1.1 Attorney Barbara Vričko Hrabar (hereinafter: "BVH office") is dedicated to protecting your personal data. Please read the following information to understand how we treat your personal information.
1.2 We process your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data and which repeals Directive 95/46 / EC (hereinafter: General Data Protection Regulation or GDPR) and the Law on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018).
At the same time, we would like to emphasize that, as lawyers, in accordance with Article 13 of the Law on Advocacy and Articles 26 to 34 of the Code of Ethics, we are obliged to keep as a lawyer's secret everything that you have entrusted to us as a party or that we have learned in other ways while representing you, and the duty of keeping legal secrecy applies to our current and former employees.
1.3 By accepting this Privacy Policy, by clicking on our website, you confirm that you have read, understood and agree to the processing of personal data as stated in this Policy.
In order to protect your personal data, we have taken appropriate technical and organizational measures, which we constantly update, and which measures protect your personal data from loss, misuse or unauthorized access.
3.1 Category of parties - we process the following personal data:
– identification data such as: first and last name, OIB, address, ID number, photo, other information contained in the ID;
– contact information such as: e-mail address, phone number (mobile and/or landline);
– bank data such as: IBAN, name of the bank; type of card, etc.;
- data on other persons - counter-parties and proxies, witnesses, experts, officials conducting proceedings, employees of courts and other state bodies, notaries public and the like, which we need to initiate and conduct proceedings before competent authorities or general representation or providing other forms legal aid; the content of your inquiries and our answers, the documentation you have made available to us, notes from the file (judicial and extrajudicial), documentation about our services, evidence of services performed, cost sheet;
- as well as all other data that you provide to the BVH office before or during the provision of legal assistance, and which are necessary for the provision of legal assistance;
– a special category of personal data: may contain data revealing racial or ethnic origin, political views, religious or philosophical beliefs or trade union membership, genetic data, biometric data, health data, data on sex life, data on sexual orientation.
Purpose of processing:
The processing of personal data is based on a contractual legal basis (representation agreement or order or power of attorney) in accordance with Art. 6. paragraph 1. points (a) and (b) of the General Data Protection Regulation.
However, taking into account the specifics of the legal service, data processing is also based on Article 6 paragraph 1 points (d), (e) and (f) of the General Data Protection Regulation.
We process your personal data in order to fulfill our legal obligations as a data controller. In certain cases, the BVH office is obliged to process your data in order to comply with legal obligations. Such processing may result from mandatory legal regulations, such as tax, commercial, anti-money laundering, criminal provisions and the like, therefore, due to state supervision and control and the legal obligation to provide data.
Processing is based on Article 6, Paragraph 1, Point (c) of the General Data Protection Regulation.
3.2 Category of respondents - request for exercise of rights:
– e-mail address, first and last name, telephone number (mobile and/or landline);
- if necessary, a copy of the identification document (exclusively to establish the identity of the respondent).
Purpose of personal data processing: legitimate interest - response to your request.
3.3 Business category
- business partners of natural persons - identification data: first and last name, OIB, etc., contact data: address, telephone, mobile phone, etc., bank data such as: IBAN, name of the bank; type of card, etc.;
- business partner's contact person - identification data: first and last name, etc., contact data: address, telephone, mobile phone, etc., data related to the business partner's workplace (position, department, etc.).
Purpose of personal data processing: personal data is processed for the purpose of exercising rights and obligations from contracts concluded with business partners, and especially for the purpose of issuing invoices for services rendered. Certain personal data may also be processed if necessary to comply with the controller's legal obligations. Personal data can also be processed for the purposes of the legitimate interests of the controller, for example: business communication, keeping records of business partners and evaluating mutual cooperation.
You are not obliged to provide us with your personal information. However, providing personal data is usually necessary for the performance of our legal services or contracts, so we must warn that without providing personal data (depending on the individual case) we will not be able to provide you with complete legal advice and representation.
We collect your personal data, except for those that you have personally provided to us, if necessary, exclusively for the purpose of protecting your rights and legal interests as our client, and from competent state institutions and third parties.
When we collect information about persons who are not our party, we collect it based on your statements or on the basis of legal powers contained in special laws or on the basis of inspection of publicly published registers.
Lawyers, trainee lawyers and other employees of the BVH office in charge of accounting, mail delivery and administration can have access to your personal data.
External recipients may have access to your personal data only if it is necessary to perform our legal services or as a result of mandatory legal regulations.
External recipients can be:
– competent state bodies (such as the Croatian Institute for Pension Insurance and the Croatian Institute for Health Insurance, Tax Administration, courts, FINA, Ministry of the Interior, etc.);
– providers of bookkeeping and similar services to the data controller;
– Providers of IT support services to the processing manager;
– related persons of the data controller;
– banks, credit and financial institutions and the like;
– notaries public; other contracting parties, representatives of the other contracting party and employers of the other contracting party;
– experts, court interpreters and translators;
- third parties in relation to whom there is a legal obligation to provide personal data of the respondent;
- other third parties for the purpose of realizing interests in connection with the provision of legal assistance or the realization of legitimate interests.
In case of disclosure of personal data outside the Republic of Croatia, we will take the necessary measures to protect your personal data in order to ensure that the third party to which your personal data is transferred ensures the same level of protection of your personal data as in the Republic of Croatia. Croatian. At any time, you can get information from the BVH office about whether your personal data is transferred outside the Republic of Croatia, as well as the protection measures taken to the contact details listed below.
The exception is documents (wills, contracts, etc.) that you have entrusted to us for safekeeping, and which documents we keep based on your order until you pick them up.
Taking into account the specifics of the legal service, as processing managers we can, in individual cases and depending on special circumstances, determine a longer term for keeping files in order to protect legitimate and legal interests.
If mandatory legal regulations require a longer storage period, then your data will be deleted after additional legal periods.
Our site is static and does not use cookies to collect data.
9.1 Right of access – you can request confirmation of whether your data is being processed, for what purpose and to what extent.
9.2 Right to rectification – if we process your personal data that is incorrect or incomplete.
9.3 Right to erasure – You may request the erasure of your personal data if the purpose for which it was collected no longer exists, if the processing is unlawful, if the processing disproportionately interferes with your protected legitimate interests, or if the processing is based on your consent.
However, it is necessary to take into account the possible existence of other reasons that could be against the complete deletion of your personal data, such as the storage expressly prescribed by law, the existence, exercise or defense of legal claims and the like.
9.4 Right to transfer data - data that you have provided to us and which we process with your consent or for the execution of the contract, and their processing is carried out automatically, at your request we will forward them in a structured, common and machine form. – legible form. If technically feasible, we may transfer them directly to another controller at your request.
9.5 Right to restriction of processing – you have the right to request restriction of processing of your data:
– if you dispute the accuracy of your personal data, during the period that allows us to check the accuracy of the data;
– if the processing is illegal, but you refused the deletion and instead requested the limitation of data processing;
– if we no longer need your personal data for the intended purpose, and you still need it to file or defend legal claims;
- if you have submitted an objection to the processing of personal data pending confirmation of whether the legitimate reasons of the data controller are greater than your reasons.
9.6 The right to object - at any time you can object to the processing of your personal data in accordance with Article 6, paragraph 1, point (f) of the General Data Protection Regulation, therefore, if we process your personal data in the public interest or the processing is based on the needs of our legitimate interest.
* When exercising your rights, take care to provide us with proof on the basis of which we will be able to establish your identity in an unmistakable way (personal identification document).
9.7 The right to appeal - if you believe that when processing your personal data we violated the rules on personal data protection and thus violated your interests, rights and freedoms, please contact us to clarify all possible issues.
In addition to us directly, you can also contact the competent supervisory body for the protection of personal data with your objection or appeal. In the Republic of Croatia, this is the Personal Data Protection Agency (AZOP), which you can contact in the following ways:
9.8 We will provide information about the actions taken no later than one month from the date of receipt of your request.
If the processing of the request is complex or there are a large number of requests, this deadline can be extended by another two months, but in that case we will inform you about the reasons for the possible extension of the deadline.
Also, if we are unable to comply with your request, we will inform you of our decision with the reasons for such decision, as well as the possibility of submitting a complaint or appeal to the Personal Data Protection Agency.
In the event that the requests are clearly unfounded or excessive, especially due to frequent repetition, we may charge a reasonable fee based on administrative costs or refuse to comply with the request.
When providing our legal services, automated processing and profiling within the meaning of Article 22 of the General Data Protection Regulation is excluded.
Contact information of the Data Controller:
Law office Barbara Vričko Hrabar
Gajeva street 35, 10 000 Zagreb
info@bvh.hr
+385998535404
© 2025 BVH.hr. All rights reserved.