Privacy Policy (GDPR) | Alexandru Măglaș Law Office (Bucharest)

Translation notice: This English text is provided for convenience. The official and controlling version of this Privacy Policy is the Romanian version available at maglas.ro/politica-de-confidentialitate. In case of any inconsistency, the Romanian version prevails.

Personal data protection policy

This Privacy Policy complies with Regulation (EU) 2016/679 (GDPR) and the applicable Romanian legislation, including Law no. 190/2018 implementing the GDPR, as well as the Romanian rules applicable to lawyers’ professional secrecy.

This policy concerns the confidentiality of personal data relating to clients or potential clients, including employees or business partners and collaborators of clients, collaborators, employees or potential employees, processors/mandataries, and the business partners of Alexandru Măglaș – Law Office (Cabinet de Avocat).

This policy explains how Alexandru Măglaș – Law Office, as a personal data controller, processes personal data, namely:

the purposes for which we collect and use your personal data;
the legal bases for processing;
the categories of personal data we collect from you and process;
the duration of processing and storage;
your rights as a data subject;
the persons/entities to whom we may disclose your personal data.

A. Visitors who contact Alexandru Măglaș – Law Office via the Facebook button

Alexandru Măglaș – Law Office collects and processes the personal data of website visitors who contact the office via the Facebook button under the following conditions:

1. Purposes

to contact you;
to review the requests and comments you send;
to answer your questions.

2. Legal basis

your prior, freely given, specific and informed consent, under Article 6(1)(a) GDPR.

3. Categories of personal data processed

Identification and contact data: first name and last name; email; phone number; Facebook profile and the data associated with that profile made available by the entities managing the Facebook platform (facebook.com).
Information you voluntarily provide via the contact form, such as information regarding legal matters or disputes in which you are involved in any capacity (defendant, claimant, intervener, party’s lawyer, consultant, expert, etc.), in which context we may collect and process special categories of personal data, such as: health data, political opinions, data concerning criminal convictions and offences, trade-union membership, etc.
Information resulting from how you interact with us (correspondence).
Data resulting from visiting the website / social media pages of Alexandru Măglaș – Law Office, collected through cookies and similar technologies, including your IP address, as described in the Cookies Policy.

4. Retention

Your personal data will be stored for as long as necessary to achieve the purposes of processing.
After the purposes in section A.1 have been achieved, if your data are not processed on another legal basis (for example, entering into and performing a legal assistance contract or an engagement letter under Article 6(1)(b) GDPR, or consent for subscribing to marketing/newsletter communications), the maximum storage period for the data you provide via the online contact form is 1 (one) year.

5. Your rights as a data subject

As a data subject, you can exercise all rights recognised by the GDPR and described in section B.5 below (access, rectification, erasure (“right to be forgotten”), restriction, data portability, objection, not being subject to a decision based solely on automated processing). You also have the right to lodge a complaint with the Romanian data protection supervisory authority: the National Supervisory Authority for Personal Data Processing (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal – ANSPDCP), headquartered at Bd. Gheorghe Magheru no. 28-30, Bucharest, Romania, regarding the processing of your personal data by Alexandru Măglaș – Law Office.

6. Disclosure / transfers

For the purposes in section A.1, we may disclose the processed personal data to:

collaborating and/or employed lawyers, and administrative staff of Alexandru Măglaș – Law Office, involved in processing your message, where necessary to contact you and respond to your request;
authorities / companies / control institutions or other entities/persons to whom we are legally required to disclose the personal data we process;
we do not disclose your data to third parties for direct marketing purposes, unless you have given your prior, express consent;
third parties providing IT services (for example: software solution providers for website hosting, cloud services, databases, internal management systems). In these cases, we ensure that such partners comply with the security and confidentiality of your information.

Alexandru Măglaș – Law Office may transfer your personal data outside Romania and/or outside the European Economic Area (EEA), provided that the transfer is recognised as offering an adequate level of data protection under Article 45 GDPR.

7. Data security

Alexandru Măglaș – Law Office has implemented appropriate technical and organisational measures to preserve the confidentiality and security of your personal data, in accordance with internal procedures regarding the storage, transmission and access of personal data.

Alexandru Măglaș – Law Office uses software services provided by Softventure S.R.L., Amazon, Microsoft Office 365, and Microsoft OneDrive cloud to store information representing personal data (or in printed form). The controller’s responsibility towards external collaborators to whom it transfers processed personal data applies in accordance with the relevant contractual and legal provisions.

8. Contact details

If you have any questions or complaints regarding this Privacy Policy, please contact us at: alexandru@maglas.ro.

B. Processing of data for professional purposes

Alexandru Măglaș – Law Office stores and processes personal data of individuals with whom it interacts professionally, such as: potential clients, clients (including third-party data provided by clients in relation to the legal situation brought to the office’s attention), professional collaborators, employees, potential employees, and partners.

1. Purposes

providing legal services, including legal assistance and representation before courts, other competent public authorities/institutions, or third parties;
managing our contractual relationship with clients, including preparing legal materials necessary for the contracted services (consultancy, assistance and representation), and processing payments, accounting, invoicing and collection of fees;
compliance with our legal obligations, including obligations under anti-money laundering and counter-terrorism financing legislation (as referenced in the Romanian policy text), reporting obligations to tax authorities, client due diligence obligations and suspicious transaction reporting, as well as lawyers’ record-keeping obligations (such as registers of documents drafted by the lawyer / legal assistance contracts / engagement letters / collaboration contracts);
managing security and access at Alexandru Măglaș – Law Office premises, managing the use of IT and communication systems, websites and other systems (website, data management platforms);
exercising and/or defending our rights and interests, or complying with court decisions;
any other purpose for which your personal data were provided to us, in compliance with the applicable legislation;
professional recruitment;
communications via agreed channels to inform you about developments in the legal field, announcements and other information about the services, products, events and projects of Alexandru Măglaș – Law Office, based on your consent.

2. Legal bases

entering into and performing a contract (Article 6(1)(b) GDPR): e.g. legal assistance contract, engagement letter, professional collaboration contract, employment contract, etc.;
compliance with a legal obligation (Article 6(1)(c) GDPR): e.g. obligations specific to lawyers under the Lawyers’ Statute or special laws;
performance of a task carried out in the public interest (Article 6(1)(e) GDPR): e.g. exercising professional activity for the administration of justice, when we process personal data of opposing parties or third parties connected to the files and cases in which Alexandru Măglaș – Law Office is engaged;
the data subject’s consent, where required by law: e.g. promotional purposes, sending legal updates/newsletters by email, based on prior, freely given, specific and informed consent; you may withdraw consent at any time;
protecting the vital interests of a natural person, or the legitimate interests of Alexandru Măglaș – Law Office.

3. Categories of personal data processed

identification and contact data, such as your name/company name, personal identification number / unique identification code, ID card series and number, profession/position, date and place of birth, home/residence address (including postal address, if you provided it), professional address, phone number, fax number, email address, bank account;
information you voluntarily provide, such as information regarding legal matters or disputes in which you are involved in any capacity (defendant, claimant, intervener, party’s lawyer, consultant, expert, etc.), in which context we may collect and process special categories of personal data (health data, political opinions, data concerning criminal convictions and offences, trade-union membership, etc.);
information resulting from how you interact with us (correspondence);
data resulting from visiting the website / social media pages of Alexandru Măglaș – Law Office, collected through cookies and similar technologies, including IP address, as described in the Cookies Policy;
information regarding professional experience, education and other information included in the CV you provide.

4. Retention

Your personal data will be stored for the entire duration of the contract / legal assistance contract / engagement letter, as well as after the termination of the contract, in accordance with the legal obligations under the Lawyers’ Statute and the legislation governing the legal profession, and the internal procedures of Alexandru Măglaș – Law Office.

If the data are not collected based on a contractual relationship, they will be kept for the duration agreed under your consent or permitted by the applicable legislation, and for as long as necessary to achieve the purposes of processing.

At your request (in accordance with the law), and upon expiry of the contractual period and the strictly necessary period after its expiry, we will delete your personal data from our systems and records and/or take technical anonymisation measures so that you can no longer be identified in our database.

5. Your rights as a data subject

Right of access: you can obtain confirmation whether we process your personal data and receive information about processing (purpose, duration, categories, recipients), as well as a copy of the processed personal data.
Right to rectification: you can request correction of inaccurate or incomplete data.
Right to erasure (“right to be forgotten”): you can request deletion when data are no longer necessary for the purposes for which they were collected, or upon withdrawal of consent, subject to legal and contractual obligations.
Right to restriction: you can request restriction in certain cases (e.g. if you contest accuracy, for the period required to verify, or if you object under Article 21(1) GDPR while we verify whether our legitimate grounds override your rights).
Right to object: you can object to processing under the conditions and limits provided by law.
Right to data portability: you can receive the personal data you provided to us in a structured, commonly used and machine-readable format, or request transmission to another controller, where processing is based on consent (Article 6(1)(a) or Article 9(2)(a) GDPR) or on a contract (Article 6(1)(b) GDPR) and is carried out by automated means.
Right not to be subject to a decision based solely on automated processing, including profiling, which would produce adverse effects for you.
Right to lodge a complaint with the Romanian data protection supervisory authority (ANSPDCP), headquartered at Bd. Gheorghe Magheru no. 28-30, Bucharest, Romania, regarding the processing of your personal data by Alexandru Măglaș – Law Office.

6. Disclosure / transfers

For exercising rights and fulfilling contractual and non-contractual obligations, we may disclose processed personal data to:

collaborating and/or employed lawyers, and administrative staff of Alexandru Măglaș – Law Office, where necessary to contact you and respond to your request;
courts, prosecution bodies, and other public authorities/institutions, where necessary to exercise or defend rights in court or to resolve your legal matter amicably;
foreign collaborators for foreign legal advice, to diligently perform the mandate entrusted by you or by your company;
authorities / companies / control institutions or other entities/persons to whom we are legally required to disclose the personal data we process;
we do not disclose your data to third parties for direct marketing purposes, unless you have given your prior, express consent;
third parties providing IT services (e.g. hosting, cloud services, databases, internal management tools), with safeguards for security and confidentiality.

7. Data security

We have implemented appropriate technical and organisational measures to preserve confidentiality and security, in line with our internal procedures on the storage, transmission and access of personal data.

We use software services provided by Softventure S.R.L., Amazon, Microsoft Office 365 and Microsoft OneDrive cloud for storing information representing personal data (or in printed form). Our responsibility towards external collaborators to whom we transfer processed personal data applies in accordance with the relevant contractual and legal provisions.

8. Contact details

If you have any questions or complaints regarding this Privacy Policy, please contact us at: alexandru@maglas.ro.

Translation notice: The Romanian version is the official version and prevails in case of discrepancies.

This Privacy Policy may be updated; any update becomes applicable from the moment the new version is published on the Alexandru Măglaș – Law Office website.