1. Introductory Provisions

The Joint Law Office MIJATOVIC & PROVIDZALO, comprising attorneys Milinko Mijatović, Nemanja Providžalo and Milan Novakov (hereinafter: the “Firm” or the “Controller”), respects your privacy and is committed to protecting the personal data it processes.

This Privacy Policy (hereinafter: the “Policy”) explains what personal data we collect about you, how and for what purposes we process it, on what legal basis, how long we retain it, with whom we share it, and what rights you have in relation to the processing of your personal data.

Personal data is processed in accordance with the Law on Personal Data Protection of the Republic of Serbia (Official Gazette of the Republic of Serbia, No. 87/2018) and other applicable regulations.

• Identity and Contact Details of the Controller

The Firm is the controller of your personal data. The Firm’s address is Balkanska 16, Belgrade. The Firm’s email address is office@mijatovic-providzalo.rs, and its telephone number is +381 11 4389 930.

The Firm has not appointed a data protection officer, as there is currently no legal obligation to do so. If such an obligation arises or the Firm subsequently makes an appointment, the contact details will be published in this Policy.

• Purposes and Legal Bases of Data Processing

We process your data solely for clearly defined, lawful and legitimate purposes.

1. Operation and Security of the Website

Each time you visit our Website, certain technical data is automatically recorded in log files, including your IP address, the date and time of access, browser type, operating system and other technical information necessary for the proper operation, security and maintenance of the Website.

Processing is necessary for the purposes of the Controller’s legitimate interests in ensuring the operation and security of the Website, monitoring its performance, and protecting it against misuse and technical incidents.

• Responding to Your Enquiry

When you contact us through the contact form or by email, we process the data you voluntarily provide (your name, email address, the content of your message and any other information you include) to respond to your enquiry and, where applicable, to take steps at your request before entering into an agreement for legal services.

Providing data through the contact form is neither a statutory nor a contractual requirement. However, if you do not provide the data marked as mandatory, we may be unable to respond to your enquiry or provide the requested information.

The legal basis is taking steps at the request of the data subject prior to entering into a contract, performance of a contract where applicable, or the Controller’s legitimate interest in responding to enquiries received and communicating with interested persons.

• Use of Cookies

We use necessary cookies on our Website and, with your consent, analytics cookies to improve the Website’s operation and analyse its use.

Further information is provided in the “Cookie Policy” section.

• Categories of Data We Process

Depending on your interaction with us, we may process the following categories of data:

• technical data (IP address, browser type, operating system, time of access and other log file data);
• contact data (name, email address and the content of messages submitted through the contact form or by email);
• data collected through cookies, in accordance with your choices.
• Your Rights

Under the Law on Personal Data Protection, you have the right to:

• request access to your data;
• request the rectification or completion of inaccurate or incomplete data;
• request the erasure of data where the statutory conditions are met;
• request restriction of processing;
• exercise your right to data portability;
• object to processing based on legitimate interests;
• withdraw your consent where processing is based on consent;
• lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection.

You may exercise your rights by sending a request to: office@mijatovic-providzalo.rs

We will respond to your request without undue delay and no later than 30 days after receiving it, unless the period may be extended in accordance with the law or there are legal grounds for taking a different course of action, in which case you will be informed in due time.

• Data Security

We implement appropriate technical, organisational and personnel measures to protect your data against accidental or unlawful destruction, loss, alteration, unauthorised access or disclosure.

Although we apply appropriate protective measures, please note that no system for transmitting data over the internet can guarantee absolute security.

• Data Retention Periods

We retain data only for as long as necessary to fulfil the purpose for which it was collected, taking into account the nature of the data, the purpose of processing and the applicable legal, professional and regulatory obligations of the Firm.

• log files are retained for up to 30 days;
• data submitted through the contact form or by email is retained until the communication is completed and for as long as reasonably necessary to process and keep a record of the specific enquiry, unless there is a legal obligation or legitimate need to retain it for longer in order to bring, pursue or defend legal claims;
• if an attorney–client relationship is established, the data becomes part of the client matter file and is retained in accordance with the law, professional rules and the duty of professional secrecy.

After the applicable retention periods expire, the data is deleted or anonymised.

• Recipients and Transfers of Data

Your personal data will not be disclosed to third parties except in circumstances provided for by law or where necessary to fulfil the purpose of processing, in accordance with this Policy.

Data may be made available to:

• IT and hosting service providers that process data solely on our instructions;
• other processors with whom we have entered into an appropriate data processing agreement;
• competent public authorities where there is a legal obligation to provide the data.

If certain technical or analytics services involve transferring data to another country, such transfers will take place only in accordance with the Law on Personal Data Protection and subject to appropriate safeguards.

• Cookie Policy

Cookies are small text files stored on your device when you visit the Website. They are intended to enable the proper operation of the Website, improve the user experience and allow statistical analysis of Website use.

Our Website uses the following categories of cookies:

1. Necessary Cookies

These cookies are necessary for the Website to function and cannot be disabled through the cookie banner. They are used for core functionality, security, protection against misuse and proper operation of the Website.

The legal basis for their use is the Controller’s legitimate interest.

• Analytics Cookies

Analytics cookies enable the collection of aggregate statistical data on how the Website is used (for example, the number of visits, pages visited and time spent on the Website), so that we can improve its content and functionality.

These cookies are placed only with your prior consent.

If we use Google Analytics, data is processed in accordance with that service’s terms and the settings you accepted through the cookie banner.

When you first visit the Website, you will be shown a banner through which you can:

• accept all cookies;
• reject analytics cookies;
• customise your settings.

You may change your choice at any time through the cookie settings or your browser settings.

Disabling certain cookies may affect the functionality of some parts of the Website.

2. Final Provisions

This Privacy Policy takes effect on the date of its publication.

The Firm reserves the right to amend or supplement this Policy from time to time to reflect changes in legislation or its operations. All changes will be published on this page and will take legal effect from the date of publication.

Last updated: 4 August 2026