Privacy Policy
This privacy policy contains information to be provided in accordance with Articles 13 and 14 of the General Data Protection Regulation (GDPR)1.
This Privacy Policy applies to all personal data Konrad Suchodolski bl processes in his practice as a barrister other than those data to which s. 162 of the Data Protection Act 2018 (DPA) applies.
Konrad Suchodolski bl is the data controller. His contact details are:
konrad.suchodolski@lawlibrary.ie (preferred)
DX 816 574 Dublin
The Law Library
Distillery Building
145–151 Church Street
Dublin 7
D07 WDX8
Purposes of the processing for which the personal data are intended and the legal basis for the processing under Article 6(1) GDPR are:
(b) contract (client party to contract)
in relation to proceedings before a court, tribunal or forum for arbitration, whether in the State or in another jurisdiction, or the Injuries Resolution Board, to represent another person before that court, tribunal, forum or Board, and to prosecute or defend such proceedings on behalf of another person;
in relation to such proceedings, to advise another person in relation to the conduct of the proceedings, and to draw or draft documents for another person in contemplation of, ancillary to or in connection with those proceedings;
to provide legal advice to another person, or to draw or draft legal documents for another person that have the purpose of securing or transferring for a person a legal right or entitlement;
to represent or act for another person where legal rights or obligations are being, or are likely to be, created, or are, or are likely to be, in dispute, and to represent and advise another person for the purposes of arriving at or giving effect to any settlement;
to carry out specific tasks of research or opinion work for other barristers, or to have other barristers carry out the same; to cover a hearing or take over a matter, or to have another barrister do either;
to process the names, contact details and correspondence of instructing solicitors, in-house Counsel and other professionals entitled to instruct, and of their staff, to receive and act on their instructions;
(c) legal obligation
to make notices of costs, legal costs agreements, bills of costs and invoices as required by law;
to keep accounts, tax and anti-money laundering records as required by law;
to ensure the security of the personal data processed, to respond to access and other data protection requests, and to keep records showing compliance with data protection law;
to comply with other legal obligations.
Where the processing is based on point (f) of Article 6(1), the legitimate interests pursued by the controller or by a third party are:
obtaining legal advice and representation, and establishing, exercising or defending legal claims (non-client or client non-party to contract)
A–F. See 3 above.
complying with professional codes
to determine whether accepting any instructions would be lawful, in compliance with applicable codes and practices of the profession, and free from conflicts of interest;
agreeing fair and reasonable terms of engagement
to determine what fees would be fair and reasonable, what costs would reasonably be incurred and what terms would be appropriate to accept any instructions;
establishing, exercising or defending legal claims
to respond to any complaint or claim concerning professional services provided;
recovering fees
to recover fees and deal with fee disputes;
maintaining professional indemnity cover
to notify and co-operate with the professional indemnity insurer;
training of barristers
to impart and receive information in the course of a pupillage;
developing the practice
to create anonymised precedents and meet continuing professional development obligations;
maintaining commercial relationships
to maintain relationships with clients and professionals entitled to instruct;
preventing fraud and securing networks and information
to prevent fraud and ensure network and information security.
Special categories of personal data are processed on the following additional legal bases:
article 9(2)(f) gdpr
necessity for the establishment, exercise or defence of legal claims, or whenever courts are acting in their judicial capacity;
section 47 or 55 dpa
where necessary for providing or obtaining legal advice, or in connection with actual or prospective legal proceedings;
article 9(2)(a) gdpr
otherwise, with the data subject’s explicit consent.
Categories of personal data concerned are:
identity and contact details;
details of a person’s role in a matter;
facts and allegations in case papers, and correspondence;
financial information, including fees and, where relevant, a party’s finances;
for clients instructing directly, identity-verification documents;
special categories of personal data and data relating to criminal convictions and offences, where a matter involves them.
Recipients or categories of recipients of personal data are:
instructing solicitors and in-house Counsel, other barristers and lawyers, professionals entitled to instruct and the controller’s legal advisers;
clients;
courts, tribunals and other bodies, the Injuries Resolution Board, arbitrators, mediators and conciliators;
witnesses and experts;
accountants, legal costs accountants, professional indemnity insurers and the Revenue;
the Legal Services Regulatory Authority, The Bar of Ireland, the Honorable Society of King’s Inns and bodies of these;
service providers processing personal data on the controller’s behalf;
the public, where a court or tribunal publishes a judgment or decision.
The data controller intends to transfer personal data to a third country or international organisation if necessary. The European Commission has adopted adequacy decisions for some third countries and international organisations.2
Personal data are stored for periods of:
seven years and one day after the final point of appeal has expired, case files and correspondence where proceedings have issued;
where no proceedings have issued, seven years and one day after the limitation period has expired, case files and correspondence;
six years from the end of the financial year containing the latest date to which the record, information or return relates, general accounting and VAT records;
until retirement from practice or from any judicial office, a record of the names of the parties and a short description of each matter, for checking conflicts of interest;
where a complaint or claim is made or threatened against the controller: until the complaint or claim, including any appeal, is resolved or abandoned.
The data subject has the right:
to request from the controller access to and rectification or erasure of personal data, restriction of processing concerning the data subject and data portability;
to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on legitimate interests, including profiling based on those provisions, in which case the controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims;
to withdraw consent at any time, where the processing is based on consent, without affecting the lawfulness of processing based on consent before withdrawal;
to lodge a complaint with a supervisory authority.
Provision of personal data is neither a statutory nor contractual requirement, and the data subject is not obliged to provide personal data. Failure to do so may prevent the provision of legal services.
Personal data are obtained from:
instructing professionals:
Irish solicitors and in-house Counsel within the jurisdiction,
European and foreign lawyers, in-house Counsel outside the state
tax accountants, patent agents and trade-mark agents;
other members of the Law Library;
clients and data subjects directly;
courts, tribunals and other bodies:
judges or other decision-makers,
registrars and other administrative staff,
other parties to the proceedings and their legal representatives,
witnesses and experts;
publicly accessible sources, including registers, published judgments and the press;
Personal data are not subject to any automated decision-making.
1 October 2026
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) [2016] OJ L119/1.
↩European Commission, ‘Data protection adequacy for non-EU countries’ <https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en> accessed 1 October 2026.
↩