PRIVACY POLICY

1. Data Controller
Law firm Planinić & partners Ltd., with registered office at Tkalčićeva 73 A, Zagreb, VAT ID: 31234996315 (“we”, “our”, or “the Firm”), is the controller of your personal data in accordance with the General Data Protection Regulation (GDPR). This Policy explains how and why we collect and process personal data, who we may share it with, how long we retain it, and what rights you have as a data subject.

2. Types of Personal Data We Process
We process personal data that can directly or indirectly identify you, such as your name, surname, address, contact information, identification number (OIB), job title, employer, and technical information like your IP address. We collect personal data in the following situations:

– when you are our client or are considering becoming one,
– when you contact us via email, our website, or social media,
– when you apply for a job or internship,
– when we are legally required to process data under the Attorneys Act, Anti-Money Laundering regulations, or tax and accounting laws and
– when you visit our website, subject to our cookie settings.

We do not collect more data than necessary, and we process only what is relevant to the specific purpose.

3. Website and Cookies
When you visit our website, certain cookies may be stored on your device to ensure the site functions properly or to analyse usage. Cookies fall into the following categories:

– Strictly Necessary Cookies: Essential for website functionality;
– Performance Cookies: Help us understand how visitors interact with the site;
– Functionality Cookies: Remember user preferences (e.g. language, location).

Non-essential cookies (like those used by Google Analytics) are activated only with your consent. You can change your cookie settings or withdraw consent at any time via your browser or by installing the Google Analytics opt-out plugin.

4. Recruitment and Internship Applications
When you submit an open application or apply to our public calls for employment or student practice, we collect and retain the information you provide (such as your CV, motivation letter, and contact details) for up to two years, unless you request earlier deletion. Only authorised persons involved in recruitment will access this data, and they are all bound by strict confidentiality.

5. Client Data and Legal Services
As part of our legal services, we process personal data of clients and their representatives in accordance with legal and ethical obligations. This includes data required for identification, case processing, and compliance with laws such as the Anti-Money Laundering Act.

All data obtained during legal representation is treated as confidential and is protected by attorney-client privilege. Unless otherwise agreed, we store client-related data for ten years following the end of the professional relationship, or longer if required by law.

We will not disclose any client information without explicit consent, unless such disclosure is required by law or essential for the delivery of legal services by our internal team.

6. Purposes and Legal Basis for Processing
We process your personal data for specific and legitimate purposes, including:

– responding to inquiries and providing requested services,
– fulfilling our contractual obligations,
– complying with legal requirements,
– assessing job or internship applications,
– ensuring website security and functionality and
– with your consent, sending professional updates or using analytics tools.

Providing personal data is generally voluntary. However, if you choose not to provide certain data, we may not be able to fulfil your request or establish a client relationship.

7. Data Recipients
We may share personal data with:

– authorised employees and legal associates,
– service providers (e.g. IT, accounting) under confidentiality agreements,
– public authorities where required by law and
– with consent, professional directories or ranking bodies.

All recipients are either contractually or legally bound to handle data securely and confidentially.

8. Transfers to Third Countries
Where necessary, we may transfer personal data to data processors outside the EU, such as US-based cloud service providers. These transfers are carried out in compliance with GDPR, using appropriate safeguards such as Standard Contractual Clauses or similar legal instruments.

9. Data Retention
We retain your personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by law. This may range from a few months (e.g. job applications) to ten years or more for legal and accounting records.

10. Your Rights
Under GDPR, you have the right to:

– access your personal data,
– request correction or deletion,
– object to or restrict processing,
– withdraw consent (where applicable),
– and lodge a complaint with the competent authority (in Croatia, the Personal Data Protection Agency – AZOP).

11. Security Measures
We take data protection seriously and have implemented physical, technical, and organisational measures to prevent unauthorised access, loss, or misuse of personal data. However, due to the nature of internet communication, absolute security cannot be guaranteed.

12. Other Websites
Our website may contain links to external websites. We are not responsible for the privacy practices or content of those sites, and we advise you to read their privacy policies separately.

13. Governing Law and Jurisdiction
This Privacy Policy is governed by Croatian law. Any disputes shall be subject to the exclusive jurisdiction of the courts of the Republic of Croatia.

14. Compliance with Bar Association Rules
Our firm operates in accordance with the rules and ethical standards set by the Croatian Bar Association. Information provided on our website does not constitute legal advice and is intended only for informational purposes within the Republic of Croatia.

15. Updates to the Policy
We reserve the right to amend this Privacy Policy at any time. The latest version will always be available on our website, with the date of last update clearly indicated.

16. Contact
If you have any questions regarding this Policy or wish to exercise your rights, you can contact us at: lawyer@oukp.hr