REGU.LAW

Section · Legal information

Legal

Effective date · 21 September 2026

02

Privacy

This notice describes how personal data is handled in connection with this website and with initial enquiries to the practice. It is provided in line with Regulation (EU) 2016/679 (the General Data Protection Regulation) and the Czech Act on the Processing of Personal Data.

Controller and contact details

The controller of personal data processed in connection with this website and with client enquiries is the individual legal practice of Dominik Vítek (REGU.LAW). Questions about the handling of personal data can be sent to dominik.vitek@regu.law. The registered professional address is Brabcova 1159/2, Prague 4, Czech Republic.

How data is collected

Enquiries may be sent through the contact form on the home page or by email. Contact-form submissions are processed through the website's application backend and a notification is delivered to the practice by email. A copy of the submission is retained in the website backend for delivery reliability and enquiry handling. Direct email enquiries are processed through the email and IT services used by the practice.

Categories of personal data

Depending on how you contact the practice, the categories of personal data processed may include: identification and contact data (name, email address and, if provided, telephone number); employer or organisation details; matter area and relevant jurisdictions; the content of your enquiry; and technical data generated when the website is accessed (such as IP address, request metadata and request logs) and processed by the website hosting provider.

Purposes of processing

Personal data is processed to respond to enquiries, to assess whether the practice can accept a potential matter, including conflict and engagement checks, to operate and secure the website, and to comply with legal and professional obligations applicable to attorneys in the Czech Republic.

Legal bases

Processing relies on the following legal bases under Article 6(1) of the GDPR: Article 6(1)(b) where an individual asks the practice to take steps before entering into a legal-services agreement; Article 6(1)(f) for responding to business enquiries, assessing prospective matters, managing communications and operating and securing the website; and Article 6(1)(c) where processing is necessary to comply with legal or professional obligations.

Recipients and processors

Personal data is treated as confidential and protected by professional secrecy. It may be shared, where necessary, with independent professionals involved in a specific matter and with service providers acting on the controller's instructions. The website is hosted and operated using Macaly services provided by LANGTAIL.COM s.r.o., ID No. 198 68 987, Záhřebská 562/41, Vinohrady, 120 00 Prague 2, Czech Republic. Other service providers include the email and IT providers used by the practice. Where a matter requires it, data may also be shared with courts, authorities, counterparties or other recipients involved in that matter.

Transfers outside the EEA

Macaly states that the website and its data run on European infrastructure. Macaly may nevertheless use subprocessors outside the EEA. Where personal data is transferred outside the EEA, the applicable safeguards are those described in Macaly's data-processing terms, including recognised transfer mechanisms where required. Other service providers used by the practice may apply their own lawful transfer mechanisms where relevant.

Retention

Contact-form submissions retained in the website backend are automatically deleted after 180 days. Other enquiry data is kept for as long as reasonably needed to respond, assess the potential matter, carry out conflict and engagement checks and maintain an appropriate record of the enquiry. If an engagement is agreed, information relevant to the resulting client matter is handled under the retention requirements applicable to the legal practice.

Your rights

Under the GDPR you may request access to your personal data, rectification or erasure, restriction of processing, object to processing based on legitimate interests, and request data portability where it applies. You may also lodge a complaint with a supervisory authority; in the Czech Republic that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Czech Office for Personal Data Protection — website
www.uoou.cz

Whether providing data is required

You are not under any statutory or contractual obligation to provide personal data to the practice. However, without the contact and enquiry data needed to respond to a request, the practice will not be able to answer the enquiry.

Automated decision-making

No automated decision-making or profiling is used in connection with this website or with the handling of enquiries.

Effective date and updates

Effective date 21 September 2026. Future updates to this notice will be published on this page; where a change materially affects the handling of personal data, the practice will provide an appropriate notice.

03

Cookies and website technologies

This website does not use advertising or marketing cookies and does not set profiling or analytics cookies of its own. It does not use the browser's localStorage or sessionStorage for tracking or analytics purposes, and it does not embed third-party analytics, advertising or social-media widgets.

The website's fonts are bundled with the site and are not requested from Google Fonts. Images are served through Macaly's asset-delivery infrastructure, which may process standard connection data such as the visitor's IP address when an asset is requested. The contact form is processed through the site's application backend and uses Macaly's notification infrastructure to deliver the enquiry to the practice. No advertising, analytics or tracking pixel is added to the form.