Effective as of February 6, 2024

Last updated on October 4, 2024

Privacy Policy

This Privacy Policy applies to personal data that is collected and processed by Zunic Law Firm, as data controllers.

 

We respect and value your privacy, so we have taken the protection of Personal data very seriously. For that reason, we created this Privacy Policy – to explain to you in a transparent and understandable way how we collect, share, and use your data, as well as how you can exercise the rights you have as a Data subject.

 

The Privacy Policy applies to all individuals who: 

 

  • access the Website at zuniclaw.com,
  • seek legal advice, but did not become our Client as defined below,
  • engage Zunic Law Firm for legal services and become our Client,
  • participate in recruitment activities at Zunic Law Firm. 

 

This Privacy Policy is very important to you in order to determine in advance what the scope and consequences of the processing entail and to know how you can exercise control over your Personal data, so we strongly suggest you read it carefully and get informed about the processing and protection of your Personal data.

 

If you are from Serbia, please see our Privacy Policy in Serbian language and if you are from Russia, please see our Privacy Policy in Russian language.

 

For any questions regarding this Privacy Policy, please contact Us at office@zuniclaw.com or office.bg@zuniclaw.com

 

 1. Definitions

When we say…

We mean…

“Candidate”

 a person interested in applying for a position at Zunic Law, including but not limited to associates, interns, students, administrative staff, or a person seeking employment, job change, or opportunity that Zunic Law is considering for a position.

“Client”

an individual, organization, legal entity, or public body that is receiving Services of Zunic Law Firm.

“Interested party”

an individual, organization, legal entity, or public body who initiated contact with Zunic Law Firm to discuss their legal needs or seek legal advice, consultation, or representation, but decided not to be a Client of Zunic Law Firm.

“Consent”

your explicit consent to the processing of Personal data. Persons who are 16 years of age or older may give free consent to the processing of their Personal data.

“Cookies”

small pieces of code stored on your device (computer or mobile device). This information is used to provide you with certain functions, track your use of the Website, and compile statistical reports on the website activity. Mention of Cookies also includes other similar technologies.

More detailed information on what they are and how you can manage them you can find in our Cookie Policy.

“Data processor”

any natural or legal subject who processes Personal data on our behalf. We may use the services of various service providers to process your Personal data more effectively.

“Data subject” or “you”

any natural person who shares their Personal data with us.

“GDPR”

General Data Protection Regulation 2016/679.

“Personal data” or “data”

any information relating to an identified or identifiable natural person (Data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as name, identification number, location data, online identifier or to one or multiple factors specific to its physical, physiological, genetic, mental, economic, cultural, or social identity.

Data about a legal entity is not considered to be Personal data but registering on behalf of a legal entity may include sharing Personal data. However, the information related to one-person companies may constitute Personal data when it allows the identification of a natural person. The privacy rules also apply to all personal data relating to natural persons in the course of professional activity, such as the employees of a company or organization, and business e-mail addresses like “firstname.surname@company.com”. 

“Processing”

any activity or set of activities performed on Personal data or sets of Personal data, whether by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

“Services”

legal services provided to you by Zunic Law Firm, including, but not limited to guidance and advice on various issues, representation in legal proceedings, including negotiations, settlements, arbitration, mediation, and litigation, drafting and revising legal documents, conducting legal research relevant to your matter and other legal assistance, depending on your specific needs.

“Technical data“

personal data such as Internet Protocol (IP) address, device type, unique device identification number, browser type, and broad geographic location (e.g. country or city-level location).

“Usage data“

information about how your device has interacted with our Website, including the pages accessed and links clicked.

“Website“

the website located at https://zuniclaw.com/en/.

„Zunic Law Firm“ or „Us“

Zunic Law Firm with a seat in Novi Sad registered at Vojvodina Bar Association, and Zunic Law Firm with a seat in Belgrade registered at Belgrade Bar Association, and which is comprised of members listed on page https://zuniclaw.com/en/contact/ and on page https://zuniclaw.com/en/team/ according to their registered seat and place of performing business activities.

  

Please note that every term that is capitalized but undefined in this Privacy Policy has the same meaning as in our Terms of Use.

 

2. Personal Data We Collect, Why and on What Ground

 

Depending on how you use our Website or the Services, the information we may collect from you includes Personal data you share with us voluntarily, personal information we collect automatically, or Personal data we may collect about you from third parties.

 

We do not process data outside the specified purposes defined below, and, especially, we do not: 

 

  • Sell any kind of Personal data, 
  • Disclose this information to other marketers, 
  • Provide your personal information to any third-party, individual, government agency, or other company at any time, unless strictly compelled to do so by contract or law. 

 

For detailed information on what data we collect, for what purposes, on what legal grounds and how long we keep your data, please read the text below. 

 

2.1. Visitors to Our Website

When you visit our Website, we may collect certain personal information you share with us voluntarily or we can collect data automatically from your device.

DATA WE COLLECT

PURPOSE

LEGAL BASIS

RETENTION PERIOD

Technical and Usage data are collected primarily by using cookies and similar tracking technology, as explained further in our Cookie Policy.

Collecting this information enables you to navigate through a website and use the different options or services that exist within it and enables us to better understand the visitors who come to our Website, where they come from, and what content on our Website is of interest to them. 

Your consent.

Until the withdrawal of your consent. You can withdraw your consent at any time at your cookie setting as explained in our Cookie Policy. The withdrawal of consent does not affect the lawfulness of the processing based on the consent prior to such withdrawal.

Contact details and other information you choose to share with us in your inquiry via our contact form, email provided on the Website, or otherwise.

To respond to your inquiries send via the Contact Us page or by sending an inquiry email provided on the Website.

Processing is necessary for the performance of the Agreement or entering into such Agreement with you.

If we do not have legal obligations or some other ground to retain your data as described in this Policy, we will delete them after 30 days from the response to your inquiry.

Contact details and other information you choose to share with us when scheduling the consultation with us and during the consultation.

To schedule a consultation with a member of Zunic Law Firm specialized for your legal matter, we need your contact details, area of expertise, and all the relevant facts that you believe are important for us so we can provide you with adequate advice.

Processing is necessary for the performance of the Agreement or entering into such Agreement with you.

If we do not have legal obligations or some other ground to retain your data as described in this Policy, we will delete them after 30 days from the response to your inquiry. 

Contact details of subscribers to our Blog & News, Vlog, Podcast or free brochures.

If you want to subscribe to our Blog & News to follow the latest blogs and news, from the Zunic Law team, or to our Vlog & Podcast to view educational videos about legal issues that matter, or to subscribe to our free brochures to be familiar with legal regulations in Serbia we need your contact details. 

Your consent.

We will keep you on our subscription list until you withdraw your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to such withdrawal. You may unsubscribe from the subscription at any time, by using the option “unsubscribe” in the email.

Contact details of subject who gave their consent to receive notifications about changes and developments in legislation, case law, and our Law Firm.

If you would like to receive notifications about changes and developments in legislation, case law, and our Law Firm you can leave us your contact details.

Your consent.

We will keep you on our mailing list until you withdraw your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to such withdrawal. You may unsubscribe from or mailing list at any time, by using the option “unsubscribe” in the email.

Email address and password (or Google account related information), input, Email, input, and other information you choose to share with us when using the Lexpert AI Legal Chatbot.

We collect data in order to give you access to our chatbot empowered by artificial intelligence designed to answer numerous legal questions.

Processing is based on your consent and it is also necessary for the performance of the Agreement in case you want to utilize Lexpert AI Legal Chatbot in connection to our Website.

If we do not have legal obligations or some other ground to retain your data as described in this Privacy Policy, we will delete this personal data if you withdraw your consent, but no later than 30 days from the collection of data.

Technical data and usage data of the visitors of our Website.

In order to prevent misuse and fraudulent behavior on our Website and thus to protect our business, but also our partners, other visitors, and our Clients, we need to process this Personal data.

Processing is based on our legitimate interest and the legitimate interest of our visitors and Clients, i.e. for the safe usage and functioning of our Website, protection of our business, but also the protection of our visitors and other users, which is essential to us.

In accordance with the applicable statutory deadlines.

 

2.2. Our Clients or Interested Parties

If you are an Interested party or a Client, we need certain information to evaluate if we can provide you with the Services. After you become a Client, we need all the relevant information so we can appropriately represent and advise you.

 

DATA WE COLLECT

PURPOSE

LEGAL BASIS

RETENTION PERIOD

If you are an Interested party, we need to process your data, such as identification and background information, including anti-money laundering, conflict, reputation, and financial checks.

In order to determine whether we are able to represent you and provide you with Services, we need to consider the mentioned data.

Processing is necessary in order to take steps prior to entering into a contract and to comply with legal obligations.

If you decide not to be our Client or we cannot provide the Service due to other reasons, we will not retain your data, unless we are obliged to do so under the legal and regulatory obligations. We may retain your e-mail address as defined below.

The data necessary for us to represent you in a legal matter or other information you choose to share with us because it could be relevant to your legal matter.

For the provision of the Services to our Clients.

Processing is necessary for the performance of the Agreement for the provision of legal services.

We will keep your data within the timeframes prescribed for the preservation of archival material unless otherwise specified by the Agreement with you. Upon your request, we will not retain the data and return them to you.

Contact details of Clients and Interested parties.

Since legal requirements can change over time, to ensure that you are aware of these changes and compliant with the legal requirements, we will send you notifications about developments in legislation, case law, and our Law Firm. Being notified of these changes and kept up to date helps you adapt your practices and policies accordingly.

Processing is based on our legitimate interest and the legitimate interest of our Clients and Interested parties since these notifications allow us to provide our Clients proactive, responsible and full Services on one hand and protect Clients and Interested parties from negative publicity, damage to reputation and credibility, financial repercussions, including fines, legal fees, and potential legal liabilities which can all result from failure to meet legal obligations, on other hand.

If you do not want to receive our notifications, you may unsubscribe at any time, by using the option “unsubscribe” in the email, afterward we will delete your data.

Other personal data

For the prevention and detection of fraud, money laundering or other crimes or to respond to a binding request from a public authority or court.

The processing is necessary to comply with legal and regulatory obligations.

In accordance with the applicable statutory deadlines.

 

2.3. Candidates

If you are interested in becoming a part of Zunic Law Firm, you can apply for the position through our Website or we may obtain information about you:

 

  • From recruitment agencies – (e.g. when a recruitment agency contacts us to identify you as a potential candidate);
  • Through publicly available sources online – (e.g. on your current employer’s website, or a professional networking site like LinkedIn)
  • By reference or word of mouth – for example, through a referral from a former employee/employer or a referee you have identified. 

 

In order for us to find the best candidate for the position in our Zunic Law Firm, we need to process your Personal data, namely:

 

DATA WE COLLECT

PURPOSE

LEGAL BASIS

RETENTION PERIOD

Identification and contact data, data from your CV (data on education, professional data, data on training and other types of data that you find relevant for us and decide to share).

We need to process your data for the recruitment process to match your skills, experience, and education with the specific roles offered by the Zunic Law Firm and to determine if you are the best candidate for our team.

Processing is necessary in order to take steps prior to entering into a contract.

We process your Personal data until the end of the selection process for the position you applied for.

Identification and contact data, data from your CV (data on education, professional data, data on training and other types of data that you find relevant for us and decided to share).

If we believe that you are a valuable Candidate, but we choose another Candidate for the position you applied for, that does not mean we do not have a place for you in our team. Therefore, we would like to save your data in case another position opens that will be more suitable for you.

Your consent.

If you consent, we will keep your Personal data for 3 (three) months after you apply for a position at our Law Firm. If you want us to delete data earlier, you can withdraw your consent, in which case we delete your Personal data immediately.

Contact details

If you would like to receive a newsletter for Candidates and stay updated on available positions and opportunities, you can leave us your contact details.

Your consent.

We will keep you on our newsletter list until you withdraw your consent. You have the right to withdraw your consent at any time, without affecting the lawfulness of the processing based on the consent prior to such withdrawal. You may unsubscribe from the newsletter at any time, by using the option “unsubscribe” in the email.

 

3. How Do We Keep Your Data Secure?

We are highly committed to protecting and respecting your Personal data. We do not share your Personal data with third parties, unless:

 

  • we have your consent to do so, 
  • we are legally required to share certain information, including your personal data, with e.g. public authorities or governmental bodies; in such case, we will not require your further consent to share your personal data in such circumstances, 
  • with other legal specialists or other experts to obtain foreign legal advice and provide you with full professional legal advice. 

 

We take administrative, technical, organizational, and other measures to ensure the appropriate level of security of the personal data we process. Upon assessing whether a measure is adequate and which level of security is appropriate, we consider the nature of the personal data we are processing and the nature of the processing operations we perform, the risks to which you are exposed by our processing activities, the costs of the implementation of security measures and other relevant matters in the particular circumstances.

Some of the measures we apply include appropriate procedures and policies, access authorization control, information classification (and handling thereof), protection of integrity and confidentiality, data backup, firewalls, data encryption, and other appropriate measures. We equip our staff with the appropriate knowledge and understanding of the importance and confidentiality of your Personal data security.

 

4. With Whom Do We Share Your Personal Data With?

 

To be able to perform some processing activities, we may require additional support from external processors, who are being considered as recipients of Personal data. These data recipients are not authorized to review, use, or disclose your Personal data without our authorization. 

 

When we utilize external processors for certain processing activities, we use only ones that provide sufficient guarantees to implement appropriate technical and organizational measures in such a manner that processing will meet our high data protection requirements and ensure the protection of your rights.

 

Additionally, we have strict due diligence procedures and measures in place and review, assess, and background check all processors before forming a business relationship. We obtain company documents, certifications, references, and ensure that the processor is adequate, appropriate, and effective for the task we are employing them for.

This is the list of processors with whom we share your Personal data:

 

PROCESSOR

ROLE

SEAT

The Rocket Science Group, LLC (MailChimp)

E-mail marketing services based on Cloud

US

Google, LLC

Analytics

US

Facebook, Inc

Analytics and marketing

US

 

5. Data Transfers

 

We may transfer your Personal data to countries other than the one you reside in.

Since our processor, Google LLC is on the Data Privacy Framework List, as a reliable mechanism for Personal data transfers from the EU to the US, it is being considered that Google LLC provides an adequate level of Personal data protection.

For transfers of data to the other processors in the US, we will make sure that the recipient has a Data Processing Agreement in place with the applicable standard data protection clauses. 

 

6. Data Subject’s Rights

 

As a Data subject whose personal information we processed, you have certain rights under the GDPR. This Section of our Privacy Policy should provide you with general information and an explanation of these rights.

In relation to each of the rights noted below, we have also provided a reference to the specific provision of the GDPR from which that right arises. So, in case you are interested in finding out more about it, you can easily access it.

 

Right to withdraw the Consent

Article 7(3)c  of the GDPR

If you have provided your consent to the collection, processing, and transfer of your Personal data, you have the right to withdraw your consent – fully or partly.

 

Once we have received a notification that you have withdrawn your consent, we will no longer process your information for the purpose(s) to which you originally consented, unless there is another legal ground for the processing.

 

Please note again that withdrawal of consent does not affect the lawfulness of processing carried out based on your consent prior to withdrawal.

Right to access

Article 15 of the GDPR

You can send us a request to obtain a confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data with the additional information.

 

You can also send us a request for a copy of the Personal data we hold about you. Such copy is provided free of charge.

Right to rectification

Article 16 of the GDPR

If the Personal data we have about you is incorrect, you have the right to request that we correct those data. In such a case, we will rectify the error within one month and inform any third party of the rectification if we have disclosed the Personal data in question to them.

Right to erasure (right to be forgotten)

Article 17 of the GDPR

You have the right to request from us that your Personal data be deleted in these situations:

 

  • The personal data are no longer needed for the purpose for which they were collected; 
  • You have withdrawn your consent (where the processing was based on consent); 
  • You have objected to the processing and no overriding legitimate grounds are justifying us processing the personal data;  
  • the Personal data was being unlawfully processed; or 
  • the Personal data has to be erased for compliance with a legal obligation.

 

However, this right does not apply where, for example, the processing is necessary to comply with a legal obligation, or for the establishment, exercise, or defense of legal claims.

Right to the restriction of processing

Article 18 of the GDPR

You can exercise your right to the restriction of processing if:

 

  • the accuracy of the Personal data is contested,  
  • the processing is unlawful, but you do not want the data erased, 
  • we no longer need the Personal data but you require the data for the establishment, exercise, or defense of legal claims, 
  • you have objected to the processing, but the verification of whether the legitimate reasons of the data controller override those of the Data subject is pending. 

 

We will inform you before the restriction of processing is lifted.

Right to data portability

Article 20 of the GDPR

In case you have provided your Personal Data to us, and that data is processed using automated means, you have the right to receive your Personal data, which you have provided to us, in a structured, commonly used and machine-readable format, as well as to have those data transmitted to a third-party data controller.

Right to object

Article 21 of the GDPR 

You have the right to object to using your Personal Data in case processing is based on our legitimate interest, as well as if the processing is performed with the purpose of direct marketing, which includes profiling.

 

Where you object to processing for direct marketing purposes, the Personal data shall no longer be processed for such purposes.

Right to Lodge a Complaint

Article 77  of the GDPR

If you have any concerns or requests in relation to your Personal data, please contact us at office@zuniclaw.com or office.bg@zuniclaw.com and we will respond within one month.

In case you believe that we are processing your Personal data in violation of the GDPR, you have the right to lodge a complaint with the supervisory authority located in the EEA where you reside or work or where the alleged infringement took place.

 

To exercise any of these rights, please contact us at office@zuniclaw.com or office.bg@zuniclaw.com.

You are not required to pay any charge for exercising your rights. We have one month to respond to you even though the period may be extended by two further months where necessary, taking into account the complexity and number of the requests. 

 

7. Changes to Our Privacy Policy

 

We may update and review our Privacy Policy from time to time in case of substantive changes in processing activities or to follow changes in law or technology practices. Any changes shall enter into force upon being published on our Website. You are cautioned to review our Privacy Policy periodically.

We will obtain your consent to any material Privacy Policy changes if and where this is required by applicable data protection laws.

If you do not agree to our Privacy Policy, please stop using our Website or Services immediately or unsubscribe from our notifications. 

 

8. Stay in Touch

Should you wish to exercise any of the rights you have as a data subject, or you have a question for us regarding this Privacy Policy, please contact us at office@zuniclaw.com or office.bg@zuniclaw.com

 

 

techlawafficiendo

privacywhisperer

cryptobuddy

evergreen

This is not just another newsletter

Forget boring legal analysis and theory.
Find out about deadlines and receive news that really helps your business.