Privacy policy

POLICY ON PROCESSING AND PROTECTION OF PERSONAL DATA

1. General provisions

This Policy on Processing and Protection of Personal Data (hereinafter: the Policy) applies to any type of collection and processing of personal data of the controller: ŠTEFAN ŠTEFANEK – attorney-at-law, patent agent, registered mediator and court interpreter, PIN (OIB): 95418033323, Zagreb, Ilica 191D ( hereinafter: the Attorney)

The Attorney is responsible for the protection of personal data on the website www.stefanek.hr (hereinafter: the Website) as the controller of personal data processing.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC EU Gazette L119) (hereinafter: the General Regulation or GDPR) as well as the Act Implementing the General Regulation on Data Protection (Official Gazette No. 42/2018) (hereinafter: the Act).

At the same time, we would like to emphasize that attorneys, in accordance with Article 13 of the Law on Advocacy (Official Gazette nos. 09/1994, 117/2008, 50/2009, 75/2009, 18/2011) and Articles 26-34 of the Code of Advocacy ethics, we are obliged to keep as a attorney’s secret everything that the client has entrusted to us or we have learned in another way in representing the client, and the duty to keep the attorney’s secret applies to our current and former employees.

By accepting this Policy, by clicking when visiting our Website, you confirm that you have read, understood and agree to the processing of personal data as set out in this Policy.

2. Security

In order to protect personal data, we have taken appropriate technical and organizational measures, which we continuously upgrade, and which protect personal data from loss, misuse or unauthorized access.

However, we cannot guarantee complete protection during the transfer of personal data to or from our website, so it is extremely important that you take care of the security of your computer and the safe storage of personal data and their confidentiality.

3. Categories of data-subjects, personal data and purpose of processing

3.1 Category: client

We process the following personal data:

– identification data such as: name and surname, PIN (OIB), address, identity card number, photograph, other data contained in the identity card;

– contact information such as: e-mail address, telephone number (mobile and / or fixed number)

– bank details such as: IBAN, name of the bank; card type, etc.

– information on other persons – counterparties and proxies, witnesses, experts, officials conducting proceedings, employees of courts and other state bodies, notaries and the like, which are necessary for us to initiate and conduct proceedings before the competent authorities or generally represent or provide other forms of legal aid; contents of your inquiries and our answers, documentation that you have made available to us, notes from the file (judicial and extrajudicial), documentation of our services, evidence of services rendered, costing

– as well as any other information you provide before or during the provision of legal aid, which is necessary for the provision of legal aid;

– special category of personal data: may contain data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, health data, sex life data, sexual orientation data.

Purpose of processing:

a) legal services:

Personal data may be processed on the basis of the Law on Advocacy, accepted power of attorney, contract or decision of the competent authority for the purpose of providing legal assistance, especially for initiating and conducting proceedings before competent authorities, drafting documents, general representation and legal advice. We process your personal data that we need to provide legal advice, draft documents (contracts, wills, statements, etc.), representation before the court and other competent institutions, as well as in out-of-court representation, all to protect your rights and legal interests.

The processing of personal data is based on a contractual legal basis (representation agreement or service order or power of attorney), Article 6 (1) (a) and (b) of the General Regulation.

However, taking into account the specifics of the legal service, data processing is also based on the article. 6 (1) (d), (e) and (f) of the General Regulation.

b) Fulfilment of legal obligations

We process your personal data in order to fulfil our legal obligations as a controller. In certain cases, we are obliged to process your data in order to comply with legal obligations. Such processing may result from coercive legal regulations, such as tax, commercial, anti-money laundering, penal provisions, etc., due to state supervision and control and the legal duty to provide data.

Processing is based on article. 6 (1) (c) of the General Regulation.

3.2 Category: data-subject

Request for exercising the right:

– e-mail address, name, surname, telephone number (mobile and / or fixed number)

– if necessary, a copy of the identification document (exclusively for the purpose of establishing the identity of the respondent)

Purpose of personal data processing: legitimate interest – response to your request.

3.3 Category: business partner

– business partners of natural persons – identification data: name and surname, PIN (OIB), etc., contact data: address, telephone, mobile phone, etc., bank data such as: IBAN, name of the bank; card type, etc.

– contact person of the business partner – identification data: name and surname, etc., contact data: address, telephone, mobile phone, etc., data related to the workplace of the business partner (position, department, etc.)

Purpose of personal data processing: personal data are processed for the purposes of exercising the rights and obligations under contracts concluded with business partners, in particular for the purpose of issuing invoices for services rendered. Certain personal data may also be processed if this is necessary to comply with the legal obligations of the controller. Personal data can also be processed for the needs of the legitimate interests of the controller, for example: business communication, keeping records of business partners and assessing mutual cooperation.

4. Delivery of personal data

You have no obligation to provide us with your personal information. However, the provision of personal data is generally necessary for the execution of our legal services or contracts, so we must warn that without the provision of personal data (depending on each case) we will not be able to provide you with a complete legal advice and representation.

5. Sources

We collect your personal data, in addition to those provided to us personally, if necessary, solely to protect your rights and legal interests as our party and from the competent state institutions and third parties.

When we collect information about persons who are not our client, we collect it on the basis of your statements or on the basis of legal powers contained in special laws, or on the basis of insight into publicly published registers.

6. Recipients

Attorneys, trainee attorneys and other staff in charge of accounting, of mail delivery and administration, may have access to your personal data.

External recipients may have access to your personal data only if this is necessary for the performance of our legal services or as a result of a mandatory regulation.

External Recipients can be:

– competent state bodies (such as the Croatian Pension Insurance Institute and the Croatian Health Insurance Institute, the Tax Office, courts, Financial Agency, the Ministry of Interior, etc.);

– providers of bookkeeping and similar services to the processing manager;

– IT support service providers to the processing manager;

– related persons of the processing manager;

– banks, credit and financial institutions and the like;

– notaries public; counterparties, counterparty representatives and counterparty employers;

– experts, court interpreters and translators;

– third parties in relation to whom there is a legal obligation to provide personal data of respondents;

– other third parties for the purpose of pursuing an interest in connection with the purpose of providing legal assistance or pursuing a legitimate interest.

In the event of personal data disclosure outside the Republic of Croatia, we will take the necessary measures to protect your personal data to ensure that the third party to whom your personal data is transferred ensures the same level of protection of your personal data as in the Republic of Croatia. At any time, you can obtain information from us whether your personal data is transferred outside Croatia, as well as the protection measures taken on the contact details below.

8. Storage term

a) Personal data referred to in point 3.1. we are obliged, in accordance with Article 11, paragraph 2 of the Law on Advocacy, to keep ten years from the final conclusion of the proceedings. However, if there is an ongoing enforcement procedure under a final and enforceable judgment, extraordinary remedies procedure, protection of your rights before the Constitutional Court of the Republic of Croatia and / or the European Court of Human Rights, etc. then we keep your data for an additional ten years, counting from the date all legal remedies have been exhausted in order to protect your rights and legal interests.

Exceptions to this are documents (wills, contracts, etc.) that you have entrusted to us for safekeeping, and which documents we keep on the basis of your order until you pick them up.

Taking into account the specifics of the legal service, as processing managers we can in individual cases, and depending on special circumstances and to protect legitimate and legal interests, determine a longer period of storage of files.

If compulsory regulations require a longer storage period, then your data will be deleted after the additional legal deadlines.

b) Personal data from point 3.2. and 3.3. of this Policy, we keep for five years, except in the case of realization or defence of legal requirements or if the compulsory legal regulation does not determine a longer period of storage.

9. Network cookies

We use cookies that are strictly necessary for the proper display and operation of this website, and we do not collect your personal information through cookies.

10. Rights that belong to you

10.1 Right of access

– you can request confirmation of whether your data is being processed, for what purpose and to what extent.

10.2 Right to correction

– if we process your personal data that is inaccurate or incomplete.

10.3 Right of deletion

– You may request the deletion of your personal data if the purpose for which it was collected no longer exists, if it is illegal processing, if the processing disproportionately interferes with your protected legitimate interests or if the processing is based on your consent.

However, it is necessary to take into account the possible existence of other reasons that could be contrary to the complete deletion of your personal data, such as storage expressly provided by law, the existence, realization or defence of legal claims and the like.

10.4 Right to data transfer

– data that you have provided to us and that we process on your consent or for the performance of the contract, and their processing is carried out automatically, at your request we will forward them in a structured, common and machine-readable form. If technically feasible, we can transfer them directly to another processing manager at your request.

10.5 Right to limit the processing

– you have the right to request a restriction on the processing of your data:

– if you dispute the accuracy of your personal data during the period that allows us to verify the accuracy of the data;

– if the processing is illegal, but you have refused the deletion and instead request a restriction on data processing;

– if we no longer need your personal data for the intended purpose, and you still need it to make or defend legal claims

– if you have filed an objection to the processing of personal data pending confirmation of whether the legitimate reasons of the controller exceed your reasons;

10.6 Right to object

– you may at any time object to the processing of your personal data in accordance with Article 6 (1) (f) of the General Regulation, so if we process your personal data in the public interest or the processing is based on the needs of our legitimate interests.

When exercising your rights, please take care to provide us with proof on the basis of which we will undoubtedly be able to establish your identity (personal identification document).

10.7 Right to appeal

– if you believe that we have violated the regulations on personal data protection during the processing of your personal data and thus violated your interests, rights and freedoms, please contact us so that we can clarify all possible issues.

In addition to us directly, with your complaint or appeal, you can also contact the supervisory body for personal data protection in Croatia – the Agency for Personal Data Protection (hereinafter: AZOP), Martićeva 14, 10000 Zagreb.

10.8 Term for provision of information

We will provide information on the actions taken no later than one month from the date of receipt of your request.

If the processing of your request is complex or there are a large number of requests, this deadline can be extended for another two months, but in that case we will inform you about the reasons for the possible extension of the deadline.

Also, if we are not able to act on your request, we will inform you about our decision, stating the reasons for such a decision and the possibility of filing a complaint or appeal to AZOP.

In the event that requests are manifestly unfounded or excessive, in particular due to their frequent recurrence, we may charge a reasonable fee based on administrative costs or refuse to comply with the request.

Download: Form of request for exercise of rights

11. Automated processing including profiling

When providing our legal services, automated processing and profiling in the sense of Article 22 of the General Regulation is excluded.

12. Terms and changes

The terms of this Policy regulate the use of cookies and all data collected during the application of this Policy, except for third-party cookies.

To exercise your rights and any additional questions, please contact us:

ODVJETNIK ŠTEFAN ŠTEFANEK, Zagreb, Ilica 191D

Phone: +385 1 2222 724

Fax: + 385 2222 725

E-mail: osobni.podaci@stefanek.hr 


NOTICE ON PERSONAL DATA PROCESSING

NATURAL PERSONS – CLIENTS OF THE LEGAL OFFICE

Valid from: 25 May 2018

Last update: 31 March 2021   

I. WHAT THE NOTICE ON THE PROCESSING OF PERSONAL DATA CONTAINS

In accordance with the applicable regulations and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC EU Gazette L119) (hereinafter: the General Regulation or GDPR) as well as the Act Implementing the General Regulation on Data Protection (Official Gazette No. 42/2018) (hereinafter: the Act), ŠTEFAN ŠTEFANEK – attorney and patent agent, mediator and court interpreter, PIN (OIB): 95418033323, Zagreb, Ilica 191D e-mail: osobni.podaci@stefanek.hr (hereinafter: Attoreny or Office) as the processing manager, based on Article 13 of the General Regulation, informs you about the processing of your personal data.

II. OBLIGATION TO KEEP ATTORNEY’S SECRET

In accordance with Article 13 of the Law on Advocacy (Official Gazette nos. 09/1994, 117/2008, 50/2009, 75/2009, 18/2011), as attorneys, we have the obligation to keep as a attorney’s secret everything you entrust to us as a client or in representing you as a client we learn otherwise. All our employees have the same obligation.

III. WHOSE AND WHAT PERSONAL DATA WE PROCESS AND FOR WHAT PURPOSE

If we represent you, we must collect and process certain personal data from you. We may process your personal data on the basis of the Law on Advocacy, accepted power of attorney, concluded contract or based on a decision of the competent authority for the purpose of providing legal assistance, especially for initiating and conducting proceedings before competent authorities, drafting documents, general representation and legal advice. In addition, in certain cases we are obliged to process your data in order to comply with legal obligations (for example, keeping and issuing accounting documents) and your personal data may be processed for the purpose of keeping records of cases.

The Office may collect and process the following personal data or categories of personal data:

– your identification data such as: name and surname, PIN (OIB), address, identity card number, photo, other data contained in the identity card;

–       your contact information such as: e-mail address, telephone number, mobile phone number;

–       your bank details such as: IBAN, bank, card type;

– data on other persons – counterparties, representatives, officials conducting proceedings, experts, witnesses, recorders, employees of courts and other state bodies, notaries, employees of notaries and the like that are necessary to initiate and conduct proceedings before the competent authorities or in general representation and legal advice in accordance with the contract and which we obtain in any other way when representing or providing legal assistance;

–       we may exceptionally collect special categories of personal data such as – data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, health-related data, sex life data, data on sexual orientation

–       as well as any other information you provide to the Office before or during the representation or contractual relationship of other legal aid that is necessary to provide our legal aid services.

The Office processes this personal data for the purpose of executing the contract on representation or representation on another basis and executing the contract on providing another form of legal aid.

Providing your personal data may be necessary in order to provide you with the requested legal assistance, or there may be a legal obligation to process certain of your personal data. If there is no legal obligation to provide us with your personal information, then you are not obliged to do so, however, in which case the Office may not be able to provide you with the requested legal assistance. We may also process your personal data for the purpose of issuing invoices for legal aid provided, and consequently keeping accounting documents in accordance with regulations.

IV. WHAT PERSONAL DATA WE DO NOT PROCESS AND PROCESSES WHICH WE DO NOT CARRY OUT

As a rule, we do not collect or process specific personal information relating to your racial or ethical background, political opinion, religious or philosophical beliefs, trade union membership, biometric data, data relating to your health, sexual life or sexual orientation.

Exceptionally, we will process this information if necessary to establish, enforce or defend your legal claims.

We do not process your personal information for the purpose of creating your profile, nor for the purpose of automated decision-making, which would produce legal effects relating to you or would significantly affect you.

V. HOW WE COLLECT PERSONAL DATA

We collect personal data for the purpose of representation by requesting it from the data-subjects themselves or contained in documents and other documents we receive from parties, other participants in court proceedings or other competent authorities, courts and other competent authorities and third parties.

We collect personal data for the purpose of providing other forms of legal aid from data-subjects or other persons who are in any other way related to the subject of legal aid.

We collect some personal information from public sources, and we may receive your personal information in business communications with third parties.

VI. WHO HAS ACCESS TO PERSONAL DATA AND TO WHOM WE TRANSFER THEM

Your personal data can be accessed by attorneys, trainee attorneys and other employees who are authorized to perform certain personal data processing activities (e.g., employees in charge of mail delivery, accounting, administration).

In order to perform the above-mentioned purposes of personal data processing, the recipients of your personal data may be competent state bodies (such as the Croatian Pension Insurance Institute and the Croatian Health Insurance Institute, Tax Office, courts, Finane Agency, Ministry of Interior Affairs, etc.), lawyers and attorneys trainees who provide us with replacement services in accordance with the Law on Advocacy, our providers of bookkeeping and similar services, our IT support providers, related persons, credit and financial institutions and the like, notaries, counterparties, counterparty representatives and counterparty employers, experts, court interpreters and translators, third parties in respect of whom there is a legal obligation to provide your personal data, other third parties for the purpose of pursuing an interest in connection with the purpose of providing legal assistance or pursuing our legitimate interest.

We take all necessary actions to ensure that the transfer of personal data to third parties is in accordance with the regulations on personal data protection.

In the event of personal data being taken out of the EU, we will take the necessary measures to protect your personal data to ensure that the third party to whom your personal data is transferred ensures the same level of protection of your personal data as in the EU. You can obtain information from us at any time as to whether your personal data is being transferred outside the EU as well as the protection measures taken in the contact details below.

VII. PERSONAL DATA RETENTION PERIOD

We keep your personal information:

–       at least 10 years after the final termination of the proceedings in which we represented you;

–       in case of final termination of the procedure, we keep your data until you take over the file from us;

–       in the case of enforcement proceedings under a final and enforceable judgment or decision, in the case of extraordinary remedies before the Constitutional Court of the Republic of Croatia and / or the European Court of Human Rights and other relevant institutions, your data is kept longer until all legal remedies are exhausted means to protect your rights and interests;

–       wills, contracts and other documents entrusted to us for safekeeping, we will keep until the conditions for termination of storage of entrusted documents (wills) are met or until you take them over from us;

–       in the case of other coercive legal regulations, the data are kept in accordance with the deadlines from these coercive regulations;

–       as the controller, we may, in each individual case, depending on the specific circumstances of the case, set a longer retention period for personal data, if the processing of personal data is necessary to protect legal or legitimate interests.

VIII. PROTECTION OF YOUR PERSONAL DATA

We take appropriate technical and organizational measures to protect the personal data collected and to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data.

In the protection of your personal data, we are obliged to act in accordance with our Privacy  Policy.

The way we act in accordance with the Privacy Policy ensures that we use your personal data only for the purpose for which it was collected, that the data is used by authorized persons, that your data is not disclosed to third parties except in cases specifically specified, that your data is kept for as long as necessary.

All of our attorneys, trainee lawyers and other employees are aware of their tasks and responsibilities in the processing of your personal data.

If certain processing of your personal data is carried out by our processor, we ensure that it carries out at least the same level of protection of your personal data as we carry out ourselves.

IX. CONSENT TO THE PROCESSING OF PERSONAL DATA

If the processing of a certain type of personal data is based on consent or consent is required for the publication or transfer of personal data, we will obtain it from you in writing. When giving consent, we will inform you about the purpose of giving consent and the consequences if you refuse to give consent. Your consent must be voluntary and unequivocal. Written consent is kept for as long as the personal data to which it relates are kept.

If you have given your consent for certain processing of personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal. We will inform you of this when giving consent. You can withdraw your consent by submitting a written statement.

X. EXERCISING YOUR RIGHTS

As a data-subject, you have the right to contact us with a request to exercise any of your rights:

– right of access to data,

– the right to correction,

– the right to forget (delete),

– the right to restrict processing,

– the right to data transfer.

In order to conduct the procedure properly and in a documented manner, we require that you submit your request for exercising your rights in writing. The application is submitted directly at our seat or by mail. The request can also be submitted by e-mail. The request is considered valid if it is submitted from the address of the applicant. The applicant must identify himself/herself. If the request is anonymous and we cannot establish an identity in an easy and accessible way, the request will not be processed. We will inform you of our decision and the actions taken within one month of receiving your request.

XI. SUBMISSION OF COMPLAINTS TO THE AGENCY FOR PERSONAL DATA PROTECTION

You have the right to file a complaint with the Personal Data Protection Agency if you believe that we have violated your rights by our decision or actions.

XII. CHANGES TO PERSONAL DATA PROCESSING NOTICES

Depending on your needs, we may change this Notice to improve our conduct and achieve greater protection of your right to privacy or if required by regulatory changes. We will publish any changes to this Notice accordingly. Please check back from time to time to see if we have changed this Notice.

XIII. CONTACT DETAILS

You can contact us with your requests and inquiries regarding the processing of personal dana.

E-mail: osobni.podaci@stefanek.hr

Phone: +385 1 2222 724

Notice of the processing of personal data is published on our website and is available at our headquarters. We can provide you with a notice at your request.


NOTICE ON PERSONAL DATA PROCESSING

CLIENTS AND BUSINESS PARTNERS LEGAL ENTITIES

I. WHAT THE NOTICE ON THE PROCESSING OF PERSONAL DATA CONTAINS

In accordance with the applicable regulations and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46 / EC EU Gazette L119) (hereinafter: the General Regulation or GDPR) as well as the Act Implementing the General Regulation on Data Protection (Official Gazette No. 42/2018) (hereinafter: the Act), ŠTEFAN ŠTEFANEK – attorney and patent agent, mediator and court interpreter, PIN (OIB): 95418033323, Zagreb, Ilica 191D e-mail: osobni.podaci@stefanek.hr (hereinafter: Attorney or Office) as the processing manager, based on Article 13 of the General Regulation, informs you about the processing of your personal data.

The Office may process your personal data on the basis of concluded contracts and regulations (e.g., Civil Obligations Act, Accounting Act, Value Added Tax Act and other tax and accounting regulations), in order to fulfil the rights and obligations under the concluded contract and compliance with legal obligation of the Office as head of processing. In addition, we may process your personal data for the purposes of our legitimate interests, such as: business communication, keeping records of business partners and assessing mutual cooperation.

II. WHOSE AND WHAT PERSONAL DATA WE PROCESS AND FOR WHAT PURPOSE

The Office may process the following personal data or categories of personal data:

Data-subject category:Personal data category:
I. business partners natural personIdentification data (such as name and surname, PIN (OIB), etc.) Contact information (such as address, telephone, mobile phone, etc.) Bank data (account number, bank, card type, etc.)
II. contact person of the business partner  Identification data (such as name and surname, etc.) Contact information (such as address, telephone, mobile phone, etc.) Information related to the job of the business partner (position, department, etc)

Providing your personal data may be necessary in order for us to enter into a business relationship with you, or there may be a legal obligation to process certain of your personal data. If there is no legal obligation to provide us with your personal data, then you are not obliged to do so, however, in which case the Office may not be able to enter into a business relationship with you.

III. WHO HAS ACCESS TO PERSONAL DATA AND TO WHOM WE TRANSFER THEM

Your personal data can be accessed by attorneys, trainee attorneys and other employees who are authorized to perform certain personal data processing activities (e.g., employees in charge of mail delivery, accounting, administration).

In order to fulfil the above-mentioned purposes of personal data processing, the recipients of your personal data may be competent state bodies (such as the Tax Office, etc.), our providers of bookkeeping and similar services, our IT support providers, then Office-related persons, banks, credit, financial institutions and the like, notaries and third parties in respect of whom there is a legal obligation to provide your personal data.

IV. PROTECTION OF YOUR PERSONAL DATA

We take all necessary actions to ensure that the transfer of personal data to third parties is in accordance with the regulations on personal data protection.

In the event of personal disclosure outside the European Union (EU), we will take the necessary measures to protect your personal data to ensure that the third party to whom your personal data is transferred ensures the same level of protection of your personal data as in the EU. You can obtain information from us at any time as to whether your personal data is being transferred outside the EU as well as the protection measures taken in the contact details below.

We take appropriate technical and organizational measures to protect the personal data collected and to prevent accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access to personal data.

In protecting your personal data, we act in accordance with our Privacy Policy. We use your personal data only for the purpose for which it was collected, the data is used by authorized persons, your data is not disclosed to third parties except in cases specifically specified, your data is stored for as long as necessary.

All of our attorneys, trainee lawyers and other employees are aware of their tasks and responsibilities in the processing of your personal data.

If certain processing of your personal data is carried out by our processor, we ensure that it carries out at least the same level of protection of your personal data as we carry out ourselves.

V. CONSENT TO THE PROCESSING OF PERSONAL DATA

If the processing of a certain type of personal data is based on consent or consent is required for the publication or transfer of personal data, we will obtain it from you in writing. When giving consent, we will inform you about the purpose of giving consent and the consequences if you refuse to give consent. Your consent must be voluntary and unequivocal. Written consent is kept for as long as the personal data to which it relates are kept. If you have given your consent for certain processing of personal data, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing prior to its withdrawal. We will inform you of this when giving consent. You can withdraw your consent by submitting a written statement.

VI. PERSONAL DATA RETENTION PERIOD

We will keep your personal data for five years from the fulfilment of rights and obligations under the contractual relationship, but in the case of issuing / receiving invoices, we will keep the data during the period of mandatory keeping of accounting documents prescribed by applicable regulations. In the case of business communication, we will keep personal data for five years after the termination of business communication, and in the case of setting, realizing, or defending legal claims or interests, we will keep data depending on the circumstances of each case in accordance with special regulations.

VII. EXERCISING YOUR RIGHTS

In relation to the processing of your personal data, you have the following rights:

– the right to access, correct and delete personal data, restrict processing, the right to object to data processing and the right to data transfer;

– the right to file a complaint to the Personal Data Protection Agency.

The Office will process your request and respond to it within 30 days of receipt. If your request cannot be complied with, the Office is obliged to provide you with a reasoned answer.

We do not have automated decision-making, and no decision will be made against you based solely on automated processing, including profiling, which produces legal effects that affect you or would significantly affect you.

VIII. CHANGES TO PERSONAL DATA PROCESSING NOTICES

Depending on your needs, we may change this Notice to improve our conduct and achieve greater protection of your right to privacy or if required by regulatory changes. We will publish any changes to this Notice accordingly. Please check back from time to time to see if we have changed this Notice.

Notice of the processing of personal data is published on our website and is available at our headquarters. We can provide you with a notice at your request.

IX. CONTACT DETAILS

In case of any questions, you can contact the Office as the processing manager in the following ways:

E-mail: osobni.podaci@stefanek.hr

Phone: +385 1 2222 724

Documents: