PRIVACY POLICY AND PROCESSING OF PERSONAL DATA
On 25 May 2018, European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data became applicable (, the “Regulation”, the “GDPR”). Its main aim is to increase the level of protection of personal data and to create a climate of trust that allows each individual to control his or her own data. In view of this, we need to inform you about the processing of your personal data, the ways in which we protect your personal data, and your rights, in accordance with the GDPR.
DESCRIPTION
Our personal data processing policy describes how we will collect and process personal data of customers, potential customers, collaborators and potential collaborators and applies to all personal data collected on www.psbh.ro , and all personal data we collect via email or any other communication through which this data will be processed.
We may also collect information about your preferences by using the above-mentioned website, when you request information from us or engage with us, or as a result of your relationship with us.
In general, our intention is to collect only personal data voluntarily offered by each data subject, so that we can provide services, conduct contractual relationships, promote and provide information about our services.
We, PSBH Popescu, Nicolau & the Associates – Civil society of lawyers, we take all necessary measures to ensure that by default only personal data strictly necessary for each specific purpose of the processing are processed. If additional optional personal data are required, you will be notified of this at the time of collection and your consent is expressly requested.
PROCESSED DATA
Personal data means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identification item, such as a name, an identification number, location data, an online identifier, or one or more specific elements specific to its physical, physiological, genetic, mental, economic, cultural or social identity.
If appropriate, the personal data we collect will also be able to include, data on alleged or proven offenses, in each case where this is permitted or required by law or for the purpose of contract performance between the parties.
As regards the special categories of data which we may process, we inform you that the legal basis we can rely on is (i) your consent, (ii) our legal obligation to process such data, or (iii) processing is necessary for the establishment, exercise or defense of a right in court.
GDPR PRINCIPLES
Whenever we process personal data we will take into account the following principles:
LEGALITY, FAIRNESS AND TRANSPARENCY – your personal data will be processed ‘legally, fair and transparent’;
PURPOSE-RELATED LIMITATIONS – your data will be collected for well-defined, explicit and legitimate purposes, and further processing of those data will not deviate from those purposes;
DATA MINIMIZATION – any collection of personal data will be thoroughly analyzed before we actually request the data we are going to process, which will be relevant and strictly limited to what is absolutely necessary for the purposes for which they are processed;
ACCURACY of INFORMATION – operators must take all measures to ensure the validity of the data, and those proven to be inaccurate shall be updated without delay or deleted;
STORAGE LIMITATION – data must be kept only for the period for which they are necessary for the processing undertaken. Longer storage periods are exceptions associated with public archiving, research or statistical activities, which may be carried out under certain conditions;
INTEGRITY AND CONFIDENTIALITY – the processing of personal data must be carried out safely, including ‘protection against unauthorized or unlawful processing and against loss, destruction or accidental damage by taking appropriate technical or organizational measures.’;
RIGHTS
We, PSBH Popescu, Nicolau & the Associates- Civil society of lawyers ensure that the rights conferred on data subjects under the GDPR are respected, including:
RIGHT OF ACCESS – will allow the relevant details of the processing of personal data to be obtained;
RIGHT TO RECTIFICATION – allows you to rectify or complete your personal data, whether they have been incorrectly or not fully processed;
RIGHT TO BE FORGOTTEN – allows you to delete your personal data in certain cases (for example, if the data is no longer necessary in relation to the purposes for which it was collected) and, where the personal data have been made public, transmitting the information relating to the request for erasure to other controllers;
RIGHT TO RESTRICTION OF PROCESSING – allows you to obtain restriction to the processing of your personal data in certain cases (for example, when you challenge the accuracy of your personal data, for a period that allows us to check such accuracy);
RIGHT TO OBJECT – allows you to oppose further processing of your personal data under conditions and limits set by law;
THE RIGHT TO DATA PORTABILITY – allows you to receive personal data relating to you have provided us, in a structured, electronic format or send this data to another data controller;
RIGHT TO WITHDRAW CONSENT – allows you to withdraw a given consent at any time to stop a data processing based on that consent. The withdrawal will not affect the lawfulness of the processing on the basis of consent given before the withdrawal;
THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY – the right to file a complaint with the Romanian national data Protection Supervisor, if you believe that processing of your personal data infringes applicable laws.
THE PURPOSES AND PROCESSING OF PERSONAL DATA ON THE BASIS OF THE CONSENT OBTAINED
We will process your data lawfully, fairly and transparently, the purposes for which we will use this data are well-defined, specifically for preparing and offering the services you request from us and/or in conducting contractual relations.
Among other things, your data will be processed for communication by email, mail, telephone, video calls or any other communication that will transmit the answers to your requests, the materials prepared in support and representation, and any other response or request within the framework of collaboration or potential collaboration with PSBH Popescu, Nicolau & Associates-Civil society of lawyers. In this case, the processing of personal data will be based on the legitimate interest in offering our services according to the area of practice or contractual relationship.
We may also process your data in the context of the provision of services based on legal obligations or obligations imposed by law, in this case, the legal obligation is the basis for the processing of personal data.
We may also use your contact details to provide you with our newsletters on legal news and articles published by us, Only if you have expressly given your consent by completing the “consent form”. In this case, the purpose of processing your personal data will be marketing.
In all cases, the data is provided directly by you upon our request and your consent to fulfill the above-mentioned goals.
We, PSBH Popescu, Nicolau & Associates-Civil society of lawyers, we ask you to provide the following categories of personal data: name, surname, contact details, respectively telephone and email address, exclusively for the purposes mentioned above, in order to conduct our current business and to provide our services.
We are committed to protecting the confidentiality of your personal data. If you have any questions or comments regarding the administration of your personal data and the exercise of rights, please contact us.
DISCLOSURE OF PERSONAL DATA
As a rule, we do not share personal data with third parties unless it is necessary for our legitimate professional and operational needs and in your interest, to meet your requirements and/or as required or permitted by laws or professional standards in the context of providing the services you requested.
DURATION OF STORAGE OF PERSONAL DATA
Your personal data will be retained, in accordance with our internal policies and our legal obligations, for a fixed period as long as it is necessary to achieve the purpose of their processing or as long as we provide services that are within your area of interest, in order to inform them.
However, we will cease to process any of your personal data as long as they are no longer required for the purposes set out or you withdraw your consent, this is the legal basis for the processing, and (i) there are no compelling legitimate grounds for continuing processing in the best interests, rights and freedoms of you or (ii) if personal data are not necessary for the establishment, exercise or defense of a right in court.