Attorney

Boris Trgovec

Privacy notice of Attorney Boris Trgovec

 

General information

Data protection of our customers, our users, our employees but also all other individuals represents basic principle and priority of Attorney Boris Trgovec Zagreb, Borčec 68, OIB 34776924565 (further: „ODBT“ or „Attorney“). We are aware that by doing business with us, you have entrusted us as not only as your business partner or employer, but also that you have provided us with some of your personal data and all responsibilities arising therefrom. Therefore, we have issued this privacy policy as our key document in order to establish a system of data protection and transparency in our business.

This privacy policy has been drafted in accordance with the EU General  Data Protection Regulation 2016/679 applicably as of 25 May 2018 (hereinafter: the “GDPR”), as well as all other national data protection legislation and by applying all adequate technical and safety measures in order to protect the personal data from nay unauthorised access, misuse, breach, loss or destruction thereof.

This privacy policy has been drafted in accordance with above mentioned rules, but as such it has no impact on our duties and responsibilities imposed by the GDPR or national legislation. Kindly note that duties imposed to us by the GDPR and the relevant national legislation are applied by the ODBT in a broader sense than the rules contained herein.

Data controller is: Attorney Boris Trgovec, Zagreb, Borčec 68, OIB 34776924565

Contact details of data controller:

E-mail: [email protected]

Telephone: +385915147378

Contact details of the ODBT DPO: [email protected]

Personal data processor: 

In case we use third party services to process your personal data, such processing of the personal data is strictly mandated to us and we are also liable to protect your personal data in such a case. Any questions that you may have regarding protection of your personal data may be addressed to us at any time and at above mentioned emails or phone numbers.

  1. General information

This privacy policy and statements contained herein describe in detail the data we collect, your rights arising therefore, as well as the way and for which purposes, we process your personal data.

  1. Collection of personal data

Personal data is all and ay piece of information that refers to an individual that is identified or may be identified, as further defined under section 4 below.

Your personal data is collected only through contact with you and with your explicit consent. Kindly bear in mind that some of your personal data is available on line (e.g. from social media such as Facebook, LinkedIn, Instagram, etc). The ODBT is aware of such data, but is not collecting or processing it without your explicit consent (either given directly to us or the third party social media source).

We collect and process your personal data only for the purposes that had been disclosed to you and for which you had given us your explicit written consent or in cases where data collection and processing is a mandatory obligation under the relevant law.

Unless you inform us otherwise (withdraw your consent), we shall collect and process your personal data only for the given purpose. We shall immediately stop with data collection and processing immediately once you withdraw your consent or once there is no legal basis to do so.

The ODBT reserves the right to protect its legal interests as data collector and may: (i) undertake activities to determine user identity, (ii) your requests will be processed only if they had been filed by predefined means of communication, (iii) determine whether your request has valid legal basis and we shall revert accordingly, (iv) may deny your request and file appropriate legal action should we think the request is obviously without any legal basis or if this is a manner of blunt abuse of the law.

  1. Purpose of data collection

Various personal data may be collected from a number of sources and for various purposes:

By contacting you we may ask that you share your personal data with us for the following purposes: (i) providing of our services. (ii) enhancing our user experience, (iii) sending you information on our services, as well as information on our latest offers, (iv) your employment with the ODBT, (v) participation in web based activities including our social media pages (Facebook, LinkedIn, Instagram), (vi) storing your personal data for future interactions and communication with the ODBT, (vi) helping us to improve and advance our services, (vii) problem solving with regards to our everyday business and providing of our services, (viii) sending promotion messages or specific advertising messages based on information you shared with us, (ix) any other purpose for which you had given us your written consent

By doing business with the ODBT as an employee, business partner, client or a supplier we may ask you to provide us with your personal information for the following purposes: (i) employment with the ODBT, (ii) information access, (iii) resolving issues and service requests, (iv) any other purpose for which you had given us your written consent.

  1. Types of personal data that is collected or that may be collected

The ODBT collects and processes your personal data based on your explicit written and voluntary consent that has been given either by: visiting our web page www.odbt.eu or our social media profile (Facebook, LinkedIn, Instagram), or filing contact request, or  filing information on data collector, or sending your remarks or recommendations regarding our work, or by publishing job advertisements or by filing job request, or filing newsletter requests or by filing a cooperation request or any other similar manner.

Personal data that is collected by interacting with the ODBT in whatsoever manner, either by regular post, e-mail, personal delivery of data, telephone, fax messages, SMS and/or apps, web, social media (e.g. if you tag like of our ODBT on FaceBook, LinkedIn etc.) we may request or we may obtain your personal data such as: (i) name and last name, (ii) personal address, (iii) tax number, (iv) copy of your ID, (v) e-mail, (vi) telephone number, (vii) social media profile, (viii) any other data that you may have delivered us on your own accord

When communicating with the ODBT as a client, supplier or a business partner we may collect and process the following personal data: (i) name and last name, (ii) e-mail, (iii) telephone number, (iv) business address, (v) company name and company tax ID, (vi) your position within your company, (vii) personal details that may be relevant to our business relationship, such as your education, expertise level, etc.

We collect your personal data through: (i) signing a cooperation agreement or an employment agreement, (i) providing services to the ODBT, (i) communicating with the ODBT, (iv) by viewing your profiles on social media such as FaceBook, Linkedin, Instagram, etc

While doing business with us we need you to give us your personal data required for such business undertaking to take place and that is required to fulfil our contractual obligations or that is required under the law. Without such data we may refuse to do business with you, or we may even terminate an existing agreement. However, you are not required to provide your consent for data collection and data processing that is not relevant for an agreement with us or that is not prescribed by the law.

Furthermore, we may collect personal data through our cookies on our web page, including among others: (i) IP address, (ii) cookie ID, (iii) data on the internet browser that you are using.

It is imperative to stress out that you may, and you have full legal right to do so, stop all your interactions with us, i.e. you may seek that your personal data is deleted (as further defined below) as well as to refuse your consent to use of all or just some cookies.

Conclusively, the ODBT may not collect any sensitive data, such as data regarding your health, your credit score, etc. For any such collection your additional consent is required. Refusal of consent may arise with terminating of doing business with you or providing you with an inadequate user experience, as some of these types of data are mandatory to fulfil our legal obligations. Regardless of said, none of our decisions is based on automated data processing.

The ODBT does not collect data of minor under the age of 16.

  1. Legal basis and purposes of data collection

The ODBT collects your personal data for the following purposes and based on:

  1. To fulfil our legal obligations– your personal data is collected and processed in accordance with applicable laws as well as to make relevant notify and applications required by us under the applicable laws and data collection is necessary for us to fulfil our mandatory legal obligations;
  2. To fulfil individual contracts– your personal data is collected and processed with purpose to fulfil contractual obligations and such data collection is necessary to fulfil the purpose of contractual obligations(e.g. Croatian Civil Code);
  3. With purpose of contacting you in order to efficiently fulfil our agreements, requests for delivery of information, by your applications to newsletters, based on consent given to us by you or based on legitimate interest of data controller;
  4. With purpose of protecting property and life– based on our legitimate interest our business premises may be under video surveillance;
  5. With purpose to participate in promotions based on consent that you had given us by applying to such a promotion;
  6. Promotion purposes– based on consent you had previously given us we may publish your photographs, etc
  7. Any other purpose, provided however that you had been previously notified and that you had given your consent.

All of your personal data is processed based on the law, contract, legitimate interest and your voluntary, explicit and written consent.

  1. Time period of storing your personal data

The ODBT collects and stores your personal data only for the purposes specified in this privacy policy or prescribed in mandatory laws and for period of time necessary to fulfil the respective purposes. Therefore we delete your personal data immediately we receive your deletion request, immediately when contractual relationship had ended or once our legal obligations pertaining to data collection have expired, i.e. immediately after we do not receive your consent for collecting your data.

Further below you may find and overview of the personal data, respective purposes and times of storage:

 
Personal data Provided by purpose Legal basis Time of data collection
Identification data for employment (e.g. name, last name, account number, tax number, copy of personal ID) Directly by user Fulfilment of contract – enabling the ODBT to render services and employment (if any) User consent For the duration of employment, but no longer than 3 years from termination
Directly by user Request of competent state bodies to deliver data Legal obligation Up to 40 years from termination
Directly by user Prevention of misuse Legitimate interest / Legal obligation Up to 6 years from termination
Contact data (e-mail, address, phone number) Directly by user Fulfilment of contract – enabling the ODBT to render services under respective agreement User consent For the duration of agreement, but no longer than 10 years from termination
Directly by user Sending newsletters, notifications, etc. User consent Until recall of consent
Directly by user Preventing issues with communication, enabling filing of written requests and objections User consent Until recall of consent
Directly by user Prevention of misuse Legitimate interest / Legal obligation Up to 2 years from termination
Data on previous employment (data on employer, references, contact details, data on pension insurance and duration of previous employment) Directly by user Fulfilment of contract – enabling the ODBT to render services under respective agreement User consent No later than you employment with third party/termination of current employment agreement
Your IBAN data and data relevant to opening of your bank account, utility bill Directly by user Your employment and payment of your salary Contract fulfilment/ legal obligation No later than termination of your employment, but in any case up to 2 years from termination
Directly by user Request of competent state bodies to deliver data Legitimate interest / Legal obligation up to 40 years from termination
Directly by user Prevention of misuse Legitimate interest / Legal obligation up to 10 years from termination
Publicly available social media profiles Directly by user Identity check, employment with the ODBT Legitimate interest Until recall of consent on social media
Digital data: geolocation/IP, address, type of device used, ID of device, data on internet service providers, country of origin, OS version geo- Directly by user Providing of services by the ODBT, improving user interface, delivery of data to ODBT services users User consent Until recall, no later than 12 months from employment/contract termination.
Directly by user Prevention of misuse Legitimate interest Up to 12 months
Phone records Telecom companies Fulfilment of contract Legal obligation Up to 10 years, in accordance with accounting regulations
Other data -e.g. answers from marketing polls Directly by user Better understanding of user needs, enhancing user experience User consent Up to 12 months
  1. Data consent management

At any given time you are free to amend your consent for your personal data collection and/or processing (amend it, completely or partially withdraw it) either by sending us an e-mail to: [email protected] or by sending us mail to: Attorney Boris Trgovec, 10000 Zagreb, Borčec 68.

Should you recall your consent, we will no longer use your personal data for the given purposes, but that may result in terminating of services or benefits given thereunder.

Withdrawal of your consent does not impact the legitimacy of data processing that was based on prior given consent once it has been withdraws.

Should you wish to again give us your consent you may do so in a manner it was given before.

Kindly note that if you do not give us your personal data that might be needed or relevant for performing under an agreement signed with you, we might not be able to provide you with agreed service, hence we will not be liable for any such failure of service providing.

  1. Your rights as users

ODBT is constantly keeping track of the legitimacy and legality of this privacy policy as well as internal rules of conduct so that neither action taken by ODBT is or can be construed in a manner that may result in violating your personal data. ODBT is using its endeavours to secure you your rights as follows:

  1. Right to access and information regarding personal data use – you may at any given time seek information if your personal data is being used or processed, the purposes for data use/processing, type of data being collected, third parties to which your data is being shared with, time period of keeping your data, as well as source of personal data that has not been directly given by you;
  2. Right to correction – in case any of your data is incomplete or incorrect you may at any given time seek rectification
  3. Right to deletion – you may at any given time seek deletion of your personal data
  4. Right to limit data processing: you may limit processing of your data if
  • You dispute the data being correct in the period that allows us to verify correctness of any such data,
  • You think the data processing was illegal, but you do not wish the data to be deleted, but seek limited use of such data and
  • If you think we do not need your data for the provided purposes, but you need the data for any of your claims or in case an objection to data processing has been filed.
  1. Right to object to any further data processing
  2. Right to seek access and transfer data– you may ask of us to send you the data you have given us in a structured machine-readable form:
  • If we are processing your data based on your consent which may be revoked and
  • if processing is made by automatization procedures.
  1. Right to seek protection with competent authorities – should you feel we have at any time violated your rights or any of data protection regulations, you may seek protection before competent authorities under national legislation.

Under Croatian laws you may file a complaint to the Croatian Data Protection Agency.

Bearing in mind stated above, the ODBT has adopted a series of technical and other measures in order to protect your personal data, as further elaborated in Schedule 1 to this privacy policy

Identity verification: In doubt or in cases where such obligation is imposed by mandatory law, we may seek additional information with purpose of verification of identity.

Abuse of rights: in case you are using any of your given rights contrary to their given purpose we may charge you administrative fees or refuse to process your request(s).

Data breach: Anybody who suspects that personal data has been breached must immediately notify us of such an incident with a detailed description of the breach.  Incident notifications are sent to: [email protected]. Our DPO shall register the incident internally, notify the management board and all competent authorities.

Kindly note that the ODBT has internal procedures in place with regard sto data breach

  1. Third party data transfer

We shall not transfer or make available or make accessible your personal data to third parties, unless in the following cases:

  • You give us your explicit written consent for data transfer to a specific third party and for specific purpose or specific individual,
  • By order of State bodies (courts, ministries, ect.),
  • If the data is needed for courts and other competent state authorities for procedures, they are handling, provided however that written proof of this fact is provide
  • If your data is to be sent to tax office, pension insurance health insurance all based on legal obligations of the ODBT,
  • If your data is to be sent to tax office for the procedures, they are handling within their competence and
  • If within contractual obligations with third parties we need to deliver your data to such parties
  • data that is delivered to the digital services companies, such as Microsoft, Google, etc by using standard data protection clauses

Kindly note that while using digital services of big IT companies such as Google, Google analytics, Microsoft, etc. the ODBT has accepted the unilateral terms of doing business with these IT companies. However, the ODBT does not have means of verifying whether these large It companies transfer your personal data to third parties outside of warranties given by these IT companies. The ODBT tries to minimise these risks by using technical measures as as pseudo anonymization.

  1. Use of digital services (internet pages, applications)

Kindly note that we collect only personal data that has been made available to us either by using our web page, by you by filing contact request either by asking us to do business with you, either by filing a business request, by filing a job application by using services of return calls and any other electronic means of communication.  These personal data is used in a confidential manner and only for the purposes specified with each consent form. Transfer of personal data to third parties is done only of there is a legal obligation for us to do so or an official warrant and when such data may be transferred to such third parties and only the data necessary. Access to our web page is subject to protocol when technical data is registered such as web page visits, operating system that you use, screen resolution, time of visit, size of data transferred.

In order to promote our services our web page contains “cookies” that may be stored on your computer. Cookies may be rejected either partially or completely, but this may result in limited use of our web page. Cookies enable storing technical preferences of the visitors of our web page, optimising technical processes and continuous improvement of our offer. . For more information see below.

  1. More on Cookies

A cookie is a piece of information (a .txt file) that had been stored onto your computer by the web page you are visiting. Cookies usually save your settings/web page settings, such as preferential language or IP address. Once you load your web page again the web browser is sending back the cookies pertaining to such a web page. This enables the web page to load to information adjusted to your needs.

Cookies also enable you the best possible web browsing experience as the “remember” your preferences, so you really do not have to manually input all of relevant details. For an example: cookies enable you to load one web page and should you transfer to another one you do not need to log on to the previous one for it to have the expected content and functionality. Furthermore, all of your web settings will be stored for the next time you load this web page.

By using cookies we cannot access your files stored locally on your computer and we cannot read your personal information from the content of the cookies.

Izjavu o kolačićima je ažurirao Cookiebot dana 17. 05. 2023. :

Necessary (4) Necessary cookies make the web page usable by enabling its base functions such as web page navigation and access to restricted areas.  Web page may properly function even without these cookies.
Name Provider Description Valid Type
1.gif Cookiebot Used to count the number of sessions to the website, necessary for optimizing CMP product delivery. Session Tracker
CookieConsent Cookiebot Stores the user’s cookie consent state for the current domain 1 year HTTP Cookie
wpEmojiSettingsSupports odtiv.eu This cookie is part of a bundle of cookies which serve the purpose of content delivery and presentation. The cookies keep the correct state of font, blog/picture sliders, color themes and other website settings. Session HTML Local Storage
Cookies for settings (1) Settings cookies enable web page to remember the data that amend the manner in which the respective data mimics or looks like ,such as you default language or region.
Name Provider Description Valid Type
pll_language odtiv.eu This cookie is used to determine the preferred language of the visitor and sets the language accordingly on the website, if possible. 1 year HTTP Cookie
Statistics(4) By anonymous data collection and data flow the statistical cookies help the web page owners to understand how visitors communicate with said web page.
Name Provdier Description Valid Type
_ga Google Used to send data to Google Analytics about the visitor’s device and behavior. Tracks the visitor across devices and marketing channels. 2 year HTTP Cookie
_ga_# Google Used to send data to Google Analytics about the visitor’s device and behavior. Tracks the visitor across devices and marketing channels. 2 year HTTP Cookie

How to amend cookie settings or disable use of cookies?

Applicable law specify that we may store cookies on your computer if they are strictly necessary for our web page functionality. For all other types of cookies we need your consent.  In case you do not want the cookies to be stored, you may independently update your cookie storage preferences. 

You may withdraw your given cookie consent at any time without specifying reason by simply clicking “withdraw consent” on this web page.

In general, cookies may be rejected or deleted  by using adequate settings of your web browser. Our web page enables you to independently in your web browser by using the cookie banner choose whether you wish to accept or reject the cookies. In case you wish to delete or disable cookies on your computer you need to do so by updating your web browser preferences. Different types of web browsers enable different levels of cookie control. At any given moment, your web browser will offer you the option to accept, deny or delete the cookies, and you may choose which cookies you wish to delete – from third party cookies to cookies addressed by the specific web page.

For more information regarding cookie settings please refer to your default web browser.

You may find more insformation on the following web pages:

http://www.allaboutcookies.org/
http://www.youronlinechoices.com/hr/
http://www.aboutads.info/choices/

By turning the cookies off you decide whether you wish to store cookies on your computer. In case you disable the cookies you will still be able to browse our web page www.odbt.eu, but some of its functionality may be impaired.

For all other information please do not hesitate to contact us at: [email protected]

  1. Technical and organizational measures

Please note that the ODBT has undertaken all technical and organisational measures in order to protect your personal data from loss, breach of third party access. If you have any questions with this regard, please feel free to contact us at any time. All measures applied are specified in Schedule 1 to this privacy policy

Any and all alterations of our privacy policy shall also be published in the Statement on data protection and on our web page and you shall be informed in an adequate manner.

  1. Final provisions

All matters that are not regulated by this privacy policy shall be regulated in accordance with the laws of Croatia.

Anybody who thinks her/his personal data have been breached or violated may seek protection of her/his personal data before competent court against the ODBT. The burden of proof regarding the damages lies within the respective individual, whereas burden of proof of legal and proper data collection and processing lies with the ODBT.

ODBT’s third-party liability for reach of data protection is limited to actual damage. All other damages are explicitly excluded.

In case of breach or suspicion of breach and individual should firstly contact the ODBT for mediation purposes, either by filing respective claim by email to: [email protected] or by filing petition by registered mail to Attorney Boris Trgovec, Zagreb, Borčec 68. The ODBT is obliged to answer any such petition within a month of receipt thereof. In case a ODBT receives such a request prior to starting respective litigation, and individual is obliged to initiate court mediation first and then in case court mediation was unsuccessful an individual may file his/her claim before the competent court in Zagreb.

This privacy policy has been drafted and enacted on this 01 June 2025. The ODBT owns all documents and information arising here from and the management board is obliged to review the rules set herein at least once a year. Last revie has been made on 01 October 2025.

Attorney Boris Trgovec
Borčec 68, HR-10090 Zagreb, Croatia

E: [email protected]

Privacy notice