COJOCARU&ASOCIATII is committed to safeguard privacy and personal data.
With a few exceptions, COJOCARU&ASOCIATII is generally the controller of personal data provided to us, determining the purposes for which, and the way in which personal data is processed.
This Privacy Policy describes:
- what personal information we collect about you;
- how we obtain your personal information;
- use your personal information;
- on what basis we use your personal information;
- duration of personal information retention;
- disclosure of your personal information;
- possibility to transfer personal data to third countries
- how we protect your personal information;
- your rights regarding your personal information;
- automated individual decision-making, including profiling
- contact details.
What personal information do we collect about you?
COJOCARU & ASOCIATII may collect personal information from you in the course of our business, including through your use of our website, when you contact or request information from us, when you engage our legal or other services or as a result of your relationship with one or more of our staff and clients.
The personal information that we process includes:
- basic information, such as your name, the company you work for, your title or position and your relationship to a person;
- contact information, such as your postal address, email address and phone number(s);
- financial information, such as payment-related information;
- information you provide to us for the purposes of attending meetings and events, including access requirements;
- identification and background information provided by you or collected as part of our business acceptance processes;
- information on an individual’s history (e.g., CVs);
- personal information provided to us by or on behalf of our clients or generated by us in the course or providing services to them, which may include special categories of data;
- any other information relating to you which you may provide to us.
How we obtain your personal information
We collect information from you as part of our business acceptance processes and about you and others as necessary in the course of providing legal services.
We collect your personal information while monitoring our technology tools and services, including our websites and email communications sent to and from COJOCARU&ASOCIATII.
We may collect or receive information about you from other sources, such as keeping the contact details we already hold for you accurate and up to date using public available sources.
Use your personal information
COJOCARU & ASOCIATII collects and processes personal information about you in a number of ways, including through your use of our website and in the provision of services by us. We use that information:
- to provide and improve this website;
- to conduct pre-engagement assessments and formalities such as conflict checks, etc.;
- to perform the tasks entrusted by you;
- for client relationship management purposes;
- for the purposes of recruitment;
- for internal administrative or operational processes;
- to send invitations and information about events, publications, and services provided by COJOCARU&ASOCIATII; and
- to fulfil any legal, regulatory, accounting or reporting requirements.
On what basis we use your personal information
We use your personal information on the following basis:
- to perform the contract we have entered into with a data subject or in order to take steps at the data subjects’ request prior to entering into a contract;
- based on your consent;
- for the establishment, exercise or defence of legal claims or proceedings;
- to comply with legal and regulatory obligations;
- for legitimate business purposes.
Duration of personal information retention
Your personal information will be retained for the periods set in compliance with the following criteria: (i) the terms imposed by specific laws (such as the accounting legislation or the National Archives Law); (ii) terms while legal liability could be triggered at the initiative of or against COJOCARU&ASOCIATII; (iii) if the case, the term of collaboration; and (iv) the term practically necessary at the expiry of legal terms or legal statutes of limitation for the anonymization or effective deletion of data, considering the difficulties related to the identification of the moment when particular data is collected.
COJOCARU&ASOCIATII seeks to adopt a minimalist approach of personal data processing, including by storage, and, for this purpose, it considers a regular assessment of the practical possibilities and risks related to data erasure or anonymization, or similar measures in relation to the processed data, as a rule, at the beginning of each year.
Disclosure of your personal information
Your personal data may be shared or revealed to natural or legal persons, public authorities, bodies or other entities (recipients) in accordance with contractual arrangements in place with them. The recipients of your personal data may include:
- our professional advisers;
- suppliers to whom we outsource certain support services such as word processing, translation, photocopying and document review;
- notary’s offices;
- IT service providers to COJOCARU&ASOCIATII;
- third parties engaged in the course of the services we provide to clients and with their prior consent, such as technology service providers like data rooms, postal operators or courier companies;
- third parties involved in hosting or organising events for us;
How we protect your personal information
We use a variety of technical and organisational measures to help protect your personal information from unauthorised access, use, disclosure, alteration or destruction consistent with applicable data protection laws.
Possibility to transfer personal data to third countries
COJOCARU&ASOCIATII anticipates no transfer to countries outside the European Union in relation to most of the purposes mentioned above.
Your rights regarding your personal information
Any person whose personal data is processed by COJOCARU&ASOCIATII has the rights set forth by the applicable legislation, within the limits therein and as mentioned below.
The right to access data – you are entitled to obtain confirmation from COJOCARU&ASOCIATII whether your personal data are processed, to obtain their copy and to obtain the information, inter alia, about: processing purposes, personal data categories, categories of the recipients that the personal data have been or will be revealed to, the planned period of storing personal data, the source of obtaining them by COJOCARU&ASOCIATII, the automated decision making, including about profiling.
The right to rectify the data – you are entitled to request COJOCARU&ASOCIATII to correct or supplement the personal data pertaining to you that are incorrect or incomplete.
The right to have the data erased – you are entitled to request COJOCARU&ASOCIATII to remove the personal data pertaining to you in the cases specified in Art. 17 of GDPR, in particular in case when personal data are no longer required for the purposes for which they have been collected or an effective objection against processing your personal data has been raised.
The right to restrict processing – you are entitled to request COJOCARU&ASOCIATII to limit data processing in cases set forth in Art. 18 of GDPR, in particular when you are questioning the correctness of personal data or raise an objection against their processing – for the period allowing COJOCARU&ASOCIATII to verify the legitimacy of the request.
The right to data portability – you have the right to obtain from COJOCARU&ASOCIATII the personal data that you have delivered to COJOCARU&ASOCIATII, in a structured, commonly used machine-readable format. Moreover, you shall have the right to request COJOCARU&ASOCIATII to send your personal data to a different controller, providing that it is technically feasible. The above right shall apply only to the personal data that COJOCARU&ASOCIATII is processing based on your consent or based on an agreement concluded with you and where processing is carried out by automated means.
The right to object – you shall be entitled, due to reasons related to your special situation, to raise an objection against processing your personal data based on the legitimate interests carried out by COJOCARU&ASOCIATII, including profiling. Please note that even after you have chosen to withdraw your consent, we may be able to continue to process your personal information to the extent required or otherwise permitted by law, in particular in connection with exercising and defending our legal rights or meeting our legal and regulatory obligations.
The right to make a complaint to the supervisory body – you are also entitled to make a complaint to the supervisory body, namely to A.N.S.P.D.C.P.
Automated individual decision-making, including profiling
Currently, COJOCARU&ASOCIATII does not use such processes. Your personal data are not subject to any decisional process based solely on automated processing, including profiling.
Contact details
You may address any questions using the following contact details:
SCA COJOCARU&ASOCIATII
Postal address: 37 London Street, 1st floor, app. 3, 011762 – 1st District, Bucharest, Romania
Fax: +40 314 251 455
E-mail address: office@cojocarulaw.ro
If you currently receive marketing information from us which you would prefer not to receive in the future please press the “unsubscribe” bottom included in our marketing communications or email us at: office@cojocarulaw.ro