Privacy Policy

1. General Information

Your privacy is our priority.

The protection of your personal data is the responsibility of Attorney Vedrana Spagnol (OIB: 45737573894), Sveti Martin 30, Mali Losinj, who is the data controller.

We process your personal data in accordance with the General Data Protection Regulation (EU Regulation 2016/679) and the Act on the Implementation of the General Data Protection Regulation (Official Gazette 42/2018). The attorney practice is subject to Article 13 of the Attorneys Act and Articles 26-34 of the Code of Attorney Ethics. Under these regulations, we are obliged to keep as attorney-client privilege everything you have entrusted to us as a client or that we have otherwise learned while executing the representation order, and the duty to maintain attorney-client privilege also applies to our current and former employees.

By accepting this Personal Data Protection Policy when visiting the website of the Law Office of Vedrana Spagnol, you confirm that you have read, understood, and agree to the processing of personal data as defined by these Rules. For the best protection of your personal data, we have taken and continue to take data protection measures that protect against data loss, misuse, unauthorized access, and distribution.

2. Data We Process

We process personal data including:

• Name and surname, personal identification number (OIB), address(es), ID card number, photographs, and other ID card data
• Contact information: email address, phone number
• Banking data: card type, IBAN, and bank name
• Data about other persons we come into contact with in executing client orders, other parties in proceedings, officials conducting proceedings, necessary for initiating and conducting proceedings before competent authorities or generally for representation or providing other forms of legal assistance
• The entire content of your inquiries and our responses with all attachments, as well as all other data you provide to Attorney Vedrana Spagnol or her employees, before or during the provision of legal assistance, which are necessary for providing legal assistance

Data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union membership, genetic data, biometric data, health data, data concerning sex life, data concerning sexual orientation are processed as your personal data, but only those necessary for providing attorney services based on the order contract without which it is not possible to perform the service or order. This is in accordance with the General Data Protection Regulation.

We must also collect and process your personal data when we need to issue a legally valid accounting document, so this data is necessarily available to accounting service employees. We must also collect and process data when fulfilling obligations under the Anti-Money Laundering and Terrorist Financing Act.

We do not collect data through web cookies.

3. Provision of Personal Data

You are not obliged to provide us with personal data, but for quality execution of the representation order, it is necessary that we have access to your personal data. Access to this data is available only to persons employed in the office who have been warned about the obligation to maintain attorney-client privilege, and other persons participating in the attorney's legal business operations only to data necessary for the attorney's legal business operations.

4. Data Retention Period

In accordance with Article 11, paragraph 2 of the Attorneys Act, data is kept for ten years from the final completion of the proceedings, or if extraordinary legal remedies, enforcement proceedings, or proceedings before the Constitutional Court of the Republic of Croatia or the European Court of Human Rights are still being conducted, data is kept for another ten years from when all legal means of protecting your rights and interests have been exhausted.

Documents such as Contracts, unilateral declarations of will, Wills, and similar are kept until collection by an authorized person. Personal data is kept for five years, except in the case of pursuing or defending legal claims or if mandatory legal regulations do not prescribe a longer retention period.

You can always request from the office by email (listed on the website) which data is being processed, for what purposes, and until when. If necessary, you can request deletion or correction of personal data, except when collection is prescribed by law, while you can always request correction of inaccurate data.

5. Right to Object and Right to Complain

You are authorized to object to the processing of your personal data in accordance with Article 6 of the General Data Protection Regulation. You have the right to complain if you believe that in processing your personal data we have violated personal data protection regulations and thereby caused a violation of your interests, rights, and freedoms.

We suggest you contact Attorney Vedrana Spagnol to clarify important issues. You can also contact the supervisory authority for personal data protection in the Republic of Croatia, namely the Croatian Personal Data Protection Agency, Marticeva 14, 10000 Zagreb.

We will provide our response within 30 days of receiving the request. Please submit your request in writing to the office address. We are unable to process and respond to anonymous requests.

6. Amendments

Attorney Vedrana Spagnol, as the data controller, is authorized to make amendments and additions to these privacy rules and Personal Data Protection Policy.