1. General

1.1 Protecting your privacy when using our website (www.korotaj.com) is extremely important to us.

The Korotaj Law Office is responsible for the protection of your personal data on this website as the head of personal data processing.

1.2 We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC (hereinafter: the General Data Protection Regulation or GDPR) and the Act Implementing the General Data Protection Regulation (OG 42/2018).

At the same time, we would like to emphasize that as lawyers, in accordance with Article 13 of the Law on Advocacy and Articles 26 to 34 of the Code of Ethics, we are obliged to keep as a lawyer’s secret everything you have entrusted to us as a party or otherwise represent you learned, and the duty to maintain legal secrecy applies to our current and former employees.

1.3 By accepting this Privacy Policy, by clicking on our website, you confirm that you have read, understood and agree to the processing of personal data as set out in this Policy.

2. Security

In order to protect your personal data, we have taken appropriate technical and organizational measures, which we are constantly updating, and which measures protect your personal data from loss, misuse or unauthorized access.

However, we cannot guarantee complete protection during the transfer of personal data to or from our website, so it is extremely important that you take care of the security of your computer and the safe storage of personal data and their confidentiality.

3. Categories of personal data and purpose of processing

3.1 Category of parties – we process the following personal data:

– identification data such as: name and surname, OIB, address, identity card number, photograph, other data contained in the identity card;

– contact details such as: e-mail address, telephone number (mobile and / or fixed number);

– bank details such as: IBAN, name of the bank; type of card, etc .;

– information on other persons – counterparties and proxies, witnesses, experts, officials conducting proceedings, employees of courts and other state bodies, notaries and the like, which are necessary for us to initiate and conduct proceedings before the competent authorities or generally represent or provide other forms of legal aid; the contents of your inquiries and our answers, the documentation you have made available to us, notes from the file (judicial and extrajudicial), documentation of our services, evidence of services rendered, costing;

– as well as all other information that you provide to the Office before or during the provision of legal aid, which is necessary for the provision of legal aid;

– special category of personal data: may contain data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, health data, sex life data, sexual orientation data .

Purpose of processing:

a) legal services: The Office may process your personal data on the basis of the Law on Advocacy, issued power of attorney, concluded contract or decision of the competent authority for the purpose of providing legal assistance, especially for initiating and conducting proceedings before the competent authorities, drafting documents, counseling. Therefore, we process your personal data that we need to provide legal advice, draft documents (contracts, wills, statements, etc.), representation before the court and other competent institutions, as well as out-of-court representation, all in order to protect your rights and legal interest.

The processing of personal data is based on a contractual legal basis (contract of representation or order or power of attorney) in accordance with the article. 6 (1) (a) and (b) of the General Data Protection Regulation.

However, taking into account the specifics of the legal service, data processing is also based on Article 6 (1) (d), (e) and (f) of the General Data Protection Regulation.

b) Fulfillment of legal obligations

We process your personal data in order to fulfill our legal obligations as a controller. In certain cases, the Office is obliged to process your data in order to comply with legal obligations. Such processing may result from coercive legal regulations, such as tax, commercial, anti-money laundering, criminal provisions and the like, therefore, due to state supervision and control and the legal duty to provide data.

The processing is based on Article 6 (1) (c) of the General Data Protection Regulation.

3.2 Category of respondents – request for exercising the right:

– e-mail address, name and surname, telephone number (mobile and / or fixed number);

– if necessary, a copy of the identification document (exclusively for the purpose of establishing the identity of the respondent).

Purpose of personal data processing: legitimate interest – response to your request.

3.3 Business category

– business partners of natural persons – identification data: name and surname, OIB, etc., contact data: address, telephone, mobile phone, etc., bank data such as: IBAN, name of the bank; type of card, etc .;

– contact person of the business partner – identification data: name and surname, etc., contact data: address, telephone, mobile phone, etc., data related to the workplace of the business partner (position, department, etc.).

Purpose of personal data processing: personal data are processed for the purposes of exercising the rights and obligations under contracts concluded with business partners, in particular for the purpose of issuing invoices for services rendered. Certain personal data may also be processed if this is necessary to comply with the legal obligations of the controller. Personal data can also be processed for the needs of the legitimate interests of the controller, eg: business communication, keeping records of business partners and assessing mutual cooperation.

4. Delivery of personal data

You are not obliged to provide us with your personal data. However, the provision of personal data is generally necessary for the execution of our legal services or contracts, so we must warn that without the provision of personal data (depending on each case) we will not be able to provide you with a complete legal advice and representation.

5. Sources

We collect your personal data, in addition to those provided to us personally, if necessary, solely to protect your rights and legal interests as our party, and from the competent state institutions and third parties.

When we collect information about persons who are not our party, we collect it on the basis of your statements or on the basis of legal powers contained in special laws, or on the basis of insight into publicly published registers.

6. Recipients

Lawyers, trainee lawyers and other employees of the Office in charge of accounting, mail delivery and administration may have access to your personal data.

External recipients may have access to your personal data only if it is necessary for the performance of our legal services or as a result of mandatory legal regulations.

External recipients can be:

– competent state bodies (such as the Croatian Pension Insurance Institute and the Croatian Health Insurance Institute, the Tax Administration, courts, FINA, the Ministry of the Interior, etc.);

– providers of bookkeeping and similar services to the processing manager;

– IT support service providers to the processing manager;

– related persons of the processing manager;

– banks, credit and financial institutions and the like;

– notaries public; counterparties, counterparty representatives and counterparty employers;

– experts, court interpreters and translators;

– third parties in relation to whom there is a legal obligation to provide personal data of respondents;

– other third parties for the purpose of pursuing an interest in connection with the purpose of providing legal assistance or pursuing a legitimate interest.

In the event of personal disclosure outside the Republic of Croatia, we will take the necessary measures to protect your personal data to ensure that the third party to whom your personal data is transferred ensures the same level of protection of your personal data as in the Republic of Croatia. At any time, you can obtain information from the Office as to whether your personal data are being transferred outside the Republic of Croatia, as well as the protection measures taken on the contact details below.

7. Shelf life

a) Pursuant to Article 11, paragraph 2 of the Law on Advocacy, we are obliged to keep personal data referred to in item 3.1 of this Policy for ten years from the final conclusion of the proceedings. However, if there is an ongoing enforcement procedure under a final and enforceable judgment, extraordinary remedies procedure, protection of your rights before the Constitutional Court of the Republic of Croatia and / or the European Court of Human Rights, etc. then we keep your data for an additional ten years. all legal remedies have been exhausted in order to protect your rights and legal interests.

Exceptions to this are documents (wills, contracts, etc.) that you have entrusted to us for safekeeping, and which documents we keep on the basis of your order until you pick them up.

Taking into account the specifics of the legal service, as processing managers we can in individual cases, and depending on special circumstances, in order to protect legitimate and legal interests, determine a longer period of storage of files.

If compulsory legal regulations require a longer storage period, then your data will be deleted after the additional legal deadlines.

b) We keep personal data from items 3.2 and 3.3 of this Policy for five years, except in the case of realization or defense of legal requirements or if the compulsory legal regulation does not determine a longer retention period.

8. Web cookies

We use cookies that are strictly necessary for the proper display and operation of this website and we do not collect your personal information through cookies.

9. Rights that belong to you:

9.1 Right of access – you can request confirmation of whether your data is being processed, for what purpose and to what extent.

9.2 Right to Correction – if we process your personal data that is inaccurate or incomplete.

9.3 Right of Deletion – You may request the deletion of your personal data if the purpose for which it was collected no longer exists, if it is illegal processing, if the processing disproportionately interferes with your protected legitimate interests or if the processing is based on your consent.

However, it is necessary to take into account the possible existence of other reasons that could be contrary to the complete deletion of your personal data, such as storage expressly provided by law, the existence, realization or defense of legal claims and the like.

9.4 Right to data transfer – data that you have provided to us and that we process on your consent or for the performance of the contract, and their processing is carried out automatically, at your request we will forward them in a structured, common and machine-readable form. If technically feasible, we can transfer them directly to another processing manager at your request.

9.5 Right to limit processing – you have the right to request a restriction on the processing of your data:

– if you dispute the accuracy of your personal data, during the period that allows us to verify the accuracy of the data;

– if the processing is illegal, but you have refused the deletion and instead request a restriction on data processing;

– if we no longer need your personal data for the intended purpose, and you still need it to make or defend legal claims;

– if you have filed an objection to the processing of personal data pending confirmation of whether the legitimate reasons of the controller exceed your reasons.

9.6 Right to object – you may at any time object to the processing of your personal data in accordance with Article 6 (1) (f) of the General Data Protection Regulation, therefore, if we process your personal data in the public interest or process it based on the needs of our legitimate interest.

* When exercising your rights, please take care to provide us with proof on the basis of which we will be able to establish your identity (personal identification document) in an unequivocal manner.

9.7 Right to appeal – if you believe that we have violated the rules on personal data protection during the processing of your personal data and thus violated your interests, rights and freedoms, please contact us so that we can clarify all possible issues.

In addition to us directly, with your complaint or appeal, you can also contact the competent supervisory authority for personal data protection. In the Republic of Croatia, it is the Agency for Personal Data Protection (AZOP), which you can contact in the following ways:

personally

in writing to the address: Agency for Personal Data Protection, Selska cesta 136, 10000 Zagreb,

by calling the number: +385 1 4609 000,

by fax to: +385 1 4609 099

via e-mail: azop@azop.hr.

9.8 We will provide information on the actions taken no later than one month from the date of receipt of your request.

If the processing of the request is complex or there is a large number of requests, this deadline can be extended for another two months, but in that case we will inform you about the reasons for the possible extension of the deadline.

Also, if we are not able to act on your request, we will inform you about our decision, stating the reasons for such a decision, and the possibility of filing a complaint or appeal to the Personal Data Protection Agency.

In the event that requests are manifestly unfounded or excessive, in particular due to their frequent recurrence, we may charge a reasonable fee based on administrative costs or refuse to comply with the request.

>>DOWNLOAD THE REQUEST<<

10. Automated processing including profiling

When providing our legal services, automated processing and profiling in the sense of Article 22 of the General Data Protection Regulation is excluded.

11. Terms and changes

The terms of this Privacy Policy and cookies govern the use of cookies and all data collected during the application of this Policy, except for third-party cookies.

To exercise your rights and any additional questions, please contact us:

Contact details of the processing manager:

Korotaj Law Office
Address: Bože Gumpca 53 / A
E-mail: info@korotaj.com
Telephone: +385 52 8945 153