1. Introduction
The confidentiality and protection of personal data is a top priority for SCA "Chiriță și Asociații".We are committed to processing your data lawfully, fairly, transparently and in accordance with the Data Protection Regulation (EU) 2016/679 (GDPR) and applicable national legislation.
This Privacy Policy aims to inform you about the categories of data collected, the grounds and purposes of the processing, the rights you have and how to exercise them.
2. Data controller
The controller of the personal information is the Law Firm "Chiriță și Asociații", with registered office in Cluj-Napoca, Tăietura Turcului Street no. 18, Cluj County.
3. Categories of processed data
a) As a visitor to www.chirita-law.com, we may collect the following data:
- Full name;
- E-mail address;
- Phone number;
- Other information contained in messages or files attached via the contact form.
b) As a client, we can additionally process:
- Identifying data: name, surname, address, CNP, serial and CI number, e-mail, telephone, bank account, etc.;
- Sensitive data: data concerning health, sexual orientation, trade union membership, religious or political convictions, criminal convictions or other special data necessary in the context of the provision of legal services;
- Confidential information voluntarily submitted in the context of the collaboration (e.g. financial, family, legal, litigation, etc.).
4. Purposes of processing
Personal data are collected and processed for the following purposes:
For clients:
- Conclusion and performance of legal assistance contracts;
- Effective communication and client updates on case progress;
- Meeting legal and compliance obligations (including those under tax, anti-fraud or money laundering legislation);
- Protecting the legitimate interests of the firm in defense, representation or consultancy activities;
For visitors:
- Handling requests sent via the contact form;
- Analysis and optimization of user experience on the website.
The data will not be used for any other purpose without the data subject's express prior consent.
5. Legal basis of processing
The processing of personal data is done under:
- performance of a contract or pre-contractual steps (art. 6 parag. 1 let. b GDPR)
- Legal obligation (art. 6 parag. 1 let. c GDPR)
- the data subject's consent (art. 6 parag. 1 let. a GDPR)
- legitimate interest (art. 6 parag. 1 let. f GDPR), insofar as the fundamental rights and freedoms of the data subject are not overridden.
6. Data recipients
Your data may be communicated, as necessary, to the following recipients:
- Associate lawyers, external consultants or specialists (experts, notaries, mediators, etc.);
- Courts, public prosecutor's offices, public authorities and other entities involved in the execution of the legal mandate;
- Accounting firms, auditors, IT providers, payment processors;
- Law firms in other jurisdictions for the purpose of obtaining external legal advice (only with your consent);
- Regulatory authorities or financial institutions in the context of compliance with obligations to prevent fraud or money laundering.
International data transfers (outside the EEA) will only take place under the conditions set out in the GDPR, with appropriate safeguards (e.g. Standard Contractual Clauses).
7. Data storage period
Personal data is retained:
- For clients: for 10 years from the termination of the collaboration, in accordance with Law no. 82/1991 (Accounting Law) and the obligations of the Bar Association;
- For sensitive data or confidential legal information: until completion of the legal proceedings in which they are concerned;
- For site visitors: until the claim is settled or maximum 6 months after last interaction.
8. Your rights
Under the relevant legislation, you have the following rights:
- Right of access to processed data
- Right to rectification of inaccurate or incomplete data
- Right to deletion of data ("right to be forgotten")
- Right to restrict processing
- Right to object to data processing
- Right to data portability
- The right not to be subject to automatic individual decisions
- Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing
You can exercise these rights by sending a written request to:
- Email: office@chirita-law.com
- Fax: +40.364.264.996
- Address: SCA „Chiriţă şi Asociaţii”, Tăietura Turcului no. 18, Cluj-Napoca
9. Data security
We take appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss or destruction. These measures include:
- encryption of sensitive documents;
- regular security audits;
- strict internal policies on confidentiality and data access;
- confidentiality obligations for employees and associates.
10. Policy changes
This Privacy Policy may be updated from time to time. Any changes will be published on the website and will become applicable within 15 days of publication.
In the event of significant changes, you will be informed by a prominent notice on the website or other means of communication.
11. Last update
This policy has been revised and updated on 01.04.2025.