Terms of use

Ladan and Krmpotić Law Firm Ltd. from Zagreb, Metalčeva ulica 5, OIB: 00386253034 (hereinafter: the "Company"), is the data controller responsible for the processing of personal data. Within the scope of the General Data Protection Regulation (GDPR), the Company determines the purposes and means of personal data processing in the context of and for the purposes of its business operations and legal activities. The Company pays particular attention to ensuring that personal data are processed in accordance with the fundamental principles outlined in Chapter II of the GDPR, primarily ensuring lawful, fair, and transparent processing of appropriate, relevant, and limited personal data to what is necessary in relation to the purposes for which the data are processed.

When you submit an inquiry via the www.odlk.hr, the Company will receive your personal data based on your consent, which will be requested from you at that time. The purpose of processing in this case is to provide a response to the inquiry or to supply information regarding the Company's legal services. The personal data processed include the data you provide, specifically your email address, phone number, and personal name. The data will be retained for no longer than necessary to achieve the purpose for which they were collected. In any case, the data will be deleted one year after receipt of the inquiry or earlier at the request of the data subject. These data are not disclosed to any third parties, and there are no data recipients. Data are not transferred to third countries. The data are stored electronically, and security measures are implemented in accordance with information technology security standards.

The Company implements appropriate technical and organizational measures to enable effective application of data protection principles, such as minimizing data collection and incorporating protective measures into processing activities to ensure that only personal data necessary for each specific purpose are processed in a manner that is integrated and secure. This includes paying special attention to the scope of collected personal data, the extent of their processing, the retention period, and their accessibility.

Considering the latest technological developments, implementation costs, as well as the nature, scope, context, and purposes of processing, and the risk of varying likelihood and severity for the rights and freedoms of individuals, the Company ensures an appropriate level of security through suitable technical and organizational measures. This is primarily achieved by continuously monitoring the stored personal data, processing only the minimum necessary data, and retaining personal data only as long as necessary to fulfill the processing purpose.

RIGHTS OF DATA SUBJECTS – INDIVIDUALS WHOSE PERSONAL DATA ARE PROCESSED

Each individual whose personal data are processed has the following rights concerning the processing of their personal data:

• The right to transparent information, communication, and modalities for exercising their rights;
• The right of access to data;
• The right to rectification of data;
• The right to erasure of data;
• The right to data portability;
• The right to object to processing;
• The right to restriction of data processing;
• The right to object to automated decision-making, including profiling.

Transparency

At the moment the Company collects personal data from you in any manner, it shall inform you beforehand and notify you of the legal basis for data processing, the purpose of processing, the duration of processing, and your rights concerning your personal data. If your data are to be shared with third parties, this will be noted. If your data are to be transferred to third countries (outside the EU), this will be explicitly emphasized.

Right of Access to Data

Anyone whose personal data are being processed has the right to obtain from the Company confirmation as to whether personal data concerning them are being processed. If such data are processed, they have the right to access their personal data and receive the following information:

• The purposes of processing;
• The categories of personal data concerned;
• The recipients or categories of recipients to whom the personal data have been or will be disclosed, especially recipients in third countries or international organizations;
• The envisaged period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
• The right to request from the Company rectification;
• The right to erasure of personal data;
• The right to restriction of processing;
• The right to object to processing;
• The right to lodge a complaint with the Croatian Personal Data Protection Agency;
• If personal data are not collected from you, any available information about their source;
• Whether automated decision-making, including profiling, is involved, and relevant information about the logic involved, the importance of such processing, and the envisaged consequences for the individual.

Anyone whose personal data are being processed has the right to request from the Company a copy of the personal data it holds concerning them, which will be provided electronically upon such request.

Right to Rectification

Anyone whose personal data are processed has the right to obtain from the Company rectification of incorrect personal data concerning them.

Right to Erasure ("Right to be Forgotten")

Anyone whose personal data are processed has the right to request the deletion of their personal data if such data are no longer necessary in relation to the purposes for which they were collected or otherwise processed. The right to erasure also applies upon withdrawal of consent for data processing.

Right to Restriction of Processing

Anyone whose personal data are processed has the right to request restriction of processing if they contest the accuracy of the data (for a period enabling the Company to verify the data’s accuracy), if the processing is unlawful and the individual objects to erasure and instead requests restriction of their use, if the Company no longer needs the data for processing purposes but the individual requires them for establishing, exercising, or defending legal claims, or if the individual has objected to processing pending verification that legitimate grounds of the Company override those of the individual.

Right to Data Portability

Anyone whose personal data are processed has the right to receive the personal data relating to them, which they have provided to the Company, in a structured, commonly used, and machine-readable format, and to transfer those data to another controller without hindrance from the Company, especially if the processing is based on consent or a contract and is carried out by automated means. The right to direct data transfer from one controller to another shall be guaranteed if technically feasible.

Right to Object

Anyone whose personal data are processed has the right to object at any time to the processing of their data concerning their particular situation.

Objections shall be submitted in writing to the Company's address: Metalčeva ulica 5, Zagreb, including electronically via email at info@odlk.hr, and the complainant shall specify the reasons for their objection.

Upon receipt of the objection, the Company shall cease processing the personal data unless there are compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

Right to Object to Profiling

Anyone whose personal data are being processed has the right that no decision based solely on automated processing, including profiling, produces legal effects concerning them or significantly affects them in a similar manner. The Company does not employ automated processing or profiling.

The Company is the operator of the domain www.odlk.hr and is responsible for the content published there and for its overall operation.