Privacy Policy (GDPR)

Introduction

This statement is intended to inform you about the type of information collected from clients and how we use this information. This applies to the websites owned by Cabinet Avocat Gerőcz Klára, și anume: www.attorneys.ro Cabinet Avocat Gerőcz Klára processes and stores personal data in the EU and is able to demonstrate at any time compliance with the laws of the European Union and with the principles set out in this document. All websites owned by Cabinet Avocat Gerőcz Klára comply with the General Data Protection Regulation (“GDPR”), (Regulation (EU) 2016/679), which is a binding legislative act. This privacy statement is the responsibility of Cabinet Avocat Gerőcz Klára, which has overall responsibility for ensuring compliance. The Data Protection Officer (DPO) is responsible for implementing our privacy policy, which is intrinsically linked to the privacy statement. The DPO ensures day-to-day compliance and is involved in all matters relating to the protection of personal data. Cabinet Avocat Gerőcz Klára will determine the purposes and methods of processing data entered and collected online and is considered the data controller.


1. Data protection principles

Personal data will be collected only for specified, explicit and legitimate purposes. Data will not be processed by third parties in a manner incompatible with those purposes;
Personal data will be accurate and, where necessary, kept up to date;
Personal data will be processed in a lawful, fair and transparent manner;
All personal data will be kept confidential and stored in a manner that ensures the necessary security;
Personal data will not be disclosed to third parties unless this is necessary for the purpose of providing services in accordance with the agreements;
Data subjects have the right to request access to their personal data, rectification and deletion thereof, to object to or restrict the processing of their data, as well as the right to data portability;


2. Personal data

Personal data means any information that can be linked to an identified or identifiable natural person (the data subject).
Personal data includes all types of direct or indirect information (namely, information used in connection with other data) relating to the data subject, such as name, date of birth, addresses, email addresses, telephone numbers, etc.


3. Data collection

The data we collect may include the following:
Name and contact details (We collect your first and last name, email address, postal address, telephone number and other similar contact details)
We collect passwords, password hints and similar security information used for authentication and account access.
We collect data about the features you use and the web pages you visit, such as the most frequently used pages and the time spent on our website.
We collect data about the device and network you use to connect to our products. This includes data about operating systems, IP address, screen resolution, web browser details, regional settings and language settings.
Your account data and basic information about your company, such as: tax identification number, registration number, telephone number, email, company address and contact person details.
Data and records managed within the “Cloud Storage” system, such as invoices, offers, activities, products, price lists or other documents uploaded by you.


4. Purpose of data collection

To provide you with the requested services.
To inform clients about the status of invoices, data and/or purchased services.
To send periodic notifications and/or alerts by email, where the data subject has selected this option.
To establish the main communication channel with you, to identify you as a contracting party and to enable you to authenticate.
To issue invoices for the services provided, to send important messages regarding due invoices, payment reminders, outstanding amounts, or to recover and resolve any incidents related to the provision of services.
For the purpose of processing, monitoring activities (profiling) and interaction with the website, Cabinet Avocat Gerőcz Klára must automatically collect and store the following personal data: email, telephone number, first name, last name, date of birth, city, county, etc.; IP address (including possible location), browser, session ID, device, OS, IP location, timestamps related to page visits, page visits, “Facebook Like”, and visits to the help page.
The categories of data subjects are visitors, registered users or clients of the website, as applicable, depending on the service selected. Visitor data will be stored for 3 days, while data of registered users or clients will be stored for 10 years.
Cookies: this website uses “first party” cookies and will provide Cabinet Avocat Gerőcz Klára with access to this information. This cookie is placed by this website and therefore may only be used in connection with this website. Consequently, a connection between internal tracking of users of this website and tracking on other websites is technically not possible through this cookie.
To unsubscribe from communications sent by Cabinet Avocat Gerőcz Klára, send an email to: office@attorneys.ro or follow the steps in your personal account.


5. Usage analysis

For the collection of analytics data, we use Matomo, formerly Piwik, which is a leading open-source analytics platform.
We have 100% ownership of the collected data thanks to our “Host On-Premise” solution (the software runs exclusively on our servers).
To ensure GDPR requirements, we use IP address anonymization.


6. Use of data

Personal data will be used only for the purpose for which it was collected and will be stored only for as long as necessary for the purposes mentioned above.
Client information will be stored for a period in accordance with tax regulations, for any of the data collection purposes (point 4) mentioned above.
Access to personal data is strictly limited to the staff of Cabinet Avocat Gerőcz Klára and associates who have the necessary authorization and a clearly defined need to use the data.
Cabinet Avocat Gerőcz Klára reserves the right not to delete information or personal records if it is legally required to retain such information or records.


7. Processing security

We will process data securely and apply and maintain appropriate technical measures to protect personal data against accidental or unlawful destruction or loss, alteration, disclosure or unauthorized access, especially where processing involves the transmission of data over a network, as well as against any other form of unlawful processing. Questions regarding the security of personal data may be sent to Cabinet Avocat Gerőcz Klára at the email address office@attorneys.ro.


8. Access to and rectification or deletion of personal data

Clients have the right at any time to request access to, rectification, portability, deletion or restriction of processing of the collected data.
To keep personal data up to date, we recommend that users inform us of any change or discrepancy.
To view or modify personal data or to obtain information relating to personal data (if, at the request of a third party, we have stored or processed any of your personal data), please contact the DPO at the email address: office@attorneys.ro by submitting a signed and dated request. Signed and dated request.


9. Marketing and notification emails

Cabinet Avocat Gerőcz Klára has the right to send clients marketing and notification emails with their consent. This specific form of consent must be freely given, informed, specific and unambiguous. Clients will always have the right, upon request and free of charge, to object to the processing of their personal data for direct marketing purposes, without having to provide specific reasons. Once the client has expressed their objection, that client’s personal data will no longer be processed for direct marketing. Marketing emails contain information that we consider interesting to the client, promotions and current offers related to our services.


10. Complaints

Clients have the right to lodge a complaint concerning the processing of their personal data. All questions and complaints will be handled by the DPO in a timely manner and in accordance with internal procedures.
Complaints may be sent to Cabinet Avocat Gerőcz Klára at the email address: office@attorneys.ro
In the unlikely event that clients have suffered damage due to a violation of their rights under the personal data protection policy and Cabinet Avocat Gerőcz Klára has not handled the complaint appropriately, clients may submit a complaint to the supervisory authority (ANSPDCP).


11. Changes to this policy

This policy may be updated whenever considered necessary, for example following changes to relevant legislation or changes to the corporate structure of Cabinet Avocat Gerőcz Klára. If changes are made to this document, clients will be notified by email or through the website before the changes take effect. We encourage clients to check this webpage periodically to stay informed about the latest updates regarding our privacy policy.