Privacy Policy

This policy explains how I process personal data when you visit this website or contact me through it.

1. Who is responsible

The controller of your personal data is:

For any question about your data, write to info@mihajloviclaw.com.

2. Which law applies

I process personal data in accordance with the Law on Personal Data Protection of the Republic of Serbia (Zakon o zaštiti podataka o ličnosti, Official Gazette of the Republic of Serbia No. 87/2018, “LPDP”) and, where it applies to clients and visitors in the European Union, the EU General Data Protection Regulation (GDPR).

3. What data I process and why

When you visit the website.The hosting provider automatically records technical data such as your IP address, browser type, date and time of access and the pages visited. This data is needed to deliver the website and keep it secure. Legal basis: legitimate interest in operating a secure website (Art. 6(1)(f) GDPR; Art. 12(1)(6) LPDP).

When you use the contact form or write to me.I process your name, company (if provided), email address and the content of your message in order to answer your inquiry and, if you wish, to prepare an engagement. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR; Art. 12(1)(2) LPDP) and my legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR; Art. 12(1)(6) LPDP).

Cookies and analytics.See the Cookie Policy. Cookies that are not strictly necessary are used only with your consent (Art. 6(1)(a) GDPR; Art. 12(1)(1) LPDP).

Please do not send confidential or sensitive information through the contact form. Sending a message does not create an attorney-client relationship.

4. If you become a client

If you engage me, your data is processed to provide legal services and to meet my legal obligations, including professional record-keeping and tax rules. As an attorney, I am bound by professional secrecy under the Serbian Law on the Legal Profession. Details are set out in the engagement letter.

5. Who receives your data

I do not sell personal data. Your data may be processed on my behalf by service providers that support this website, under data processing agreements:

• Website hosting: Hetzner Online GmbH, Germany
• Contact form and email delivery: [naziv servisa, zemlja]
• Website maintenance: [naziv agencije, zemlja]
• Analytics, if you consent: Google Analytics 4, Google Ireland Limited, Ireland

Data may also be disclosed to public authorities where the law requires it.

6. Transfers to other countries

If a service provider is located outside Serbia or the European Economic Area, I make sure that appropriate safeguards are in place, such as an adequacy decision or standard contractual clauses. [Agencija navodi da li se podaci prenose van Srbije/EU i na osnovu čega.]

7. How long I keep your data

• Inquiries that do not lead to an engagement: up to 12 months after the last contact.
• Client data: for as long as required by the rules of the legal profession and tax law.
• Server logs: [rok koji navodi hosting, npr. do 30 dana].

8. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent, you may withdraw it at any time, without affecting processing that took place before.

To exercise your rights, write to info@mihajloviclaw.com.

You also have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (Bulevar kralja Aleksandra 15, 11120 Belgrade, www.poverenik.rs) or, if you live or work in the European Union, with the data protection authority in your country.

9. Security

I use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and restricted access.

10. Changes

I may update this policy when the website or the law changes. The current version is always published on this page.