Identity and contact details of the personal data administrator
The protection of data and protection of your personal data in particular is very important to us; therefore, we would like to inform you about the methods of processing and protection of personal data that takes place in the course of the operation of the www.nirris.cz web site (hereinafter referred to as the “web site“) and in the discharge of the insolvency trustee’s office by NIRRIS s.r.o., advokátní kancelář, with its registered office at Národní 973/41, 110 00 Prague 1, ID no.: 178 77 130 (hereinafter referred to as “Z/C/H Legal“).
The personal data administrator is an entity which processes your personal data and determines the purpose and means of processing it. The personal data administrator for the purpose of the web site operation and discharge of the insolvency trustee’s office is NIRRIS.
Personal data and how to obtain it
Processing of personal data in web site operation
Personal data is not only the basic identification data of a natural person, such as the name, address, telephone number or date of birth, but also a computer‘s IP address and other location data.
When you visit our web site, information about the use of the web site is automatically collected and evaluated. For the purposes of statistical surveys and to ensure the safety and stability of the system, certain data is evaluated and stored on our web server every time you visit our web site. Your web browser will automatically provide data to our web server for technical reasons when you access our web site. Among other things, it is the date and time of access, the URL referring to web sites, the file being viewed, the volume of data sent, the type and version of the browser, the operating system and your IP address. This data is stored separately from other data you enter in the use of our web site. It is not possible to assign this data to a particular person.
Therefore, when operating our web site, your personal data is collected and processed for the purpose of ascertaining the web site visitors‘ rate or the information about the web site traffic, as well as for the purpose of improving the web site content.
In addition to the above, we are collecting and processing only such data that you provide to us by entering it into our contact form within the scope of your name, surname, email address and possibly your telephone number. The purpose of such processing is to handle your inquiry or comments, while your personal data is stored for as long as your inquiry or comment is being processed, but for a maximum period of 3 months.
Processing of Personal Data for Newsletter Subscription
If you check the box “I want to receive NIRRIS news” when filling out the contact form, or if you enter your email address through a pop-up window inviting you to subscribe to our newsletter, we will include you in our list of subscribers for updates about our activities, events, and service offerings sent to your email inbox. You can unsubscribe at any time by clicking the “Unsubscribe from NIRRIS news” link in the footer of every received email or by sending a request to the email address nirris@nirris.cz. We process your personal data for these purposes for a period of 3 years. The legal basis for processing personal data in this case is your consent.
Processing of Personal Data During Webinar Organization
When organizing a webinar, your personal data is collected and processed to ensure your participation in the webinar and to facilitate its effective execution.
During your participation in our webinar and after its conclusion, essential information about your participation is automatically collected and generated. Specifically, this includes the “Participant ID” assigned to you by the webinar hosting system, your name and surname, “UserAgent” (i.e., information about your software environment used to participate in the webinar, such as your operating system, browser type, and version), your “actions” (e.g., joining or rejoining the webinar, leaving the webinar), the timing of your “actions,” and your “role” (in this case, your role is “webinar participant”). This data is stored separately from other data provided during your webinar registration and can be linked to your identity.
Apart from the data mentioned above, we collect and process only the information you voluntarily provide by filling out our webinar registration form, specifically your name, surname, email address, and organization name. The purposes of such processing are: (i) ensuring your participation in the webinar, (ii) obtaining your feedback on the webinar, and (iii) sending marketing communications, particularly invitations to other webinars organized by our company.
The legal bases for processing your personal data are: (i) the performance of the webinar, (ii) our legitimate interest in processing personal data, and (iii) your consent to process personal data for marketing purposes. We will process your personal data for these purposes for a maximum of 3 years.
Processing of Personal Data in the Practice of Advocacy
In connection with the practice of advocacy (provision of legal services), we process personal data exclusively for the purpose of providing legal services in accordance with the Advocacy Act and for activities directly related to these services.
For this purpose, we primarily process identification data (name, surname, title, date of birth, company ID, tax ID, ID card number), contact data (address, phone number, email address), and financial data (bank account number). Additionally, we process personal data necessary for the provision of the requested legal services.
For our clients, we prepare a newsletter in which we inform them about legal updates, news about our activities, organized events, and service offerings. For the purpose of sending the newsletter, we process the identification and contact data of our clients under the legal basis of our legitimate interest.
In the practice of advocacy, we are also required to fulfill obligations as a reporting entity under Act No. 253/2008 Coll., on Certain Measures Against Money Laundering and Terrorist Financing (“AML Act”), particularly when managing escrow accounts, providing specific services under the AML Act, and fulfilling obligations related to client identification and due diligence. For this purpose, we process identification data (name, surname, personal identification number, date of birth, place of birth, gender, address of residence, citizenship, type and number of identity document, validity period and issuing authority, and, for entrepreneurs, company name, registered office, and identification number), contact data, financial data, information about requested services and services provided, details of related persons, information about politically exposed persons or the application of international sanctions, information about the beneficial owner, and other necessary data.
For the purposes of complying with obligations under the AML Act, we are authorized to make copies or extracts of submitted documents and process the information obtained. We process personal data on the legal basis of fulfilling our legal obligations. Data obtained in connection with compliance with AML obligations must be retained for a period of 10 years from the provision of the legal service.
Processing of Personal Data in the Performance of the Insolvency Administrator Function
In the performance of the function of an insolvency administrator, we collect and process personal data solely in connection with the insolvency proceedings of the debtor for whom we act as the insolvency administrator and in compliance with the obligations imposed on us as an insolvency administrator by generally binding legal regulations.
The processing of personal data is necessary for all activities related to the performance of the insolvency administrator function, to ensure the proper conduct of insolvency proceedings, and for the management of the insolvency file.
In connection with insolvency proceedings, we process the debtor’s personal data, which include, in particular, identification and contact data as well as any other data provided to us by the insolvency court. Additionally, we process information about the debtor’s financial and family circumstances, employment details, and any information provided to us by third parties as part of their obligation to cooperate with the insolvency administrator in accordance with Section 43 and subsequent sections of the Insolvency Act.
We also process all technical data related to communication with the debtor, such as the date, time, and duration of mutual communication, as well as any additional information disclosed to us by the debtor during the communication that is relevant to the insolvency proceedings. Furthermore, we process records of mutual communication with the debtor in the form of telephone call recordings and written notes. The debtor is always informed prior to the start of the call that the conversation will be monitored. If the debtor does not wish the call to be monitored, they may decline monitoring before the call begins and contact us via the email address insolvence@nirris.cz.
The period for processing personal data in connection with insolvency proceedings is limited to the time when the data is genuinely needed or required to be processed under legal regulations. Therefore, we will actively process the aforementioned personal data for the duration of the relevant debtor’s insolvency proceedings and will archive the data in compliance with legal regulations once the proceedings are concluded.
Processors of Personal Data
We cannot manage the operation of our websites, organization of webinars, the practice of advocacy, or the activities of an insolvency administrator on our own. Therefore, we rely on the services of other companies acting as processors of personal data. We carefully vet every potential processor, and only those who provide sufficient guarantees that they process personal data in compliance with the same principles we follow are allowed to assist us.
Processors in this area primarily include providers of web hosting, server, and cloud services, as well as providers of online conferencing and video call services (e.g., Microsoft Office 365, Microsoft Teams). Additionally, we work with providers of analytical, advertising, and marketing services that help us improve and optimize the use of their platforms (e.g., Google Analytics, Google Ads, Smartemailing, Sklik, LinkedIn, Facebook). We also engage advertising, marketing, and analytical agencies that assist us with website development, campaign management and operation, and the collection and processing of our data.
Processors in this capacity primarily include providers of software or technical support services and service providers related to the sale or mediation of the sale of real estate in insolvency proceedings. These processors assist us in ensuring the proper conduct of insolvency proceedings, which are necessary for the effective performance of the insolvency administrator’s function.
Website Security
The technical and organizational security measures we use are designed to protect all data you provide to us against both accidental and intentional manipulation, loss, destruction, or access by unauthorized persons. NIRRIS continuously develops and improves its security measures in line with technological advancements. To secure the website, we utilize the SSL protocol, which ensures the encryption of transmitted data and server authentication through digital certificates.
Cookies
We use cookies in the operation of our website. A cookie is a piece of information sent by a web server to a browser, which the browser then sends back during subsequent visits to the same server.
Cookies allow information to be stored between visits to a website. These files enable the web server, analytics, or advertising system to re-identify the visitor’s browser, and thus the visitor, or to maintain their identification even after leaving the website. The types of cookies we use include:
You can manage your cookies through your browser. You always have the option to delete cookies already stored. Depending on your browser, it is also possible to restrict the use of cookies for specific websites, limit their storage, or set up automatic deletion of all cookies when the browser is closed.
We Use the Following Cookies on Our Website
Your Rights Regarding the Processing of Personal Data
In connection with the processing of your personal data, you may exercise the following rights with us:
Right of Access
Under your right of access, you are entitled to know whether your personal data is being processed. If we do process your personal data, you have the right to access your personal data and receive information about its processing.
The right of access also includes the right to be provided with a copy of your personal data. We will provide the first copy of your personal data free of charge. If there is an abuse of the right of access on your part, such as repeatedly submitting unfounded requests, we are entitled to charge a fee that corresponds to the administrative costs of handling your request before processing it.
Right to Rectification or Completion
If you believe that the personal data we process about you is inaccurate or incomplete, you have the right to request the rectification of your personal data.
Right to Data Portability
The right to data portability gives you the right to request that we transfer your personal data, which you have provided to us in a structured and machine-readable format, to another data controller, provided it is technically feasible.
Right to Restrict Processing
Under the right to restrict processing, you have the right to request that we restrict the processing of your personal data if any of the following conditions are met:
Right to Erasure (“Right to Be Forgotten”)
Under the right to erasure, you have the right to request that we delete your personal data if any of the following conditions are met:
We will not delete your personal data if there are other reasons for continuing to process it. This includes situations where processing is necessary for the establishment, exercise, or defense of our legal claims or for the fulfillment of our legal obligations under generally binding legal regulations.
Right to Withdraw Consent
If we process your personal data based on your consent, you have the right to withdraw your consent at any time.
Right to Object
You have the right to object to the processing of your personal data. If you exercise this right, we will no longer process your data unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims. If you object to the processing of your personal data for direct marketing purposes, we will not examine our legitimate grounds further, and processing for these purposes will cease.
Right to File a Complaint
If you believe that your rights under generally binding legal regulations have been violated in any way in the processing of your personal data, you have the right to file a complaint with the Office for Personal Data Protection, located at Pplk. Sochora 27, ZIP Code 170 00, Prague 7, www.uoou.cz, which serves as the supervisory authority for personal data processing and protection. Exercising your rights as outlined above does not affect your right to file a complaint with the Office for Personal Data Protection.
Exercising Your Rights
For any matters related to the processing and protection of personal data or the exercise of any of your rights, you may contact us at any time via email at nirris@nirris.cz or by mail at the following address:
NIRRIS s.r.o., Law Firm, Národní 973/41, Prague 1, ZIP Code 110 00.
Contact Person Under the AML Act
Pursuant to Section 22 of Act No. 253/2008 Coll., on Certain Measures Against Money Laundering and Terrorist Financing, as amended, NIRRIS s.r.o., Law Firm designates Mgr. Jana Hladká Zilvarová as the contact person responsible for fulfilling notification obligations under Section 18 and maintaining ongoing communication with the Financial Analytical Office.
Contact details:
Email: jana.hladka@nirris.cz
Phone: +420 724 557 460.
You’ve known us for 20 years as Z/C/H Legal.
Now we’ve become NIRRIS. 
You’ve known us for 20 years as Z/C/H Legal.
Now we’ve become NIRRIS.
