Privacy and Cookie Policy

Last updated: 2026-09-08

This Privacy Policy explains which personal data the law firm Odvjetničko društvo Galić i Martinković j.t.d. collects through the website odgim.hr, for which purposes, on which legal basis, and which rights you have. We process data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Croatian Act on the Implementation of the GDPR.

Odvjetničko društvo Galić i Martinković j.t.d., Ivana Šibla 17, 10000 Zagreb, Croatia.

E-mail: info@odgim.hr. Phone: +385 92 271 6218 (Kristijan Galić), +385 91 899 1274 (Marko Martinković).

Through this website we process personal data only in the following cases:

• Contact form: first name, surname, phone number, e-mail address and the content of the message you send us. The purpose is to answer your enquiry and, if you request it, to arrange the provision of legal services. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR).
• Server logs: our hosting provider (Cloudflare) automatically records technical access data (IP address, time of access, requested page, browser) for security, abuse prevention and the correct operation of the site. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). We do not use these logs for profiling and do not combine them with other data.
• Google Map: the Contact page shows a Google Map with the office location. When the map loads, Google processes your IP address and may set its own cookies. The legal basis is our legitimate interest in showing the office location (Art. 6(1)(f) GDPR).

We do not sell or share your data with third parties for marketing purposes. To operate the website we use the following service providers, which process data on our behalf:

• Cloudflare, Inc. (hosting and network infrastructure). Cloudflare processes data in EU data centres and, where necessary, outside the EU under the European Commission standard contractual clauses and its participation in the EU-U.S. Data Privacy Framework.
• Web3Forms (processing and delivery of contact-form messages to our e-mail address). Form data is submitted directly to Web3Forms, which forwards it to us by e-mail and stores it temporarily for delivery. Privacy policy: https://web3forms.com/privacy.
• Google Ireland Limited (Google Maps), when you visit the Contact page. Google's privacy policy applies to that processing: https://policies.google.com/privacy.

Some of the providers listed are established in or process data in the United States. Such transfers rely on the European Commission adequacy decision for organisations certified under the EU-U.S. Data Privacy Framework or on standard contractual clauses under Art. 46 GDPR.

• Contact-form enquiries are kept for as long as our communication with you lasts and at most 12 months after the last contact, unless the enquiry leads to legal representation, in which case the data is kept in accordance with the Croatian Legal Profession Act and file-retention rules.
• Server logs are kept by the hosting provider for a short period, as a rule no longer than 30 days.
• Your cookie choice is stored in your browser until you delete it.

With regard to your personal data you have the following rights:

• right of access (Art. 15 GDPR)
• right to rectification (Art. 16)
• right to erasure (Art. 17)
• right to restriction of processing (Art. 18)
• right to data portability (Art. 20)
• right to object to processing based on legitimate interest (Art. 21)
• right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
• right to lodge a complaint with a supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, www.azop.hr, or the authority in your EU member state of residence.

Send your request to info@odgim.hr or by post to the controller's address. We respond without undue delay and at the latest within one month. To protect your data we may ask you to confirm your identity.

The website is served exclusively over an encrypted HTTPS connection. Contact-form data is transmitted encrypted and is accessible only to the firm's attorneys. We do not use analytics, tracking or advertising tools.

We may update this policy from time to time. The current version is always published on this page with the date of the last change.

Cookies are small text files a website stores in your browser. This website does not use cookies for tracking, analytics or advertising. Only the following is used:

You can reopen the cookie notice at any time via the "Cookie settings" link in the footer. You can delete cookies in your browser settings.