In this Privacy Notice (the “Notice”) we describe who we are, what categories of your personal data we process, how and for what purpose we process them, how we protect personal data and what rights the data subject have in relation to our processing of your personal data.
This Notice applies to the processing of personal data of the clients conducted by Baza Legal (the
“Company”).
”Personal data” means any data that allows the identification of a natural person.
“Processing” means any action performed on that personal data.
Which Categories of Personal data are we processing?
For what purposes do we process personal data?
We process personal data:
Your personal data will not be subject to automated decision making.
How do we collect personal data?
The personal data we process is obtained from our clients or other business partners directly, through emails, via website and newsletters, and other communication and documentation you provide to us. We may also process personal data obtained from counterparties or their counsels, government agencies, credit information service providers and publicly available records and sources as well as data generated by us internally in the course of handling our client assignments. In addition, we collect information that the client submits when subscribing for our newsletters or books an appointment from our website.
On what Legal Grounds do we Process Personal Data?
We process personal data on the following legal grounds:
Disclosures of Personal Data
We do not disclose your personal data to any third parties unless we are permitted or required to do so either by law or if an obligation is placed on us by the authorities, if we are involved in a merger or acquisition, in order to assert or defend against legal claims, or for the handling of our client’s assignment, which may involve disclosure of personal data to counsels, advisors and other third parties involved in the assignment, including parties based outside the EEA. We may also disclose your personal data to third parties, if there is a legitimate interest for the disclosure of
your personal data (e.g., a joint event with a third party).
We may also enter into agreements with certain service providers who may process your personal data on our behalf as part of their service.
Transfers of Personal Data
We do not regularly transfer personal data outside the EEA, however some of our service providers such as Google Analytics may be located outside the EEA. Any transfers of personal data outside the EEA will be made only subject to appropriate safeguards asrequired by the applicable data protection legislation.
Personal Data Protection
We have implemented and maintain appropriate technical and organizational security measures to protect your personal data to ensure data security and compliance with industry standards. We restrict access to your data to such personnel who have a need to access it for the purpose for which it was collected.
Storage Period
We keep your personal data only for as long as necessary for our operations and as required by the law. The periods on the type of processing.
Cookies and Analytics
We use cookies and similar technologies, which are small files or pieces of text that download to a device when a visitor accesses a website or app.
Your Rights
The applicable data protection legislation provides you with the following rights regarding the processing of your personal data:
Right to Access
You have the right to review what data we have collected on you. Please note, that we may deny such access on the grounds provided by law.
Right to Object
You have the right based on your particular situation to object to profiling
and other processing in situations where we process your personal data based on our
legitimate interests. These situations include profiling and processing of personal data for direct marketing purposes.
Right to Data Portability
To the extent that you have provided data to us that is processed based on your consent or a contract, and the processing is carried out by automated means, you are entitled to obtain such data primarily in a machine readable format and are entitled to transfer such data to another data controller, where technically feasible.
Right to Restrict Processing
You can request that processing of your personal data be restricted on the grounds provided by law.
Right to Rectify
You have the right to request that any erroneus data be rectified.
Right to Erasure (Right to be Forgotten)
You have the right to request us to erase your data.
Opt-out
You have the right to opt out of future marketing at any time by contacting us and will be offered the possibility to opt out each time we send you marketing material.
Complaints
You have the right to submit a complaint regarding the violation of your rights under the applicable data protection laws with the applicable supervisory authority. Please note, that we may be prohibited, due to confidentiality or by law, from disclosing or deleting your personal data and we may be prevented from carrying out certain data subject rights in respect of personal data relating to our client assignments.
Contact Information
Baza Legal is the controller of the personal data described in this Privacy Notice.
If you have any questions or comments concerning the processing of your personal data, or if you would like to exercise any of your data subject rights, please contact:
Ira Pecarevic,
ira.pecarevic@bazalegal.com
This Notice shall apply as of November 13th, 2023 and is subject to occasional amendments.