Privacy policy
NOTIFICATION ON DATA PROCESSING OF THE LAWFIRM’S PARTIES
In compliance with the General Data Protection Regulation (hereinafter: GDPR) and the Act on the enforcement of GDPR (hereinafter: Act), the lawfirm Odvjetničko društvo Kovačević, Koren i partneri d.o.o. (hereinafter: Firm), as a data controller, informs you regarding the processing of your personal data.
Data controller: Odvjetničko društvo Kovačević, Koren i partneri d.o.o., Rijeka, F. Supila 6/III
e-mail address: info@odkkp.hr
I. OBLIGATION OF PRESERVATION OF ATTORNEY – CLIENT PRIVILEGE
At first, we declare that, in compliance with the article 13. of the Attorney’s Act, we are obliged to preserve as attorney-client privilege everything that you as a client convey to the Firm or data that in the process of representation become known in any other way, which obligation entails a wider range of data than those to which this notification refers to. The same obligation extends to every employee of the Firm.
II. CATEGORIES AND PURPOSES OF THE DATA PROCESSING
During the course of your representation it is necessary to gather and further process determined personal data. Your data may be processed on the basis of the Attorney’s Act, concluded contract or on the basis of a competent authority for the purpose of providing legal aid, especially to initiate and conduct proceedings before the competent authorities, produce documents, general representation and legal counseling. Except in the aforementioned cases, in determined situations your data may be processed due to statutory obligations (e.g. for bookkeeping necessities or for anti-money laundering obligations) and your personal data may be processed for the purpose of record keeping of the Firm’s cases.
The Firm may gather and process the following data or categories of data:
your identification data such as: name and surname, VAT number, address;
your contact data such as: e-mail address, telephone number, cellphone number;
your bank account data such as: IBAN, name of the bank, type of bank card;
data on third parties which is necessary for the initiation and conduction of the proceedings before the competent bodies, i.e. general representation and legal counseling in compliance with the contract and which we obtain in any other way during the representation or the provision of legal aid;
exceptionally, we may gather special categories of personal data – data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, data concerning health or data concerning a natural person’s sex life or sexual orientation, if such processing is necessary for the establishment, exercise or defence of legal claims;
as well as every other information regarded as personal data under the GDPR, provided to the Firm before or during the representation or contractual relationship, which are necessary for the provision of any type of legal aid.
The Firm processes the aforementioned data with the purpose of the execution of the representation contract, or representation on any other basis and for the execution of the contract on the provision of other types of legal aid. The provision of personal data may be necessary for the provision of legal aid, i.e. there may be a statutory obligation to process personal data, e.g. on the basis of the Act on the prevention of money laundering and terrorism financing. Your personal data may also be processed for the purpose of issuing bills for provided legal aid and to ensure compliance with the applicable bookkeeping regulations.
III. ACCESS TO PERSONAL DATA AND RECIPIENTS
Access to the gathered personal data is allowed to attorneys, attorney apprentices as well as other employees authorized to do so during the performance of their work activities (e.g. employees responsible for mail delivery, accounting and administration).
For the achievement of the aforementioned purposes of processing, the recipients of your personal data may be competent bodies (such as the Croatian institution for pension insurance and the Croatian institution for medical insurance, tax administration, courts, Financial agency, Ministry of internal affairs, etc.), attorneys and attorney apprentices who offer exchange services in compliance with the Attorneys Act, IT service providers, credit and financial institutions, public notaries, counterparties and their representatives and employers, experts, court interpreters and translators, third parties which have the legal right to obtain your personal data, other third parties for the achievement of interests related to the provision of the legal aid or of the Firm’s legitimate interests.
In the case of eventual export of personal data out of the EU, the necessary measures of protection will be undertaken to ensure an equal level of protection of your personal data as the level provided in the EU. In every moment using the aforementioned contact data you may obtain information if your personal data is exported from the EU as well as the information regarding the provided measures of protection.
IV. DATA RETENTION PERIOD
Your personal data is preserved for the following periods:
at least 10 years after the final conclusion of the proceeding in which we were representatives;
in the case of the final conclusion of a proceeding your personal data will be preserved until the file is acquired by you;
in the case of execution of final decisions and court orders, in the case of extraordinary remedies before the Constitutional Court of Croatia and/or European court of human rights and other relevant institutions, your data will be preserved even longer until all the remedies allowed for the protection of your rights and interests are exhausted;
wills, contracts and other documentation deposited to the Firm will be preserved until the conditions are fulfilled to stop the retention of the deposited documentation (will) or until the documentation is acquired by you;
in the case of other statutory obligations, the data is preserved in compliance with the regulations of the statute;
in every individual case, according to the details of the case, a longer retention period may be determined, if the retention is necessary to protect legitimate interests.
V. PROTECTION OF YOUR PERSONAL DATA
The adequate technical and organizational measures are being undertaken with the purpose of providing protection of the gathered personal data and the prevention of accidental or unlawful destruction, loss, modification, unauthorized revelations or access to personal data. The protection of your personal data is executed in accordance with our Internal act on data protection.
VI. DATA SUBJECT’S RIGHTS AND ENFORCEMENT
As a data subject, you have the right to contact us for the enforcement of your rights, e.g. your right to access, right to be informed, right to rectification, right to erasure, right to restrict processing, right to data portability, right to object to the processing of personal data, right in relation to automated decision making and profiling, right to object to the competent authority regarding the unlawful processing of the data subject’s personal data.
In order to ensure an orderly and documented procedure, it is necessary that the request is filed in written form. The request is delivered directly at the Firm’s address, by post or e-mail. The person that files the request must identify itself. If the request is anonymous and there is no easy and accessible way to establish the identity of the person filing the request, the request will not be granted. In the period of a month from the receipt of the request you will be informed of the Firm’s decision and of the actions conducted on the basis of the request.
Valid from: May 25th 2018
Last update: 30.09.2024.
