Privacy Policy

We take utmost care to process your personal data in accordance with the principles set forth in the applicable legislation. We recognize the importance of maintaining the confidentiality, integrity and security of your personal information (“Personal Data”) and have written this Privacy Policy to explain how your Personal Data is collected, stored, used and disclosed by our law firm, Babus Stanciu SCPA, headquartered in 40-48 Nuferilor street, District 1, Bucharest, tax registration code RO42432721 („we”, „us”), as a data controller, with respect to your access and use of our website (the “Site”).

Each time we are required by applicable law, we will ask for your free, informed, specific and unambiguous consent for the processing of your Personal Data. By expressing your consent, you will agree that we can collect, use, disclose, process and transfer your information as described in this Privacy Policy.

We reserve the right to change the provisions of this Privacy Policy from time to time. If we make changes to this Privacy Policy, we will make the updated version available on the Site and update the “Last Updated” date found at the top of this Privacy Policy. We encourage you to review this Privacy Policy from time-to-time to make sure that you understand how your Personal Data will be used. Any changes to the Privacy Policy will apply on the date that they are made, with the exception of changes which require your prior consent, and which will apply as of the moment when you express such consent.

1.1. Browsing Data

Computer systems and software procedures used for the Site’s operation acquire, during their normal operation, some Personal Data (so-called log files), the transmission of which is implicit in the use of internet communication protocols.

This information is not collected in order to be associated to identified persons, but due to its nature can, by means of processing and integration with data held by third parties, allow users to be identified. Such information includes the IP addresses or domain names of the computers used by the users to connect to the Site, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (done, error, etc.) and other parameters concerning the user’s operating system and computer environment.

We use this data for the sole purpose of obtaining anonymous statistical information concerning the use of the Site and to check its correct operation.

The legal grounds for processing the browsing data consist of our rightful interest in the improvement of our Site and in managing the server capacities, and in the bug-free preservation of our Site as well as in allowing us to comply with our legal duties related to safeguarding IT security.

1.2. Data processing in order to provide the Site

1.2.1. Contact

On our Site it is possible for you to contact us via e-mail or directly on the Site. When you do so, we will use the Personal Data you voluntarily provide to us in that situation only to contact you in the administration of your enquiry.

The legal ground for this processing consists of the administration of or the realization of precontractual or contractual measures at the request of the person contacting us. In the absence of your Personal Data, we cannot contact you in the administration of your enquiry.

1.2.2. Marketing

When you subscribe to our newsletter, we will use your e-mail address to send newsletter e-mails. You can revoke your prior consent at all times and without any costs, with altering consequences for the future.

The legal basis for processing your e-mail address for the purpose of sending the newsletter requested by you is your consent.

1.3. Online payment processing

When contracting the legal services we provide, you have the option to pay the invoice by using your card. For clarity, this section applies only in relation to the legal services we provide outside the Site.

To offer you the option of online payment, we use the NETOPIA PAYMENTS payment processing platform.

When you opt for online payment, you will be redirected to the NETOPIA PAYMENTS platform where will be asked for certain personal data depending on the payment method you choose - for example, card details (card number, cardholder name & surname, expiry date and security code on the back of the card). This data is used strictly for payment processing through the NETOPIA PAYMENTS platform and is not communicated to us.

In certain situations, we may transmit directly to the NETOPIA PAYMENTS platform a series of information concerning the transaction, namely: the value of the transaction, telephone number and e-mail address (if any have been completed in the customer’s account).

To ensure the tracking of transactions and the settlement of payments, NETOPIA PAYMENTS provides us reports on the payments we receive. These reports may include personal data of payers (name, surname, e-mail, telephone number, billing address). NETOPIA PAYMENTS send us this data as part of payment processing services.

If there are any issues with your payment processing, you may be contacted directly by NETOPIA PAYMENTS representatives for solving the issue.

The NETOPIA PAYMENTS platform processes your personal data as an independent controller for online payment processing. See more details about their policy for the processing of your personal data collected for payment processing here:

1.4. Other purposes

We also process your Personal Data in order to validate, to enforce and to protect our rights. The legal basis for such processing is our rightful interest towards the enforcement of our rights.

In principle, we will retain your Personal Data for as long as it is necessary for delivering our services and fulfilling the other purposes listed in this Privacy Policy. In some circumstances, we may retain your Personal data for longer periods of time, for instance where we are required to do so in accordance with legal or regulatory requirements.

In specific circumstances we may also retain your Personal Data for longer periods of time so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your Personal Data or dealings.

Your Personal Data is filed and stored on the servers of our contractual partners that are helping us to provide our services to you. While as a rule we shall not disclose your Personal Data to any third parties, we may transfer the information we collect with third parties, such as, authorities, business partners, contractors, or other parties working on our behalf. Such third parties may be located within the EU and outside the EU, including to countries which are not recognized as ensuring an adequate level of protection. We will only transfer your Personal Data provided adequate safeguards are in place, according to the applicable law, and we will take steps to ensure that your Personal Data is adequately protected. In this sense, we rely on several legal guarantees, such as the EU Model Standard Contractual Clauses. You can receive from us a list of third country recipients as well as a copy of the agreed provisions assuring an adequate level of data protection. Please refer to the contact details below.

Additionally, it is possible, though unlikely, that we might be forced to disclose certain Personal Data in response to legal process or when we believe in good faith that the law requires it, for example, in response to a court order, subpoena or a law enforcement agency’s request.

Security of your Personal Data is important to us. Therefore, we provide reasonable administrative, technical, and physical security controls to protect your Personal Data. However, despite our efforts, no security controls are in all cases effective. With that in mind, we cannot warrant at all times the security of your Personal Data.

You have the following rights in connection with the processing of your Personal Data:

Access right: You have the right to access your Personal Data processed by us.

Right of rectification and the right to erasure: At all times, you have the possibility to rectify or erase your Personal Data, provided that the applicable legal requirements are met. In the event of errors, we will, upon notification, immediately correct our information about you. Personal Data will be erased when the legal requirements are met.

Restriction of the processing: If the applicable legal provisions are met, you can require us to restrict the processing of your Personal Data.

Right to data portability: Insofar the Personal Data is processed based on your consent or on the execution of the agreement and the processing is carried out by automated means, you have the right to have the Personal Data transmitted directly to another controller, where technically feasible. This right shall not adversely affect the rights and freedoms of others.

Right to object to the processing of your Personal Data: You have the right to object to the processing of your Personal Data by us. We will cease to process your Personal Data, unless we can demonstrate imperative rightful grounds for further processing (according to the applicable legal provisions) that outweigh your objection rights.

Objection to direct marketing: You can also object to the processing of your Personal Data for the purpose of marketing.

Right to object: You are entitled at all times to object to the processing of Personal Data, based on your rightful interest. We will then cease to process your Personal Data, unless we can demonstrate imperative rightful grounds for further processing (according to the applicable legal provisions) that outweigh your objection rights.

Revocation of consent: Insofar you consented to the processing of your Personal Data, you can at all times revoke your consent, without affecting the lawfulness of processing based on consent before its withdrawal.

Right not to be subject to any automatic individual decisions: If the applicable legal provisions are met, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

Right to address the courts of law and the supervisory authority: You have the right to lodge a complaint in relation to any breach of your rights regarding the processing of your Personal Data.

To learn more about the manner in which you may exercise the aforementioned rights, please contact us using the contact form.

If you have any questions or concerns about this Privacy Policy or its implementation, you may contact us using the contact form.