This General Data Protection Policy (“Policy”) regards the insurance of the confidentiality of the processing of personal data collected through Suciu - EDPL, with its registered office in 5 Nicolae Iorga Street, 2nd floor, District 1, Bucharest, established by Decision no. 799 issued by Bucharest Bar Council on 21.02.2008, by attorney-at-law Andreea Suciu (the “Law Office”), processing that may be realized by website (www.suciuemployment.law), e-mail, negotiations and meetings, legal assistance agreements or in the context of events organized by Law Office and covers the following categories of persons: clients / business partners / representatives of legal entities / other people who contact or visit the Law Office’s website / potential employees / collaborateurs / interns.
The Law Office processes your personal data in accordance with the principals provided by the General Data Protection Regulation (“G.D.P.R.”), namely:
- (i) Personal data are processed lawfully, fairly and in a manner that is transparent for the data subject (lawfulness, fairness and transparency);
- (ii) Personal data are collected for specified, explicit and legitimate purposes and not further processed in a manner that is incompatible with those purposes (purpose limitation);
- (iii) Personal data are adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed (data minimization);
- (iv) Personal data are accurate and, where necessary, kept up to date by means of deletion and/or correction (accuracy);
- (v) Personal data are kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed (storage limitation);
- (vi) Personal data are processed in a manner that ensures appropriate security of the personal data (integrity and confidentiality).
For questions in connection with the processing of personal data, please contact us via e-mail at info@suciuemployment.law.
1. Types of personal data processed by the Law Office
In the context of your interaction with the Law Office, we will process the following types of personal date, depending on your quality, respectively:
- (i) If you are a Law Office’s client or potential client: name, surname, identity card’s series and number, PNC, e-mail address, phone number, as well as any other personal data necessary to fulfil the entrusted mandates, the legal obligations and the legitimate purposes of the Law Office.
- (ii) If you are a representative, employee, other collaborator of the Law Office’s client or potential client: name, surname, address, identity card’s series and number, PNC, e-mail address, phone number, the quality hold in the client’s or potential client’s company, the number and date of the registration of the individual employment contract in the General Register of Employees Record as well as any other personal data necessary for the fulfilment of the entrusted mandates, of the legal obligations and legitimate purposes of the Law Office.
- (iii) If you are a Law Office’s business partner: name, surname, address, identity card’s series and number, PNC, e-mail address, phone number, as well as any other personal data necessary to fulfil the legal obligations and the legitimate purposes of the Law Office;
- (iv) If you are a representative of the Law Office’s business partner: name, surname, address, identity card’s series and number, PNC, e-mail address, phone number, the position exercised in the business partner’s company, as well as any other personal data necessary to fulfil the legal obligations and the legitimate purposes of the Law Office;
- (v) If you are a potential employees / intern / collaborator of the Law Office: name, surname, address, e-mail address, phone number, age, birth date, gender, photo, marital status, nationality, professional experience, education and / or skills, language, years of experience, practices areas and additional information collected indirectly: interview’s date and status, the position for which you applied, CV’s source, test results of evaluation / selection, your expectations (applicant), the conclusions resulting from the interview hold in the selection process, as well as any other personal data necessary to fulfil the legal obligations and the legitimate purposes of the Law Office;
- (vi) If you are a person who contacts the Law Office through the website, e-mail or phone: name, surname, e-mail address, phone number, position, the name of the company where you work.
2. Purposes and Grounds of Processing
The Law Office uses your relevant personal data for different purposes and grounds, depending on the relationships concluded or that may be concluded with you, namely:
- (i) If you are a Law Office’s client or potential client/ representative, employee, other collaborator of Law Office’s client or potential client, we will processes personal data in order to prepare and provide the consultancy services requested, communicating with you, as well as sending the informative notices. The basis for the processing of personal data may be represented by:
- a) the conclusion, execution, termination of the legal assistance contract (article 6 para. (1) let b) of G.D.P.R.);
- b) fulfilment of the Law Office's legal obligations (article 6 para. (1) let c) of G.D.P.R.);
- c) your consent (article 6 para. (1) let a) of G.D.P.R.); The Law Office processes your personal data for sending newsletter in electronic format, if you have subscribed and, hence, given your express consent to such processing. Please note that you have the right to withdraw your consent at any time, without this option having any adverse effect on the contractual relationship between you and the Law Office, by writing at the e-mail address info@suciuemployment.law. However, the withdrawal of consent will not have any effect on the processing of personal data made prior to consent withdrawal.
- (ii) If you are a Law Office’s business partner/representative of Law Office’s business partner, we processes your personal data in order to maintain the contractual relationship with you and communicating with you. The basis for the processing of personal data may be represented by:
- a) the conclusion, execution, termination of the contract (article 6 para. (1) let b) of G.D.P.R.);
- b) fulfilment of the Law Office's legal obligations (article 6 para. (1) let c) of G.D.P.R.);
- c) legitimate interest pursued by the Law Office for the proper management of the contractual relationship with you (article 6 para. (1) let f) of G.D.P.R.).
- (iii) If you are a potential employee / collaborator / intern, we processes personal data your personal data in order to conclude a possible employment / collaboration / internship contract. The basis for the processing of personal data may be represented by:
- a) the conclusion, execution, termination of the contract (article 6 para. (1) let b) of G.D.P.R.);
- b) fulfilment of the Law Office's legal obligations (article 6 para. (1) let c) of G.D.P.R.);
- c) legitimate interest pursued by the Law Office for performing contractual relationship with you (article 6 para. (1) let. f) of G.D.P.R.).
- (iv) If you are a person who contacts the Law Office through the website, e-mail or phone, we processes your personal data in order to communicate with you, address an invitation to attend our dedicated events for the persons who are working in the HR department, publishing the newsletter. The basis for the processing of personal data may be represented by:
- a) the conclusion, execution, termination of the contract (article 6 para. (1) let b) of G.D.P.R.);
- b) legitimate interest pursued by the Law Office for communicating with you (article 6 para. (1) let f) of G.D.P.R.);
- c) your consent (article 6 para. (1) let a) of the G.D.P.R.); the Law Office will process your personal data only in accordance with the terms and conditions provided by the signed Declaration of consent.
Please note that you have the right to withdraw your consent at any time, without this option having any adverse effect on the contractual relationship between you and the Law Office, by writing at info@suciuemployment.law.
However, withdrawal of consent will not have any effect on the processing of personal data made prior to consent withdrawal.
If you want to collaborate and your personal data shall be directly submitted for the purposes stated above, please provide us the personal data. Otherwise, we will not be able to collaborate.
3. Categories of Recipients
The Law Office shall disclose your personal data to the following categories:
- (i) the departments responsible for processing personal data;
- (ii) collaborators;
- (iii) the courts and / or arbitration boards;
- (iv) competent authorities and/or public institutions.
4. Transfer of Personal Data
Your personal data will not be transferred to third countries.
5. The Rights of the Data Subject
The person concerned has, inter alia, the following rights:
- (i) The right to information means that the data subject is informed by the controller that the Law Office processes his/her personal data;
- (ii) The right of access, rectification, restriction, deletion of personal data means that the data subject has the right to request, free of charge, the rectification, update, amendment, block or deletion the personal data processed by the Law Office on the basis of supporting documents;
- (iii) Right to restriction means the possibility of the data subject to obtain, in certain situations, the restriction of the processing of his/her data;
- (iv) The right to objection means the exercise of the data subject objection to the processing of personal data on legitimate grounds in relation to his / her particular situation;
- (v) The right to portability of personal data presumes the possibility to receive personal data processed by the Law Office, structured in electronic format;
- (vi) The right to lodge a complaint about the processing of personal data presumes the possibility of the data subject to contact the National Supervisory Authority for Personal Data Processing (www.dataprotection.ro).
6. Information on automated decision making
The Law Office does not use automated decision-making processes including the creation of profiles as provided by the provisions of art. 22 from G. D.P.R.
7. Storage time of Personal Data
The Law Office will process your personal data during the period of performance of the legal assistance contract, as well as after its termination, in accordance with our internal policies and legal obligations.
If personal data are processed on different ground, they will be processed as long as they are necessary for attaining the purpose for which they were collected.
Moreover, in order to obtain general information on the processing of personal data, please feel free to use the website of the National Supervisory Authority for Personal Data Processing, respectively www.dataprotection.ro.
This Policy may be updated. Any updates will become applicable within 5 business days as of the communication of the new version of the Policy.
