Privacy Policy

Nogolica & Partners law firm, Zagreb, Ilica 73, OIB: 70984621568 (hereinafter: N&P), on the basis of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter: General Data Protection Regulation), as well as the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018), in its capacity as data controller, hereby wishes to inform you of the manner in which your personal data are processed.

Processing of Personal Data

N&P processes personal data lawfully, fairly, and transparently, taking care that the data are processed exclusively in a manner that ensures appropriate security of personal data, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, by applying appropriate technical and organizational measures.

Categories and Purpose of Personal Data Processing

N&P collects and processes the following types of personal data:

  • personal data of employees and former employees in accordance with employment contracts and applicable regulations;

  • personal data of clients, i.e. parties, in accordance with powers of attorney, instructions, and representation agreements, in the provision of legal services pursuant to the Attorneys Act;

  • personal data of business partners and associates in accordance with contracts;

  • personal data of potential clients (parties) as well as potential employees who contact us via the contact form or email.

Personal data collected through the contact form (when submitting your inquiry, job application, etc.) are processed exclusively for the purpose of responding to your request.

N&P processes personal data only if one of the following conditions is met:

  • the data subject has given consent for the processing of their personal data for one or more specific purposes; or

  • processing is necessary for the performance of a contract to which the data subject is a party; or

  • processing is necessary for compliance with the legal obligations of N&P; or

  • processing is necessary to protect the interests of the data subject or another natural person.

With regard to website visitors, N&P notes that, for the purpose of ensuring the proper functioning of the website, “cookies” (small data files) are used and stored on a computer or mobile device when visiting the website, for the purpose of storing preferred display settings.

Data Recipients

Access to your personal data is granted to attorneys, trainee lawyers, as well as other employees of N&P responsible, for example, for accounting, administration, IT, and mail dispatch.

Access to your personal data may also be granted to external recipients (competent state authorities and courts, notaries public, FINA, etc.) where this is necessary for the provision of legal services or arises from mandatory legal provisions.

Data Retention Periods

For certain personal data, the periods of processing and storage are prescribed by applicable regulations of the Republic of Croatia. For example, pursuant to the Attorneys Act, attorneys are required to retain personal data contained in case files for 10 years from the final conclusion of proceedings.

With regard to data processed on the basis of consent, such data are retained for as long as the purpose for which the data were provided or processed exists, or until the consent for processing is withdrawn by the data subject.

Upon the cessation of the purpose or the expiry of the retention period, personal data are permanently deleted or anonymized so that they can no longer be associated with a specific data subject.

Rights of Data Subjects

The rights granted to data subjects under the General Data Protection Regulation are as follows:

  • Right of access – the right to obtain information on the purposes of processing, categories of personal data processed, recipients or categories of recipients to whom the data have been or will be disclosed, the envisaged storage period, and, where personal data are not collected from the data subject, information on their source. This also includes the right to obtain a copy of personal data stored in filing systems relating to the data subject.

  • Right to rectification – the right to obtain, without undue delay, the correction of inaccurate data or completion of incomplete data.

  • Right to erasure – the right to request deletion of personal data where such data are no longer necessary for the purposes for which they were collected or processed, or where the data subject withdraws consent.

  • Right to restriction of processing – the right to obtain restriction of processing where the conditions defined by the General Data Protection Regulation are met.

  • Right to data portability – the right to receive personal data concerning the data subject in a structured, commonly used, and machine-readable format and to transmit those data to another controller, where processing is based on consent or a contract and is carried out by automated means.

  • Right to object – the right of the data subject to object, on grounds relating to their particular situation, to the processing of personal data. The objection shall be submitted to N&P via the indicated contact details (email or post). N&P will provide the requested information and notify you of the actions taken no later than one month from receipt of the request. If the request is complex or numerous, this period may be extended by an additional two months, of which you will be informed.

In the event of refusal of a request, N&P will inform the data subject of the reasons for refusal without delay, and at the latest within one month from receipt of the request.

We note that in the case of requests that are manifestly unfounded or excessive, in particular due to their repetitive nature, N&P may charge a reasonable fee based on administrative costs or refuse to act on the request.

Additional Information and Comments

If you have any additional questions or comments regarding the N&P Privacy Policy, or if you wish to exercise any of your rights, in addition to submitting a request form, you may contact us via our online form, by email at office@nogolica.com, or by telephone at +385 (0)1 4886 500.