The administrator of your personal data is the Law firm Grilc, Starc & partner, o. p., d. o. o., Cesta krških žrtev 135c, 8270 Krško (hereinafter: Law Firm).
The Law Firm is not obliged to appoint an authorised person for the protection of personal data, since lawyers are subject to the exception from the General Regulation on the protection of personal data.
The Law Firm and, in its name and for its account, the attorneys and other professionals employed in the Law Firm, process your personal data for the purpose of meeting the mutual rights and obligations arising from an employment contract or other civil law contracts, to perform the legal services ordered, such as representing in front of the Courts and other state bodies, advice within the Power of Attorney given, and in order to organise the work in the Law Firm smoothly and efficiently, all within the boundaries of the data protection regulations, the agreement reached or within the Power of Attorney or your special permission given.
The Law Firm and, in its name and for its account, the attorneys and other professionals employed in the Law Firm, process your personal data as a rule, on the basis of a contract between the Law Firm and an individual, the contract being in accordance with the following rules: General Data Protection Regulation (EU Regulation 2016/679) and the Law governing the protection of personal data, the Law governing the legal profession, the Law governing labour relations, and other international treaties, EU regulations and national laws (e.g. tax regulations), valid at the time, on the basis of which the Law Firm must forward the personal data to State bodies and other data managers to fulfill their own or their legal obligations or responsibilities.For the purposes of facilitating efficient operation of the Law Firm, for example, for the purpose of easy and quick communication via e-mail and telephone with you, the Law Firm asks you to give consent to the processing of your personal data (e-mail and phone number) for those purposes. In these cases, the Law Firm will process your personal information only within the scope of your consent, which includes processing only for the purposes for which you have consented. The personal data thus obtained will be processed until your consent is revoked or until the end of the purpose for which it was collected (e.g. when the contractual relation expires, the need to inform you about Courts writings expires as well), whichever comes first.
On the basis of your consent, the Law Firm will also collect personal information, which you will provide to it through the contact form on its website www.gsp.si. Even in these cases, your personal data will be processed only within the scope of your demand and only for the purpose for which a contact form was created (i.e. answer to your question). Your personal data will be processed until your consent is revoked. The Law Firm reserves the right not to respond to individual requests at its discretion, which it will not specifically inform you about.
In the event that the collection of personal data is necessary for the exercise of mutual rights and obligations arising out of a particular contractual relationship, such as the employment relationship or the performance of ordered lawyers’ services (processing under an employment contract or a mandate contract), and when the provision of your personal information to the Law Firm is a legal obligation for you or for the Law Firm, you must provide this personal information. In the event that you do not provide these personal data, you cannot conclude a contract with the Law Firm, which means that the Law Firm will not provide you with any services or will not enter into an employment relationship with you.
A law firm may also process your personal information on the basis of its legitimate interest for which it endeavors, except where your interests or fundamental rights and freedoms prevail over such interests. In the event of a legitimate interest, the Law Firm will always make an assessment in accordance with the General Data Protection Regulation. An example of a legitimate interest of the Law Firm is, for example, enforcing or defending legal claims by the Law Firm – until you fully settle the invoice for the services provided, the Law Firm will process your personal information, based on the legitimate interest, until the payment is made. The Law Firm reserves the right to cancel the Power of Attorney and to the full payment for services rendered. Even in this case, the Law Firm will process your personal information on the basis of its own legitimate interest, despite the cancellation of the Power of Attorney, until the full payment.
Contractors with whom the Law Firm cooperates are, for example, accounting service providers, IT systems maintainers, and cloud and e-mail service providers (Dropbox, Gmail).
The Law Firm will not forward your personal data to third unauthorised parties.
The Law Firm does not transfer personal data to third countries (outside the Member States of the European Economic Area – EU Member States and Iceland, Norway and Liechtenstein) and to International organisations, except to USA – all contractual processors in the United States, to which the law firm provides access to personal data (e.g. Dropbox, Gmail, Google), in their General Terms and Conditions of Use and Privacy Policies, ensure compliance with the rules of the General Regulation – GDPR (EU Regulation 2016/679) and confirm to have obtained a certificate of compliance with the EU-US privacy shield (EU-U.S. Privacy Shield Framework).
The Law Firm will process personal data to the extent necessary to accomplish the purposes of the processing and for as long as it is necessary to achieve the accomplishment of these purposes.
Personal data is processed until the purpose for which they were collected is fulfilled, especially when the processing of personal data is necessary due to or in connection with a contract concluded with the Law Firm, except in cases when the period of retention of personal data is prescribed by law. In these cases, the Law Firm keeps the data in accordance with the legal provisions.
By written request, sent to the address: Odvetniška družba Grilc, Starc in partner, o. p., d. o. o., Cesta krških žrtev 135c, 8270 Krško or at the e-mail address firstname.lastname@example.org, an individual may request access, supplement, correction, blocking, limitation of processing or deletion of personal data, can object to the processing of data in connection with him/her and requires data transmission.
An individual may, at any time, permanently or temporarily, in whole or in part, revoke the consent to the processing of personal data by writing to: Odvetniška družba Grilc, Starc in partner, o. p., d. o. o., Cesta krških žrtev 135c, 8270 Krško or at the e-mail address email@example.com, informing the Law Firm that he/she is revoking the consent. The revocation of the consent does not affect the legality of the processing that was carried out on the basis of the consent until its cancellation.
An individual has the right to file a complaint with the Information Commissioner of the Republic of Slovenia (address: Dunajska 22, SI-1000 Ljubljana, e-mail: firstname.lastname@example.org tel.: ++386 12309730, www.ip-rs.si), if he/she considers that his/her personal data is stored or otherwise processed contrary to the applicable regulations governing the protection of personal data.
Last revision: 1st January 2020
Law firm Grilc, Starc & partner, o. p., d. o. o.