Privacy policy is adopted in accordance with the Personal Data Protection Act, Official Gazette of the Republic of Slovenia, No. 163/22 (hereinafter referred to as ZVOP-2) and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as the Regulation).

The purpose of the privacy policy, which is the protection of personal data (hereinafter: policy), is to inform individuals (hereinafter: individuals) about the purposes, legal bases, security measures, and rights of individuals regarding the processing of personal data.

Within the Policy, we provide you with the following information:

• Controller of personal data

• Acquisition and purpose of processing personal data

• Disclosure and sharing of personal data with third parties

• Retention period for individual types of personal data

• Rights of individuals regarding the processing of personal data

• Right to lodge a complaint

• Judicial protection

• Security measures

Controller

The controller of personal data as defined by the regulation and regulations governing the security of personal data is: Elias Rudolf - Lawyer, Petkovškovo nabrežje 5, 1000 Ljubljana.

Purposes of processing and legal basis for data processing

You can anonymously access the website for the purpose of seeking information, contact us by writing or calling, and entrust us with information. Such information obtained based on your contact represents your consent for a response via the channel you have chosen when expressing your interest.

Processing of personal data with consent means explicit, unconditional, and freely given consent of the individual for the processing of personal data for a specific purpose, such as presenting services, informing, and preparing offers (consent-based processing). Such communication is conducted through channels selected by the individual in consent. The individual can withdraw or modify their consent at any time. Withdrawal or modification of consent only applies to data processed based on consent. The possibility of revoking consent does not constitute grounds for termination in the business relationship with the lawyer.

For the fulfillment of contractual obligations towards the individual, their personal data is processed to the extent necessary and customary for the respective purpose in business operations (processing for contract performance).

Personal data may also be processed based on a legal obligation that applies to the lawyer (legal obligation) and the legitimate interest of the lawyer when the latter prevails over the interests or fundamental rights and freedoms of the individual whose personal data require protection (legitimate interest).

Based on individual or multiple legal grounds, the following personal data are processed in line with the purpose: name, surname, address and place of residence, email address, and contact phone number.

Other personal data are processed when providing such data is necessary for the execution of the ordered service, based on the explicit prior consent of the individual and in accordance with the law.

The lawyer does not conduct direct marketing, automated decision-making, or profiling based on the individual's personal data.

When personal data that are evidently not necessary for a specific processing are unintentionally collected, they are immediately deleted, destroyed, or returned to the individual.

Disclosure and sharing of data with third parties

The lawyer may, if in line with the purpose for which personal data are processed according to EU law and Slovenian regulations, disclose personal data of individuals to third parties who, on the basis of a data protection agreement concluded with the lawyer, perform specific processing tasks, such as preparing and sending invoices, and accounting services, to the extent necessary for such tasks.

The lawyer will not disclose or share personal data with anyone else if not permitted by law and will not transfer personal data to third countries.

Retention period of personal data:

The retention period of personal data is limited to the shortest possible period.

The lawyer retains personal data in accordance with prescribed retention periods, or for the time necessary to achieve the purpose of their processing, until the fulfillment of the purpose.

Personal data obtained based on a concluded contract may be stored for the purpose of fulfilling contractual obligations until complete realization or for the duration of limitation periods and/or statutory deadlines.

Except when the retention period of personal data is prescribed by law, personal data obtained based on consent are stored until revocation or for the duration specified in the consent.

Taking into account the nature of the processed data and risks, the lawyer periodically and in a documented manner checks compliance with the limitation of the retention period. Upon the fulfillment of the purpose of processing personal data, such data are deleted and destroyed in a manner that prevents the identification of the individual to whom the personal data relate.

Rights of individuals regarding the processing of personal data

An individual whose personal data are processed by the lawyer has the right to receive confirmation as to whether personal data concerning them are being processed, and if so, access to personal data and additional information regarding the processing of their personal data (right to access).

The individual whose personal data are processed by the lawyer has the right to request without undue delay the rectification of inaccurate personal data concerning them (right to rectification).

Taking into account the purposes of processing, the individual whose personal data are processed has the right to have incomplete personal data completed, including by providing a supplementary statement (right to completion).

The individual whose personal data are processed by the lawyer has the right to request the erasure of personal data concerning them without undue delay (right to erasure).

The individual whose personal data are processed by the lawyer has the right to request the restriction of the processing of their personal data (right to restriction of processing).

The individual whose personal data are processed by the lawyer has the right to receive their personal data processed by the lawyer and to have those data transmitted to another controller (right to data portability).

The individual whose personal data are processed has the right, on grounds relating to their particular situation, to object at any time to the processing of their personal data (right to object).

The lawyer ensures the exercise of individuals' rights without undue delay and in any case within one month of receiving the request.

The lawyer accepts requests related to individuals' rights at the email address elias.rudolf@odvetnikrudolf.si.

If the individual whose personal data are processed submits a request electronically, information is provided, if possible, electronically, unless the individual requests otherwise.

If requested, the individual may also be informed orally about their personal data.

If there is reasonable doubt about the identity of the individual submitting a request regarding any of their rights, the lawyer may request additional information necessary to confirm the identity of the individual whose personal data are processed.

When the lawyer complies with a request, no specific decision is issued but an official note is made, informing the individual of the decision. When the lawyer does not comply with a request, a written decision is issued.

Right to lodge a complaint

Every individual whose personal data are processed has the right to lodge a complaint with the Information Commissioner if they believe that the processing of personal data concerning them violates Slovenian regulations or EU regulations on the protection of personal data.

Judicial protection

An individual may seek judicial protection of their rights regarding the protection of personal data before the administrative court throughout the duration of the violation. In addition to cessation of the violation and restoration of the lawful situation, the individual may seek compensation for damages through judicial protection. If the violation has ceased, the individual may seek a determination through a lawsuit that the violation existed.

Security Measures

Personal data of individuals are protected. Business premises and software are secured by technical measures that prevent unauthorized access to personal data. If a complaint has been filed with the Information Commissioner or judicial protection is sought, the lawyer will specially protect the individual's personal data until a legally binding decision is made.

Validity of the Policy, starting from November 13, 2023.