Privacy Policy and Personal Data Protection

PRIVACY POLICY AND PERSONAL DATA PROTECTION

1. Who are we?

The www.avocatkisiulia.ro site is a presentation site, belonging to the Kis Iulia Law Office, based in Cluj-Napoca, I.P.Voitești Street, no.1-3, Bl.D, sc.1, ap.1, Cluj County, tel:+40 744 705 213, e-mail:office@avocatkisiulia.ro.

2. General Terms

To understand how your data is treated. Please read carefully the Policy on the protection and processing of personal data, which represents how we understand and respect the principles of personal data protection, as well as the rights you benefit from.

3. Privacy Policy

The protection of information during the processing of personal data is a major concern of the Law Office, therefore all data collected during visits to our website are processed according to the legislative provisions in force. Personal data means any information about an identified or identifiable natural person collected through this website.

GDPR stands for Regulation on the Protection of natural persons about the processing of personal data and the free movement of such data (2016/679 of the European Parliament and of the Council of 27 April 2016) and repealing Directive 95/46/EC (General Data Protection Regulation) GDPR was published in the Official Journal of the European Union L119/4 May 2016, entered into force on 25 May 2016 and applicable from 25 May 2018 to the whole European Union.

Our website may include links to other sites whose content is not under our control, therefore the Law Office does not assume and cannot accept any responsibility for the content of these websites, is not responsible for information protection strategies, or the content of other web pages. Kis Iulia Law Office undertakes not to disclose any information regarding your visits or activity on this site unless required by law.

4. What personal data does the Law Office process from site users?

Kis Iulia Law Office, through the site, may collect from site visitors, data such as browser types and versions used, operating system used, website from where an accessing system reaches our website, sub-websites, date and time of accessing the website, Internet Protocol address (IP address), provider of Internet services of the accessing system and any other similar data and information. This information is necessary to deliver the correct website content, optimize website content as well as ads for it, ensure the long-term viability of information technology systems and website technology, and provide law enforcement with the information necessary for criminal prosecution in case of a cyber-attack. Therefore, we analyze anonymously collected data and information on a statistical basis to increase data protection and data security and to ensure an optimal level of protection of the personal data we process. Kis Iulia Law Office does not request personal data from users (there is no option to create other forms, such as name, telephone number, or contact address) but, to the extent that users get in touch with the Law Office by e-mail, phone, etc. and provide personal data, they will be processed according to the Internal Policy of Kis Iulia Law Office, regarding the processing of personal data.

The law office may collect information from users from traffic reports recorded by the servers hosting the site, as well as through cookies.

The information in the server traffic report is your IP address, the time of your visit to the site, and the place from where you visited our site. The site uses only cookies necessary for the proper functioning of the web page.

5. Purpose of processing personal data of users and visitors of the site

Personal data of users and visitors of the site are used for the following purposes: to present our services to you, for statistical analysis purposes that do not involve the creation of individual profiles, and compliance with our legal obligations. Personal data collected for the purpose shown will not be processed for other purposes, except with the express consent of the data subject.

6. Legal basis for processing

The legal basis for the processing of personal data for the above purposes is based on the legal obligations incumbent on us, as a result of operations through this website, the legitimate interest of the Law Office to present its services, and the proper functioning of the website, as well as the consent of users.

7. Data storage period

The period for which personal data will be stored represents the retention period provided by law. After the expiry of that period, the corresponding data are routinely deleted as long as they are no longer necessary for the fulfillment of the purpose for which they were collected. In cases where there is no legal obligation to keep the collected personal data, they will be kept for a maximum period of 3 years.

If you contact us with a question or a legal issue, we keep your data for the time necessary to process your questions, but not more than 3 years from the last correspondence sent, or from the end of the dispute that was the subject of a legal assistance contract.

If cookies are stored on your computer, we keep them for as long as necessary for them to achieve their purposes, not longer than 3 years.

The data processing period is also limited by your option to cease processing or delete your data, by request sent directly to the law office. After the moment you ask us to delete the data, it will not be processed further.

8. Principles of personal data processing

The law office undertakes to comply with all the principles of personal data protection, provided by Article 5 of GDPR, so the company undertakes to ensure that personal data are:

• Processed fairly, lawfully, and transparently;

• Collected for specified, explicit, and legitimate purposes;

• Adequate, relevant, and limited to the purposes for which they are processed;

• Accurate and up to date;

• Kept in a form that does not allow identification of the data subjects longer than necessary about the purpose of the processing;

• Processed following the rights of the data subject, in a way that ensures adequate security of processing so that the data is complete, confidential, and available.

9. Use of cookies on the site

The website uses mainly cookies, which are necessary for the functioning of the website. The purpose of using this information collected through cookies is to present the content in a relevant way, adapted to the user’s preferences (language, format, etc.) and to remember the user’s choices each time they return to the site. Cookies may also be used for statistical purposes and to display advertising content relevant to the user.

Cookies can be used to identify the user’s terminal, the type of web browser used, the relevant browser settings for cookies (such as Do Not Track), and other information such as the IP address (if applicable), the area and country from which the content is accessed, the frequency of access and so on. Cookies are text files that are stored on a computer via the Internet browser. Many websites and servers use cookies. Many cookies contain a so-called cookie code. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be attributed to the Internet browser in which the cookie was stored. This allows visited websites and servers to differentiate the individual browser of the data from other Internet browsers containing other cookies. A particular Internet browser can be recognized and identified using a unique cookie code.

The data subject may at any time prevent the activation of cookies using an appropriate setting of the internet browser used, and may thus permanently refuse the setting of cookies. In addition, cookies already set can be deleted at any time using an Internet browser or other software. This is possible in all popular Internet browsers. If the data subject disables the setting of cookies in the Internet browser used, not all functions of the website can be fully used. During use, we may automatically collect information such as the IP address from which you access the site and the browser you use, and you consent to the storage of certain information on your computer (“cookies”), all to ensure optimal access to and operation of the site by you.

The cookies we use on this website have a variable lifetime but this does not exceed 3 years. All cookies are “first-party” i.e. they are not passed on to other external companies.

Essential cookies are cookies that ensure the proper functioning of the website and without which the website cannot function properly. These cookies must be accepted to navigate the site and all related pages and subdomains.

10. Rights of users of the site in relation to the processing of personal data

Users of the site are guaranteed all the rights provided for by the European Regulation on the protection of individuals about the processing of personal data and national law, namely the right to transparency and information, the right of access to processed data, the right to rectification and erasure of data (“right to be forgotten”), the right to restriction of processing, the right to data portability, the right to object, the right to withdraw consent at any time, the right to complain with the competent supervisory authority.

Any person accessing the website and providing personal data and information by any means consents to the use of his/her personal data by the Law Firm for the purpose for which such data was provided.

To the extent that you have given your consent to a particular processing, you have the right to withdraw your consent at any time and free of charge.

In connection with this data processing, you have the right to request access to your data, i.e. you have the right to obtain confirmation from the company as to whether or not personal data relating to you are being processed and, if so, you have the right of access to that data to know which data is being processed, and the conditions under which they are being processed.

You also have the right to obtain from the company the rectification of inaccurate personal data concerning you. Taking into account the purposes for which the data have been processed, you have the right to have incomplete or inaccurate personal data completed or updated, including by providing an additional statement.

The right to the erasure of data also referred to as the right to be forgotten, means that you may at any time object to the processing of your data and request the erasure of your data.

The right to restrict data processing means that you have the right to obtain from the company the restriction of processing if one of the following applies: you dispute the accuracy of the data, for a period that allows us to verify the accuracy of the data; the processing is unlawful and you. you object to the erasure of the personal data and instead request the restriction of their use; we no longer need the personal data for processing, but you request it from us for the establishment, exercise, or defense of a legal claim; you have objected to the processing by Article 21(1) of the GDPR, for the period during which it is verified whether the company’s legitimate rights prevail over your rights.

The right to data portability means that you have the right to receive personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.

You also have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly affects you to a significant extent.

In addition, you have the right to lodge complaints with the National Supervisory Authority for Personal Data Processing or the courts if you believe that the company has violated any of your rights under the law.

Any data subject may request the exercise of these rights at any time by sending a written message to the company by e-mail to: office@avocatkisiulia.ro to which you will receive a reply within 30 days.

Upon termination of the processing and deletion of the data, you will be sent a confirmation of the termination of the processing and deletion of the processed data within 30 days.

For any further questions on how personal data are processed, please contact the company by e-mail at office@avocatkisiulia.ro.

11. Disclosure of personal data

In the context of the fulfillment of the processing purposes, the Law Firm may disclose the data thus collected to its contractual partners, to authorised persons processing your personal data on behalf of the company or to central/local public authorities in the following cases:

– for the administration, maintenance, personalization and improvement of this website and the services provided through them;

– for performing data analysis, testing, and research, monitoring usage and activity trends, and developing security features;

– when disclosure of personal data is required by law.

12. Transfer of personal data

Your data will not be transferred to third countries or international organizations.

13. Information on data processing security measures

The Law Firm will apply in the use of your data the necessary technical and organizational measures to ensure their security, to protect them against accidental or unlawful destruction, alteration, disclosure, or unauthorized access.

Where a personal data breach occurs, the controller shall notify the competent supervisory authority without undue delay and, if possible, no later than 72 hours after becoming aware of it, unless it is likely to result in a risk to the rights and freedoms of natural persons. Where the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the controller shall inform the data subject of the breach without undue delay.

The Terms and Conditions as well as the Privacy and Personal Data Protection Policy may be updated and amended.