Personal data protection policy


Law Firm and Personal Data Protection

Protecting your privacy when using the website is important to us. A law firm and a personal data protection policy are two indivisible things.

Your personal data is processed in accordance with the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018) and the General Data Protection Regulation (Regulation EU 2016/679).

The Law Firm Ljubenko & Partners with its registered office in Zagreb, Branimirova 29 as the personal data controller is responsible for the protection of your personal data on the website.

Acceptance of the personal data protection policy

By accepting this Personal Data Protection Policy when visiting our website, you confirm by clicking that you have read, understood and agree to the processing of personal data as set out in this Personal Data Protection Policy.

For the purpose of protecting your personal data, the Law Firm Ljubenko & Partners has taken appropriate technical and organizational measures to protect your personal data from loss, misuse or unauthorized access.

Our law firm cannot guarantee complete protection during the transfer of personal data to or from our website, so it is extremely important that you yourself take care of the security of your computer and the safe storage of personal data as well as their confidentiality.

Categories of personal data and purpose of processing

For the purposes of this policy, the categories of personal data are divided into two categories: the business partner category and the customer category.

The business partner category includes:

– business partners of a natural person – for whom the following identification data are collected: name and surname of the person, OIB, address, telephone, mobile phone, IBAN and bank name

– contact person of the business partner of the legal entity – for whom the following identification data are collected: name and surname of the person, address, telephone, mobile phone and data related to the position of the business partner

The purpose of the processing of the personal data in question is for the purpose of exercising the rights and obligations from the contracts concluded with business partners, in particular for ordering goods and services used by the Law Firm Ljubenko and Partners in its business.

Personal data may also be processed for the purposes of the legitimate interests of the controller, such as business communication, keeping records of business partners and assessment of mutual cooperation, but also if it is necessary to comply with the legal obligations of the controller.

The following personal data are processed for the category of customer: name and surname, OIB, address, ID card number, photo of the person and other data contained in the identity card, e-mail address, telephone number, mobile phone number, IBAN, commercial bank.

In addition to the above data, data on other persons are also processed: counterparties and their attorneys, witnesses, experts, officials conducting proceedings, judges, employees of courts and other state bodies, notaries and the like, which data are necessary for us to initiate and conduct court and other proceedings, as well as the content of your inquiries, our answers to these inquiries, as well as the documentation you have made available to us,  documentation of our services and calculation of costs, as well as any other information you provide to our law firm before or during the provision of legal aid.

We also process, where necessary and depending on the type of case, a special category of personal data, which may include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership; This also includes genetic data, biometric data, data related to a person’s health, data about sex life, data about sexual orientation and the like.

Purpose of data processing for the category of customer

The Law Firm Ljubenko & Partners may process your personal data on the basis of the Attorneys Act, the power of attorney issued, the concluded contract or the decision of the competent authority, all for the purpose of providing legal assistance, and in particular for the purpose of initiating and conducting proceedings before the competent authorities, drafting documents, generally representation and legal advice.

The Law Firm processes your personal data that are necessary for the provision of legal advice, drafting documents (contracts, wills, statements, etc.), representation before the court and other competent organizations, natural and legal persons, all in order to protect your rights and legal interests.

The processing of personal data is based on a contractual legal basis, i.e. on a representation contract or an order or power of attorney, in accordance with Art. 6 paragraphs 1a and 1b of the General Data Protection Regulation.

Taking into account the specifics of legal services, data processing is also based on Art. 6 paragraph 1 points d, e and f of the General Data Protection Regulation.

Furthermore, we process your personal data in order to comply with our legal obligations as a controller. In certain cases, the law firm is obliged to process your data in order to comply with legal obligations.

Such data processing may result from mandatory legal regulations, such as those related to the prevention of money laundering, criminal provisions and the like, primarily due to state supervision and control, as well as legal obligations to provide data.

In this case, the processing is based on Art. 6 (1) point c of the General Data Protection Regulation.

Delivery of personal data

You, as a visitor to our lawyer’s website, are not obliged to provide us with your personal data.

However, the delivery of personal data is necessary for the performance of our legal services or contracts, and without the delivery of personal data, depending on the nature of the specific case, we will not be able to provide you with a complete service of legal advice and representation.

We collect your personal data exclusively for the purpose of protecting your rights and legal interests as our client from you, but also from the competent state institutions and third parties.

We collect information about persons who are not our customers on the basis of your statements or on the basis of legal authorizations, contained in special laws, i.e. on the basis of access to publicly published registers and databases.

Access to personal data

Access to your personal data may be granted to lawyers, trainee lawyers as well as other employees of the Law Firm Ljubenko and partners in charge of accounting, mail dispatch and administration.

In addition to the above, external recipients may have access to your personal data only if it is necessary for the performance of our legal services or if it results from a mandatory legal regulation.

External recipients are or may be competent state authorities (e.g. the Tax Administration, the Financial Agency, courts, the Ministry of the Interior, the Croatian Health Insurance Institute, the Croatian Pension Insurance Institute, etc.), providers of accounting and similar services to the controller, providers of IT support services to the controller, related persons of the controller, notaries, counterparties, representatives of counterparties and employers of counterparties, court experts, court interpreters and translators, as well as third parties in relation to whom there is a legal obligation to provide personal data of the data subject.

In the event of the exchange or possible transfer of your personal data outside the borders of the Republic of Croatia, we will take the necessary measures to protect your personal data to ensure that the third party to whom your personal data is transferred ensures the same level of protection of your personal data as the one in the Republic of Croatia.

At any time, you can obtain information from our law firm whether your personal data is transferred outside the Republic of Croatia, as well as about the protection measures taken.

Period of storage of personal data

In accordance with Article 11 para. 2 of the Attorneys Act, to keep ten years from the final conclusion of the proceedings, or an additional ten years counting from the day when all legal remedies have been exhausted in order to protect your rights and legal interests.

Exceptions to the above are documents, usually wills, contracts, etc., which you have entrusted to us for safekeeping, and which documents we keep on the basis of your order until you take them over.

Bearing in mind all the specifics of the legal service, as data controllers, we may in certain cases, in order to protect legitimate and legal interests, determine a longer period of storage of the file.

Web cookies

We use cookies that are exclusively necessary for the proper display and operation of this website, and we do not collect your personal information through cookies.

Your rights regarding the protection of personal data

Right of access – based on this right, you can request confirmation of whether your data is being processed, for what purpose and to what extent.

Right to rectification – at your request, we will rectify data if we process your personal data that is inaccurate or incomplete.

Right to erasure – you can request the deletion of your personal data if the purpose for which they were collected no longer exists, if the processing is unlawful, if the processing disproportionately interferes with your protected legitimate interests or if the data processing is based on your consent that you have withdrawn.

However, in connection with the right to erasure, it is necessary to take into account the possible existence of other reasons that could oppose the complete deletion of your personal data, such as storage that is expressly provided for by law, the existence, exercise or defense of legal claims, etc.

Right to restriction of processing – based on the above, you have the right to request the restriction of the processing of your data if you contest the accuracy of your personal data, for a period that allows us to verify the accuracy of the data, furthermore if the processing is unlawful, but you have refused the deletion and instead request the restriction of data processing, if we no longer need your personal data for the intended purpose,  and you still need them to establish or defend legal claims and if you have objected to the processing of personal data in anticipation of confirmation as to whether the legitimate reasons of the controller outweigh your reasons.

Right to object – at any time you may lodge an objection to the processing of your personal data in accordance with Article 6, para. 1 point f of the General Data Protection Regulation, i.e. if we process your personal data in the public interest or base the processing on the needs of our legitimate interests.

If you submit any of the requests for the exercise of your rights, please make sure that you provide us with proof on the basis of which we will be able to establish your identity in an unambiguous manner (preferably a personal identification document – ID card or passport).

Right to complain – if you believe that we have violated the regulations on personal data protection during the processing of your personal data and thus led to the violation of your interests, rights and freedoms, please contact us so that we can clarify all possible questions.

In addition to us, you can also contact the supervisory authority for the protection of personal data in the Republic of Croatia directly, which is the Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb.

We will provide you with information about the actions taken no later than one month from the date of receipt of your request.

If the processing of the application is complex or there is a large number of requests, this deadline may be extended by another two months, but in this case we will inform you in advance of the reasons for a possible extension of the deadline.

Also, if we are not able to act on your request, we will notify you of such a decision, stating the reasons and the possibility of filing a complaint or complaint with the Personal Data Protection Agency.

In the event that your requests are manifestly unfounded or excessive, in particular due to their frequent repetition, we may require the upfront payment of a reasonable fee based on the administrative costs of estimating the time that will be spent processing your request or refuse to act on the request.

Note: You can request a form for exercising rights by contacting our law firm.

Terms and Conditions

The terms of this Policy on Personal Data Protection and Cookies govern the use of cookies and all data collected during the application of this Policy, except for third-party cookies.

To exercise your rights and any additional questions, please contact us at:

Law Firm Ljubenko & Partners

Branimirova 29 (Branimir Centar) 10000 Zagreb, Croatia

info@ljubenko-i-partneri.hr

www.ljubenko-i-partneri.hr

OFFICE HOURS

8 am to 4 pm Monday to Friday