office@zsp-legal.com+381 11 7850 542
Contact us

Privacy Policy

Effective from: 04.08.2025.

1. Introduction

ZSP Advokati aod Beograd, a partnership of attorneys (advokatsko ortačko društvo), having its registered office at Makedonska 44, Belgrade (Stari grad), Republic of Serbia, ID number 20881135 (''ZSP'' or ''we'' or ''us'') is a law firm committed to preserving the privacy of all individuals outside ZSP with whom we interact, and to protecting any personal data that such individuals may provide.

This privacy policy explains how we collect and process your personal data.

Please read this privacy policy carefully. We may amend or update this privacy policy from time to time, so please check it periodically to review the changes and updates.

2. ZSP - Controller

We collect and process your personal data as the controller under this privacy policy, applicable data protection regulations and best practice in this field. If you have any questions or need more detailed information regarding any part of this privacy policy or ZSP's privacy practices, please contact us as follows:

  • via e-mail to: office@zsp-legal.com, or
  • in paper form to the following office address: ZSP Advokati aod Beograd, Makedonska 44, Belgrade, Republic of Serbia.

3. Types of personal data, legal grounds and purpose of processing

We collect and process personal data (i) in the course of providing legal services and establishing and managing our business relationships, and (ii) via www.zsp-legal.com (''Website'') and use of any features or resources available on or through the Website, as described below.

A. Legal services and our clients

We are primarily engaged in providing legal advice and assistance to corporate clients. If an individual seeks legal services, we may agree to deliver services to such a client.

In the case of clients, the personal data we collect and process include the following:

  • contact details of an individual, i.e. contact person within the client's organisation and client's representatives (full name, position, role, telephone number, e-mail, place of work);
  • data identifying clients concerning matters they instruct us on or are involved in;
  • information that clients choose to provide in communications with us;
  • financial data such as payment-related information or bank account details;
  • identification and other background verification data;
  • information from public sources, e.g. LinkedIn and similar professional networks or internet publications.

The above personal data will be provided to us by clients, the company or organisation that is ZSP's client or obtained from public sources. Your personal data will be used for one or more of the following purposes: (i) providing legal advice and assistance, (ii) maintaining and managing our relationship with you, your company or organisation (including keeping records about business contacts, services and payments so we can customise our offer for you, develop our relationship), (iii) sending e-mails and other messages to keep you informed of legal developments, market insights and our services, and (iv) client due diligence/KYC (under anti-money laundering law and regulatory requirements).

The legal basis of processing may be performance of a contract or taking steps prior to entering into a contract (e.g. point (i) above), our legitimate interest to establish and maintain a business relationship with our client (e.g. points (i) in case of corporate clients, (ii) and (iii) above), and fulfilling the legal and regulatory requirements (e.g. point (iv) above).

Providing personal data in the above cases is voluntary. However, if such data is not provided, we may not be able to establish or maintain a business relationship with you, i.e., the organisation that you work for, enter into a contract, or perform our obligations under a contract.

B. Cookies

We use cookies on the Website as described below, which means that when you visit our Website, we will collect and process certain primarily technical data which may be considered personal data.

Cookies are small text files which may be stored on your computer or other devices when you visit a website. They are widely used to make websites work or work more efficiently, keep track of your movements within websites, and provide different information to website owners.

Below is an overview of the necessary and optional cookies we use. The lawful basis we rely on to process your personal data is either your consent (e.g. when we require your consent for the optional cookies) or our legitimate interest (e.g. to maintain the integrity of our IT systems and the continuity of our business).

Necessary

These cookies are essential for the functionality of the Website and the utilisation of its features. Therefore, they cannot be disabled in our systems.

Optional

These are functionality cookies (increase the usability of a website by remembering your choices) and analytics/performance cookies (collect data about how visitors use our Website, data on the performance of a website such as the number of visitors, the time spent on the website and error messages).

Google Analytics

The Website uses the web analytics service provided by Google, Inc. Information generated by the Google cookies about your use of the Website (e.g. your IP address) will be transmitted to and stored by Google. Google will use this information to evaluate your use of the Website, render reports on website activity and provide other services related to website activity and internet usage. You may decline the use of cookies by adjusting your browser settings; however, please be aware that doing so may limit your ability to access the Website's full functionality.

Cookie settings

You can change your cookie preferences by clicking on . You can then adjust the available sliders to 'On' or 'Off', then click 'Save and close'.

Alternatively, most web browsers allow some control of most cookies through the browser settings. To find out more about cookies, visit www.aboutcookies.org or www.allaboutcookies.org.

C. Candidates

If you decide you would like to join the ZSP team and send us your CV and a short cover letter, we will collect and process the personal data contained therein (your CV, your education and previous experience, details of professional memberships and other information relevant for the selection process). That personal data will be processed to facilitate the processing of applications submitted via e-mail within the Careers section of our Website and to assess your suitability for any position you may apply for. You are not obligated to provide the personal data we request for a specific position, but not doing so may impact your application.

The lawful basis for processing your personal data is: (i) taking steps at the request of the data subject prior to entering into a contract, and (ii) for storing personal data after selection process closes – legitimate interest to store submitted personal data for a limited period after the selection process closes in order to be able to contact you if another position opens within that period. Data about candidates shall be kept during the selection process and for 6 months after the selection process closes.

D. Newsletter

We occasionally send our clients and business contacts newsletters on legal developments and market insights. If we have not had a prior business relationship and you wish to receive communications from us, you can subscribe at any time by sending an e-mail to office@poverenik.rs.

We will process your full name and e-mail address to send the newsletter. The legal basis for processing is our legitimate interest to notify our clients and business contacts of legal developments, market insights, and consent of the persons who registered for our newsletter e-mail list but are not our clients or business contacts.

You may unsubscribe from the newsletter e-mail list at any time by clicking on the link included in every newsletter e-mail we send. Once you unsubscribe, we will not send you further newsletter e-mails. However, we may continue contacting you to the extent necessary for the legal services you requested.

Personal data processed for these purposes will be retained throughout our engagement, business relationship or until you unsubscribe from the newsletter.

4. Third-party websites

This privacy policy does not apply to, and we are not responsible for, any third-party websites which may be accessible via links from this Website. If you follow a link to any of these third-party websites, please note that they have their own privacy policies. You should review these policies before submitting personal data to third-party websites.

5. Retention period

We keep your personal data as needed to provide our legal services and achieve other purposes as described herein, but subject to the legal and regulatory requirements to retain the information for a minimum period and limitation periods for taking legal action.

Personal data are stored on servers in the Republic of Serbia and managed by our service provider in accordance with applicable personal data regulations.

6. Sharing of personal data

Your personal data may be shared with the following recipients:

  • service providers: your personal data will be shared on a "need-to-know basis" with our service providers who support our business, including IT and communication suppliers, outsourced business support, translators, and accountancy firms (which are considered processors under personal data regulations);
  • other law firms, collaborators and consultants: your personal data may be shared with other law firms, collaborators and consultants whom we may contract and subcontract to provide you with legal services;
  • other third parties: the state authorities if and as needed, pursuant to applicable laws and regulations.

Before we transfer your personal data outside the Republic of Serbia, we will consider all applicable legal and regulatory requirements. We may transfer your personal data to the following countries:

  • countries listed in the Decision on the List of Countries, Parts of their Territories or One or Multiple Sectors of Specific Activities in such Countries or International Organisations which are deemed to provide an Adequate Level of Data Protection (''Official Gazette of the Republic of Serbia'', No. 55/2019);
  • countries which have entered into an international agreement on personal data transfer with the Republic of Serbia;
  • signatories of the Council of Europe Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data;
  • countries approved by the European Commission as ensuring an adequate level of protection.

Any personal data transfers outside the Republic of Serbia to countries that do not fall into the categories listed above will be secured through the standard contractual clauses or appropriate contractual guarantees, which will also comply with applicable data protection regulations. If you would like further information about the safeguards in place, you can contact us in the manner outlined at the beginning of this privacy policy (ZSP – controller).

7. Personal data security

We genuinely care about your privacy and personal data security in accordance with personal data protection regulations and best practices. To prevent unauthorised access or disclosure, maintain personal data accuracy and ensure the appropriate use of personal data, we have put in place commercially reasonable technical, organisational and personnel measures and procedures to safeguard and secure the personal data we process.

8. Your rights

As a data subject, you have the following rights regarding the personal data collected by us:

  • right of access to your personal data - meaning you can request to be faithfully and fully informed whether we process your personal data, as well as to request certain information on such processing;
  • right to rectification of your personal data - right to request us to correct your personal data which is incorrect, i.e. to request that incomplete personal data be supplemented;
  • right of erasure of your personal dataupon your request;
  • right to restrict processing - e.g. in case you contest accuracy of personal data or you have submitted an objection to processing claiming that legitimate interest for processing does not exist, and an assessement of whether the legal ground for processing outweighs your interests is ongoing;
  • right to be informed about the rectification or erasure of your personal data, as well as processing restrictions;
  • right to personal data portability - right to receive from us your personal data (previously provided to us), in structured form and transfer them to another controller, as well the right to have your personal data directly transferred to another controller by us;
  • right to object to personal data processing - you may challenge the legitimacy of processing your personal data if you believe there is no legitimate interest, necessity for conducting public interest activities, or statutory authorisations, or if such processing is conducted for direct advertising and profiling purposes.

If we process your personal data based on your consent, you have the right to withdraw that consent at any time by contacting us in the manner outlined at the beginning of this privacy policy (ZSP – controller). However, revoking consent will not affect personal data processing that was carried out based on consent prior to the revocation.

If you believe that your personal data is being processed contrary to the applicable data protection laws and regulations, you have the right to file a complaint to the Commissioner for Information of Public Importance and Personal Data Protection of Republic of Serbia, in the following manner:

Postal address: Bulevar kralja Aleksandra 15, 11120 Belgrade, Republic of Serbia

Contact phone: +381 11 3408 900

e-mail: office@poverenik.rs