PRIVACY POLICY

Your privacy is important to us. This Privacy Policy explains how we may process your personal data when you (i) register or visit our website www.munteanulaw.com or associated sites or pages (hereinafter referred to as the Site) or (ii) engage with us to use the products or services that we provide (hereinafter referred to as our Services). This Policy may be amended or updated from time to time, so please check it regularly for updates.

WHO ARE WE AND WHAT WE DO

This Policy is issued by Munteanu Law Office, a law firm based in Bucharest, Romania (hereinafter referred to as Munteanu Law Office, we or us).

This Privacy Policy is addressed to individuals outside our organisation with whom we interact, including individual clients, representatives of client organisations, visitors to our Site and other users of our Services (hereinafter collectively referred to as you).

This Policy may be amended or updated from time to time to reflect changes in our practices with respect to the processing of personal data, or changes in applicable law. We encourage you to read this Policy carefully, and to regularly check this page to review any changes we might make to the terms of this Policy.

HOW TO CONTACT US

If you have any questions about this Privacy Policy or want to exercise your rights set out in this Privacy Policy, please contact us by:

  • calling us on 0040 742 185 544
  • sending an e-mail to munteanu@munteanulaw.com

COLLECTION AND PROCESSING OF PERSONAL DATA

We may collect or obtain personal data about you: (i) directly from you (e.g. where you contact us); (ii) in the course of our relationship with you (e.g. if we provide legal advice to you); (iii) when you make your personal data public (e.g. if you make a public post on social media); (iv) when you visit our Site; (v) when you register to use any of our Services; or (vi) when you interact with any third party content or advertising on a Site. We may also receive personal data about you from third parties (e.g. law enforcement authorities).

We may Process the following categories of personal data about you:

  • Personal details: given name(s); preferred name;
  • Demographic information: gender; date of birth / age; nationality;
  • Contact details: correspondence address; telephone number; email address; and details of your public social media profile(s).
  • Employer details: where you interact with us in your capacity as an employee, the name, address, telephone number and email address of your employer, to the extent relevant.
  • Views and opinions: any views and opinions that you choose to send to us, or publicly post about us on social media platforms.

Our primary goal in collecting personal information from you is to help us:

  • verify your identity
  • deliver our Services
  • improve, develop and market new Services
  • carry out requests made by you on the Site or in relation to our Services
  • investigate or settle inquiries or disputes
  • comply with any applicable law, court order, other judicial process, or the requirements of a regulatory body
  • enforce our agreements with you
  • protect the rights, property or safety of us or third parties, including our other clients and users of the Site or our Services
  • with recruitment purposes, and
  • use as otherwise required or permitted by law.

WHAT IS OUR LEGAL BASIS TO USE OR PROCESS YOUR PERSONAL INFORMATION

Where it becomes necessary to process your personal data for any reason, we rely on one of the following legal bases:

  • Compliance with applicable law: we may process your personal data where the processing is required or permitted by applicable law (g. to comply with our diversity reporting obligations);
  • Detection and prevention of crime: We may process your personal data where the processing is necessary for the detection or prevention of crime (including the prevention of fraud);
  • Establishment, exercise or defence of legal rights: we may process your personal data where the processing is necessary for the establishment, exercise or defence of legal rights; or
  • Consent: we may process your sensitive personal data where we have, in accordance with applicable law, obtained your express consent prior to processing your sensitive personal data.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

We may also share personal information with a variety of the following categories of third parties as necessary:

  • Our professional advisers such as lawyers and accountants.
  • Government or regulatory authorities.
  • Professional indemnity or other relevant insurers.
  • Regulators/tax authorities/corporate registries.
  • Third parties to whom we outsource certain services such as, without limitation, document processing and translation services, confidential waste disposal, IT systems or software providers, IT Support service providers, document and information storage providers.
  • Third parties engaged in the course of the services we provide to clients such as counsel, arbitrators, mediators, clerks, witnesses, cost draftsmen, court, opposing party and their lawyers, document review platforms and experts such as tax advisors or valuers.
  • Third party service providers to assist us with client insight analytics, such as Google Analytics.
  • Third party postal or courier providers who assist us in delivering our postal marketing campaigns to you, or delivering documents related to a matter.

Please note this list is non-exhaustive and there may be other examples where we need to share with other parties in order to provide the Services as effectively as we can.

DATA SECURITY

We implement appropriate technical and organisational security measures to protect your Personal Data. Please ensure that any Personal Data that you send to us are sent securely.

We have implemented appropriate technical and organisational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access, and other unlawful or unauthorised forms of processing, in accordance with applicable law.

Because the internet is an open system, the transmission of information via the internet is not completely secure. although we will implement all reasonable measures to protect your personal data, we cannot guarantee the security of your data transmitted to us using the internet – any such transmission is at your own risk and you are responsible for ensuring that any personal data that you send to us are sent securely.

DATA RETENTION

We take every reasonable step to ensure that your personal data are only processed for the minimum period necessary for the purposes set out in this Policy.

YOUR LEGAL RIGHTS

You have the following rights in relation to the personal information we hold about you:

Your right of access

If you ask us, we’ll confirm whether we’re processing your personal information and, if necessary, provide you with a copy of that personal information.

Your right to rectification

If the personal information we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified.

Your right to erasure

You can ask us to delete or remove your personal information in some circumstances such as where we no longer need it or if you withdraw your consent (where applicable). If you are entitled to erasure and if we’ve shared your personal information with others, we’ll let them know about the erasure where possible.

Your right to restrict processing

You can ask us to ‘block’ or suppress the processing of your personal information in certain circumstances, such as where you contest the accuracy of that personal information or you object to us. If you are entitled to restriction and if we’ve shared your personal information with others, we’ll let them know about the restriction where it is possible for us to do so.

Your right to data portability

You have the right, in certain circumstances, to obtain personal information you’ve provided us with (in a structured, commonly used and machine readable format) and to reuse it elsewhere or to ask us to transfer this to a third party of your choice.

Your right to object

You can ask us to stop processing your personal information, and we will do so, if we are:

  • relying on our own or someone else’s legitimate interests to process your personal information, except if we can demonstrate compelling legal grounds for the processing; or
  • processing your personal information for direct marketing purposes.

Your right to withdraw consent

If we rely on your consent (or explicit consent) as our legal basis for processing your personal information, you have the right to withdraw that consent at any time.

Your right to lodge a complaint with the supervisory authority

If you have a concern about any aspect of our privacy practices, including the way we’ve handled your personal information, you can report it to The National Supervisory Authority for the Processing of Personal Data, 28-30 G-ral Gheorghe Magheru Bld. District 1, post code 010336, Bucharest, Romania, anspdcp@dataprotection.ro