If this applies, we will explain why.

If you believe we are processing your data unlawfully, you have the right to complain to the Office for Personal Data Protection of the Slovak Republic. We would appreciate the opportunity to address your concern first; most issues can be resolved directly.

Cookies

We do not use our own analytics or marketing tools on this website. The Google map on the contact page loads only after you select “Show Google map”. Until then, the embedded map does not connect to Google. Once displayed, Google may use cookies and process visit data, such as your IP address and browser information. Selecting “Close map” removes the embedded map; it does not delete data already sent to Google. Google privacy policy.

Effective date

This policy takes effect on 1 August 2026. If our processing changes, we will publish an updated version here.