Data protection
Privacy Policy
How the Law Office of Ivan Borna Ninčević processes personal data when you visit this website or contact the office, how long it is kept and what rights you have.
Personal data is processed in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, the GDPR), the Croatian Act on the Implementation of the General Data Protection Regulation and the Croatian Electronic Communications Act (rules on cookies). Information that clients entrust to a lawyer is additionally protected by attorney-client confidentiality under the Croatian Legal Profession Act. This is a translation of the Croatian privacy policy; in case of any discrepancy, the Croatian version prevails.
Data controller
Law Office of Ivan Borna Ninčević (Odvjetnički ured Ivan Borna Ninčević)
Frana Supila 11, 47000 Karlovac, Croatia
Email: ivanborna@odvjetnik-nincevic.hr
Phone: +385 98 979 4230
For any questions about privacy and to exercise your rights, please write to the email address above. The office is not required to appoint a data protection officer, so this address is the contact point for all data protection matters.
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to an enquiry sent through the contact form | Name, email, phone number and subject (if provided), message, the page from which the enquiry was sent, time of sending | Steps taken at your request before possibly entering into a representation agreement (Art. 6(1)(b) GDPR) and the legitimate interest of replying to the enquiry (Art. 6(1)(f)) | The copy of the enquiry stored on the website is deleted automatically after 6 months. An enquiry received by email is kept for as long as the correspondence lasts and, if a representation relationship is established, as part of the case file. |
| Confirmation of receipt of the enquiry | The email address and name you entered | Art. 6(1)(b) GDPR | The confirmation is sent once and is not stored separately |
| Communication by email and phone | Data you send or tell us (name, contact details, description of the situation, documents) | Art. 6(1)(b) or (f) GDPR | For as long as the communication lasts; if a representation relationship is established, for the periods prescribed for keeping a lawyer's records |
| Legal representation and advice | Case data, including special categories of data where necessary for the establishment, exercise or defence of legal claims | Representation agreement (Art. 6(1)(b)), a lawyer's legal obligations (Art. 6(1)(c)) and legal claims (Art. 9(2)(f) GDPR) | For the periods prescribed for a lawyer's records, business books and invoices |
| Visit statistics (Google Analytics), only with your consent | A random browser identifier, pages visited, device and browser type, approximate location (country, city) derived from the IP address | Consent (Art. 6(1)(a) GDPR and Art. 100 of the Croatian Electronic Communications Act) | Cookies up to 2 years, data in Google Analytics for up to 14 months. You may withdraw your consent at any time. |
| Website security and prevention of form abuse | IP address, time, requested address, browser information | Legitimate interest in protecting the website and its users (Art. 6(1)(f) GDPR) | Limiting the number of form submissions: 10 minutes (only a hash of the IP address is stored, not the address itself). Server logs: briefly, within the hosting provider's retention periods. |
| Proof that you gave or refused consent to cookies | A random consent ID, time, your choice and the settings version (no IP address) | Legal obligation to demonstrate consent (Art. 6(1)(c) and Art. 7(1) GDPR) | 12 months, then deleted automatically |
Providing data through the form is voluntary, but without an email address or phone number we cannot reply to your enquiry. Please enter only what is needed for the first contact; case details can be discussed in a conversation. The office does not make decisions based solely on automated processing, does not create profiles and does not use data for advertising.
Who else has access to the data
Data is shared only with service providers that enable the office to run the website and communicate, acting as processors contractually bound to protect the data:
- Website hosting provider: the website and the contact form run on its servers.
- Email service provider: messages, including form enquiries, are sent and received through it.
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): Google Analytics, only if you accept analytics cookies.
If you open the map on the website, Google provides the Google Maps service as an independent controller, under its own privacy policy. Data may also be disclosed to courts and other public authorities where required by law or where necessary for representation in a case.
Transfers outside the EU
Google may transfer data to Google LLC in the United States. This transfer is based on the European Commission's adequacy decision (EU-U.S. Data Privacy Framework) and standard contractual clauses. There are no other transfers outside the European Economic Area.
Cookies and the map
Cookies are small files that a website stores in your browser. We use necessary cookies without consent because without them the website cannot remember your choice. We use analytics cookies only if you accept them; until you choose, Google Analytics is not loaded at all. Fonts are loaded from this server, so opening the website sends no requests to Google or other external services.
Necessary
| Name | Provider | Purpose | Duration |
|---|---|---|---|
nin_privola | odvjetnik-nincevic.hr | Remembers your cookie choice and a random consent ID | 6 months |
Analytics (only with consent)
| Name | Provider | Purpose | Duration |
|---|---|---|---|
_ga | Google (Google Analytics) | Distinguishes visitors using a random identifier | 2 years |
_ga_* | Google (Google Analytics) | Stores the state of the visit session | 2 years |
Google map
The map showing the office location is not loaded automatically. Only when you click "Show map" does your browser connect to Google, which may then process your IP address and set its own cookies. If you do not open the map, no data is sent to Google.
Website administrators only
The cookies wordpress_logged_in_*, wordpress_sec_*, wordpress_test_cookie and wp-settings-* are set by WordPress only for people who log in to the website administration. They are not set for visitors.
The website does not use advertising or social media cookies.
How to change or withdraw consent
You can change your choice at any time using the button below or the "Cookie settings" link in the footer. Withdrawing consent does not affect the lawfulness of processing before the withdrawal. You can also delete cookies in your browser settings.
Your rights
With regard to your personal data, you have the right to:
- access your data and receive a copy (Art. 15 GDPR),
- rectification of inaccurate data (Art. 16),
- erasure (Art. 17), except where we must keep the data because of a legal obligation or for legal claims,
- restriction of processing (Art. 18),
- data portability (Art. 20),
- object to processing based on legitimate interest (Art. 21),
- withdraw consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).
These rights are exercised within the limits set by the GDPR and the Croatian Legal Profession Act, for example where disclosing data would breach attorney-client confidentiality or the rights of others. Send your request to ivanborna@odvjetnik-nincevic.hr. You will receive a reply without undue delay and no later than one month. If you believe your data is processed unlawfully, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr, or with the supervisory authority in your EU country of residence.
Security
The website runs exclusively over an encrypted connection (HTTPS). Only the office has access to enquiries and the website administration, with a protected login. Data is kept only for as long as stated in this policy, and the system deletes old enquiry copies and consent records automatically.
Children
The website is not intended for persons under 16, and no data is knowingly collected from them through the form. The office provides legal assistance to minors with the participation of their legal representatives.
External links
The website contains links to Google Maps and other external websites. These are not embedded in this website and open only when you click the link; from then on, their privacy policies apply.
Changes to this policy
The policy is updated when the way data is processed changes, for example when a new service is introduced. The date at the top shows the latest change. If a change affects cookies that require consent, the website will ask for your choice again.