Privacy Policy
A clear explanation of what data we process, why, and what rights you have.
The controller of personal data is Mgr. et Mgr. Miloslav Tutter, attorney-at-law, with a registered office at V Olšinách 2300/75, 100 00 Praha 10, e-mail info@superadvokat.com, telephone +420 778 652 731, Czech Bar Association registration number 18208. The designation “Super Advokát” below means this controller.
What personal data we process
- Identification and contact data: name, e-mail, telephone, billing details and data needed to identify the client.
- Order and payment data: services ordered, price, payment status and transaction identifiers. Full payment card details are processed by the payment service Stripe; Super Advokát does not store them.
- Case data: description of the situation, communications, documents and third-party data that you provide to us for assessment or for the provision of legal services.
- Form and chat data: the content of the message or conversation and your contact details, if you provide them voluntarily.
- Technical and operational data: IP address, request time, device and browser information, security logs, consent records and – after consent is granted – data on website usage and traffic source.
If you provide us with another person’s data, please do so only where it is necessary for your legal matter and you are authorised to do so. Do not send sensitive documents through the ordinary contact form or the AI chat; for case materials, use the secure upload we make available to you.
Purposes, legal bases and retention periods
| Purpose | Legal basis | Usual period |
|---|---|---|
| Handling an enquiry, pre-contractual communication | Negotiation of a contract and legitimate interest in keeping records of communication | For the duration of handling and subsequently for the period necessary to protect rights, as a rule no longer than 3 years, unless the enquiry becomes part of the client file |
| Order, payment and provision of the legal service | Performance of a contract and steps prior to its conclusion | For the duration of the service and subsequently in accordance with the attorney’s duties and the running of time limits for the protection of rights |
| Keeping the client file, accounting, taxes, identification and AML | Compliance with legal and professional obligations | For the period laid down by the relevant regulations; depending on the type of document this may be up to 10 years |
| Website protection, abuse prevention and request rate limiting | Legitimate interest in the secure operation of the service | For the necessary period according to the nature of the record; short-term limits usually hours to days |
| Analytics, advertising measurement and retargeting | Consent, which may be withdrawn at any time | Until consent is withdrawn or according to the period set for the specific tool |
We may extend a specific period where necessary because of an ongoing dispute, an inspection or a legal obligation. Afterwards we erase or anonymise the data.
Part of the erasure runs automatically: we delete the transcript of a conversation with the AI assistant after 12 months, the record of an enquiry from a form or chat after 3 years at the latest, and technical records of advertising clicks after 180 days. Orders and the client file are governed by the periods stated above.
Who may have access to the data
To the necessary extent we use in particular the following categories of recipients and suppliers:
- cooperating attorneys, employees and experts bound by confidentiality,
- Vercel for hosting and website performance, Supabase for the database, sign-in and document storage, and Upstash for abuse protection,
- Stripe for processing online payments and Resend for sending transactional e-mails,
- Cloudflare Turnstile for protecting forms against automated spam,
- Anthropic for the AI chat and automated assessment of abusive messages, where this feature is enabled,
- Google, Seznam and Vercel Analytics for analytics and advertising measurement according to your cookie choice.
With consent to marketing cookies, Google may receive an irreversible fingerprint (SHA-256 hash) of the e-mail and telephone number entered in a form in order to match an advertising conversion – never the e-mail or telephone number itself. After a completed and paid order, the server sends purchase data to Google Analytics (order number, amount and the Google Analytics visit identifier) so that the conversion is counted even if this fails in the browser.
We may also disclose data to public authorities where required by law. For suppliers with a registered office or infrastructure outside the European Economic Area, the transfer relies on the relevant legal mechanism, for example an adequacy decision or standard contractual clauses.
AI chat and automated tools
Text submitted to the AI chat is passed to the model provider in order to generate a reply. The AI chat provides only general orientation, does not replace legal advice, and its answer alone does not create an attorney-client relationship. A contact message may be assessed automatically solely in order to detect obvious spam or an attack; this is not decision-making with legal or similarly significant effects within the meaning of Article 22 GDPR.
Cookies and traffic measurement
Details of browser storage, analytics, Google Consent Mode and Sklik can be found in the cookie policy. Refusing optional cookies does not prevent you from ordering or using the legal services.
Your rights
Under the conditions of the GDPR you have the right to:
- obtain confirmation as to whether we process your data and request access to it,
- request rectification of inaccurate data or completion of incomplete data,
- request erasure or restriction of processing where the statutory conditions are met,
- obtain the data in a structured format and, where applicable, transmit it to another controller,
- object to processing based on a legitimate interest,
- withdraw consent at any time, without affecting the lawfulness of prior processing,
- lodge a complaint with the Office for Personal Data Protection.
Send your request to info@superadvokat.com. We will respond without undue delay, as a rule within one month. Because of attorney confidentiality, the rights of third parties or a legal obligation, the exercise of a particular right may be restricted; we will always explain the specific reason.
Supervisory authority
Office for Personal Data Protection, Pplk. Sochora 27, 170 00 Prague 7, uoou.gov.cz.
Effective and last updated on 20. srpna 2026. Previous versions are available on request.