Privacy Notice

The controller of personal data is:

JUDr. Anna Letriková, attorney-at-law
Registered office: M. R. Štefánika 6, 036 01 Martin, Slovak Republic
Business ID No.: 56125607
Slovak Bar Association registration No.: 8852

In this Privacy Notice, “we”, “us” and “our” refer to the controller identified above.

For questions relating to privacy or the processing of personal data, please contact:

JUDr. Anna Letriková
E-mail: anna.letrikova@tatralegal.com

We have not appointed a formal data protection officer. The privacy contact above is the contact point for data protection enquiries.

This Privacy Notice applies to personal data processed in connection with:

• use of this website;
• contact forms and legal enquiries submitted through the website;
• e-mail, telephone or other communications with us;
• prospective client relationships;
• the provision of legal services, where applicable;
• website security, spam prevention and pageview analytics.

This Privacy Notice does not replace any client engagement letter, professional terms or other information that may apply where we agree to provide legal services.

Depending on how you interact with us, we may process the following categories of personal data:

We process personal data only where we have a legal basis to do so.

The website provides two contact form paths:

• General Enquiry;
• AI & Tech Enquiry.

Contact form submissions are sent by e-mail to info@tatralegal.com.

For e-mail delivery, the website uses Websupport SMTP infrastructure. The sender address is enquiries@tatralegal.com, and the e-mail address submitted by the user is set as the reply-to address.

The contact form backend sends enquiry content by e-mail. It does not store submissions in a website database, does not use CRM integration and does not support file upload.

No auto-reply is currently implemented.

We use Cloudflare Turnstile to protect the contact forms from spam and automated misuse.

The website loads the Cloudflare Turnstile client script from https://challenges.cloudflare.com/turnstile/v0/api.js?render=explicit and explicitly renders the widget where the active contact form is displayed. The resulting token is sent with the form submission and verified server-side through Cloudflare Siteverify at https://challenges.cloudflare.com/turnstile/v0/siteverify.

Turnstile may involve the processing of technical information by Cloudflare, such as browser, device, interaction and network information, in order to verify that the form submission is legitimate.

Cloudflare challenge, security cookies or similar technologies may be used depending on Cloudflare’s operation, configuration and browser context. Further information is provided in the Cookie Notice.

The website currently uses cookies or similar technologies for these purposes:

• strictly necessary website operation and infrastructure;
• security and anti-spam protection, including Cloudflare Turnstile;
• Vercel Web Analytics pageview analytics.

The website does not currently use advertising cookies, marketing pixels, remarketing scripts, Google Analytics, Google Tag Manager, newsletter tracking or a broader optional-cookie stack. No website cookie banner or consent-management platform is currently implemented.

If the analytics or tracking implementation is expanded in the future to include non-essential cookies, custom events, marketing pixels, remarketing or similar tracking, this Privacy Notice, the Cookie Notice and any required consent setup will be reviewed and updated before such expansion is used.

We may share personal data with recipients and processors where necessary for the purposes described in this Privacy Notice.

These may include:

• Vercel for website hosting, deployment and Vercel Web Analytics;
• Websupport for domain, e-mail and SMTP infrastructure;
• Cloudflare Turnstile for anti-spam protection;
• IT, maintenance and technical service providers;
• professional advisers, auditors, accountants or other consultants where necessary;
• public authorities, courts, supervisory bodies or other recipients where required or permitted by law;
• counterparties, opposing parties, courts, notaries, experts, translators or other persons where necessary in connection with legal services.

If a transactional e-mail provider is later used because Websupport SMTP proves unsuitable, this Privacy Notice should be updated accordingly.

Some service providers may process personal data outside the European Economic Area.

Where personal data are transferred outside the European Economic Area, we will rely on a valid transfer mechanism under applicable data protection law, such as an adequacy decision, standard contractual clauses or another appropriate safeguard, where required.

We keep personal data only for as long as necessary for the purposes for which they are processed.

In particular:

• enquiry data are kept for as long as necessary to review and respond to the enquiry, manage related follow-up, maintain appropriate administrative records and protect legal interests;
• if an enquiry leads to an engagement, relevant data may be retained as part of the client file in accordance with applicable legal, professional, tax, accounting and limitation-period requirements;
• technical and security logs are kept according to provider or account configuration and for the period necessary for website operation, security, troubleshooting and abuse prevention;
• Vercel Web Analytics data are retained according to the applicable Vercel product or account configuration;
• Cloudflare Turnstile and security data are retained according to Cloudflare service configuration and policies;
• data required for legal, tax, accounting or professional obligations may be retained for the period required or permitted by applicable law.

Where a specific retention period cannot be stated in advance, we determine the period based on the nature of the data, the purpose of processing, legal and professional obligations, limitation periods and the need to protect legal interests.

Subject to the conditions and limits set out in applicable data protection law, you may have the right to:

• request access to your personal data;
• request rectification of inaccurate or incomplete personal data;
• request erasure of personal data;
• request restriction of processing;
• object to processing based on legitimate interests;
• request data portability, where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

To exercise your rights, please contact the privacy contact listed in this Privacy Notice.

We may need to verify your identity before responding to a request.

You have the right to lodge a complaint with the competent supervisory authority.

In Slovakia, the supervisory authority is:

Office for Personal Data Protection of the Slovak Republic
Úrad na ochranu osobných údajov Slovenskej republiky

You may also contact a supervisory authority in the EU Member State of your habitual residence, place of work or place of the alleged infringement.

Providing personal data through the website contact forms is voluntary.

However, if you do not provide the required information, we may not be able to review or respond to your enquiry.

Where we provide legal services, certain personal data may be necessary for the conclusion or performance of an engagement, compliance with legal or professional obligations, conflict checks, billing or matter administration.

We do not use personal data collected through this website for automated decision-making that produces legal effects concerning you or similarly significantly affects you.

Please do not submit confidential documents or sensitive matter details through the website contact form unless we specifically ask you to do so.

Submitting an enquiry through the website does not create an attorney-client relationship and does not mean that we are able to act for you. An attorney-client relationship is created only if we expressly agree to act.

We may update this Privacy Notice from time to time, especially if we change the website, contact form backend, analytics tools, anti-spam tools, service providers or legal requirements.

The current version will be published on this website.