Privacy Policy
1. Data Controller
The data controller is JUDr. Dalibor Kiselica, attorney at law, Kiselica Law Office, Jarošova 1 (Jarošova Center), 831 03 Bratislava, Slovak Republic.
Contact email for data privacy queries and exercising rights: kiselica@kislegall.com, telephone: +421 905 618 945.
The controller practices law in accordance with Slovak Act No. 586/2003 Coll. on Advocacy and the professional rules of the Slovak Bar Association.
2. Contact Form and Consultation Booking
When submitting the contact form or consultation booking request, we process: full name, email address, phone number (if provided), company/organisation name, chosen legal area, proposed consultation date and format, message content, form language and security timestamp.
The purpose of processing is to handle your enquiry, conduct a conflict of interest check under bar rules, confirm consultation timing and protect the web form against abusive submissions.
The legal basis is taking pre-contractual steps at the data subject's request pursuant to Art. 6(1)(b) GDPR and legitimate interest in website security and anti-spam protection pursuant to Art. 6(1)(f) GDPR.
3. Legal Newsletter Subscription
When subscribing to our newsletter, we process your email address, language preference and confirmation timestamp.
The purpose is sending occasional curated legal updates, articles and office notices (approx. 1–2 times a month, strictly no spam).
The legal basis is your freely given consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time free of charge via the unsubscribe link in each email or by writing to kiselica@kislegall.com.
4. Office Assistant (Chatbot)
When interacting with the website assistant, the query text, language version and technical parameters are processed to generate a response and prevent abuse.
The assistant is intended solely for website orientation and first-contact guidance; it does not provide legal advice and does not substitute for an attorney consultation.
Do not share confidential documents or sensitive information in chat. Chat history is stored only in the browser's temporary session storage (sessionStorage) for the current tab and is automatically cleared when the tab is closed.
5. Data Retention Periods
Contact form enquiries are retained for the time necessary to handle the matter and establish client cooperation, up to 1 year following the conclusion of communication unless an attorney-client relationship is formed requiring statutory retention under the Advocacy Act.
Newsletter data is retained until you withdraw your consent or unsubscribe.
Technical anti-abuse and rate-limiting identifiers are held in server memory for only a few minutes to hours for DDoS and spam defense.
6. Processors and International Transfers
For technical delivery of contact form emails, we use Resend (Resend Inc., USA).
For managing newsletter subscribers, we use Brevo (Sendinblue SAS, France/EU).
For generating assistant answers, we use Google Gemini API (Google LLC / Google Ireland Ltd.) server-side only without direct browser exposure.
Transfers to third countries (e.g. USA) are secured via European Commission Standard Contractual Clauses (SCCs) and certification under the EU-US Data Privacy Framework.
7. Data Subject Rights
Under the GDPR, you have the following rights as a data subject:
• Right of access (Art. 15 GDPR) – confirmation and copies of processed personal data.
• Right to rectification (Art. 16 GDPR) – correction of inaccurate or incomplete data.
• Right to erasure ('right to be forgotten', Art. 17 GDPR) – when data is no longer necessary or consent is withdrawn.
• Right to restriction of processing (Art. 18 GDPR) under statutory conditions.
• Right to data portability (Art. 20 GDPR) in a structured, machine-readable format.
• Right to object (Art. 21 GDPR) to processing based on legitimate interests.
• Right to withdraw consent at any time (Art. 7(3) GDPR) without affecting the lawfulness of prior processing.
To exercise these rights, please contact kiselica@kislegall.com. We respond without undue delay and within one month.
If you believe your personal data is processed unlawfully, you have the right to lodge a complaint with the supervisory authority: Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27, https://dataprotection.gov.sk, email: statny.dozor@pdp.gov.sk.