Privacy notice

1. Who processes your data

The controller is Duje Koceić, attorney-at-law (Law Office Duje Koceić), Ul. Hrvatske mornarice 1H, 21000 Split, Croatia.

E-mail: duje@koceic-odvjetnik.hr
Phone: +385 91 737 2158

For any question about your data, write to the e-mail address above. No data protection officer has been appointed, as the office is not legally required to appoint one.

2. What data we collect

• From the contact form: your name, e-mail address and/or phone number, and the content of your message.
• From e-mails and phone calls: the information you choose to give us.
• Technical data: when you open the website, our hosting provider’s server automatically logs your IP address, the time of access and your browser type (server logs).
• To protect the form against abuse, the server keeps a pseudonymised (HMAC-hashed) record of your IP address and the time of sending; it is used for 10 minutes and deleted the next time the form is submitted.

Please do not include sensitive information (e.g. about health or criminal proceedings) in your first message unless it is necessary. We will go through the details at the meeting.

3. Why we process your data and on what legal basis

• To reply to your inquiry and arrange a meeting. These are steps taken at your request before possibly entering into a representation agreement (Art. 6(1)(b) GDPR). For inquiries not aimed at an engagement, the basis is our legitimate interest in replying to you (Art. 6(1)(f) GDPR).
• To check for conflicts of interest, which an attorney must do before taking on a matter (Croatian Attorneys Act, Code of Attorney Ethics; Art. 6(1)(c) and (f) GDPR).
• If your message contains sensitive data, we process it only to assess whether we can assist you in establishing, exercising or defending legal claims (Art. 9(2)(f) GDPR).
• Server logs and the form-protection record are processed to keep the website secure and working (legitimate interest, Art. 6(1)(f) GDPR).

We do not ask for your consent to send an inquiry. Providing data is voluntary, but we cannot reply without your name and at least one way to contact you.

4. Confidentiality and professional secrecy

We treat the content of your inquiry as confidential and protect it under the rules on attorney confidentiality (odvjetnička tajna; Art. 13 of the Croatian Attorneys Act, Code of Attorney Ethics), even if no engagement follows.

5. Who else has access to your data

We do not sell your data or use it for marketing. Only our web hosting provider and our e-mail provider have access to it, and they process it on our instructions (as processors). We disclose data to public authorities only where the law expressly requires it, and within the limits of attorney confidentiality.

6. Transfers outside the EU/EEA

We do not transfer data outside the European Economic Area, unless our e-mail provider does so. In that case the transfer is based on appropriate safeguards: a European Commission adequacy decision (for example the EU–US Data Privacy Framework) or standard contractual clauses.

7. How long we keep your data

• If no engagement follows, we delete your inquiry no later than 12 months after our last communication. We may keep only your name and a short description of the matter for longer, solely to check for conflicts of interest.
• If you become our client, the data becomes part of the case file and is kept in line with an attorney’s file-keeping obligations.
• Server logs are deleted by the hosting provider after a short period set by its own rules. The form-protection record is used for 10 minutes and deleted the next time the form is submitted after that.

8. Cookies and third-party content

This website does not use cookies for analytics, tracking or advertising and loads nothing from other servers: there are no external scripts, and the fonts and the map (a static image made from OpenStreetMap data) are stored on our own server. Opening the website therefore sends your data to no one other than our hosting provider.

9. Your rights

You have the right to access your data, have it corrected or erased, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. Send your request to duje@koceic-odvjetnik.hr and we will reply within one month. Some rights may be limited where exercising them would breach attorney confidentiality or the rights of others.

If you believe your rights have been infringed, you may lodge a complaint with the Croatian Personal Data Protection Agency (Agencija za zaštitu osobnih podataka, AZOP), Ulica Metela Ožegovića 16, 10000 Zagreb, Croatia, azop@azop.hr.

10. Automated decision-making

We do not make decisions based solely on automated processing and do not carry out profiling.