Attorney-at-Law Edita Klasnić, PIN: 62569662805, acting as the data controller, in accordance with Regulation (Eu) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter: the “Regulation”) and the Act on the Implementation of the General Data Protection Regulation (NN 42/2018), hereby wishes to inform you about the manner in which your personal data is processed.
By using this website and accepting the Privacy Policy, you confirm that you have read, understood, and agree to the processing of your personal data in accordance with the provisions of this Policy.
Appropriate technical and organizational measures have been implemented to protect your personal data, and these measures are continuously upgraded to safeguard the data against loss, misuse, or unauthorized access. However, complete security of data transmission to or from this website cannot be fully guaranteed. Therefore, it is important that you also ensure the security of your device and properly store and protect your personal data.
Client Category - the following personal data is processed:
Purpose of processing:
a) Legal services:
Your personal data may be processed on the basis of the Attorneys Act, a granted power of attorney, a concluded contract, or a decision of a competent authority, for the purpose of providing legal assistance. This includes, in particular, initiating and conducting proceedings before competent authorities, drafting various documents, representation, and legal advice. Only personal data necessary for providing legal advice, drafting documents (contracts, wills, statements, etc.), representation before courts and other institutions, and out-of-court representation are processed, all with the aim of protecting your rights and legal interests.
b) Compliance with legal obligations:
Your personal data may also be processed for the purpose of fulfilling legal obligations. In certain situations, data processing is required to comply with applicable regulations. Such processing may arise from binding laws, such as tax, commercial, anti-money laundering, criminal regulations, and similar regulations, or from obligations arising from state supervision, control, and statutory reporting duties.
Data Subject Category - the following personal data is processed:
Purpose of processing: legitimate interest for the purpose of responding to your request.
Business Partners - Natural Persons - the following personal data is processed:
Purpose of processing:
Personal data is processed for the purpose of exercising rights and fulfilling obligations arising from contractual relationships with business partners, particularly for issuing invoices and collecting payment for services rendered. Certain data may also be processed where necessary to comply with legal obligations. Furthermore, data may be processed based on the legitimate interest of the data controller, for example, for business communication, maintaining records of business partners, and evaluating and improving mutual cooperation.
You are not obliged to provide your personal data. However, in most cases, providing such data is necessary for the provision of legal services or the performance of a contractual relationship. Therefore, it is important to note that without the required personal data (depending on the circumstances of each individual case), it is not possible to ensure complete and high-quality legal advice, representation, or responses to inquiries.
Personal data is primarily collected directly from you when you provide it personally. When necessary to protect your rights and legal interests as a client, data may also be obtained from competent public authorities or third parties. For persons who are not clients, data is collected exclusively on the basis of your statements, legal authority, or from publicly available registers.
Your personal data may be accessed by attorneys and trainee attorneys, as well as other office employees performing accounting, administrative, and mail-handling tasks. Data is disclosed to external recipients only when necessary for providing legal services, when required by law, or for the protection and defense of the rights or property of the data controller.
External recipients may include:
If personal data is transferred outside the Republic of Croatia, appropriate measures will be taken to ensure the same level of data protection as guaranteed in the Republic of Croatia. Information on whether your personal data is transferred outside the Republic of Croatia, as well as on the safeguards applied, can be requested at any time via the contact details provided below.
For certain categories of personal data, the period of processing and storage is determined by the applicable regulations of the Republic of Croatia. In accordance with the Attorneys Act, an attorney is obliged to retain personal data contained in case files for ten years from the date of the final conclusion of the proceedings. If, after the final decision, enforcement proceedings based on a final and enforceable decision, extraordinary legal remedies, proceedings before the Constitutional Court of the Republic of Croatia and/or the European Court of Human Rights, or other proceedings for the protection of your rights and interests are ongoing, your personal data will be retained for an additional ten years from the date all legal remedies have been exhausted.
Due to the specific nature of the legal profession, in certain cases, depending on the circumstances and for the protection of legitimate and legal interests, a longer retention period may be determined. Also, if binding legal regulations prescribe a longer storage period, personal data will be deleted only after the expiry of those additional statutory periods.
An exception applies to documents that you have entrusted to the data controller for safekeeping (e.g., wills, contracts, etc.). Such documentation is stored based on your instruction and retained until you collect it.
Personal data stored on the basis of consent is retained for as long as the purpose for which it was collected and processed exists, or until the data subject withdraws the given consent, or in accordance with statutory deadlines.
After the purpose of processing ceases or the prescribed storage period expires, personal data is permanently deleted or anonymized in such a way that it can no longer be linked to a specific data subject.
To ensure the proper functioning of this website, small data files - cookies - may be stored on your device. A cookie is a short text file that is saved to your computer or mobile device when you visit a particular website. Thanks to cookies, the website can remember your actions and selected settings (such as login, language, font size, and other display preferences) over a certain period of time, thereby avoiding the need to re-enter them upon each subsequent visit or when browsing different subpages.
This website uses exclusively functional cookies. These are cookies necessary for the technically correct operation of the site, and in accordance with applicable European Union regulations, your consent is not required for their use.
Through the contact form, the data controller collects certain personal data when you submit an inquiry, send an open job application, or establish contact for other reasons.
Personal data contained in open job applications is accessible exclusively to authorized persons within the office who are bound by confidentiality. Such data is processed for the purpose of responding to your inquiry and, where appropriate, for considering employment opportunities and further contacting candidates.
Collected data is stored for a maximum of two years from the date of receipt, so that, if necessary, further contact may be established.
Right of access - the right to obtain confirmation as to whether your personal data is being processed and to receive information about the purpose of processing, categories of data processed, recipients or categories of recipients to whom the data has been or will be disclosed, the envisaged storage period, and, if the data was not collected directly from you, its source. This right includes the possibility of obtaining a copy of the personal data concerning you stored in the system.
Right to rectification - the right to request, without undue delay, the correction of inaccurate personal data or completion of incomplete data concerning you.
Right to erasure - the right to request deletion of personal data if it is no longer necessary for the purposes for which it was collected or for legal purposes, or if the consent on which the processing is based has been withdrawn.
Right to restriction of processing - the right to request restriction of processing in cases and under conditions prescribed by the Regulation.
Right to data portability - the right to receive personal data concerning you in a structured, commonly used, and machine-readable format and to transmit it to another controller, where processing is based on consent or a contract and carried out by automated means.
Right to object - the right, based on your particular situation, to object to the processing of personal data concerning you. Objections are submitted to the data controller via the indicated contact details (by email or post).
The data controller will provide the requested information and notification of actions taken no later than one month from receipt of the request. If the request is complex or a large number of requests have been submitted, this period may be extended by an additional two months, of which you will be informed in due time together with the reasons for the extension.
In the event of refusal of the request, you will be informed of the reasons for such a decision without delay and at the latest within one month of receipt.
In the case of manifestly unfounded or excessive requests, in particular if they are repetitive, a reasonable fee reflecting administrative costs may be charged, or the request may be refused, in accordance with the provisions of the Regulation.
You can download the request form here.
If you have any additional questions or comments regarding the Privacy Policy or wish to exercise any of your above-mentioned rights, together with submitting the request form you may contact the data controller at:
Edita Klasnić
+385 98 922 7545
edita@klasnic.hr
Ulica kralja Tomislava 32
10310 Ivanić-Grad
Croatia
Date of last modification: March 11, 2026.