Privacy policy

Last updated: August 2026

1. Data controller

The data controller depends on the service you request: for legal services, Mgr. Barbora Surmanová, attorney-at-law, Company ID (IČO) 72524243; for certified translations, Mgr. Jaroslav Surman, Company ID 68659059; for automation, training and AI consulting, Surman s.r.o., Company ID 29267421, entered in the Commercial Register kept by the Regional Court in Brno, Section C, File 69484. All are based at Rooseveltova 1011/39, 669 02 Znojmo, Czech Republic. The website surman.cz is operated by Surman s.r.o. Data protection contact: info@surman.cz.

2. Purposes and legal bases of processing

Handling enquiries

We process your contact details (name, email, phone) in order to respond to your enquiry or question.
Legal basis: consent (Art. 6(1)(a) GDPR) or legitimate interest (Art. 6(1)(f) GDPR).

Performance of a contract

Personal data necessary to provide the service ordered (translation, legal representation).
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).

Legal obligations

Archiving of invoices, tax documents and the law firm's files in accordance with the applicable legislation.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).

3. Retention periods

• Enquiries without a concluded contract: 1 year after they are dealt with.
• Contractual documentation: for the term of the contract and 10 years thereafter.
• Tax documents: 10 years under the Accounting Act.
• Lawyer's files: 5–10 years under the attorney tariff and the Legal Profession Act.

4. Your rights

As a data subject you have the following rights:

• Right of access to personal data (Art. 15 GDPR)
• Right to rectification of inaccurate or incomplete data (Art. 16 GDPR)
• Right to erasure, the “right to be forgotten” (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent at any time

To exercise your rights, write to info@surman.cz or by post to our office address. We will respond without undue delay and at the latest within one month.

5. Data security

We take appropriate technical and organisational measures to protect your personal data: encrypted transmission (HTTPS/TLS), restricted access to data (need-to-know principle) and secure document storage. Translations sent electronically are protected by encrypted communication.

6. Recipients of data

We do not sell or pass on your personal data to third parties for marketing purposes. Data may be shared with our accountants (tax obligations) and web hosting providers (technical operation of the website). All such transfers are covered by data processing agreements under Art. 28 GDPR.

7. Cookies

This website uses no cookies and no analytics or marketing tools. The contact form sends only the data you enter yourself; the server records your IP address solely for spam protection and for no longer than 24 hours.

8. Supervisory authority

You have the right to lodge a complaint with the Czech Office for Personal Data Protection (ÚOOÚ): www.uoou.cz | Pplk. Sochora 27, 170 00 Prague 7 | tel. +420 234 665 111.

9. Data protection contact

info@surman.cz, Rooseveltova 1011/39, 669 02 Znojmo, Czech Republic. We will respond to your enquiry or request without undue delay and at the latest within one month.

10. Out-of-court resolution of consumer disputes

If the client is a consumer, they have the right to out-of-court resolution of a dispute arising from the contract (Section 20d et seq. of Act No. 634/1992 Coll., on consumer protection). For the services of Surman s.r.o. and for translation services the competent body is the Czech Trade Inspection Authority (www.coi.cz); for the attorney's legal services it is the Czech Bar Association (www.cak.cz).