Personal Data Protection Policy on the website
1. General
1.1 Protection of your privacy when using our websites (matulicsumic-law.hr) is extremely important to us. Law firm MATULIĆ SUMIĆ & partners doo, Split, Lička 4a, OIB: 23411475160 (hereinafter: the “Company”) is responsible for protection of your personal information on this site.
1.2 Your personal data is processed by the Company in accordance with the General Data Protection Regulation (EU Regulation 2016/679) and the Law on Implementation of the General Data Protection Regulation (OG 42/2018). As attorneys, pursuant to Art. 13 of the Law on the Bar and Art. 26-34 of the Code of Attorneys Ethics, we are obliged to keep as a lawyer’s secret all that you have entrusted to the Company as a party or have otherwise learned in representing you as a party.
1.3 By accepting this Privacy Policy by clicking on a visit to our site, you acknowledge that you have read, understood and agree to the processing of personal data as determined by this Policy.
2. Security
In order to protect your personal information, we have taken appropriate technical and organizational measures, which are continually upgraded, which protect your personal information from loss, misuse or unauthorized access.
However, Company cannot guarantee full protection when transferring personal information to or from our website, so it is extremely important that you also take care of the security of your computer and the safe keeping of personal information and its secrecy.
3. Categories of personal data and purpose of processing
3.1.Category: clients
Company processes following personal information:
- identification information such as: first and last name, OIB, address, ID number, photograph, other information contained on the ID card
- contact information such as: e-mail address, telephone number (mobile and / or fixed number)
- bank information such as: IBAN, bank name; card type etc.
- information about other persons – counterparties and proxies, witnesses, experts, court officials, employees of courts and other state bodies, notaries, etc., who are necessary for us to initiate and conduct proceedings before competent authorities, or generally represent or provide others the form of legal aid; the contents of your inquiries and our answers, the documentation you have made available to us, the records (court and extra-judicial), the documentation of our services, the evidence of the services provided, the calculation of costs
- as well as any other information you provide to the Office before or during the provision of legal assistance that is necessary for the provision of legal aid
- special category of personal data: may contain information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or union membership, genetic data, biometric data, health-related information, sex life information, sexual orientation information
Purpose of processing:
A Legal services
Company processes your personal information pursuant to the Law on the Provision of Legal Services, the power of attorney issued, the contract concluded or the decision of the competent authority for the purpose of providing legal assistance, especially for the purpose of initiating and conducting proceedings before the competent authorities, drafting documents, general representation and legal counselling . Company processes your personal information, which is necessary for the provision of legal services, drafting of documents, representation before the court and other competent bodies, as well as in extrajudicial representation, all for the purpose of protecting your rights and legal interests.
Processing of personal data is based on a contractual legal basis (contract for representation or order or power of attorney). Taking into account the specifics of legal services, data processing is also based on Art. 6 paragraph 1 point d, e and f of the General Data Protection Regulation.
Obrada osobnih podataka temelji se na ugovornoj pravnoj osnovi (ugovoru o zastupanju ili nalogu odnosno punomoći). Uzimajući u obzir specifičnosti odvjetničkih usluga, obrada podataka se temelji i na čl. 6 stavak 1 točka d, e i f Opće uredbe o zaštiti podataka.
B Fulfilment of legal obligations
Company processes personal data in order to fulfil its legal obligations. In certain cases, Company is obliged to process your information in order to comply with legal obligations. Such processing may result from coercive legal provisions, eg tax, commercial, anti-money laundering, criminal provisions, etc., therefore, due to state control and control and the legal duty to provide information.
Processing is based on Art. 6 paragraph 1 point c of the General Data Protection Regulation.
3.2 Business Partner Category:
- business partners physical persons – identification information: name and surname, OIB, contact information: address, telephone, mobile phone, etc., bank information such as: IBAN, bank name, etc.
- contact person of the business partner – identification information: name and surname, etc., contact information: address, telephone, mobile phone, etc., data related to the work place with the business partner (position, department, etc.)
Purpose of processing of personal data: personal data is processed for purpose of exercising rights and obligations under contracts concluded with business partners, especially for the purpose of invoicing for services performed. Certain personal data may also be processed if necessary to comply with processing manager’s legal obligations. Personal data can also be processed for legitimate interests of the processing manager, eg: business communication, record keeping of business partners and evaluation of mutual cooperation.
4. Delivery of personal information
You are under no obligation to provide us with your personal information. However, providing your personal information is generally necessary for performance of our legal services or contracts, so we must warn that without the submission of personal information (on a case-by-case basis) we will not be able to provide you with adequate legal counselling and representation services.
5. Sources
We collect your personal information, in addition to those you have provided to us personally, if necessary, solely to protect your rights and legal interests as our party, and from the competent state institutions and third parties.
When we collect information about people who are not our clients, we collect it based on your statements or on the legal powers contained in special laws, or on the basis of an insight into the publicly released registers.
6. Recipients
Attorneys, law trainees and other Company employees in charge of accounting, mailing and administration may have access to your personal information.
External recipients may have access to your personal information only if it is necessary for the performance of our legal services or is caused by a mandatory legal act.
External Recipients may be:
- competent state bodies (such as the Croatian Pension Insurance Institute and the Croatian Health Insurance Institute, Tax Administration, courts, FINA, MIA, etc.)
- accounting and similar services to the processing manager;
- IT support providers to the processing manager
- related persons of the processing manager
- banks, credit and financial institutions and the like
- notaries; counterparties, counterparty advocates and counterparty employers
- Experts, court interpreters and translators
- third parties in respect of whom there is a legal obligation to provide the personal data of the respondents
- other parties for the purpose of pursuing an interest related to the purpose of providing legal assistance or pursuing a legitimate interest.
In the event of personal data being transferred outside the Republic of Croatia, we will take necessary measures to protect your personal information in order to ensure that the third party to whom your personal data is transferred provides the same level of protection of your personal information as in Republic of Croatia. At any time you can get information from the Company whether your personal information is transferred outside the Republic of Croatia, as well as the measures taken on the contact information below.
7. Data retention
A We are obliged to retain the personal data referred to in point 3.1 in accordance with Art. 11, paragraph 2 of the Law on the Bar, for ten years from conclusion of the proceedings. However, if a foreclosure and enforcement judgment, an extraordinary legal action, the protection of your rights before the Constitutional Court of the Republic of Croatia and / or the European Court of Human Rights are pending, we retain your information for additional ten years, counting from the day when all legal remedies have been exhausted in order to protect your rights and legal interests.
Exception to this are documents (wills, contracts, etc.) that you have entrusted to us for safekeeping, and which we retain until you take them.
Taking into account the specifics of the legal services, as processing managers we may, in individual cases, and depending on special circumstances, determine a longer period of file retention in order to protect legitimate and legal interests.
If compulsory legislation requires a longer period of keeping, then your data will be deleted after the expiry of the additional legal deadlines.
B We retain personal data referred to in points 3.2 and 3.3 for five years, except in the case of realization or defence of legal requirements or unless a mandatory statutory regulation provides us with a longer retention period.
8. Cookies
We use cookies that are necessary for proper display and operation of this site and do not collect your personal information through cookies.
9. Your rights:
9.1 Rights of Access – You can ask for confirmation of whether your data is processed, for what purpose and to what extent.
9.2 Right to Correction – If we process your personal information that is incorrect or incomplete.
9.3 Right to Erase – You may request the deletion of your personal information if the purpose for which it was collected no longer exists, if it is for unlawful processing, if the processing disproportionately affects your protected legitimate interests or the processing of the data is based on your consent that you have withdrawn.
However, there are other reasons that may be contrary to the complete erasure of your personal information, such as explicitly specified storage, existence, exercise or defence of legal claims, and the like.
9.4 Data Transfer Right – Data that you have provided to us and which we process based on your consent or for the purpose of executing the contract, and their processing is carried out in an automated way, will be forwarded to you at your request in a structured, standard and machine-readable form. If technically feasible, we can transfer them directly to another processing manager at your request.
9.5 Right to Restrict Processing – You have the right to request a restriction on the processing of your data:
- if you dispute the accuracy of your personal information during a period that allows us to verify the accuracy of the information
- if the processing is illegal but you have refused the deletion and are instead seeking to restrict data processing
- if we no longer need your personal information for the intended purpose and you still need it to set up or defend legal claims
- if you have objected to the processing of personal data, pending confirmation that the legitimate reasons of the processing manager exceed your reasons
10.6 Right to Complaint – You may at any time object to the processing of your personal data in accordance with Art. 6 (1) (f) of the General Data Protection Regulation, therefore, if we process your personal data in the public interest or process it based on the needs of our legitimate interests.
* When exercising your rights, please ensure that you provide us with evidence based on which we can confidently identify your identity (personal identification document)
9.7 Right of Appeal – If you believe that in the processing of your personal information we have violated the rules on protection of personal data and thereby violate your interests, rights and freedoms, please contact us so that we can clarify any possible questions.
In addition to us directly, with your complaint or complaint, you can also contact the Supervisory Body for Personal Data Protection in the Republic of Croatia – Agency for Personal Data Protection (AZOP), Martićeva 14, 10000 Zagreb.
9.8 We will provide information on actions taken within one month from the date of receipt of your request.
If processing of the application is complex or there are a large number of requests, this deadline can be extended by another two months, but in this case we will inform you of the reasons for the possible extension of the deadline.
Also, if we are unable to act on your request, we will inform you of our decision, stating the reasons for such a decision, and the possibility of filing a complaint or appeal to the Personal Data Protection Agency.
In the event that requests are clearly ill-founded or excessive, especially because of their frequent repetition, we may charge a reasonable fee based on administrative costs or refuse to act on the request.
10. Automated processing including profiling
When providing legal services, automated processing and profiling within the meaning of Art. 22 General data protection regulations is excluded.
11. Terms and Conditions
Terms of this Privacy Policy and cookies govern the use of cookies and all information collected during the implementation of this Policy, except for third-party cookies.
To exercise your rights and ask any additional questions, please contact us:
Contact information of the processing manager:
Law Firm MATULIĆ SUMIĆ & Partners d.o.o.
Lička 4a, 21000 Split
OIB: 23411475160
Phone: 021 / 484-680
Email: info@matulicsumic-law.hr
Split, 13.02.2020. godine
