Privacy Policy

ŠunjkaLaw is a law office based in Novi Sad, Republic of Serbia.

Reference in this Privacy Statement to “personal data” means any information that identifies, or could reasonably be used to identify, a living individual, either on its own or together with other information.

ŠunjkaLaw is committed to protecting and respecting Your personal data and privacy.

Please read this Privacy Statement carefully to understand our practices with respect to personal data.

1)The personal data that we collect and use

The personal information that we collect and use may include:

  • Basic information, such as Your name, Your employer, Your title or position;
  • Contact information, such as Your physical address, email address and phone number(s);
  • Financial information, such as bank account details;
  • Technical information, such as Your IP address and other information collected from Your visits to our website or in relation to materials and communications we send to You electronically;
  • Information You provide to us for the purpose of attending meetings and events;
  • Identification and background information provided by You or collected by us as part of our client on boarding process;
  • Personal information provided to us by or on behalf of our clients or employees or generated by us in the course of providing legal services and employment, which may include special categories of data;
  • Details of Your visits to our offices;
  • and
  • Any other information which You may provide to us.

ŠunjkaLaw shall process personal data in accordance with Article 12, paragraph 1, items 1, 2 and 3 of the Law on Personal Data Protection (“Official Gazette of RS”, No. 87/2018), ie:

  • based on your consent to the processing of your personal data for one or more specific purposes,
  • because processing is necessary to execute the contract concluded with you as the data subject or to take action, at your request as the data subject, before concluding the contract and
  • processing is necessary to comply with the legal obligations of ŠunjkaLaw as operator.

2) How we collect Your personal data

As a law firm, we regularly receive personal data as part of our professional activities. We may collect Your personal data:

  • As part of our client on boarding procedure;
  • When You or Your organization seek legal advice or employment from us;
  • When You or Your organization offer or provide services to us as vendor;
  • When You browse or interact with our website(s) or use any of our online services;
  • When You email us or provide such data to us in other circumstances, such as when You request details about or attend a firm sponsored event, or when You engage with the careers portals.

Ordinarily, You will have provided any such data to us. But in some cases, we may collect data about You from a third-party source, such as government agencies, and information or service provider or from public records.

3) How we use Your personal data

We only use Your personal data in connection with our ordinary professional activities (including the fulfilment of our legal or regulatory obligations). These “Permitted Uses” may include:

  • Providing legal advice or other services to our clients;
  • Managing our business relationship with You or Your organization, whether in connection with the provision or procurement of goods and services or as Your employer or former employer, including processing payments, billing and collection and related support services;
  • Managing and securing the access to our offices, systems and online platforms;
  • Complying with court orders and other legal and regulatory requirements;
  • Processing that what is necessary for purposes of the legitimate interest of the firm or third parties provided that such interests are not overridden Your interests or Your fundamental rights and freedoms
  • For any purpose related to the foregoing or for any purpose for which You provided the personal data to ŠunjkaLaw.

If You have given us Your express consent, we may process Your personal data for additional purposes. You may withdraw Your consent at any time. Additional purposes for which we may process Your personal data may include:

  • Communicating with You with respect to legal developments, announcements, events and products and services which may be of interest to You;
  • Distributing surveys or marketing materials;
  • Gathering information regarding Your preferences to improve the quality of our communications and interaction with You, such as through website analytics or the tracking of our client publications;
  • Any other purpose for which You have given consent.

4) How we share Your personal data

Our office ensures at all times a level of data protection at least as high as those required by the laws of Serbia and the EU. We may also need to transfer personal data to third parties, including third parties based outside Serbia or the EU, for example (but not limited to) subcontractors, other counsel and accountants and third parties involved in Your matters.

Where we share or transfer Your personal data, we do so in accordance with applicable data protection laws and take appropriate safeguards to ensure its integrity and protection.

5) Keeping Your personal data secure

We take appropriate technical and organizational measures at all times against unauthorized or unlawful processing of Your personal data and against accidental loss or destruction of, or damage to, Your personal data in accordance with our internal security procedures covering its storage, access and destruction. Personal data may be stored on our own technology systems or those of our vendors or in paper files.

6) Retaining Your personal data

We can retain Your personal data until it is no longer reasonably required for the Permitted Uses or You withdraw Your consent, provided that we are not legally required or otherwise permitted to continue to hold such data. In particular, we may retain Your personal data for an additional period of time to the extent that deletion would require us to overwrite our automated disaster recovery backup systems or to the extent that we deem it necessary to assert or defend legal claims during any relevant retention period.

7) Website Information

This information applies only to our website at If you have been redirected to other sites through the links on our site, please inform yourself about the proper handling of your information.

  • Contact form

If you use our contact form to send us a message, we will only use the information in the form to answer the question and contact you regarding your queries. The information you provide through our contact form will not be processed in any other way and will only be used to communicate your questions.

  • Embedded content from other websites

Articles on our site may include embedded content (e.g., videos, photos, articles, etc.). Embedded content from other websites behaves in the same way that a visitor visited another website.

These websites may collect information about you, use cookies, embed additional third-party tracking and monitor your interaction with that embedded content, including tracking interaction with embedded content if you have an account and are logged in to that site.

  • Use of your data

We apply the principle of data economy, ie. we need all the data we collect to fulfil an appropriate purpose, and for purposes other than the above, it will not be used.

Your personal information will not be shared with third parties without your explicit consent or without legal basis. Upon expiration of the obligation to keep the said information, this information will be deleted unless you have expressly agreed to its continued use.

  • Data sources

We receive information directly from you as a user (including through the devices you use).

  • Notes files

When you visit our website, the following information is stored first: your IP address (solely to protect our systems), remote host, data transmissions, referral page, as well as date and time. In addition, we will store the user tool, browser, and operating system for optimization purposes.

Processing is done solely to protect our systems (avoid abuse), for statistical analysis purposes and to optimize our services and website. We do not perform personalized evaluation without your prior consent.

  • Cookies

We use cookies to optimize our website. Cookies are small text files that are stored on your computer. Short-term cookies are deleted after closing the browser. Other cookies remain on your computer (long-term cookies) and will be recognized the next time you visit our website. This will allow us to give you better access to our site. When you access our site in the future, our site may “retrieve” the information stored in the cookie to inform the site of your previous user activity.

You can prevent cookies from being stored by selecting a “block cookie” in your browser settings. However, this may limit the functionality of the Website and therefore our services provided through the Website.

When you visit our website, there is certain information that is recorded and which is mostly anonymous information, that is, does not reveal your identity.

  • Newsletter

We also send our clients and users of our services an electronic newsletter to which you can volunteer and unsubscribe at any time. Your email address will be used solely to send you email regarding our services.

  • Data receivers

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, and the information generated by the cookie about your use of this site (including your IP address) will be transmitted to and stored by a Google server in the United States. Google will use this information to evaluate your use of the Website, to compile reports on website activity for website operators, and to provide other services related to website activity and internet use. Google may also transfer this information to third parties if required by law or if third parties process this information on behalf of Google. Google will not associate your IP address with any other Google data under any circumstances. You can prevent cookies from being installed by adjusting your browser software accordingly. You may refuse the collection and use of your IP address by Google Analytics at any time, provided that the refusal has legal effect from the moment of the refusal and does not retroactively occur. You can find more information at:

8) Your rights regarding Your personal data

You have the following rights in relation to the processing of your personal data:

  • The right to require access, correction or deletion of your personal data from ŠunjkaLaw,
  • The right to require processing restriction from ŠunjkaLaw,
  • Right to object,
  • Right to data portability,
  • Right to revoke consent at any time, except that revocation of consent does not affect the admissibility of consent-based processing prior to revocation,
  • The right to file a complaint with the Commissioner,
  • The right to know whether we are processing your personal data, access to your personal data, information about the purpose of the processing, the types of data being processed, the recipient or types of recipients to whom the personal data have been disclosed or will be disclosed, and in particular to recipients in other countries or international organizations, on the foreseen retention period for personal data, or, if this is not possible, on the criteria for setting that deadline.

In addition to Your rights under applicable data protection legislation and, if we are permitted or required to do so under applicable laws and regulations and by our professional obligations, we are required and will provide You, upon request, with a copy of Your personal data and correct any errors identified by You.

Except as set out above, we do not use Your data for any automated decision making or any profiling. In addition, You have the right to restrict our processing of Your personal data as well as the right to lodge a complaint with supervisory authorities regarding the processing of Your personal data. We will not be sending You marketing materials without Your express consent and will also comply with any request to stop sending any such communications to You.

The competent authority for protection of personal data is the Commissioner for Information of Public Importance and Protection of Personal Data of the Republic of Serbia. You can contact the authority at Bulevar Kralja Aleksandra 15, 11000 Belgrade, Republic of Serbia, by email at or by phone at +381 11 3408 900.

9) How You can contact us

All requests, questions or comments regarding this policy or our handling of Your personal data should be addressed to Ms.Jelena Bajin at .

10) Updates to this Privacy Statement

This Privacy Statement was updated in August 2019. We reserve the right to amend it from time to time to reflect changing legal requirements or our processing practices. Any amendment will be included in a new version of this Privacy Statement, posted on our website and will be effective upon posting.