Data Controller
The data controller responsible for the processing of personal data through this website is:
OREHOVEC KIŠ ŠIMUNOVIĆ Law Firm LLC
Ulica Jurja Križanića 16
10 000 Zagreb, Croatia
Company registration number (MBS): 080802384
Personal Identification Number (OIB): 95898073413
Email: info@oks.hr
Telephone: +385 1 244 2454
(hereinafter: OKS, we, us or our).
We are committed to protecting your privacy and processing personal data lawfully, fairly and transparently.
This Privacy Policy provides information about how we collect and process personal data through our website in accordance with Articles 12, 13 and 14 of Regulation (EU) 2016/679 (the General Data Protection Regulation, hereinafter: the GDPR) and applicable Croatian data protection legislation.
This Privacy Policy applies to personal data processed through this website. Personal data processed in the course of providing legal services may be subject to additional privacy information provided in connection with the relevant engagement.
Personal Data We Process
Personal data means any information relating to an identified or identifiable natural person.
Depending on how you use our website and communicate with us, we may process the following categories of personal data:
identification and contact details, such as your name, surname, title, telephone number and email address;
professional information, including the company or organisation for which you work and your position;
information contained in your correspondence or enquiry;
information contained in your CV and other job-application documents;
technical information generated when you visit our website, such as your IP address, browser type, device information and website-use data;
other personal data that you voluntarily provide to us.
We collect personal data when:
you contact us using the website by email;
you submit a job application;
you visit or use our website and its functionalities;
processing is otherwise necessary for the operation, security or protection of our website.
Please do not provide personal data that is not relevant or necessary for the purpose of your communication.
Purposes and Legal Bases for Processing
We process personal data only where there is an appropriate legal basis and only for specified and legitimate purposes.
We may process your personal data for the following purposes:
Responding to enquiries and taking steps prior to entering into a contract: where processing is necessary to respond to your request, provide preliminary information or take steps at your request before entering into a contract, pursuant to Article 6(1)(b) of the GDPR.
Communication and business administration: where processing is necessary for our legitimate interests in communicating with website visitors, potential clients and business contacts and administering our business, pursuant to Article 6(1)(f) of the GDPR.
Processing job applications: where processing is necessary to take steps at your request before potentially entering into an employment relationship, pursuant to Article 6(1)(b) of the GDPR. Where we request permission to retain an application for future opportunities, processing will be based on consent pursuant to Article 6(1)(a) of the GDPR.
Compliance with legal obligations: where processing is necessary for compliance with legal or regulatory obligations to which OKS is subject, pursuant to Article 6(1)(c) of the GDPR.
Website operation and security: where processing is necessary for our legitimate interests in operating, maintaining and protecting our website and information systems, pursuant to Article 6(1)(f) of the GDPR.
Establishment, exercise or defence of legal claims: where processing is necessary for our legitimate interests in protecting and enforcing our legal rights, pursuant to Article 6(1)(f) of the GDPR and, where applicable, Article 9(2)(f) of the GDPR.
Prevention and investigation of unlawful conduct: where processing is necessary for compliance with a legal obligation or for our legitimate interest in preventing and investigating fraud, security incidents, misuse of our website and other unlawful conduct.
Where processing is based on our legitimate interests, we consider whether those interests are overridden by your interests, fundamental rights or freedoms.
Providing personal data is generally voluntary. However, if you do not provide information required to process your enquiry, job application or request, we may be unable to respond, consider your application, provide the requested information or enter into a contractual relationship with you.
Cookies and Technical Data
Our website may use cookies and similar technologies to ensure its proper and secure operation.
Cookies are small text files stored on your computer or mobile device when you visit a website. They may enable a website to remember certain actions and preferences or support essential technical functions.
According to the current configuration of our website, we use only cookies that are strictly necessary for its operation and security. These cookies do not require consent under applicable legislation.
If we introduce analytics, advertising or other non-essential cookies, we will update this Privacy Policy and, where required, request your consent before placing such cookies.
Correspondence
When you contact us by email, we process the personal data contained in your communication for the purpose of responding to your enquiry and taking any action requested by you.
Access to such personal data is limited to authorised persons within OKS and service providers who require access for technical purposes and are subject to confidentiality and data-protection obligations.
Unless a longer period is required because of an established business relationship, a legal obligation or the possible establishment, exercise or defence of legal claims, correspondence data will generally be retained for up to two years from receipt.
Submitting an enquiry through the website or by email does not, by itself, establish a lawyer-client relationship.
Job Applications
If you apply for a position with OKS, we process the information contained in your CV, application and related correspondence for the purpose of assessing your application and conducting the recruitment process.
Application data will be retained for the duration of the relevant recruitment process and for any additional period necessary to protect our legal rights. If we wish to retain your application for possible future opportunities, we will request your consent and inform you of the applicable retention period.
Please do not include information in your application that is not relevant to the recruitment process.
Recipients of Personal Data
Where necessary for the purposes described above, personal data may be disclosed to:
authorised employees and other authorised personnel of OKS;
lawyers, associates and external consultants engaged by OKS and subject to confidentiality obligations;
providers of website hosting, cloud, email, IT maintenance, security and technical-support services acting as processors on our behalf;
professional advisers, auditors and insurers where necessary;
courts, regulatory bodies, law-enforcement authorities and other competent public authorities where disclosure is required or permitted by law;
other recipients where you have expressly requested or consented to the disclosure or where another valid legal basis applies.
We do not sell your personal data.
International Data Transfers
Certain service providers may process personal data outside the European Economic Area.
Where personal data is transferred to a country that has not been recognised as providing an adequate level of data protection, we will ensure that an appropriate transfer mechanism is in place, such as the European Commission’s Standard Contractual Clauses, together with any supplementary safeguards required by applicable law.
Further information about applicable safeguards may be requested by contacting us at info@oks.hr.
Data Retention
We retain personal data only for as long as necessary for the purpose for which it was collected, including compliance with legal, regulatory, accounting and reporting obligations and the establishment, exercise or defence of legal claims.
The applicable retention period depends on the category of data and the purpose of processing. In particular:
general correspondence data is generally retained for up to two years from receipt;
job-application data is retained for the duration of the relevant recruitment process and any additional period justified by applicable limitation periods or, with your consent, for the period communicated when consent is requested;
technical and security data is retained for the period necessary to operate and protect the website and information systems;
data required for compliance with legal obligations or legal claims is retained for the period prescribed or permitted by applicable law.
Once the relevant retention period expires, personal data will be deleted or anonymised unless continued retention is required or permitted by law.
Your Rights
Subject to the conditions and limitations provided by applicable law, you have the right to:
receive information about the processing of your personal data;
request access to your personal data and obtain a copy;
request the correction of inaccurate or incomplete personal data;
request the erasure of your personal data;
request the restriction of processing;
receive personal data you have provided in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller;
object to processing based on our legitimate interests;
withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before its withdrawal;
lodge a complaint with the competent supervisory authority.
Requests may be submitted to info@oks.hr. We may request additional information where necessary to verify your identity.
The competent supervisory authority in Croatia is:
Croatian Personal Data Protection Agency (AZOP)
Ulica Metela Ožegovića 16
10 000 Zagreb, Croatia
Email: azop@azop.hr
Website: www.azop.hr
Automated Decision-Making
We do not use personal data collected through this website for automated decision-making, including profiling, that produces legal effects or similarly significantly affects you.
Data Security
We apply appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of transmission over the internet or electronic storage is completely secure. You should therefore exercise appropriate caution when providing personal data electronically.
Website Disclaimer
The content of this website is provided for general information only and does not constitute legal advice.
Viewing this website, submitting an enquiry or communicating with OKS through the website does not create a lawyer-client relationship. You should obtain legal advice tailored to the facts and circumstances of your particular matter before acting or refraining from acting on the basis of any information published on this website.
Unless otherwise stated, information concerning legal matters relates to the laws of the Republic of Croatia. We do not accept responsibility for the content, security or privacy practices of third-party websites linked from this website.
Contact and Changes to This Policy
If you have any questions about this Privacy Policy or the processing of your personal data, please contact us:
Email: info@oks.hr
Telephone: +385 1 244 2454