# Privacy Policy

Source: https://lazeta.hr/en/privacy-policy  
Last updated: September 2026.

This policy explains which personal data Lažeta Tax Advisory collects through this website and in the course of a business relationship, the purposes for which it is processed, and the rights you have in relation to your data. Processing is carried out in accordance with the General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the General Data Protection Regulation.

## Controller

The controller is Lažeta Tax Advisory, Štefanovečka cesta 10, Zagreb. For any questions about the processing of personal data or the exercise of your rights, please write to ivan@lazeta.hr.

## Data we collect

- data you send us yourself by e-mail or telephone — name, contact details and the content of your enquiry

- data required to provide the service and perform the contract, including data contained in business and tax documentation

- data required to issue invoices and maintain business records

- basic technical data about your visit, where generated by the hosting server

## Purposes and legal bases

Personal data is processed in order to respond to enquiries and establish contact, to provide tax advisory and representation services, to comply with legal obligations and to protect legal interests. The legal bases are performance of a contract or steps taken prior to entering into a contract, compliance with the controller's legal obligations, legitimate interest and, where applicable, your consent, which you may withdraw at any time.

## Professional confidentiality

A certified tax adviser is bound to keep as professional secret all information entrusted by a client or obtained in the course of practice. This obligation continues after the business relationship ends.

## Retention periods

Data is retained for as long as necessary to fulfil the purpose for which it was collected, and thereafter for the periods prescribed by tax and accounting legislation and by the rules on mandatory retention of documentation. Enquiries that do not result in a business relationship are deleted once there is no further need for communication.

## Recipients

Data is not sold and is not passed to third parties for marketing purposes. It may be accessible to service providers performing technical or administrative tasks on our behalf (hosting, e-mail, bookkeeping), and only to the extent necessary for those tasks and subject to appropriate contractual data protection obligations. Data is disclosed to competent authorities where there is a legal obligation to do so.

## Your rights

- the right of access to your data and to information about the processing

- the right to rectification of inaccurate data and completion of incomplete data

- the right to erasure, where there is no longer a legal basis for processing

- the right to restriction of processing and the right to data portability

- the right to object to processing based on legitimate interest

- the right to withdraw consent, without affecting the lawfulness of processing carried out beforehand

Requests may be sent to ivan@lazeta.hr. We respond without undue delay and within one month at the latest. If you consider the processing unlawful, you have the right to lodge a complaint with the Croatian Personal Data Protection Agency (AZOP).

## Cookies

In its basic function, the website does not use cookies for tracking or visitor profiling. Should analytics or similar cookies be introduced in future, visitors will be informed and consent will be requested for their use.

## Data security

We apply technical and organisational measures appropriate to the risk of the processing, including restricted access to data, device protection and secure exchange of documentation.

## Changes to this policy

This policy may be amended from time to time to align with legislation or changes in the manner of processing. The version in force, with the date of its last amendment, is always published on this page.