NOTICE ON POLICY FOR PRIVACY AND PERSONAL DATA PROTECTION
EU Regulation 2016/679 regarding the Protection of natural persons with regard to the processing of personal data and regarding the free movement of such data (the “Regulation“), applicable from May 25, 2018, contains a set of rules which aim to ensure the processing of data in accordance with the fundamental rights and freedoms of natural persons in order to increase the level of protection of personal data.
We would like to inform you about the new rules regarding the protection of natural persons with regard to the processing of personal data and the way in which S.P.A.R.L. “DIMA & Associatii” processes personal data.
PROCESSED PERSONAL DATA CATEGORIES
The personal data we process may include:
- Contact information such as your name, postal address, including your home address, business address, phone number, mobile phone number, fax number and e-mail address;
- Additional information processed in the case of a contract with “Dima & Asociatii” or communicated voluntarily by you, such as: instructions given, payments made, information on any legal issues, disputes, litigation or other actions in court you are involved in any capacity (defendant, plaintiff, intervener, lawyer of the parties, consultant, expert etc.);
- In the context of our services, we may also collect and process special categories of personal data such as: data on union membership, health data or data on criminal convictions and offenses;
We do not use personal data for automated processing nor to profile. We never take automatic decisions about the data you provide us. We use technical means to store data safely.
We respect and strictly ensure professional secrecy. We disclose the data only for the fulfillment of your legitimate interests and the fulfillment of the legal obligations.
LEGAL GROUNDS FOR THE PROCESSING OF PERSONAL DATA
The processing of your personal data shall be based on one of the following legal grounds:
- Processing is required in order to observe a legal obligation of “Dima & Asociatii”;
- Processing is required to conclude or execute a contract to which you are a party;
- Processing is required to protect the legitimate interests of you or another natural person;
- Processing is required for the legitimate interests of “Dima & Asociatii” or a third party (eg. when processing is required to execute a contract to which your organization is party), except where your fundamental interests or rights and freedoms prevail on these interests);
- In the case of special data categories, the processing shall be made if, besides a general legal ground for data processing, one of the following specific processing conditions shall be met:
- The person’s consent was obtained;
- We have a legal obligation to process these data categories;
- Processing is required to establish, exercise or defend a right in court or before a relevant public authority.
PURPOSES FOR WHICH WE PROCESS PERSONAL DATA
We may use your personal data for the following purposes (“Permitted Purposes”):
- Offering legal services, including legal representation before courts, arbitration tribunals or other competent authorities;
- Managing and administration the contractual relationship with our clients;
- Compliance with our legal obligations (such as obligations to combat money laundering and terrorist financing, reporting obligations to tax authorities);
- Compliance with court decisions and exercising and/or defending our rights and interests;
- The fulfillment of the legal obligations established by the law in charge of lawyers, including the keeping of professional records.
- For any purpose and/or ancillary purpose of any of the foregoing, or for any other purpose for which your personal data has been provided to us, in compliance with applicable law.
KEEPING PERSONAL DATA
Dima & Asociatii has implemented technical and organizational measures to organize the process and the specific criteria for keeping your personal data.
We shall cease processing your personal data when it is no longer reasonably required in the Permitted Purposes, or when you delist your consent (if applicable) and (i) there are no legitimate and compelling reasons which justify further processing by Dima & Associatii (including the legal obligation of Dima & Associatii to continue to store those data) and which prevails over your interests, rights and freedoms; or (ii) if they are no longer necessary to establish, exercise or defend a right in court.
YOUR RIGHTS CONCERNING THE PROCESSING OF PERSONAL DATA
Right of access – is your right to obtain information from “Dima & Associatii” if they process your personal data or not, and if so, the data categories of processed data and the way the data is processed.
Right to rectification – is your right to obtain from “Dima & Asociatii”, without undue delay, the rectification of inaccurate personal data which concern you.
Right to delete data – is your right to request the deletion of your personal data when: (i) personal data is no longer required for the purposes for which it was collected or processed; (ii) you delist the consent on the basis of which we process the data; (iii) personal data has been processed unlawfully; (iv) personal data shall be removed for compliance with a legal obligation of Dima & Asociatii.
Right to Restrict Data Processing – is your right to restrict data processing in the following situations: (i) you contest the accuracy of the data; (ii) the processing is illegal, and you shall oppose the deletion of your personal data, requesting instead the restriction of their use; (iii) Dima & Associatii no longer requires personal data for processing, but you require them to ascertain, exercise or defend a right in court.
Right to Data Portability – is your right to receive personal data which concerns you and is processed by “Dima & Associates”.
Right to Object – At any time, you have the right to object the processing of your personal data if the processing is performed for the purpose of performing a task accomplished for the public interest or it is necessary for the legitimate interest of “Dima & Asociatii”
If you decide to exercise this right, “Dima & Associatii” shall no longer process personal data unless it demonstrates that it has legitimate and compelling reasons or legal obligations which justify data processing and which prevails over the interests, rights and freedoms of the person concerned or the purpose is to establish, exercise or defend a right in court or before relevant public authorities.
If you wish to exercise your rights above, please contact us using the following contact details:
- 10 Aleea Alexandru, District 1, Bucharest, Romania
- Email: office@dima-legal.ro
- Fax: (40-21) 224 51 53
In order to comply with our legal obligations to ensure data security and confidentiality, when you exercise one of the rights you are entitled to as a data subject, we may ask you to prove your identity or any other information necessary to verify that the request comes from the relevant data subject.
We shall take into consideration all the requests and complaints we receive and we shall send you an answer in compliance with the deadlines provided by the law. If you are not satisfied with our response or consider that the data processing is made with the breach of applicable law, you may file a complaint with the Romanian Data Supervisory Authority: The National Supervisory Authority for Personal Data Processing – headquartered in 28-30 Gheorghe Magheru Blvd., Bucharest, Romania.