Privacy Policy

Joint Law Office Tihana Posavec Vlašić and Marko Mećar (PVM) respects your privacy and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and the Croatian Act on the Implementation of the General Data Protection Regulation (Official Gazette No. 42/18).

This Privacy Policy explains which personal data we collect, the purposes for which we process them, the legal bases for processing, and your rights.

1. Data Controller

Joint Law Office Tihana Posavec Vlašić and Marko Mećar
Address: Slavonska avenija 1c, Zagreb, Croatia
Telephone: +385 91 363 4098
Email: info@pvm.hr

The data controller is responsible for the lawful and secure processing of your personal data.

2. Categories of Personal Data We Process

In the course of providing legal services and operating this website, we may process the following categories of personal data:

basic identification data (first and last name, personal identification number (OIB), address and contact details),
information necessary for the exercise and protection of clients’ rights,
information arising from business communications with clients, prospective clients and third parties,
information collected through the website (e.g. IP address, cookies and information submitted via a contact form).

3. Purposes and Legal Bases for Processing

We process personal data solely for purposes consistent with our legal practice and statutory obligations, including:

performance of contracts for the provision of legal services,
compliance with legal obligations (e.g. maintaining client files and retaining required records),
protection of legitimate interests (e.g. ensuring system functionality and preventing misuse),
the data subject’s consent — for analytics cookies and related processing through Google Analytics 4.

4. Cookies and Website Analytics

Our website uses strictly necessary technical cookies for its proper operation. To analyse visits, we use Google Analytics 4 (GA4), a service provided by Google Ireland Limited. GA4 helps us understand visitor numbers, pages viewed, traffic sources and basic website usage indicators. This may involve processing website usage data, browser and device information, and online identifiers.

Google Analytics 4 is connected through Site Kit by Google, while Complianz manages consent choices. We use Google Consent Mode: before consent is given, analytics storage (analytics_storage) is set to denied. In this mode, Google tags may still load and send limited signals without setting analytics cookies before consent.

You can refuse, change or withdraw your consent for statistics at any time using the “Manage Consent” option on the website. For further details, see our Cookie Policy.

5. Recipients of Personal Data and International Transfers

We may disclose personal data to other recipients where necessary:

to comply with legal obligations,
to exercise and protect clients’ rights and interests (for example, to competent courts, public authorities or other lawyers),
at the request of the Croatian Bar Association within the scope of its powers.

Data relating to website use through Google Analytics 4 are processed by Google Ireland Limited as the analytics service provider and processor under the applicable data processing terms.

When using Google services, data may be processed or transferred outside the European Economic Area, including to the United States. Google states that, depending on the circumstances, appropriate transfer safeguards may include the EU–US Data Privacy Framework and Standard Contractual Clauses. See Google’s information on international data transfers for details.

6. Retention Period

Personal data are retained for as long as necessary to fulfil the purpose for which they were collected, or for the periods prescribed by applicable laws and the Code of Ethics for Attorneys-at-Law.

After the applicable statutory retention periods have expired, the data are deleted or anonymised. The retention period for Google Analytics 4 data depends on the data retention settings in the connected GA4 account.

7. Your Rights

You have the right, subject to applicable legal conditions, to:

access your personal data,
have inaccurate data rectified,
request erasure (“the right to be forgotten”),
request restriction of processing,
data portability,
object to processing.

To exercise your rights, you may contact the office in writing or by email at info@pvm.hr.

You also have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) — www.azop.hr.

8. Data Security

The Joint Law Office applies appropriate technical and organisational measures to protect personal data from unauthorised access, loss, destruction or misuse.

Access to personal data is restricted to persons authorised to process them, in accordance with the rules governing the legal profession and the duty of attorney–client confidentiality.

9. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in applicable regulations or improvements in personal data protection.
The updated version will always be available on this website.