PRIVACY POLICY

INFORMATION ON PERSONAL DATA PROCESSING

I. INFORMATION ON THE PERSONAL DATA CONTROLLER

The personal data controller responsible for the management of your personal data is the Law firm Sladič & Resnik d.o.o., located at Dalmatinova ulica 2, 1000 Ljubljana (hereinafter referred to as the "Law Firm").

The Law Firm is committed to safeguarding your privacy and will handle your personal data with utmost care. We will not share your personal data with any third party or use it for any other purpose without obtaining your prior consent.

The Law Firm processes personal data of clients and counterparties for the sole purpose of providing legal services, including representation before courts and state authorities, legal advice, and other legal services within the scope of the granted mandate. This data processing also facilitates the efficient functioning and organization of the Law Firm, strictly adhering to the regulations on personal data protection and the explicit preferences of the individuals or organizations engaging our services.

The Law Firm manages personal data in full compliance with the legislation governing personal data protection and the laws applicable to the legal profession.

The Law Firm is not obligated to appoint a Data Protection Officer as it does not process personal data to the extent that would necessitate compliance with this requirement.

II. PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

Categories and purposes of personal data:

The Law Firm retains the following categories of personal data in the lawyer's file, both in electronic and paper format:

1. Client's name and surname,
2. Permanent and/or temporary address,
3. Tax ID number,
4. Email address and phone number,
5. TRR number,
6. Employment,
7. Personal data of the client that is necessary for the conduct of the proceedings, including information related to the client's state of health, description of the damage, and any evidence relevant to the subject matter of the case,
8. Personal data of the counterparty that is necessary for the conduct of the proceedings.

For invoicing purposes, the Law Firm processes the following personal data:

1. Client's name and surname,
2. Permanent or temporary address,
3. Tax ID number,
4. Email address and phone number,
5. Information related to the balance of overdue receivables,
6. Invoice specification, which includes a detailed listing of the services provided to the client.

Regulations governing personal data protection, including the applicable data protection laws and regulations in force

The primary legal basis for the processing of personal data by the Law Firm is the contractual relationship established between the Law Firm and the client. The contractual terms adhere to the following rules and regulations:

• Personal Data Protection Act (Official Gazette of the Republic of Slovenia, no. 163/22 as may be amended and supplemented - ZVOP-2),
• General Data Protection Regulation (EU Regulation 2016/679),
• Law on Advocacy (Official Gazette of the Republic of Slovenia, no. 18/93, as amended and supplemented - ZOdv),
• Employment Relationships Act (Official Gazette of the Republic of Slovenia, no. 21/13 as amended and supplemented - ZDR-1).

The basis for processing personal data may also encompass other international treaties, EU regulations, and national laws (such as tax laws). These legal frameworks may require the Law Firm to disclose personal data of individuals to public authorities and other controllers in specific cases, to fulfil its or their legal obligations or responsibilities.

In order to enhance the efficiency of our business operations and facilitate communication, we may request your consent to process your personal data, including your email address and telephone number. This processing enables us to streamline various activities, such as scheduling appointments, notifying you of court filings, sending draft letters, issuing invoices, and other related communications. In such instances, we will strictly process your personal data within the limits defined by your consent and solely for the purposes to which you have explicitly consented. We will process the personal data obtained until either your consent is withdrawn or the purpose for which it was collected ceases to exist, such as the termination of the contractual relationship or the no longer required need to receive court despatches.

Processing of personal data based on legal requirements and contractual relationships

If the provision of personal data is necessary for the performance of the solicitor's services (contractual processing) or is required by law, it is essential that you provide your personal data. Failure to provide the personal data will prevent the Law Firm from entering into a contract with you and subsequently from fulfilling its obligations under the contract, as the necessary data would be unavailable.

Processing of personal data based on legitimate interests

The Law Firm may also process personal data based on a legitimate interest pursued by the Law Firm, as long as this interest is not outweighed by the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data. When relying on legitimate interest as the legal basis for processing personal data, the Law Firm conducts an assessment in accordance with the provisions of the General Data Protection Regulation (GDPR).

III. USERS OF PERSONAL DATA

In order to efficiently manage its operations, the Law Firm may engage other individuals or entities (contractual processors) to perform specific tasks related to the processing of your data. The contractual personal data processors are authorized to process the entrusted data solely on behalf of the Law Firm, within the scope defined by the Law Firm's authorization (as specified in a written contract or other legal act), and in compliance with the purposes outlined in this Privacy Policy.

The Law Firm collaborates with the following contractual personal data processors:

• external accounting services,
• IT system maintenance providers.

The Law Firm is committed to not disclosing your personal data to any unauthorized third parties.

The Law Firm does not transfer personal data to third countries (countries outside the European Economic Area, which includes EU Member States, Iceland, Norway, and Liechtenstein) or international organizations.

IV. RIGHTS OF INDIVIDUALS

To exercise your rights regarding your personal data, you can submit a written request by mail to the following address: Law Firm Sladič & Resnik, d.o.o., Dalmatinova ulica 2, 1000 Ljubljana, or send a secure email to our designated secure email address: ors-op@vep.si. Through this request, you can seek access to your personal data, request its completion, correction, blocking, or restriction of processing, request the erasure of your personal data, object to the processing of personal data, and request data transfer.

The data subject has the right to withdraw consent to the processing of his/her personal data at any time, either permanently or temporarily, in whole or in part. To exercise this right, a written request can be sent by mail to the address of the Law Firm Sladič & Resnik, d.o.o., Dalmatinova ulica 2, 1000 Ljubljana, or by secure email to our secure mailbox: ors-op@vep.si. The withdrawal of consent does not affect the lawfulness of the processing that was carried out based on the consent before its withdrawal.

If an individual believes that his/her personal data is being stored or processed in violation of the applicable regulations on the protection of personal data, he/she has the right to file a complaint with the Information Commissioner of the Republic of Slovenia.

V. PERSONAL DATA RETENTION PERIOD

The Law Firm will process personal data only to the extent necessary to fulfil the purposes of the processing and for as long as it is required to achieve the intended objectives.

Personal data will be processed until the purpose for which it was collected has been fulfilled or within the applicable limitation periods for any obligations arising from such processing. This includes cases where the processing of personal data is necessary for the conclusion or performance of a contract, unless a specific legal requirement prescribes a retention period for the personal data. In such instances, the Law Firm will retain the data in compliance with the applicable legal provisions.

Director: Romana Sladič

Date: 1. 10. 2018

Last revised: 12. 6. 2023