Privacy Policy
PRIVACY POLICY
This Privacy Policy regards the personal data of our clients, business partners and other persons contacting, visiting or otherwise provide us with their personal data (“You”) and it applies to the data collected through our website, www.vladulescu.ro, as well as to any other personal data collected through e-mail and/or any other off-line contact.
This document aims to provide you with an overview on how We process your personal data, in accordance with the principles set forth under the (EU) Regulation 2016/679 (“GDPR”), as well as all other applicable data protection laws.
Personal data represents any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (“Personal Data”).
Processing of personal data means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction (“Processing”).
Below We provide You with an overview on Our practices on Processing of your Personal Data.
I.DATA CONTROLLER
The data controller is C.I. VLADULESCU RAZVAN-CRISTIAN, an individual law firm, with registered office in, 29bis Arh. Ion Mincu Street, 3rd Floor, Apt. 4, District 1, Postal Code 11357, Bucharest, Romania, (“We”, “Us” or “Vladulescu Attorneys & Consultants”).
II.CATEGORIES OF PERSONAL DATA
(i) Navigation Data
For its proper functioning, Our website collects, during its normal operation, certain Personal Data related to You, which is transmitted in the context of the use of Internet communication protocols.
This data is not collected in order to be associated with identified persons, but may, on account of their nature, allow users to be identified through processing and associations with other data held by third parties.
This data is used for the purpose of obtaining anonymous statistical information on the use of Our website and to verify its correct operation and are deleted immediately after processing.
The categories of Personal Data Processed in this context are the hour and date of accessing the website and the IP address, login data, browser type and version, from which our website was accessed.
This category includes also data processed by using cookies. For further details on this Processing, please visit our Cookie Policy.
(ii) Data provided voluntarily by You
When You send Us a message to the address indicated on the website, or through the collection form published on Our website, We will collect contact data (name, surname, email address, telephone number) and any other information that may be included in Your request.
In addition, in the course of our activities, order to prepare and provide the services requested from us, We may process:
General Personal Data about You (e.g. name, surname, telephone number, email address, date and place of birth, address, employment history, educational or professional background, job title and function, tax status and any other personal data you may provide directly to us, as needed to fulfill Your requests), as well as
Special categories of Personal Data about You (e.g. personal identification number, ID series and number, passport number, data relating to criminal convictions and offences, health data, data on union membership and any other personal data you may provide directly to us, as needed to fulfill Your requests).
For example, if we represent you in a criminal case, we may collect information about the alleged offences and any related criminal history. Also, in some employment matters, information regarding union membership, medical conditions, race, religion may be relevant to the assistance we provide to You.
(iii) Personal Data from a third party
In certain circumstances, We may collect Personal Data about You from third parties, such as public archives, governmental agencies, credit bureaus, information or services providers.
III.PURPOSES OF PROCESSING
We process of your Personal Data to the extent allowed or required by the applicable law for the following purposes:
• providing the services accessible via the website, as well as allowing the website users to be acquainted with the services provided and activities carried out by Us;
• based on Your consent, sending communications containing information on Our activity, such as newsletters, legal alerts, training sessions, cultural initiatives, presentations and other legal/professional updates on subjects concerning the activities carried out by Us;
• preparing and providing You with the legal services requested (for example, preparing materials required during the course of litigation and arbitration proceedings, preparing documents related to legal, tax and insolvency consultancy etc.);
• communicating with You with respect to Your requests and any other relevant business-related matters;
• managing the business relationship between You and Us (for example, performing payments, accounting, audit, invoicing etc.);
• complying the obligations imposed to Us by the law and/or by the statute governing the legal profession, for compliance purposes (for example, know-your-client obligation, preventing and identifying fraud and crimes, financial review and compliance, obligation to keep records etc.);
• For any other purpose related and/or additional to any of the above.
We will not use your personal data for taking any automated decisions.
IV.GROUNDS FOR YOUR PERSONAL DATA PROCESSING
We process Your Personal Data shall based on one or several of the legal grounds described below:
• You have given Your consent to the Processing of Your Personal Data, for one or more specific purposes;
In respect of the marketing related communications, You can withdraw your consent anytime, expressing thereby your option of not receiving our newsletters in the future by clicking “Unsubscribe” when you receive the respective e-mail or by writing at office@vladulescu.ro.
For the Processing of some Special categories of Personal Data, if required by the applicable law, We will Process such data only based on your prior and explicit consent.
• the Processing is required for the performance of a contract to which You are a party, or, such Processing is required for entering into a contract with You;
• the Processing is required for the compliance with a legal obligation;
• the Processing is required to protect Your vital interests or those of another individual;
• the Processing is necessary for the purposes of the legitimate interests pursued by Vladulescu Attorneys & Consultants or by a third party, except when your interests and rights and freedoms prevail over such interests.
V.RECIPIENTS AND DATA TRANSFERS
Your Personal Data will not be circulated or assigned to third parties, unless with Your prior and explicit consent.
Should disclosure to third party suppliers or partners of Vladulescu Attorneys & Consultants is necessary for organizational or administrative requirements or to support the services provided, We shall appoint said entities as processors pursuant to the GDPR.
In this case, Your Personal Data will be Processed on Our behalf and strictly based on Our instructions. In order to ensure the integrity and security of your Personal Data in relation with those processors, We will implement organizational measures and adopt appropriate safeguards.
For example, while performing Our activity, if required and in the context of providing the services you have requested from us, We may send Your Personal Data to courts, law enforcement authorities, regulators, government officials, attorneys, notaries and/or other authorities.
Also, if permitted or required by law, by an order or decision of a judicial authority or any other competent institution/authority (e.g. police, prosecutor office etc.) we may disclose the Personal Data to such entity.
In principle, We will not transfer Your Personal Data abroad.
However, if necessary and permitted and/or required under the applicable law, in case of data transfer, We implement appropriate safeguards in order to ensure security and confidentiality of Your Personal Data and assess the adequacy of the level of protection provided by the recipients.
In this respect, We may conclude data transfer agreements based on the Standard Contractual Clauses, pursuant to Article 46 GDPR or by using other appropriate means provided by law, in order to protect Your Personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access and against all other unlawful processing methods.
VI.SECURITY OF YOUR PERSONAL DATA
All Personal Data is processed both in paper format and, mainly, in electronic format.
In compliance with the provisions of the GDPR, We have implemented adequate technical and organizational security measures in order to ensure the privacy and security of your Personal data and to prevent the loss, unlawful, improper use and unauthorized accesses to the data.
VII.RETENTION PERIOD
The Personal Data will be retained only as long as strictly necessary to achieve the purposes for which it had been collected and Processed, for the duration of the assistance agreement, as well as afterwards, according to our internal policies and/or required or permitted under the applicable law.
Additionally, in case of any legal, accounting, or reporting procedures/claims, the Personal data will be retained until the final settlement of such proceedings.
Upon expiry of the applicable retention period or upon your exercise of one of your rights, We will securely destroy Your Personal Data in accordance with applicable laws and regulations.
VIII.YOUR LEGAL RIGHTS
You have the following rights with respect to Our use of Your Personal Data:
1. Right of access: You have the right to be informed, upon request, as to whether or not your Personal data are being processed, and, where that is the case, to request access to Your Personal data. You also have the right to obtain a copy of your Personal Data. For any further copies, We may charge a reasonable fee based on Our administrative costs. However, please note that there are exceptions to this right, so that access may be denied. For example, if making the information available to you would reveal personal data about another person, or if we are legally prevented from disclosing such information.
2. Right to rectification: You have the right to request Us the rectification of inaccurate Personal Data concerning You. Taking into account the purposes of the processing, You also have the right to have incomplete Personal Data completed, including by means of providing a supplementary statement.
3. Right to erasure (“the right to be forgotten”): You have the right to ask us to erase your Personal Data, under the conditions stated by the applicable law.
4. Right to restriction of Processing: You have the right to request the restriction of the Processing of Your Personal Data Processing. Where the Processing has been restricted, such Personal Data shall, with the exception of storage, only be Processed with the Your consent, for the establishment, exercise or defense of legal claims, for the protection of the rights of another natural or legal person or for reasons of important public interest.
5. Right to data portability: You have the right to request that some of your Personal Data is provided to You, or to another data controller, in a commonly used, machine-readable format.
6. Right to object: You have the right to object, on grounds relating to Your particular situation, at any time, to the Processing of your Personal data by Us. You will will not incur any costs by exercising this right. However, in certain situations, exercising this right may be cancelled (for example, in case of establishment, exercise or defence of legal claims).
7. Right to withdraw consent: If you have provided your consent to the Processing of Your Personal Data, you have the right to fully or partly withdraw your consent. Once We have received the notification on Your consent withdrawal, We will no longer process Your Personal Data for the purpose(s) to which you originally consented, unless there is another legal ground for the Processing.
8. Right to you lodge a complaint: You have the right to lodge a complaint with the National Authority for the Supervision of Personal Data Processing, or to seek a remedy through the courts.
If You have any queries or wish to exercise any of Your rights, please contact us via e-mail at office@vladulescu.ro or by a written request at office in 29bis Arh. Ion Mincu Street, 3rd Floor, Apt. 4, District 1, Postal Code 11357, Bucharest, Romania.
This Privacy Policy has been updated and revised in March 2020.