NOTIFICATION ON DATA PROCESSING OF THE LAWFIRM'S PARTIES


In compliance with the General Data Protection Regulation (hereinafter: GDPR) and the Act on the enforcement of GDPR (hereinafter: Act), the lawfirm Odvjetničko društvo Kovačević, Koren i partneri d.o.o. (hereinafter: Firm), as a data controller, informs you regarding the processing of your personal data.
Data controller: Odvjetničko društvo Kovačević, Koren i partneri d.o.o., Rijeka, F. Supila 6/III
e-mail address: info@odkkp.hr


I. OBLIGATION OF PRESERVATION OF ATTORNEY – CLIENT PRIVILEGE


At first, we declare that, in compliance with the article 13. of the Attorney's Act, we are obliged to preserve as attorney-client privilege everything that you as a client convey to the Firm or data that in the process of representation become known in any other way, which obligation entails a wider range of data than those to which this notification refers to. The same obligation extends to every employee of the Firm.


II. CATEGORIES AND PURPOSES OF THE DATA PROCESSING


During the course of your representation it is necessary to gather and further process determined personal data. Your data may be processed on the basis of the Attorney’s Act, concluded contract or on the basis of a competent authority for the purpose of providing legal aid, especially to initiate and conduct proceedings before the competent authorities, produce documents, general representation and legal counseling. Except in the aforementioned cases, in determined situations your data may be processed due to statutory obligations (e.g. for bookkeeping necessities or for anti-money laundering obligations) and your personal data may be processed for the purpose of record keeping of the Firm’s cases.

The Firm may gather and process the following data or categories of data:


The Firm processes the aforementioned data with the purpose of the execution of the representation contract, or representation on any other basis and for the execution of the contract on the provision of other types of legal aid. The provision of personal data may be necessary for the provision of legal aid, i.e. there may be a statutory obligation to process personal data, e.g. on the basis of the Act on the prevention of money laundering and terrorism financing. Your personal data may also be processed for the purpose of issuing bills for provided legal aid and to ensure compliance with the applicable bookkeeping regulations.


III. ACCESS TO PERSONAL DATA AND RECIPIENTS

Access to the gathered personal data is allowed to attorneys, attorney apprentices as well as other employees authorized to do so during the performance of their work activities (e.g. employees responsible for mail delivery, accounting and administration).
For the achievement of the aforementioned purposes of processing, the recipients of your personal data may be competent bodies (such as the Croatian institution for pension insurance and the Croatian institution for medical insurance, tax administration, courts, Financial agency, Ministry of internal affairs, etc.), attorneys and attorney apprentices who offer exchange services in compliance with the Attorneys Act, IT service providers, credit and financial institutions, public notaries, counterparties and their representatives and employers, experts, court interpreters and translators, third parties which have the legal right to obtain your personal data, other third parties for the achievement of interests related to the provision of the legal aid or of the Firm’s legitimate interests.
In the case of eventual export of personal data out of the EU, the necessary measures of protection will be undertaken to ensure an equal level of protection of your personal data as the level provided in the EU. In every moment using the aforementioned contact data you may obtain information if your personal data is exported from the EU as well as the information regarding the provided measures of protection.


IV. DATA RETENTION PERIOD


Your personal data is preserved for the following periods:

 

V. PROTECTION OF YOUR PERSONAL DATA


The adequate technical and organizational measures are being undertaken with the purpose of providing protection of the gathered personal data and the prevention of accidental or unlawful destruction, loss, modification, unauthorized revelations or access to personal data. The protection of your personal data is executed in accordance with our Internal act on data protection.


VI. DATA SUBJECT’S RIGHTS AND ENFORCEMENT


As a data subject, you have the right to contact us for the enforcement of your rights, e.g. your right to access, right to be informed, right to rectification, right to erasure, right to restrict processing, right to data portability, right to object to the processing of personal data, right in relation to automated decision making and profiling, right to object to the competent authority regarding the unlawful processing of the data subject’s personal data.
In order to ensure an orderly and documented procedure, it is necessary that the request is filed in written form. The request is delivered directly at the Firm’s address, by post or e-mail. The person that files the request must identify itself. If the request is anonymous and there is no easy and accessible way to establish the identity of the person filing the request, the request will not be granted. In the period of a month from the receipt of the request you will be informed of the Firm’s decision and of the actions conducted on the basis of the request.


Valid from: May 25th 2018


Updated: January 9th 2020