Privacy policy

Law Firm Gospić Plazina Štojs LLC, Berislavićeva 12, Zagreb, Croatia, PIN (OIB) 93612581878 (hereinafter as the: “Law Firm”), as the data controller, is committed to protecting your personal data. In order to understand how we treat your personal data, please find the privacy policy bellow.

Personal data we collect

Personal data we collect and process include:

  • basic information such as the name, information contained in identification documents, employer’s company name, title or position;
  • contact information, such as postal address, email address and phone number;
  • ˝Know Your Client˝ (KYC) information provided by a client or collected as part of our business acceptance process;
  • personal data provided to us by or on behalf of our clients or generated by us in the course or providing services to them, which may include special categories of data (such as ethnic origin, political opinions, religious beliefs, trade union membership etc.);
  • information on payments made to and by the Law Firm;
  • technical information, such as information in relation to materials and communications we send electronically;
  • information a person provides to us for the purposes of attending meetings and events;
  • any other information which any person may provide to us.

How we collect personal data

We may collect personal data in the course of our business and business acceptance process, through the use of electronic tools (including email communication), when a person contacts or requests information from us, when we are engaged for provision of legal services or from public sources for the purposes of updating the data we already hold, or when otherwise provided to us.

Where we need to collect personal data according to the law, or under the terms of a contract or as a step prior to entering into a contract with an individual, and that individual fails to provide the required data when requested, we may not be able to perform the legal services according to the signed contract or contract we are trying to enter into. In this case, we may have to suspend or cancel the provision of legal services, but we will notify the relevant individual if this is the case at the time.

How we use personal data

We use personal data:

  • to provide and improve legal services for our clients;
  • for legitimate business purposes, such as accounting, ensuring network and IT security or to provide information about our services (including sending legal updates, publications and details of events);
  • for processing data in accordance with our obligations prescribed by the law;
  • for the purposes of representing clients in legal proceedings;
  • for the purposes of recruitment.

The basis on which we use personal data

We use personal data:

  • to perform a contract or to take steps prior to entering into a contract;
  • to comply with legal and regulatory obligations;
  • for legitimate business interest;
  • based on the consent of the individual concerned.

How long we keep personal data

Personal data will be retained in accordance with the laws applicable in the Republic of Croatia (e. g. according to the Accounting Act at least 11 years for the documents based on which the data is entered into the accounting books; according to the Attorneys’ Act 10 years after the final ruling; according to the Anti Money Laundering and Terrorism Financing Act 5 or 10 years given the specific circumstances). Those periods are based on the requirements of applicable laws and on the purpose for which data is collected and used, taking into account the legal and regulatory requirements to retain data for a minimum period, statute of limitation periods for taking legal actions and the Law Firm’s business purposes.

If the client provided certain documents to us (such as agreements, testaments, etc.), such documents and personal data contained therein shall be retained by us based on your instructions.

Once the relevant retention period has passed, personal data will be destroyed or anonymized if necessary and if appropriate conditions have been met.

With whom we share personal data

Attorneys at law, associates, and other employees of the Law Firm will have access to your personal data to the extent that it is necessary to carry out their work assignments and in order to achieve the relevant purpose of data processing.

As attorneys at law we are obliged to keep confidential, as the attorney-client privilege and in the interest of the client, all information pertaining to the client. In any other case, your personal data shall be kept as a business secret.

We may share personal data with certain trusted third parties in accordance with contractual arrangements in place with them, including our accounting, IT service providers, suppliers, notary public, court interpreters, experts, other law firms we cooperate with, subject to appropriate safeguards being implemented.
Where necessary, or for the reasons set out in this policy, personal data may also be shared with regulatory authorities, courts, tribunals, government agencies and law enforcement agencies. While it is unlikely, we may be required to disclose personal data to comply with legal or regulatory requirements. We will use reasonable effort to notify the data subject prior to such disclosure unless we are legally restricted from doing so.

Transfer of personal data to countries outside the European Economic Area

The Law Firm does not transfer personal data to locations outside the European Economic Area. In the case of possible transfer of personal data outside of European Economic Area, we will take necessary measures to protect personal data and to ensure that the third party to which personal data is disclosed provides the same level of protection of personal data as provided in Croatia.

Rights of data subjects regarding personal data

Your rights relating to the Law Firm’s processing of your personal data are:

  • the right to access your personal data and information on how we process it;
  • the right to rectification or update of incorrect personal data without undue delay;
  • the right to erasure of personal data concerning you, especially if:
    • it is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    • it has been unlawfully processed;
    • you withdraw, fully or partially, consent which you gave us for processing of your personal data for the determined purposes and if there is no other legal basis for the processing;
    • it must be erased in order to comply with legal obligation pursuant to applicable laws and regulations;
    • if the processing unduly impinges your protected legitimate interests;
  • the right to restriction of processing in the following cases:
    • if you contest the accuracy of your personal data, for a period enabling the Law Firm to verify the accuracy of personal data;
    • if the processing is unlawful, but you oppose the erasure of your personal data and request the restriction of their use instead;
    • if the Law Firm no longer needs personal data for the purposes of the processing, but you require them for the establishment, exercise, or defense of legal claims; or
    • if you objected to the processing of your personal data, pending the verification whether or not the legitimate interests of the Law Firm as the data controller overrides your personal interests.
  • the right to stop the unauthorized transfers of personal data to a third party and, in some circumstances, to have personal data returned to data subject or transferred to another controller;
  • the right of objection (or withdrawal of any previously given consent) could mean that we are unable to perform the actions necessary to achieve the purposes set out above (see “How we use personal data”) or that the person objecting may not be able to make use of the services and products offered by us. Please note that even after data subject has chosen to withdraw consent, we may be able to continue to process that person’s personal data to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations;
  • the right to appeal. You may also have the right to lodge a complaint in relation to the Law Firms processing of personal data with a local supervisory authority.

We will reply no later than within one month from the date of receipt of your request and will inform you about the actions taken or reasons for which we are unable to comply with your request.

In case of numerous requests or complexity of your request, we may extend the deadline for additional two months and will inform you of the reasons for such extension.

If the subject requests are evidently unjustified or excessive, including in the event of frequent submission of requests, we may charge a reasonable fee due to administrative costs or we may refuse to comply with the request.


We use cookies that are necessary for proper rendering and operation of this website, as well as cookies that allow us to track how our website is used, such as number of visitors on the web site, the pages visited and the length of time spent on the web site, all of which are anonymous.

Cookies are usually small text files that are stored on the computer when you visit certain website and for the duration of your visit or re-visit of certain website. They are mainly used to ensure the website’s expected functionality. As a rule, cookies do not contain any information that could identify you directly. You can find out more about cookies on

Social networks

Law Firm has access to personal data of its contacts on social networks that are published (such as name and surname, employer’s company name, likes, comments, connection requests, messages, memberships in certain groups etc.) and uses social networks to respond to potential inquiries of related persons and to inform members of the social network about the news in its business operations.

Safety regulations

We have taken appropriate technical and organizational measures, which we continuously upgrade, to help protect personal data against loss, misuse, or unauthorized access. However, it is also very important to take care of overall security of your electronical device.


In case of any questions regarding our privacy policy and/or request to be provide with a copy of your data that we hold, or if you consider that data we hold about you may need to be corrected, please contact us at
© GPŠ 2024
Privacy Policy