Privacy Policy
Last updated: 1/1/2026
1. Data Controller
The controller of personal data pursuant to Article 4(7) GDPR is:
Gravity Legal
Registered office: Skořepka 1058/8, 110 00 Prague, Czech Republic
Identification number (IČO):
Email: hello@gravity.legal
Website: https://gravity.legal
2. Personal Data We Process
2.1 Contact Form
When you contact us via the contact form, we process:
- Name and surname
- Company
- Email address
- Phone number
- Message content
- Any personal data you voluntarily provide
The personal data is necessary in order to respond to your enquiry and assess potential legal services.
2.2 Website Analytics
Our website uses Google Analytics, which processes:
- IP address (shortened/anonymised)
- Device and browser information
- Pages visited and interaction data
- Approximate location (city/country)
3. Purposes and Legal Basis of Processing
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and taking steps prior to entering into a contract | Article 6(1)(b) GDPR – pre-contractual measures |
| Website traffic analysis and optimisation | Consent (Art. 6(1)(a) GDPR) |
You may withdraw your consent at any time through cookie settings.
4. Google Analytics
Google Analytics is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Personal data may be transferred to third countries (especially the USA). Such transfers are carried out based on:
- Standard Contractual Clauses (SCCs) pursuant to Article 46 GDPR
- Additional technical and organisational safeguards
Further information:
5. Data Retention
- Contact form data: personal data processed via the contact form is retained for the duration necessary to assess the enquiry and potential cooperation, and no longer than 12 months, unless further cooperation is established or legal obligations require longer retention
- Google Analytics data: retained for 14 months, according to Google Analytics settings
6. Recipients of Personal Data
Personal data may be disclosed to:
- IT and hosting service providers
- Google Ireland Limited (analytics provider)
Data is not sold or shared for marketing purposes.
7. Your Rights
Under GDPR and Act No. 110/2019 Coll., on Personal Data Processing, you have the right to:
- Access your personal data
- Rectification or completion
- Erasure
- Restriction of processing
- Object to processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with the Úřad pro ochranu osobních údajů (ÚOOÚ)
Please note that where personal data is processed on the basis of Article 6(1)(b) GDPR, the right to object under Article 21 GDPR does not apply.
Supervisory authority:
Úřad pro ochranu osobních údajů
Pplk. Sochora 27
170 00 Praha 7
www.uoou.cz
8. Data Security
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.
9. Changes to This Policy
We reserve the right to amend this Privacy Policy. The current version is always available on this website.