I. WHAT THE NOTICE ON PERSONAL DATA PROCESSING CONTAINS

In accordance with applicable regulations, in particular the General Data Protection Regulation (hereinafter: the GDPR) and the Act on the Implementation of the General Data Protection Regulation (hereinafter: the Act), the Law Firm Bišćan i Dlačić GP, with its registered office at Petrinjska 31, 10 000 Zagreb (hereinafter: the Law Firm, which also includes the work of court interpreters), as the data controller, informs you about the manner in which your personal data are processed.

II. THE OBLIGATION TO MAINTAIN ATTORNEY–CLIENT CONFIDENTIALITY

First of all, we emphasize that, in accordance with Article 13 of the Attorneys Act, as attorneys we are obligated to keep as attorney–client confidentiality everything you entrust to us as a client or that we learn in any other way in the course of representing you as a client. The same obligation applies to all our employees.

III. WHOSE AND WHICH PERSONAL DATA WE PROCESS AND FOR WHAT PURPOSE

If we represent you, we must collect and process certain personal data. We may process your personal data on the basis of the Attorneys Act, a power of attorney, a concluded contract, or on the basis of a decision of a competent authority for the purpose of providing legal assistance, particularly for initiating and conducting proceedings before competent authorities, drafting documents, and generally for representation and legal advice. In addition, in certain cases we are obligated to process your data for the purpose of complying with legal obligations (for example, keeping and issuing accounting documents), and your personal data may also be processed for the purpose of maintaining case records.

The Law Firm may collect and process the following personal data or categories of personal data about you:

your identification data such as: name and surname, personal identification number (OIB), address, identity card number, photograph, other data contained in the identity card;
your contact data such as: e-mail address, telephone number, mobile phone number;
your banking data such as: IBAN, bank, type of card;
data relating to other persons – opposing parties, representatives, officials conducting proceedings, experts, witnesses, record keepers, employees of courts and other state bodies, notaries public, employees of notaries public, and similar persons who are necessary for initiating and conducting proceedings before competent authorities or generally for representation and legal advice in accordance with the contract and which we obtain in any other way during representation or provision of legal assistance;
in exceptional cases, we may collect special categories of personal data such as – data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, data concerning health, data concerning sex life, data concerning sexual orientation
as well as all other data you provide to the Law Firm before or during the term of representation or a contractual relationship for the provision of another form of legal assistance, and which are necessary for the provision of our legal assistance services.

The Law Firm processes these personal data for the purpose of performing the contract on representation or representation on another legal basis, as well as performing a contract for the provision of another form of legal assistance.

Providing your personal data may be necessary for us to provide you with the requested legal assistance, or there may be a legal obligation for us to process certain personal data about you. If there is no legal obligation for you to provide your personal data, you are not required to do so; however, in such a case the Law Firm may not be able to provide you with the requested legal assistance. Your personal data may also be processed for the purpose of issuing invoices for the provided legal assistance, and consequently for maintaining accounting records in accordance with applicable regulations.

IV. WHICH PERSONAL DATA WE DO NOT PROCESS AND WHICH PROCESSING ACTIVITIES WE DO NOT PERFORM

As a rule, we do not collect and do not process special personal data relating to your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, biometric data, data relating to your health, sex life, or sexual orientation.

Exceptionally, we will process such data if it is necessary for the establishment, exercise, or defence of your legal claims.

We do not process your personal data for the purpose of profiling, nor for automated decision-making that would produce legal effects concerning you or would significantly affect you.

V. HOW WE COLLECT PERSONAL DATA

We collect personal data for the purpose of representation by requesting it from the data subjects themselves or from documents and other records received from clients, other participants in proceedings before a court or other competent authority, from courts and other competent authorities, and from third parties.

We collect personal data for the purpose of providing another form of legal assistance from data subjects or other persons who are in any way connected with the matter for which legal assistance is provided.

Some personal data are collected from publicly available sources, and it is also possible that we receive your personal data through business communication with third parties.

VI. WHO HAS ACCESS TO PERSONAL DATA AND TO WHOM DO WE TRANSFER THEM

Your personal data may be accessed by attorneys, associates, and our other employees who are authorized to carry out certain personal data processing activities in the course of performing their work tasks (for example, employees responsible for mail dispatch, accounting, administration).

For the purpose of performing the above-mentioned purposes of personal data processing, the recipients of your personal data may include competent state authorities (such as the Croatian Pension Insurance Institute and the Croatian Health Insurance Institute, the Tax Administration, courts, Financial agency, the Ministry of interior affairs, etc.), attorneys and associates who provide substitute services to us in accordance with the Attorneys Act, our providers of accounting and similar services, our IT support service providers, persons affiliated with us, credit and financial institutions and similar entities, notaries public, opposing parties, representatives of opposing parties and employers of opposing parties, experts, court interpreters and translators, third persons to whom there is a legal obligation to provide your personal data, and other third persons for the purpose of achieving interests related to the provision of legal assistance or the realization of our legitimate interest.

We take all necessary actions to ensure that the transfer of personal data to third persons is in accordance with regulations on personal data protection.

In the event of a possible transfer of personal data outside the EU, we will take the necessary measures for the protection of your personal data to ensure that the third person to whom your personal data are transferred provides the same level of protection of your personal data as that within the EU. You may request at any time information from us on whether your personal data are transferred outside the EU and on the protective measures taken, using the contact details provided below.

VII. RETENTION PERIOD OF PERSONAL DATA

We retain your personal data as follows:
at least 10 years after the final and binding completion of the proceedings in which we represented you;
in the event of the final and binding completion of the proceedings, we retain your data until such time as you collect the case file from us;
in the event of enforcement proceedings based on a final and enforceable judgment or decision, in the event of proceedings involving extraordinary legal remedies before the Constitutional Court of the Republic of Croatia and/or the European Court of Human Rights and other relevant institutions, your data are retained for a longer period, until all legal remedies aimed at protecting your rights and interests have been exhausted;
wills, contracts, and other documentation entrusted to us for safekeeping shall be kept until the conditions for the cessation of safekeeping of the entrusted documentation (will and testament) have been met or until you collect them from us;
in the event of other mandatory statutory provisions, data is retained in accordance with the time limits laid down in those mandatory provisions;
as data controller, in each individual case, depending on the specific circumstances of the case, we may determine a longer period for the retention of personal data if the processing of personal data is necessary for the protection of legal or legitimate interests.

VIII. PROTECTION OF YOUR PERSONAL DATA

We take appropriate technical and organisational measures in order to protect the collected personal data and to prevent accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data.

In protecting your personal data, we are obliged to act in accordance with our Privacy Rules.

The manner in which we act, as set out in the Privacy Rules, ensures that we use your personal data only for the purpose for which they were collected, that the data is used by persons authorised to do so, that your data is not disclosed to third parties except in cases that are specifically determined, and that your data is retained for as long as is strictly necessary.

All our attorneys, associates, and other employees are aware of their tasks and responsibilities in the processes of processing your personal data.

If certain processing activities of your personal data are carried out by our processor, we ensure that the latter applies at least the same level of protection of your personal data as we ourselves do apply.

IX. CONSENT TO THE PROCESSING OF PERSONAL DATA

If the processing of a certain type of personal data is based on consent, or if consent is required for the disclosure or transfer of personal data, we will obtain such consent from you in written form. When you give consent, we will inform you of the purpose of giving consent and of the consequences if you refuse to give consent. Your consent must be voluntary and unambiguous. The written consent is retained for as long as the personal data to which it relates are retained.
If you have given consent for a specific processing of personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. We will inform you of this when you give consent. You may withdraw your consent by submitting a written statement.

X. EXERCISE OF YOUR RIGHTS

As a data subject, you have the right to contact us with a request to exercise any of the rights to which you are entitled:
– right of access,
– right to rectification,
– right to be forgotten (erasure),
– right to restriction of processing,
– right to data portability.
For the proper and documented conduct of the procedure, we require that the request for the exercise of rights be submitted in written form. The request is submitted in person at our registered office or by post. The request may also be sent by e-mail. The request is considered proper if it is sent from the address of the person submitting the request. The person submitting the request must be identified. If the request is anonymous and we are unable to establish the identity easily and in an accessible manner, the request will not be acted upon. Within one month from the receipt of your request, we will inform you of our decision and the actions taken.

XI. FILING A COMPLAINT WITH THE PERSONAL DATA PROTECTION AGENCY

You have the right to lodge a complaint with the Personal Data Protection Agency if you believe that, by our decision or actions, we have violated your rights.

XII. CHANGES TO THE NOTICE ON THE PROCESSING OF PERSONAL DATA

Depending on our needs, it is possible that we will amend this Notice in order to improve our practices and achieve greater protection of your right to privacy or if required due to changes in regulations. We will appropriately publish any amendment to this Notice. Please check from time to time whether we have amended this Notice.

XIII. CONTACT DETAILS

You may contact us with your requests and queries relating to the processing of personal data by telephone at: 01 4880 235
by e-mail at: office@obidlegal.hr

The Notice on the Processing of Personal Data is published on our website and is available at our registered office. We can provide you with the Notice at your request.

Effective as of: 02/05/2025
Last update: