Controller
The controller within the meaning of the Serbian Personal Data Protection Act (Zakon o zaštiti podataka o ličnosti) is:
- Controller
- Selena Jokić, attorney at law
- Office
- Law office Selena Jokić
- Address
- Brankova 23, 11000 Belgrade, Serbia
- [email protected]
- Phone
- 011 328 3221 · +381 64 365 1535
For any question about the processing of personal data you can write, e-mail or call using the details above.
What data is processed
This website has no contact form and does not ask you to open an account. No enquiry content is collected through the website itself.
Personal data may be received when a person voluntarily contacts the office: by e-mail, by phone, through an online consultation, when arranging a visit to the office, and in the course of establishing or conducting a client relationship.
- identification data (name, and where relevant the name of the business or company);
- contact data (e-mail address, phone number, postal address);
- the content of the message and information about the legal matter;
- documents the person chooses to provide.
Send only what is needed for an initial contact. Until the office has confirmed that it takes on the matter, do not send originals or particularly sensitive documents.
Purposes
Data is processed in order to:
- reply to the enquiry;
- make an initial assessment of the legal question;
- check whether the matter can be taken on and whether there is a conflict of interest;
- arrange a consultation or an office visit;
- take steps at the person's request before a professional relationship is established;
- provide legal assistance if the matter is taken on;
- comply with the legal and professional obligations of an attorney;
- keep the website and communication secure.
Legal basis
Depending on the purpose, processing rests on one of the grounds in Article 12 of the Personal Data Protection Act:
- steps taken at the person's request before a contract is concluded, i.e. before an attorney–client relationship is established (replying to an enquiry, conflict check, arranging a consultation);
- performance of the contract with the client (legal assistance in a matter that has been taken on);
- compliance with the controller's legal obligations (under the Legal Profession Act and other regulations);
- the controller's legitimate interest, where it is not overridden by the interests or rights of the person: security of the website and of communication, and responding to communication received;
- consent, only where processing cannot rest on another ground and consent is expressly requested. Consent can be withdrawn at any time; withdrawal does not affect processing carried out before it.
Providing data is not a legal obligation. Without basic contact details and a description of the question, the office cannot reply or assess whether it can take the matter on.
No decisions are made solely on the basis of automated processing and no profiling takes place.
Professional secrecy and security
Data received by the office is handled in keeping with the duty of attorney–client confidentiality (Article 20 of the Legal Profession Act) and the Code of Professional Ethics of Attorneys. Reasonable technical and organisational safeguards are applied.
E-mail and the internet are not absolutely secure channels. The office cannot guarantee the complete security of data in transit outside the systems it controls. For particularly sensitive documents, agree the method of delivery in advance.
Recipients and technical providers
The office does not sell data and does not pass it to third parties for marketing. To the extent needed to provide the service, technical access may be held by:
- Cloudflare, Inc.: hosting, content delivery network (CDN) and security protection of this website, and Cloudflare Web Analytics (see “Cookies and analytics”);
- Yahoo: the e-mail service provider for the office address;
- other carefully chosen technical providers, only where needed for the operation of the office;
- courts, authorities and other persons to whom data must be disclosed under a legal obligation or for representation in a specific matter.
The technical providers listed have their seat or infrastructure outside the Republic of Serbia as well, so in a technical sense data (e-mail, website access logs) may also be processed outside Serbia, under those providers' terms of use and data protection rules.
Cookies and analytics
Status as of the last update, verified by an inspection of the website:
- the site sets no cookies of its own and uses no cookies for advertising, profiling or tracking;
- it does not use Google Analytics, Meta Pixel or similar tools;
- it stores nothing in the visitor's browser (localStorage, sessionStorage);
- it has no contact form and no embedded third-party content (maps, video).
The site uses Cloudflare infrastructure (hosting, CDN, abuse protection) and Cloudflare Web Analytics for aggregated data about usage and performance: number of visits, pages visited, country, device type, browser, referring site. Cloudflare states in its official documentation that Web Analytics does not use cookies or localStorage and does not fingerprint individuals via their IP address, user agent or other data. As part of standard Cloudflare protection, the browser also loads a Cloudflare script that protects e-mail addresses from automated harvesting; it sets no cookies.
As the infrastructure provider, Cloudflare technically processes request data (including the IP address) in order to deliver the site and protect it from abuse, under its own data protection rules.
Should optional cookies, Google Analytics, Meta Pixel, embedded maps or video or similar technologies be introduced in the future, this policy and the consent mechanism will be reassessed before they are activated.
Retention
Data is kept for as long as needed for the purpose for which it was collected: for the duration of the communication or of the professional relationship, and afterwards for as long as required to meet the legal and professional obligations of an attorney (including obligations relating to the keeping of case files) and to protect legal interests. After that period, data is deleted or, where applicable, securely archived.
If an enquiry does not lead to a client relationship, the data from the enquiry is not kept longer than needed to reply and to record the conflict check.
Your rights
Under the Personal Data Protection Act you have the right to ask the controller for:
- access to the data concerning you;
- rectification and completion;
- erasure, where the legal conditions are met;
- restriction of processing;
- objection to processing based on legitimate interest;
- withdrawal of consent, where processing is based on consent.
Requests can be sent to the controller's contact details. Some rights, in particular the right to erasure, may be limited where a legal or professional obligation to retain data exists or where processing is needed to establish, exercise or defend legal claims.
You have the right to lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), Bulevar kralja Aleksandra 15, 11120 Belgrade, Serbia.
Contact and sensitive documents
- Sending a message does not mean the matter has been taken on.
- An attorney–client relationship and representation arise only after the office has checked that it can act and that there is no conflict of interest, and after an express agreement.
- Until the office confirms that it takes on the matter, do not send originals or particularly sensitive documents.
- For an initial contact, send only what is needed to understand the question.
More on what this website is and is not: Legal notice.
Changes
This policy is updated when the way the website works or the regulations change. The current version is always published on this page, with the date of the last update.