Privacy Policy

1. Introduction

In her business operations attorney Ivana Lončar must collect and process certain data about individuals and is therefore the manager of personal data processing.

The purpose of this policy is to ensure that the attorney provides all necessary information regarding the protection of personal data of individuals whose personal data she processes. All employees in the attorney's office are fully aware of the content of this policy and ensure its application when processing personal data. Employees whose tasks include the handling of personal data are adequately educated regarding their tasks in relation to the protection of personal data.

This policy applies to all personal data processed by the attorney in the course of her business in relation to any person regardless of whether they were, currently are, or will be her client, supplier, or employee. This policy was created with the aim of improving the services provided by the attorney to her clients, protecting clients in terms of the confidentiality of their personal data when providing services and preventing the occurrence of potential damage to the attorney, her clients, suppliers and employees as respondents, and to ensure that processing of personal data by the attorney in full accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and on the repeal of Directive 95/ 46/EC (General Data Protection Regulation) (GDPR) and other applicable regulations. The personal data processed by attorney Ivana Lončar in her operations are not shared with unauthorized persons, offered, sold or transferred outside the Republic of Croatia.

2. Definition and application

Personal data is considered to be all data relating to an individual whose identity has been determined or can be determined, that is, an individual (respondent) who can be identified directly or indirectly.

The processing of personal data means any procedure or set of procedures performed on personal data or on sets of personal data, either by automated or non-automated means such as collection, recording, organization, structuring, storage, adaptation or modification, withdrawal, retrieval, inspection , use or use, disclosure by transmission, dissemination, publication or otherwise making available, matching or combining, restriction, deletion or destruction and the implementation of logical, mathematical and other operations with this data.

Attorney Ivana Lončar collects and processes personal data primarily to provide services to the respondent in her business or to fulfill legal obligations. The legal basis for the processing of personal data is the contractual relationship between attorney and the respondent, the legal obligation of attorney Lončar or the consent of the respondent. The attorney handles this personal data adequately and in accordance with regulations, regardless of how this data was collected, recorded, stored and used - on paper, computer or other media. The attorney processes personal data that she receives from respondents, but also from third parties with information or at the request of the respondent. The attorney does not forward the said personal data to third countries or to humanitarian organizations. The attorney does not process personal data of the respondents for marketing purposes.

At the moment of providing data to the attorney, the respondent consents to the attorney processing his personal data, in accordance with the indicated purpose and for a certain period of time. The protection of the privacy of personal data of the respondent is permanent, and at any time the respondent can exercise his rights, which are listed and explained below.

The Attorney permanently stores the personal data of employees from the employment relationship and in connection with the employment relationship. Personal data from accounting or bookkeeping documents (for example invoices to clients, but also received invoices from suppliers) is kept by the attorney for at least 11 years in accordance with accounting regulations. The attorney can, in order to carry out her business process, entrust certain data processing tasks to data processors, but only to those who comply with technical, logical and organizational personal data protection measures provided by the attorney's office.

The attorney stores the collected personal data in an appropriate manner and ensures their confidentiality. The attorney will not forward the collected data to third parties without the permission of the respondent, except in cases where this is necessary to fulfill attorney’s legal obligations (for example to the Tax Administration, the Croatian Pension Insurance Institute and other competent authorities) or contractual obligations to which the respondent is a party. , in cases where it is necessary for the fulfillment of tasks that are carried out in the public interest or in cases where the respondent himself has published this information, as well as in other cases determined by the competent regulation.

The respondent has the following rights with regard to personal data processed for him by the attorney Lončar:

RIGHTS OF RESPONDENTS (EXPLANATION)

The right to information

The respondent has the right to request notification from attorney Lončar at any time as to whether his personal data is being processed and for what purpose, who is the data controller, the contact details of the data protection officer, which categories of personal data are being processed, for what period they are being processed or stored, who is the source for obtaining his personal data, who are all the recipients of his personal data, as well as the right to be notified of his other rights specified in this policy (right of access, right of correction, right of deletion, right to limit processing and others). 

Right of Access

The respondent has the right to obtain confirmation from attorney Lončar whether personal data relating to him are being processed, and then to obtain access to such data and information about:

• processing purposes,
• categories of personal data that are processed;
• recipients or categories of recipients to whom the data has been disclosed or will be disclosed;
• if possible, about the period for which the data is stored, that is, about the criteria by which it is possible to determine that period;
• to request from attorney Lončar the correction or deletion of personal data or the restriction of the processing of personal data relating to the respondent or the right to object to such processing;
• the right to submit a complaint to the supervisory body;
• if personal data is not collected from the respondent, any available information about its source;
• the existence of automated decision-making, which includes the creation of profiles, with consequences.

Right to rectification

The respondent has the right to obtain from attorney Lončar the correction of inaccurate personal data relating to him without undue delay. The respondent has the right to supplement incomplete personal data, including by providing an additional statement.

Right to erasure / right to be forgotten

The respondent has the right to request that attorney Lončar delete personal data relating to him without delay if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if the respondent withdraws the consent on which the processing is based and there is no other legal basis of processing, if the data subject files an objection to the processing, if personal data has been unlawfully processed, if personal data must be deleted in order to comply with a legal obligation under Union law or the law of a member state to which the attorney's office is subject, if personal data has been collected in connection with the offer of information society services to a child.

The above does not apply if processing is necessary (and to the extent necessary) for the exercise of the right to freedom of expression and information, for compliance with a legal obligation that requires processing under Union law or the law of a member state to which the attorney's office is subject, or for the performance of a task in the public interest or when exercising official authority, due to public interest in the field of public health, for the purposes of archiving in the public interest, for the purposes of scientific or historical research, for the purpose of establishing, realizing or defending legal claims.

The right to object

The respondent has the right, based on his special situation, at any time to object to the processing of personal data relating to him, including the creation of a profile, in cases where the processing is necessary for the performance of a task in the public interest or in the exercise of official authority, i.e. if the processing is necessary for the needs of the legitimate interests of the attorney or a third party. The Attorney may no longer process personal data unless she proves that there are compelling legitimate reasons for processing that go beyond the interests, rights and freedoms of the data subject or to establish, exercise or defend legal claims.

The right to data portability

The respondent has the right to receive the personal data relating to him, which he has provided to the attorney’s office in a structured, commonly used and machine format, and has the right, without interference from the attorney, to transfer this data to another controller if the processing is based on his consent and if processing is carried out in an automated way. The respondent has the right to a direct transfer from the attorney’s office to another data controller if this is technically feasible, and this right must not negatively affect the rights and freedoms of others.

Rights related to automatic decision-making and profiling

The respondent has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects that relate to him or similarly significantly affect him, unless that decision is necessary for the conclusion or execution contract between the respondent and the attorney, if it is permitted by Union law or the law of a Member State to which the attorney’s office is subject or based on the express consent of the data subject.

Right to withdraw consent

The consent of the respondent is one of the legal bases for the processing of data relating to the respondent. The subject has the right to withdraw the consent he has given at any time. The withdrawal of consent does not affect the legality of data processing that was carried out before the withdrawal of consent.

The right to an effective legal remedy (complaint and objection)

Without prejudice to other administrative or judicial remedies, each data subject has the right to submit a complaint to the supervisory authority regarding the processing of his personal data. Every respondent has the right to an effective legal remedy against a legally binding decision of a supervisory body that applies to him. The supervisory authority is the Personal Data Protection Agency.

The right to restrict processing

The respondent has the right to request a limitation of the processing of his personal data: if he disputes the accuracy of his personal data - for the period necessary for the attorney to verify that accuracy, if the processing of his personal data is illegal and does not request deletion but only limitation of processing, if the attorney no longer needs his personal data, but their existence is necessary for the fulfillment of his legal requirements, if he has objected to the processing, he has the right to request a limitation of the processing for the period until it is determined whether attorney’s office has legitimate reasons for the processing exceed his reasons from the objection.

In order to exercise his rights, the respondent should send a written notice or request to the email address info@loncar-odvjetnik.odvjetnik.hr with appropriate identification. The respondent may also exercise their rights by delivering a personal statement directly to the attorney's office, with prior notice given by calling +385 (0)1 488 0346, and by providing valid personal identification documents.

3. Activities of attorney Lončar’s office regarding data processing

The attorney’s office undertakes the following:

• fully respects the conditions of fair collection and processing of personal data;
• fulfills the obligation to specify the purpose for which personal data is processed;
• collects and processes adequate personal data and only to the extent that it is necessary to fulfill operational needs or in accordance with all legal requirements;
• submits all necessary data to the Personal Data Protection Agency at its request;
• carries out a strict check on the length of storage of personal data;
• ensures that the rights of the person whose data is processed can be fully exercised in accordance with the protection of personal data;
• takes appropriate technical and organizational security measures to protect personal data;
• ensures that personal data is not transferred abroad without insurance protection;
• treats all persons fairly and equitably, regardless of their age, religion, disability, gender, sexual orientation or ethnicity, when dealing with their requests for information;
• establishes clear procedures for responding to requests for information.

4. Use of cookies

In order for the websites of the attorney’s office to work properly and in order to improve them to improve your browsing experience, it is necessary to save a minimum amount of information (cookies) on the computer of the visitor to the website. More than 90% of internet sites use the practice of cookies, and according to the rules of the European Union, they are obliged to request the user's consent. By using the Internet pages of the attorney’s office the visitor agrees to the use of cookies, by blocking which the visitor can still view the page, but some of its features will not be functional.

What is a cookie?

A cookie is information saved on your personal computer at the time of browsing the website you visited. Cookies enable easier use since they save the settings for the website (language or address) of the website visitor and reactivate them when the website is restarted. In this way, the information is adapted to the needs and usual ways of using the site visitors.

From simple information about settings, cookies can store a large amount of personal information (name, e-mail address) to which site visitors must fully provide access. If the visitor of the Internet pages has not enabled them, cookies cannot access the files on their computer. The activities of saving and sending cookies are not visible to site visitors, however, they can choose the option of approving/rejecting requests to save cookies, deleting saved cookies and other activities related to the use of cookies.

What cookies does this website use?

Temporary cookies (Session cookies) – these are cookies that will be automatically deleted when closing the Internet browser in which visitors to the site are working.

Persistent cookies – These are cookies that will remain "recorded" in the Internet browser of the site visitors until they expire or until they manually delete them. The collected information is anonymous and does not include personal data of site visitors.

5. Review and verification

Attorney Lončar has the right to update this policy if necessary to reflect best practice and to ensure compliance with any changes or modifications regarding the protection of personal data.