Privacy policy

I am the controller of the personal data processed on this website: JUDr. Lenka Nehezová, attorney. I process personal data under Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on Personal Data Protection.

• Name: JUDr. Lenka Nehezová
• Registered office: Nitra, to be added
• Company ID (IČO): to be added
• E-mail: to be added
• Telephone: to be added

I process only the data you give me yourself in the form or by e-mail. The form does not ask for personal identification numbers, bank account numbers or copies of documents. Please do not send them.

I need the data marked as required in the form to deal with your enquiry. Without it I cannot deal with it. I do not store your IP address or device data in the enquiry database. To protect the form against abuse, the IP address is used only briefly in the server memory.

I process the following data:

• your name and, if you give it, the name of your company,
• your e-mail address and, if you give it, your telephone number,
• the municipality or cadastral area of the property,
• details of the transaction (type of property, your position in the transaction, expected signing date),
• the text of your message and any special circumstances of the case that you tick in the form.

My legitimate interest is to be able to reply to your messages and to document how the communication went. You may object to such processing, as described in the section Your rights.

I do not use the data for advertising or marketing and I do not sell it. I process it for the following purposes:

I keep data only for as long as the purposes above require. After that I delete it, unless a special regulation requires further retention. The retention periods are:

• enquiries that do not lead to a contract: 12 months from receipt of the enquiry,
• files and documents relating to legal services: for the period set by special regulations, in particular Act No. 586/2003 Coll. on the Legal Profession and the rules of the Slovak Bar Association,
• accounting documents: 10 years under section 35 of Act No. 431/2002 Coll. on Accounting.

I do not sell personal data and I do not transfer it outside the European Union. I disclose it to a public authority only where the law requires it, while observing confidentiality as described in the section Confidentiality.

To run the website and handle enquiries I use processors that act on my instructions under a contract pursuant to Article 28 GDPR:

• the hosting provider of the server on which the website runs (the server is located in the European Union),
• Supabase, the provider of the database in which enquiries are stored (database in the European Union),
• SiteGround, the provider of the e-mail service through which I receive and send e-mails.

This website uses only technically necessary storage, without which it would not work. I do not use analytical or marketing cookies and I do not run third-party tracking tools.

Technically necessary storage does not require consent under section 109(8) of Act No. 452/2021 Coll. on Electronic Communications. For that reason the site does not show a cookie consent banner.

You can exercise your rights by e-mail at to be added. I will reply within one month of receiving your request (Article 12(3) GDPR).

If you believe that your rights were infringed in the processing, you may lodge a complaint with the supervisory authority or a motion to initiate proceedings under section 100 of Act No. 18/2018 Coll.

The supervisory authority is the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk.

Under the GDPR you have the following rights:

• the right of access to your personal data (Article 15),
• the right to rectification of inaccurate data (Article 16),
• the right to erasure (Article 17),
• the right to restriction of processing (Article 18),
• the right to data portability (Article 20),
• the right to object to processing based on legitimate interest (Article 21),
• the right to withdraw consent where data is processed on that basis (Article 7(3)); withdrawal does not affect the lawfulness of processing before it.

I do not carry out automated individual decision-making or profiling within the meaning of Article 22 GDPR. I always decide on your enquiry personally.

As an attorney I am bound by a duty of confidentiality about all facts that I learn when providing legal services (section 23 of Act No. 586/2003 Coll. on the Legal Profession).

I treat the data in your enquiry as confidential and make it available only to the processors listed in the section Recipients and processors.

You can send questions about data protection to to be added or call to be added.

I may amend this notice, for example when the law or the services of the website change. The current text is always published on this page. Notice version: 2026-10.