ATTORNEY AT LAW OMANOVIC BERINA
1. INTRODUCTION
Attorney at Law Omanovic Berina (hereinafter: Attorney) recognizes and respects the importance of personal data protection, therefore applies legal and other regulations governing the protection of personal data and business secret. In accordance with the applicable Personal Data Protection Act (hereinafter: the Act), Attorney is the controller of your personal data.
When processing your personal data, Attorney acts in accordance with the principles of processing regulated by the Act. Attorney informs its clients and other persons, through theese Privacy Rules, of all relevant information regarding your personal data. The purpose of the Privacy Rules is to provide persons who contact Attorney, and persons whose personal data are collected and processed by Attorney, with information about the processing of their personal data in a transparent manner.
2. INFORMATION ABOUT THE CONTROLLER
Attorney at Law Omanovic Berina, with registered office at Vilsonovo šetalište 9, 71000 Sarajevo, Bosnia and Herzegovina, JIB: 4304079890000.
3. METHOD OF COLLECTING AND PROCESSING PERSONAL DATA
In its business, the Attorney processes personal data in order to fulfill the obligations set forth by the Law and other regulations and for the purpose of concluding a working and business relationship with the data subject and executing a contractual relationship with the client.
The realization of a labour and contractual relationship with the Attorney is not possible without collecting and processing mandatory and business-related data. In the sense of the above, the Attorney processes all data that the data subject provides to the Attorney directly, orally or in writing when establishing a business relationship, as well as in any communication with the Attorney for the purpose of establishing a business relationship in which the Attorney provides services from his registered activity to the data subject.
The Attorney aims to minimize the necessary data and seeks to collect and process only those data that are necessary for the establishment of a business relationship and for the implementation of legal regulations, business and contractual relationships, the purposes stated in the consent and the legitimate interests of the Attorney. The Attorney checks whether the personal data is authentic and accurate.
The Attorney is required to:
- process personal data fairly and lawfully,
- not process personal data collected for specified, explicit and legitimate purposes in any way that is incompatible with that purpose,
- process personal data only to the extent and scope necessary to fulfill the specific purpose,
- process only authentic and accurate personal data, and to update them when necessary,
- erase or correct personal data that are inaccurate and incomplete, having regard to the purpose for which they were collected or are further processed,
- process personal data only for the period of time necessary to fulfill the purpose for which the data were collected,
- keep personal data in a form that permits identification of data subjects for no longer than is necessary for the purpose for which the data are collected or further processed,
- ensure that personal data collected for different purposes are not aggregated or combined.
4. PERSONAL DATA COLLECTED AND PROCESSED BY THE ATTORNEY
The Attorney aims to minimize the necessary data and strives to collect and process only those data that are necessary for the implementation of legal regulations, the contractual relationship, the purpose stated in the consent and the legitimate interests of the Attorney.
The Attorney is entitled to make inquiries and obtain information about personal data and other client data, including, among other things, the following data: name and surname, gender, date and place of birth, ID card for identification and ID card number or other document to identify the data subject with whom he enters into a business relationship, place of residence, contact telephone number, email address, as well as other data necessary for the purpose of fulfilling the business relationship and contractual obligations, or if there is a legal basis for such inquiries.
If the data subject does not want the Attorney to process his/her data, it is necessary to inform the Attorney of this when establishing a business relationship, or subsequently, in writing. In this case, the personal data subject has the right to be informed that providing personal data is a necessary condition for establishing a business relationship, and that certain consequences for the business relationship with the Attorney are possible if he/she does not want to provide the requested data.
4.1. Categories of personal data processed by the Attorney
4.1.1. Data processed by the Attorney on the basis of laws and other regulations, which data are necessary for the fulfillment of the Attorney’s obligations and the establishment of an employment relationship.
These are identification data from valid identification documents, as well as other data that the Attorney is required to collect in accordance with the Law on Labor of the Federation of Bosnia and Herzegovina, the Law on Accounting and Audit of the Federation of Bosnia and Herzegovina, the Law on Contributions of the Federation of Bosnia and Herzegovina, the Law on Income Tax of the Federation of Bosnia and Herzegovina, the Rulebook on the Content and Manner of Keeping Records of Workers and Other Persons Engaged in Work of the Federation of Bosnia and Herzegovina, the Law on the Unified System of Registration, Control and Collection of Contributions, the Rulebook on Submitting Applications for Registration and Changes in Registration in the Unified System of Registration, Control and Collection of Contributions, the Law on Labor of Republika Srpska, the Law on Contributions of Republika Srpska, the Law on Tax Procedure of Republika Srpska, the Law on Records in the Field of Labor and Health Insurance of Republika Srpska:
- name and surname,
- address of residence/temporary residence,
- personal identification number (JMBG),
- date of birth,
- place of work and number of hours of engagement,
- working hours and their use,
- data on additional income and payments based on one-time bonuses and compensations,
- academic title,
- date and start of work,
- gender,
- as well as all other data necessary for establishing an employment relationship and fulfilling the Attorney’s legal obligations.
4.1.2. Data necessary for establishing a business relationship with the client
This is the data that the client provides to the Attorney in order to establish a business relationship, such as:
- First and last name/name of the client;
- Address of residence/residence/headquarters of the client;
- ID number of the client;
- Contact details of the client (telephone number; e-mail address);
- Number of the client’s active bank account;
- Name of the bank in which the client has an active giro account;
- Court case number;
- Date of commencement of the business relationship;
- Date of termination of the business relationship.
- Price of the service
- Description of the service
The Client provides the data to the Attorney during the meeting or subsequently, at the Attorney’s request.
5. BASIS FOR COLLECTION AND PURPOSE OF PROCESSING PERSONAL DATA
The Attorney collects and processes personal data in accordance with the Law, in order to fulfill the responsibilities established by law and other applicable regulations in the field of the Attorney’s registered activity, and based on the written consent of the data subject.
The purpose of collecting and processing personal data is to establish and implement an employment relationship, or rather, to execute a contractual relationship that the data subject establishes with the Attorney. Personal data is processed to the extent necessary to fulfill the purpose for which it is collected, and in accordance with labor, salary and tax regulations.
In accordance with the above, the processing of personal data is a legal obligation of the Attorney, and the Attorney may refuse to enter into a contract with the data subject, or terminate the existing business relationship in the event that the data subject fails to provide the legally required and required data.
6. THE DATA SUBJECT RIGHTS
Every data subject whose personal data is processed by the Attorney has the right to access all personal data that he or she has provided to the Attorney for processing and that is being processed, as well as to receive information about the processing of your personal data, the purpose of the processing, the legal basis, the duration of the processing from which your personal data was obtained, and the right to access personal data. The right is exercised by submitting a request. In cases provided for by law and other regulations, data subjects have the right to request correction, updating, deletion or blocking of personal data (where permitted by applicable regulations). At the request of the data subject, the Attorney will correct, delete or block data that is found to be inaccurate or incorrectly stated or processed in another way that is contrary to the law and rules relating to data processing. The Attorney is required to provide the client, or the person whose data is being processed, with information on the action taken on the basis of the request no later than 30 days from the date of receipt of the request. This deadline may be extended with prior notification to the data subject.
7. DATA TRANSFER AND CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The data subject personal data may be transferred based on:
- the consent of the data subject, and/or
- the execution of a contract to which the data subject is a party, and/or
- the provisions of laws and by-laws.
The Attorney processes and transfers your data that are and/or become available during the business relationship, especially your personal data:
- to third parties to whom the Attorney is required to provide such data, for the purpose of fulfilling a task performed in the public interest, such as, for example, the Ministry of Finance – Tax Administration, ITA and others, and to other institutions and competent authorities to whom the Attorney is required to provide personal data based on legal and other relevant regulations regulating the business of the Attorney’s registered activity;
- to third parties to whom, based on a business cooperation agreement, the Attorney provides services from his registered activity or are necessary or are in connection with the performance of a business and contractual relationship with the Attorney.
In addition to the above, service providers who have a business relationship with the Attorney (for example, providers of IT services, printing and sending letters to clients, etc.) may also have access to your personal data in order to ensure the adequate business of the Attorney, who are also required to act in accordance with the applicable regulations in the field of personal data protection.
8. PERSONAL DATA RETENTION
The Attorney will process personal data collected for the purpose of exercising rights and obligations arising from the business relationship for the duration of the business relationship between the Attorney and the data subject, except in cases where the Attorney is required to retain the data even after the termination of the business relationship with the data subject, and based on the law, the data subject’s consent or the Attorney’s legitimate interest (e.g. a potential dispute between the data subject and the Attorney).
Data processed solely on the basis of the data subject’s consent shall be processed only for the period necessary to achieve the purpose of the processing for which consent was given, or until the person to whom the data relates withdraws consent.
9. DATA PROTECTION
In accordance with relevant regulations and regulatory requirements, the Attorney applies and takes adequate technical and organizational measures to secure and protect the personal data of clients and other persons. The security and protection measures are aimed at preventing any unauthorized access to the personal data of the data subject, alteration, destruction or loss, unauthorized transfer and other forms of unlawful processing and misuse of personal data.
10. Data Protection Officer details
Name and surname: Omanović Berina
Tel: +387 61 469-798
e-mail: [email protected]
11. Contact information
Attorney at Law Omanovic Berina, with registered office at Vilsonovo šetalište 9, 71000 Sarajevo, Bosnia and Herzegovina, JIB: 4304079890000.
Tel: +387 61 469-798
e-mail: [email protected]