Privacy statement

DATA PROTECTION AND PRIVACY STATEMENT

LAW FIRM BISTROVIĆ

1. General

Protecting your privacy when using our website is www.odvjetnik-bistrovic.hr extremely important to us. The Office of Bistrović, attorney at law Mislav Bistrović, Zagreb, Ulica Andrije Hebranga 27, OIB 77214883107 is responsible for the protection of your personal data on this website;  e-mail: mislav.bistrovic@odvjetnik-bistrovic.hr, as the personal data controller. If you have any questions about the processing of your personal data or regarding the exercise of your right to data protection, please contact us at mislav.bistrovic@odvjetnik-bistrovic.hr. We process your personal data in accordance with the General Data Protection Regulation (EU Regulation 2016/679) and the Act on the Implementation of the General Data Protection Regulation (OG 42/2018). At the same time, we would like to emphasize that as attorneys, in accordance with Art. 13 of the Attorneys Act and Art. 26-34 of the Code of Attorney Ethics, are obliged to keep as attorney-client privilege everything that you have entrusted to us as a client or we have otherwise learned in representing you as a client, and the duty of attorney-client secrecy refers to our current and former employees. By accepting this Privacy Policy by clicking on our website, you confirm that you have read, understood and agree with the processing of personal data as set out in this Policy.  

2. Security

In order to protect your personal data, we have taken appropriate technical and organizational measures, which we are continuously upgrading, and which measures protect your personal data from loss, misuse or unauthorized access. However, we cannot guarantee complete protection during the transmission of personal data to or from our website, so it is extremely important that you take care of the security of your computer and the safe storage of personal data and its confidentiality.

  • Categories of personal data and purpose of processing

3.1 Category of customers – we process the following personal data: – identification data such as: name and surname, personal identification number, address, ID card number, photograph, other data contained in the identity card; – contact data such as: e-mail address, telephone number (mobile and/or landline number) – bank data such as: IBAN, bank name; card type, etc. – data on other persons – counterparties and proxies,  witnesses, experts, officials conducting proceedings, employees of courts and other state bodies, notaries and the like, who are necessary for us to initiate and conduct proceedings before the competent authorities, or generally to represent or provide other forms of legal assistance; the contents of your inquiries and our answers, the documentation you have made available to us, notes from the file (judicial and out-of-court), documentation of our services, evidence of services rendered,  calculation of costs – as well as any other information you provide to the Office before or during the provision of legal aid, which is necessary for the provision of legal aid – a special category of personal data: it may contain data revealing racial or ethnic origin,  political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, health data, sex life data, sexual orientation data.

3.2 Category of data subject – request for exercising rights: – e-mail address, name, surname, telephone number (mobile and/or landline number) – if necessary, a copy of an identification document (solely for the purpose of establishing the identity of the data subject). Purpose of personal data processing: legitimate interest – response to your request.

3.3 Category of business partner:- business partners of natural persons – identification data: name and surname, OIB, etc., contact details: address, telephone, mobile phone, etc., bank details such as: IBAN, bank name; type of card, etc.- contact person of the business partner – identification data: name and surname, etc., contact data: address, telephone, mobile phone, etc., data related to the position at the business partner (position, department, etc.)tag. Purpose of personal data processing: personal data are processed for the purpose of exercising the rights and obligations arising from the contracts concluded with business partners, in particular for the purpose of issuing invoices for the services performed. Certain personal data may also be processed if it is necessary to comply with the legal obligations of the controller. Personal data may also be processed for the purposes of the legitimate interests of the controller, e.g.: business communication, keeping records of business partners and assessment of mutual cooperation.

Purpose of processing

a) Legal services: The Office may process your personal data on the basis of the Attorneys Act, issued power of attorney, concluded contract or decision of the competent authority for the purpose of providing legal assistance, and in particular for the purpose of initiating and conducting proceedings before the competent authorities, drafting documents, representation and legal counseling in general. Therefore, we process your personal data that are necessary for us to provide legal advice, draw up documents (contracts, wills, statements, etc.), represent you before the court and other competent institutions, as well as in out-of-court representation, all with the aim of protecting your rights and legal interests. The processing of personal data is based on a contractual legal basis (contract, representation or mandate or power of attorney) of Article 6 (1) (a) and (b) of the General Data Protection Regulation. However, taking into account the specifics of the legal service, the data processing is also based on Art. 6 (1) (d), (e) and (f ) GDPR.

b) Fulfilment of legal obligations: We process your personal data in order to comply with our legal obligations as a controller. In certain cases, the Office is obliged to process your data in order to comply with legal obligations. Such processing may result from mandatory legal regulations, e.g. tax, commercial, anti-money laundering, penal provisions, etc., i.e. due to state supervision and control and the legal duty to provide data. The processing is based on Art. 6 (1) (c) GDPR.

  • Delivery of personal data

You are not obliged to provide us with your personal data. However, the provision of personal data is mainly necessary for the performance of our legal services or contracts, so we must warn that without the provision of personal data (depending on each individual case) we will not be able to provide you with a complete service of legal advice and representation.

  • Sources

We collect your personal data, in addition to the data you have provided to us personally, if there is a need for it, solely for the protection of your rights and legal interests as our customer, and from the competent state institutions and third parties. When we collect data on persons who are not our customers, we collect them on the basis of your statements or on the basis of legal authorizations, contained in special laws, or on the basis of insight into publicly published registers.

  • Recipients

Your personal data may be accessed by attorneys, trainee attorneys and other employees of the Office in charge of accounting, mail dispatch and administration. External recipients may have access to your personal data only if this is necessary for the performance of our legal services or if it results from a mandatory legal regulation.

External Recipients can be:

– competent state authorities (such as the Croatian Pension Insurance Institute and the Croatian Health Insurance Institute, the Tax Administration, courts, FINA, the Ministry of the Interior, etc.)

– providers of bookkeeping and similar services to the controller;

– providers of IT support services to the controller;

– Related persons of the controller;

– banks, credit and financial institutions, etc.;

– notaries; opposing parties, representatives of opposing parties and employers of opposing parties;

– experts, court interpreters and translators;

– third parties in relation to whom there is a legal obligation to provide personal data of the data subject;

– other third parties for the purpose of pursuing an interest related to the purpose of providing legal assistance or the realization of a legitimate interest.

In the event of a possible transfer of personal data outside the Republic of Croatia, we will take the necessary measures to protect your personal data to ensure that the third party to whom your personal data is transferred ensures the same level of protection of your personal data as the one in the Republic of Croatia. At any time, you can get information from the Office whether your personal data is transferred outside the Republic of Croatia, as well as the protection measures taken, to the contact details listed below.

  • Retention period

a) We are obliged, in accordance with Art. 11 degrees 2 of the Attorneys Act, shall be kept for ten years from the final conclusion of the proceedings. However, if enforcement proceedings are pending under a final and enforceable judgment, proceedings under extraordinary legal remedies, protection of your rights before the Constitutional Court of the Republic of Croatia and/or the European Court of Human Rights, etc. We then store your data for an additional ten years from the date on which all legal remedies have been exhausted in order to protect your rights and legal interests. An exception to the above are documents (wills, contracts, etc.) that you have entrusted to us for safekeeping, and which documents we keep on the basis of your order until you collect them. Taking into account the specifics of the legal service, as controllers, we may, in individual cases, and depending on special circumstances, set a longer period for the storage of files in order to protect legitimate and legal interests. If mandatory legal regulations require us to have a longer storage period, your data will be deleted after the expiry of the additional statutory periods.

b) We store the personal data referred to in points 3.2 and 3.3 for five years, except in the case of asserting or defending legal claims or unless a mandatory legal regulation stipulates a longer retention period.

9. Web Cookies

We use cookies that are strictly necessary for the proper display and operation of this website and we do not collect your personal information through cookies.

10. Rights to which you are entitled:

10.1 Right of access – you can request confirmation as to whether your data is being processed, for what purpose and to what extent.

10.2 Right to rectification – if we process your personal data that is inaccurate or incomplete.

10.3 Right to erasure you can request the deletion of your personal data if the purpose for which it was collected no longer exists, if the processing is unlawful, if the processing disproportionately interferes with your protected legitimate interests or if the data processing is based on your consent that you have withdrawn. However, it is necessary to take into account the possible existence of other reasons that could preclude the complete deletion of your personal data, such as storage that is expressly provided for by law, the existence, exercise or defense of legal claims, etc.

10.4 Right to data portability – data that you have provided to us and that we process on the basis of your consent or for the performance of a contract, and their processing is carried out by automated means, we will forward it to you at your request in a structured, commonly used and machine-readable form. If technically feasible, we may transfer them directly to another controller upon your request.

10.5 Right to restriction of processing – you have the right to request restriction of processing of your data:

– if you contest the accuracy of your personal data, during the period that allows us to verify the accuracy of the data – if the processing is unlawful, but you have refused the deletion and instead request the restriction of data processing – if we no longer need your personal data for the intended purpose, and you still need them to make or defend legal claims – if you have objected to the processing of personal data, expecting confirmation whether the legitimate reasons of the controller outweigh your reasons

10.6 Right to object – you may object to the processing of your personal data at any time in accordance with Art. 6 degrees 1 point f of the General Data Protection Regulation, i.e. if we process your personal data in the public interest or we base the processing on the needs of our legitimate interests.

* When exercising your rights, please make sure that you provide us with proof on the basis of which we will be able to establish your identity in an unmistakable way (personal identification document)

10.7 Right to complain – if you believe that we have violated the regulations on the protection of personal data during the processing of your personal data and thus led to the violation of your interests, rights and freedoms, please contact us so that we can clarify all possible questions. In addition to us directly, with your complaint or complaint, you can also contact the supervisory authority for personal data protection in the Republic of Croatia – the Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb. 

10.8 We will provide information about the actions taken no later than one month from the date of receipt of your request. If the processing of the request is complex or there is a large number of requests, this deadline can be extended by another two months, but in this case we will inform you of the reasons for a possible extension of the deadline.

Also, if we are not able to act on your request, we will inform you of our decision, stating the reasons for such a decision, and the possibility of filing a complaint or complaint with the Personal Data Protection Agency. In the event that requests are manifestly unfounded or excessive, in particular due to their frequent repetition, we may charge a reasonable fee based on administrative costs or refuse to act on the request.

Download: Request form for the exercise of rights

11. Automated processing including profiling

When providing our legal services, automated processing and profiling within the meaning of Art. 22 of the General Data Protection Regulation.

12. Terms and Modifications

The terms of this Privacy and Cookies Policy govern the use of cookies and all data collected during the application of this Policy, with the exception of third-party cookies.

To exercise your rights and any additional questions, please contact us:

Contact details of the controller:

LAW OFFICE BISTROVIĆ

Zagreb, Ulica Andrije Hebranga 27

OIB: 77214883107

Phone: +385994544540

Fax: +385 1 4812 881

E-mail: mislav.bistrovic@odvjetnik-bistrovic.hr

Zagreb, March 15, 2020

REQUEST FOR EXERCISING RIGHTS

INFORMATION ABOUT THE APPLICANT:

  1. Name and surname: __________________________________________________________
  2. Contact information (e-mail, address, telephone):

email:  

____________________________________________________________________

address:          

______________________________________________________________________

telephone:        _____________________________________________________________      

I WANT TO EXERCISE THE FOLLOWING RIGHT (please circle one or more rights):

  1. The right to access personal data;
  2. The right to rectification of personal data;
  3. Right to erasure of personal data;
  4. The right to restriction of the processing of personal data;
  5. The right to portability of personal data;
  6. The right to object to the processing of personal data;

Please briefly explain the reasons on which your request to exercise your rights is based and, if necessary, attach additional documents:

___________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________________

_______________________________________________________________________________________

More detailed information about your rights in relation to your personal data can be found in our Personal Data Protection Policy, available on our notice board and on the website www.. …..

IMPORTANT INFORMATION:

By entering your name and surname at the end of this form, you confirm that you are the applicant of this application and that the information and statements provided in this application are completely true and accurate.

Office, address, OIB: ….. collects and processes your personal data specified in this Request solely on the basis of your Request and for the purpose of conducting an appropriate procedure for the exercise of one or more of your rights.

On further action and possible exercise of rights based on this Request, Office, address, OIB: ….. will notify you in a timely manner using your contact details provided in this Request.

If you do not agree with our decision based on your request, you can file a complaint with the supervisory authority for personal data protection in the Republic of Croatia – Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb. 

Date of submission of the application:                                                                          Signature:

_______________________                                                                             ___________________

Simplicity

Legal issues are often complex and comprised of a whole array of circumstances that need to be taken into account. Our goal is primarily to find simple solutions which permanently resolve even the most complex legal problems

Promptness

Time is the most valuable commodity. We take special care not only to provide services promptly, but that our solutions can truly be realized in acceptable time frames.

Precision

We act in accordance with the highest standards of the legal profession. The core and key methods of our work are thorough data processing and precision in legal problem solving.

Want to make an appointment?