This Privacy Policy was last modified on August 6th 2020 in Belgrade.
Zivkovic Samardzic Law Firm, based in Belgrade, st. Makedonska 30, registration number: 57320150, TIN: 107890869 (hereinafter: "Data Controller"), which has the status of Data Controller in terms of the Law on Personal Data Protection ("Official Gazette", No. 87/2018, hereinafter: LPDP), i.e. as an entity which organizes and is responsible for the processing of personal data, hereby informs the visitors of the website http://www.zslaw.rs/, whose data are processed (hereinafter: Visitors), on all important aspects processing of personal data in accordance with applicable regulations:
The Data Controller may collect different categories of personal data, which are used for different purposes and with different legal bases. Usually, it is a set of data that allows the identification of the person whose data are processed, communication with the person whose data are processed or which are necessary to provide a specific service at the request of that person, or to meet the statutory obligations of the Data Controller, which include:
Personal data is collected only to the extent necessary to achieve a specific purpose.
On the website of Živković Samardžić Law Office there are links to the pages of Živković Samardžić Law Office on social networks (Twitter, Linkedin). In addition to this Privacy Policy, the rules prescribed by these platforms (Terms of Service / Terms of Use, Privacy Policy, Cookie Policy) apply to all data collected by these platforms during your visit, as well as to all data that you voluntarily leave on these social networks. Živković Samardžić Law Office cannot be held responsible for any type of illegal use of personal data, committed by companies that own or control social networks. You can find the privacy policies of these platforms at the following links:
The legal basis for the processing of personal data is the free and informed consent of the data subject, i.e. their consent for the purposes specified in this Privacy Policy, in accordance with Article 12, paragraph 1 of the LPDP.
Processing can be performed in order to fulfill the obligations from the contractual relationship, i.e. preparation for the conclusion of the contract. The Data Controller, as a contracting party, offers different types of services to legal entities, entrepreneurs, individuals, etc. In the procedure of concluding and performing obligations from the contractual relationship, the Data Controller processes personal data. Also, in order to exercise his rights, based on the services he provides, as well as to establish a business relationship, the Data Controller collects and processes certain personal data. This especially refers to sending job applications and inquiries via the website http://www.zslaw.rs/ and the indicated official e-mail addresses.
In special situations, the collection and processing of personal data may be necessary in order to pursue the legitimate interests of the Data Controller, or a third party, under the conditions and in accordance with Article 15 paragraph 6 of the LPDP. Before collecting and processing personal data of data subjects based on the legitimate interests of the Data Controller, or a third party, if any, in accordance with Article 15 paragraph 6 of the LPDP, the Data Controller will conduct an assessment of legitimate interest based on a tripartite test:
Also, in exceptional situations, processing may be based on the obligation to perform the legal obligations of the Data Controller. The Data Controller falls under the obligations of laws and other regulations that more closely regulate the business activities of law firms and the provision of legal services. When collecting data for the purpose of fulfilling legal obligations, the Data Controller does so exclusively to the extent necessary, and access to the data is provided only to authorized persons and competent state bodies, in accordance with the law.
The Data Controller uses the data for various purposes that are always closely related to the legal basis of the processing. Thus, the main purpose of direct collection and processing of personal data of data subjects is to establish communication with persons interested in establishing business contact, i.e. receiving newsletters and processing applications of interested candidates for employment, at their request. The Data Controller processes personal data for the purpose of fulfilling obligations under the law and other regulations, for the purpose of providing various types of services, for the purpose of fulfilling contractual obligations, for maintaining personal and business contact with its clients, as well as for analyzing business results and archiving, in accordance with the law. For all additional processing purposes for which there is a need, the data subject will be informed of all necessary information, before starting such processing operations, and the processing itself will be based on the appropriate legal basis, in accordance with the law.
Depending on the legal basis and the specific purpose, the following categories of persons may have access:
You have the right to:
Certain rights (e.g. the right to delete), in certain situations may be subject to statutory restrictions, and their use may cause various legal consequences, in accordance with the law (e.g. inability to continue to provide certain services, the obligation to compensate for damage, etc.).
Within his business organization, the Data Controller strives to apply the highest possible standards in the field of personal data protection, and applies all necessary organizational, technical and personnel measures, including, but not limited to:
All processors and/or other recipients of personal data are also obliged to apply all prescribed protection measures, in accordance with the signed contract with the Data Controller and the standards and obligations prescribed by law.
The Data Controller strives to keep the data for the period necessary to achieve a specific purpose of processing, after which the data is deleted or made unrecognizable (anonymization measures). The specific retention period, i.e. the criteria by which it is possible to determine it, depends on the purpose for which personal data are processed. The data collected for the purposes of the newsletter is kept until the withdrawal of consent to receive this type of promotional messages and notifications, after which they are deleted or anonymized. Data on candidates for employment are kept until the withdrawal of the given consent of the candidate, and for a maximum of six months from the day of data collection. Data collected for the purpose of establishing business contact, at the initiative of the data subject, are kept until the withdrawal of consent for the processing of this data. The data collected through the Internet browser and cookies are stored within the deadlines provided by the cookies accepted by the person to whom the data relate, and as described in the Cookie Policy of Živković Samardžić Law Office. Data collected during the implementation of ancillary services are kept as long as necessary to fulfil the contractual obligations, as well as in an adequate period after the termination of the contract in order to carry out accompanying actions and possible obligations prescribed by law.
Regarding all questions related to the processing of personal data, you can get via e-mail: office@zslaw.rs and / or by sending an inquiry to the address Živković Samardžić Law Office, st. Makedonska 30, 11000 Belgrade.
We will respond to your inquiry as soon as possible, depending on the complexity of the inquiry itself, but each within 30 days from the date of addressing the data subject, with the possibility of extending the deadline in special situations and with an explanation, in accordance with law.
Personal data collected through the website https://www.zslaw.rs/, are not taken out of the Republic of Serbia, except during the possible use of third party cookies, for which Zivkovic Samardzic Law Office cannot be held responsible. The servers used for data transfer are located within EEA countries where an adequate level of personal data protection is provided. If in exceptional cases the data transfer is performed via a server outside the EEA, such data transfer will be performed with the application of appropriate protection measures, in accordance with the law.
In case of need to transfer personal data to another country, i.e. outside the territory of the Republic of Serbia, the transfer will be made in accordance with all rules prescribed by the applicable LPDP, and in accordance with the situation and need, standard contractual clauses prescribed by the Commissioner for Access to Information of Public Importance and Personal Data Protection will apply.
The provision of data by the data subject is not a legal or contractual obligation, when using the possibilities provided by the website. Failure to provide the requested information as a consequence can only lead to the impossibility of establishing the requested contact, necessary for further communication in this way, i.e. the impossibility of using the services available through the website https://www.zslaw.rs/. When processing the data collected through the website, Živković Samardžić Law Office, as the Data Controller, does not use any automated decision-making, nor profiling of the persons to whom the data relates.
The Controller's website uses the WordFence script to protect the integrity of the network and the information contained on the website. In the event that the Controller 's website is the object of an attempt to access the website too many times from the same IP address, or attempts to access the website in order to compromise its integrity and in another illegal way with an illegal purpose, the script collects certain data that can be considered personal data of the person who is trying to access the site illegally. This data includes IP address, geolocation data, hostmail and access attempt time. The legal basis for this type of data processing is the legitimate interest of the Operator, ie the protection of the Operator's website and the data contained on it, and the purpose of processing is to prevent and prevent further attacks on the stability and integrity of the website. The collected data may also be forwarded to the competent state bodies for the purpose of performing tasks within their competence. WordFence does not collect personal information from users who use the website in the usual way. For more information on how WordFence works, you can view the available documents at: https://www.wordfence.com/. The person whose data were collected retains the rights guaranteed by the applicable LPDP and this policy, with regards that, having in mind the purpose of personal data processing, certain rights may be limited in accordance with the law.