Privacy and Cookie Policy

Last updated: 2026-09-08

This Privacy Policy explains which personal data the law firm Odvjetničko društvo Galić i Martinković j.t.d. collects through the website odgim.hr, for which purposes, on which legal basis, and which rights you have. We process data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and the Croatian Act on the Implementation of the GDPR.

1. Data controller

Odvjetničko društvo Galić i Martinković j.t.d., Ivana Šibla 17, 10000 Zagreb, Croatia.

E-mail: info@odgim.hr. Phone: +385 92 271 6218 (Kristijan Galić), +385 91 899 1274 (Marko Martinković).

2. Which data we process and why

Through this website we process personal data only in the following cases:

  • Contact form: first name, surname, phone number, e-mail address and the content of the message you send us. The purpose is to answer your enquiry and, if you request it, to arrange the provision of legal services. The legal basis is taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR).
  • Server logs: our hosting provider (Cloudflare) automatically records technical access data (IP address, time of access, requested page, browser) for security, abuse prevention and the correct operation of the site. The legal basis is legitimate interest (Art. 6(1)(f) GDPR). We do not use these logs for profiling and do not combine them with other data.
  • Google Map: the map on the Contact page loads only after your consent. Before consent no data is sent to Google. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the "Cookie settings" link in the footer.

3. Recipients and processors

We do not sell or share your data with third parties for marketing purposes. To operate the website we use the following service providers, which process data on our behalf:

  • Cloudflare, Inc. (hosting and network infrastructure). Cloudflare processes data in EU data centres and, where necessary, outside the EU under the European Commission standard contractual clauses and its participation in the EU-U.S. Data Privacy Framework.
  • Formspree, Inc. (processing and delivery of contact-form messages to our e-mail address). Form data is submitted directly to Formspree, which forwards it to us by e-mail and stores it temporarily for delivery. Privacy policy: https://formspree.io/legal/privacy-policy/.
  • Google Ireland Limited (Google Maps), only if you have consented to loading the map. Google's privacy policy applies to that processing: https://policies.google.com/privacy.

4. Transfers outside the EU/EEA

Some of the providers listed are established in or process data in the United States. Such transfers rely on the European Commission adequacy decision for organisations certified under the EU-U.S. Data Privacy Framework or on standard contractual clauses under Art. 46 GDPR.

5. Retention period

  • Contact-form enquiries are kept for as long as our communication with you lasts and at most 12 months after the last contact, unless the enquiry leads to legal representation, in which case the data is kept in accordance with the Croatian Legal Profession Act and file-retention rules.
  • Server logs are kept by the hosting provider for a short period, as a rule no longer than 30 days.
  • Your cookie choice is stored in your browser until you delete it.

6. Your rights

With regard to your personal data you have the following rights:

  • right of access (Art. 15 GDPR)
  • right to rectification (Art. 16)
  • right to erasure (Art. 17)
  • right to restriction of processing (Art. 18)
  • right to data portability (Art. 20)
  • right to object to processing based on legitimate interest (Art. 21)
  • right to withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))
  • right to lodge a complaint with a supervisory authority: Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop@azop.hr, www.azop.hr, or the authority in your EU member state of residence.

7. How to exercise your rights

Send your request to info@odgim.hr or by post to the controller's address. We respond without undue delay and at the latest within one month. To protect your data we may ask you to confirm your identity.

8. Security

The website is served exclusively over an encrypted HTTPS connection. Contact-form data is transmitted encrypted and is accessible only to the firm's attorneys. We do not use analytics, tracking or advertising tools.

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page with the date of the last change.

Cookies and similar technologies

Cookies are small text files a website stores in your browser. This website does not use cookies for tracking, analytics or advertising. Only the following is used:

NameProviderPurposeDurationType
odgim_consentodgim.hr (browser local storage)Remembers your choice regarding consent to load external content (Google Map).Until you delete itStrictly necessary
Google Maps cookies (e.g. NID, CONSENT, SOCS)Google Ireland LimitedSet only after you click "Load map" or "Accept all". Google uses them for map operation, security and its own purposes described in Google's privacy policy.Up to 6 months or longer, per Google settingsConsent-based

You can withdraw or change your consent at any time via the "Cookie settings" link in the footer. You can also delete cookies in your browser settings.