Privacy notice

Last updated: November 5, 2026

In short

We collect only what you give us or what we need to run this website, and use it to answer you and to work with you.
We never sell your data or use it for advertising.
You can see, correct or delete your data at any time by writing to us.
Analytics cookies are set only if you allow them.

Who we are

The controller of your personal data is AgiLawyer s.r.o., Za Poříčskou bránou 365/21, 186 00 Praha 8, Czech Republic, company ID (IČO) 09540466. You can reach us at info@agilawyer.com or +420 774 814 805.

Our processing does not require a data protection officer, so we have not appointed one. Questions about this notice go to the same address.

What we use your data for

For each purpose: the data, the legal basis under the EU General Data Protection Regulation (GDPR), and how long we keep it.

Answering your enquiry

Data: Name, email, firm, phone if you give it, and your message, from the contact form, email or phone.
Legal basis: Steps you ask for before a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering business enquiries (Art. 6(1)(f)).
How long: Up to 3 years after our last contact, unless the enquiry leads to a contract.

Sending a quote

Data: Your email and the page you asked from.
Legal basis: Steps you ask for before a contract (Art. 6(1)(b)).
How long: Up to 3 years after our last contact.

Booking a meeting

Data: Name, email, the time you choose and any note you add, through our Google Calendar booking page.
Legal basis: Steps you ask for before a contract (Art. 6(1)(b)).
How long: Up to 3 years after the meeting.

Emailing your self-check result

Data: Your email, whether you lead a law firm or an in-house team, and your answers, from which we write the email with your score and first steps. Your answers leave your browser only if you ask for the email. We then keep your email, all your answers and your result in our CRM, YouTrack: on your own record and, when the domain of your email matches an organization we know, on its record. We use them to improve our analytical tools, such as the self-check and the Radar. They stay in our YouTrack and we do not pass them on. If you tick the box, we may also write to you about your result.
Legal basis: Your request (Art. 6(1)(b)) for the email; our legitimate interest in improving our analytical tools (Art. 6(1)(f)) for keeping your answers and result; your consent (Art. 6(1)(a)) for writing to you about it, which you can withdraw at any time.
How long: A copy of the email stays in our own mailbox for up to 3 years. Your answers and result are kept in our CRM for up to 3 years after our last contact.

Data: Your email and a record of your consent: when and on which page you signed up. We also keep your email in our CRM, marked as a newsletter subscriber.
Legal basis: Your consent (Art. 6(1)(a)), which you can withdraw at any time with the link in every email.
How long: Until you unsubscribe, when the mark in our CRM is removed. After that we keep only your email on a do-not-send list, so we do not write to you again.

Legal Innovation Award updates

Data: Your email, also kept in our CRM, marked as an Award sign-up.
Legal basis: Your consent (Art. 6(1)(a)).
How long: Until we have told you that applications are open, or until you unsubscribe.

Events and trainings

Data: Name, firm, role and email when you register, and whether you attended.
Legal basis: Contract (Art. 6(1)(b)), or our legitimate interest in running the event (Art. 6(1)(f)).
How long: Up to 3 years after the event.

Working with clients and partners

Data: Names, roles and contact details of the people we work with, and what they tell us in interviews, for example during the Radar.
Legal basis: Contract (Art. 6(1)(b)), and our legitimate interest in working with our clients’ staff (Art. 6(1)(f)).
How long: For the engagement and up to 3 years after it ends.

Invoicing and accounting

Data: Billing names and addresses, company IDs and payment records.
Legal basis: Legal obligation (Art. 6(1)(c)).
How long: 10 years, as Czech tax law requires.

Keeping the website safe and working

Data: IP address, browser and the time of each request, processed by our host, Cloudflare. When you start on a form, Cloudflare Turnstile checks that a person, not a bot, is sending it.
Legal basis: Our legitimate interest in security (Art. 6(1)(f)).
How long: For the short period Cloudflare keeps security logs.

Counting visits without cookies

Data: The page, the site you came from, your country and your browser, through Cloudflare Web Analytics, which sets no cookie and does not use your IP address to identify you.
Legal basis: Our legitimate interest in knowing how the website is used (Art. 6(1)(f)).
How long: Single page views for 7 days, then only as totals, shown for 6 months.

Measuring how the website is used

Data: Pages visited, approximate location, device and browser, through Google Analytics.
Legal basis: Your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act).
How long: 14 months.

Legal claims and obligations

Data: What a dispute or a legal duty needs.
Legal basis: Legal obligation (Art. 6(1)(c)), or our legitimate interest in defending our rights (Art. 6(1)(f)).
How long: Until the claim or the duty ends.

For the AgiLawyer Radar we look at how your team works, never at what you work on. We do not ask for client or matter data.

Cookies and analytics

This website sets no cookies of its own. Cloudflare, our host, may set a security cookie to tell people from bots, which is strictly necessary and needs no consent. Your browser keeps two choices on your device, light or dark and your cookie choice, and never sends them to us. Google Analytics sets these cookies only once you allow it:

Cookie	What it does	Kept for
`_ga`	Tells one visitor from another	2 years
`_ga_<ID>`	Keeps track of the current visit	2 years

Google Analytics is provided by Google Ireland Limited, which processes the data on our behalf. Data may be transferred to Google LLC in the United States under the EU–US Data Privacy Framework. Google signals and advertising features are switched off, so the data is not used for ads. We keep analytics data for 14 months. The legal basis is your consent (Art. 6(1)(a) GDPR and Section 89(3) of the Czech Electronic Communications Act, No. 127/2005 Coll.).

You can change or withdraw your choice at any time. Withdrawing deletes the Google Analytics cookies from this website.

Who receives your data

Only the people at AgiLawyer who need it, and the processors below, who work on our instructions under a data processing agreement:

Cloudflare: hosts and protects this website and handles its forms.
Google: our email, documents, calendar and booking page and, if you allow it, analytics.
JetBrains (YouTrack): where we keep enquiries, client contacts and projects.
Anthropic (Claude): an AI assistant that helps us write replies and keep those records, on business terms that do not let it train on our data.
Professional advisers: our accountants, auditors and lawyers, bound by confidentiality.

We give data to authorities only when the law requires it. We do not sell personal data and do not share it for advertising.

Data outside the European Union

Most of your data stays in the European Union. Where a processor handles it in another country, such as the United States, the transfer is covered by an adequacy decision of the European Commission, including the EU–US Data Privacy Framework, or by the Commission’s standard contractual clauses. Write to us for a copy of these safeguards.

Automated decisions

We make no decisions about you by automated means alone. The self-check score is worked out from your answers and is only an indication for you.

How we protect it

This website runs only over encrypted connections. Only the people who need personal data can reach it, each with their own account, and our processors are bound by contract to protect it.

Your rights

See the data we hold about you and get a copy.
Have it corrected if it is wrong.
Have it deleted, or its use restricted.
Object to our use of it where we rely on legitimate interest, and to direct marketing at any time.
Receive the data you gave us in a common format, or have it sent to someone else.
Withdraw your consent at any time, without affecting what we did before.

Write to info@agilawyer.com. We answer within one month and do not charge for it. If we need to confirm who you are, we will ask. You can also complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, www.uoou.gov.cz) or to the supervisory authority where you live or work.

Outside the European Union

We give everyone the rights above, wherever they live. Some places add their own:

United Kingdom: the UK GDPR and the Data Protection Act 2018 apply. Transfers are covered by the UK Extension to the Data Privacy Framework or the UK addendum to the standard contractual clauses. You can complain to the Information Commissioner’s Office (ico.org.uk).
Switzerland: the Federal Act on Data Protection applies, and you can complain to the Federal Data Protection and Information Commissioner (edoeb.admin.ch).
United States: we do not sell or share personal information as California and other state laws define those terms, and we do not use sensitive personal information. You can ask to know, correct or delete what we hold, and we will not treat you differently for asking.
Elsewhere, including Brazil, Canada and Australia: write to us and we will handle your request under the law that applies to you.

Children

This website is for professionals and is not meant for anyone under 16. We do not knowingly collect children’s data.

Changes to this notice

When we change this notice, we update it here and change the date at the top. If a change matters to you, we tell you directly.