- General
Protecting your privacy when using the website (www.odvjetnica-beber.hr) is extremely important to us.
The protection of your personal data on this website is the responsibility of attorney Marija Beber, A. Gredičaka street 12A, 49243 Oroslavje, OIB: 93360639402, as the data controller.
Your personal data is processed in accordance with the General Data Protection Regulation (EU Regulation 2016/679) and the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018).
It is particularly emphasized that an attorney, in accordance with Art. 13 of the Advocacy Act and Art. 26-34 of the Code of Lawyers’ Ethics, is obliged to keep as a lawyer’s secret everything that you as a client have entrusted to him or that he has otherwise learned while representing you as a client, and the duty to maintain lawyer’s secret also applies to current and former employees of the law firm.
By accepting this Personal Data Protection Policy by clicking when visiting this website, you confirm that you have read, understood and agreed to the processing of personal data as determined by this Policy.
- Security
In order to protect your personal data, attorney Marija Beber has taken appropriate technical and organizational measures, which are continuously upgraded, and which measures protect your personal data from loss, misuse or unauthorized access.
However, we cannot guarantee complete protection during the transfer of personal data to or from our website, therefore it is extremely important that you yourself take care of the security of your computer and the secure storage of personal data and their confidentiality.
- Categories of personal data and purpose of processing
3.1 The following personal data are processed for the client category:
identification data such as: name and surname, PIN, address, ID card number, photo, other data contained in the ID card;
contact information such as: e-mail address, telephone number (mobile and/or landline)
bank information such as: IBAN, bank name; card type, etc.
data on other persons – counterparties and proxies, witnesses, experts, officials conducting proceedings, employees of courts and other state bodies, notaries, etc., which are necessary for initiating and conducting proceedings before competent authorities, or generally representing or providing other forms of legal assistance; the contents of your inquiries and our responses, the documentation you have made available to us, notes from the files (judicial and extrajudicial), documentation of our services, evidence of services performed, cost calculations
all other data you provide to the Office before or during the provision of legal assistance, which are necessary for the provision of legal assistance
special category of personal data: if necessary, may contain data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, data relating to health, data on sex life, data on sexual orientation
Purpose of processing:
- a) legal services: the Office may process your personal data pursuant to the Advocacy Act, an issued power of attorney, a concluded contract or a decision of a competent authority for the purpose of providing legal assistance, and in particular for the purpose of initiating and conducting proceedings before competent authorities, drafting documents, general representation and legal advice. Therefore, your personal data that is necessary for the provision of legal advice, the preparation of documents (contracts, wills, statements, etc.), representation before the court and other competent institutions, as well as in out-of-court representation, are processed, all with the aim of protecting your rights and legal interests.
The processing of personal data is based on a contractual legal basis (a contract for representation or an order or power of attorney) Art. 6, paragraph 1 a and b of the General Data Protection Regulation.
However, taking into account the specificities of the law service, the processing of data is also based on Art. 6, paragraph 1, points d, e and f of the General Data Protection Regulation.
- b) Fulfillment of legal obligations
We process your personal data in order to fulfill our legal obligations as the controller. In certain cases, the office is obliged to process your data in order to comply with legal obligations. Such processing may result from mandatory legal regulations, e.g. tax, trade, money laundering prevention, criminal provisions and similar, therefore, due to state supervision and control as well as the legal duty to provide data.
The processing is based on Art. 6, paragraph 1, point c of the General Data Protection Regulation.
3.2 Category of data subject – request to exercise rights:
e-mail address, name, surname, telephone number (mobile and/or landline number)
if necessary, a copy of the identification document (exclusively for the purpose of establishing the identity of the data subject)
Purpose of processing personal data: legitimate interest – response to your request
3.3 The category of business partner includes:
business partners as natural persons, for whom the following identification data is collected: name and surname, OIB, etc., contact data: address, telephone, mobile phone, etc., bank data such as: IBAN, bank name; type
contact person of a business partner of a legal entity, for whom the following identification data is collected: identification data: name and surname, etc., contact data: address, telephone, mobile phone, etc., data related to the workplace at the business partner (position, department, etc.)
Purpose of processing personal data: personal data is processed for the purposes of exercising rights and obligations under contracts concluded with business partners, in particular for the purpose of issuing invoices for services performed. Certain personal data may also be processed if this is necessary to comply with the legal obligations of the controller. Personal data may also be processed for the purposes of the legitimate interests of the controller, e.g.: business communication, keeping records of business partners and assessing mutual cooperation.
- Delivery of personal data
You are not obliged to provide us with your personal data. However, the delivery of personal data is mainly necessary for the performance of our legal services or contracts, therefore we must warn you that without the delivery of personal data (depending on each individual case) we will not be able to provide you with a complete legal advice and representation service.
- Sources
We collect your personal data, in addition to those you have provided to us personally, if necessary, solely for the purpose of protecting your rights and legal interests as our client, and from competent state institutions and third parties.
When we collect data about persons who are not our clients, we collect it on the basis of your statements or on the basis of legal authority contained in special laws, or on the basis of insight into publicly published registers.
- Recipients
Attorneys, legal trainees, as well as other employees of the Office responsible for accounting, mail delivery and administration may have access to your personal data.
External recipients may have access to your personal data only if this is necessary for the performance of our legal services or arises from mandatory legal regulations.
External Recipients may be:
– competent state bodies (such as the Croatian Pension Insurance Institute and the Croatian Health Insurance Institute, the Tax Administration, courts, FINA, the Ministry of the Internal Affairs, etc.)
– providers of accounting and similar services to the controller;
– providers of IT support services to the controller;
– related parties of the controller;
– banks, credit and financial institutions, etc.;
– notaries; counterparties, representatives of counterparties and employers of counterparties;
– experts, court interpreters and translators;
– third parties in relation to whom there is a legal obligation to provide the personal data of the data subject;
– other third parties for the purpose of pursuing interests related to the purpose of providing legal assistance or pursuing legitimate interests.
In the event of a possible transfer of personal data outside the Republic of Croatia, we will take the necessary measures to protect your personal data in order to ensure that the third party to whom your personal data is transferred provides the same level of protection for your personal data as in the Republic of Croatia. At any time, you can obtain information from the Office whether your personal data is being transferred outside the Republic of Croatia, as well as the protection measures taken, using the contact details below.
- Retention period
- a) In accordance with Article 11, paragraph 2 of the Advocacy Act, we are obliged to keep the personal data from point 3. 1 for ten years from the final conclusion of the procedure. However, if enforcement proceedings are underway under a final and enforceable judgment, proceedings under extraordinary legal remedies, protection of your rights before the Constitutional Court of the Republic of Croatia and/or the European Court of Human Rights, etc., then we keep your data for an additional ten years, counting from the day when all legal remedies have been exhausted in order to protect your rights and legal interests.
The exception to the above are documents (wills, contracts, etc.) that you have entrusted to us for safekeeping, and which documents we keep on the basis of your order until you collect them.
Taking into account the specificities of the law firm, as data controllers we may, in individual cases and depending on special circumstances, determine a longer retention period for the files in order to protect legitimate and legal interests.
If mandatory legal regulations require us to retain them for a longer period, your data will be deleted after the expiry of the additional legal periods.
- b) We retain the personal data from points 3.2 and 3.3 for five years, except in the case of exercising or defending legal claims or unless mandatory legal regulations require us to retain them for a longer period.
- Web cookies
We use cookies that are strictly necessary for the proper display and operation of this website and we do not collect your personal data through cookies.
- Your rights:
9.1 Right of access – you can request confirmation of whether your data is being processed, for what purpose and to what extent.
9.2 Right to rectification – if we process your personal data that is inaccurate or incomplete.
9.3 Right to erasure – you can request the erasure of your personal data if the purpose for which it was collected no longer exists, if it is unlawful processing, if the processing disproportionately affects your protected legitimate interests or the processing of data is based on your consent that you have withdrawn.
However, it is necessary to take into account the possible existence of other reasons that could be against the complete erasure of your personal data, for example, storage that is expressly required by law, the existence, exercise or defense of legal claims, etc.
9.4 Right to data portability – data that you have provided to us and that we process on the basis of your consent or for the performance of a contract, and their processing is carried out by automated means, we will forward them to you at your request in a structured, commonly used and machine-readable format. If technically feasible, we can directly transfer them to another data controller at your request.
9.5 Right to restriction of processing – you have the right to request restriction of processing of your data:
– if you contest the accuracy of your personal data, for a period that allows us to verify the accuracy of the data
– if the processing is unlawful, but you have refused erasure and instead request restriction of processing
– if we no longer need your personal data for the intended purpose, and you still need them for the establishment or defense of legal claims
– if you have objected to the processing of personal data pending confirmation whether the legitimate reasons of the data controller override your reasons
9.6 Right to object – you can object to the processing of your personal data at any time in accordance with Art. 6 para. 1 point f of the General Data Protection Regulation, therefore, if we process your personal data in the public interest or we base the processing on the needs of our legitimate interests.
* When exercising your rights, please make sure to provide us with evidence on the basis of which we will be able to establish your identity in an undoubted manner (personal identification document)
9.7 Right to appeal – if you believe that we have violated the regulations on the protection of personal data when processing your personal data and thus led to a violation of your interests, rights and freedoms, please contact us so that we can clarify all possible questions.
In addition to us directly, with your complaint or appeal, you can also contact the supervisory authority for personal data protection in the Republic of Croatia – the Personal Data Protection Agency (AZOP), Martićeva 14, 10000 Zagreb.
9.8 We will provide information on the actions taken no later than one month from the date of receipt of your request.
If the processing of the request is complex or involves a large number of requests, this deadline may be extended by another two months, but in that case we will inform you of the reasons for any extension of the deadline.
Also, if we are unable to act on your request, we will inform you of our decision, stating the reasons for such a decision, and the possibility of filing a complaint or appeal with the Personal Data Protection Agency.
In the event that the requests are manifestly unfounded or excessive, in particular due to their frequent repetition, we may charge a reasonable fee based on administrative costs or refuse to act on the request.
Download: request form for exercising rights
- Automated processing including profiling
When providing our legal services, automated processing and profiling within the meaning of Art. 22 of the General Data Protection Regulation are excluded.
- Terms and amendments
The terms of this Policy on the protection of personal data and cookies govern the use of cookies and all data collected during the application of this Policy, with the exception of third-party cookies.
To exercise your rights and for any additional questions, please contact us:
Contact details of the data controller:
Attorney Marija Beber
Gredičaka street 12A, 49243 Oroslavje
PIN: 93360639402
Telephone: 091/2229-678
E-mail: info@odvjetnica-beber.hr
Oroslavje, 14.12.2024.
