Privacy Policy

Danilescu Hulub & Partners LLP (“DHA”, “us” or “we”) gives highest priority to the protection of your personal data. We take utmost care to process your personal data in accordance with the principles set forth in the data protection legislation applicable in Romania, including (EU) Regulation 2016/679 on the protection of individual with regard to the processing of personal data and on the free movement of such data.

Personal data means any information relating to an identified or identifiable individual. An identifiable individual is one that may be identified directly or indirectly – by reference to an identification number, name, location data, online identifier, or to one or more factors specific to its physical, psychological, mental, economic, cultural or social identity.

This data privacy statement refers to the processing activities which we carry out in respect to the personal data of our clients and our business partners, their representatives/employees/collaborators, of the family members of our employees/ lawyers, of other persons who apply for an open position with us, of our headquarters’ visitors, or of the persons who contact us for exercising their rights under the data protection regulations or for any other reason, and of the persons who participate at our events.

More generally, this data privacy statement is addressed to all visitors of our website and describes how we collect, use, disclose, protect, or otherwise process or handle personal data.

Fonts and other website functionalities may involve personal data processing by third parties and, if the case, the terms, conditions and policies of the respective third parties are applicable in addition to the hereby Privacy policy. For details, please see https://cloud.google.com/terms/service-terms#service-terms and https://mailchimp.com/legal/.

I. Purposes and grounds for data processing

We process the following personal data for the following purposes and based on the following grounds:

II. Legitimate interest of DHA

Many of the personal data processing operations performed by us in relation to individuals or entities outside the company concern purposes based on DHA’s legitimate interests. These legitimate interests refer to:

• mitigating risks concerning the financial, reputational or legal position of business partners and/or collaborators;
• performance of contracts with our clients or other contractual partners – including suppliers or other collaborators;
• developing and maintaining efficient office activities and management – including logistics, infrastructure, IT, etc.;
• developing and maintaining reputation of DHA through marketing related activities, including participation in conferences, social events, or providing newsletters and other informative materials;
• exercising DHA’s legal and contractual rights and defending them before courts and other administrative or jurisdictional bodies;
• developing and maintaining good business or social relations with the community, including supporting social cases, or organizing cultural, educational or scientific events;
• appropriate development, protection and promotion of DHA’s activities according to its scope of activity.

Based on your consent, we may send you various communications or newsletters via electronic channels or correspondence – after prior approval or subscription from you – in so far as to keep you updated with our activity, developments in the legal area, or other relevant information.

III. Your legal rights

In your capacity as data subjects, you have a series of rights including:

Right of access: Allows you to be informed, upon request, as to whether your personal data is being processed by DHA, and, if the case, to obtain access to and relevant details of the processing activities and/or personal data.

Right to rectification: Allows you to have personal data rectified if you find it to be inaccurate. This right also enables you to complete your personal data, if the case may be.

Right to erasure (the right to be forgotten): Allows you to obtain erasure of your personal data in certain situations. This would be the case, for example, if the data are no longer necessary for the purpose for which they have been collected.

In some cases, we may not be able to process your request and have your personal data erased, due to compliance with laws in force or due to our legitimate interest to keep such data – such as defensing a right in a judicial proceeding.

Right to restriction: Allows you to obtain restriction (i.e., limitation) of the processing of your personal data in certain cases (for example, when you challenge the accuracy of your personal data, or where you have objected to our processing);

Right to object: Allows you to object to our processing of your personal data on grounds relating to your specific situation, where we are processing your personal data to pursue our legitimate interests.

Right to data portability: Allows you to receive your personal data in an electronic, structured, commonly-used and machine-readable format and have your personal data transmitted directly from us to another data controller or entity – without hindrance from us.

If you expressed your consent with respect to processing personal data, you may withdraw such consent at any time with future effects. Consent withdrawal does not affect the legality of a processing operation performed based on such consent before it was withdrawn or of a processing operation performed on another basis (i.e., the legitimate interest).

Despite our best efforts to guarantee the protection and integrity of your data, we cannot fully rule out the possibility of any contradictions regarding the nature of the use of your data use. If you consider that we are unlawfully using your data, you may file a complaint at the Romanian Data Protection Authority or you can contact us first so that together we can resolve your complaint or request.

IV. Disclosure of Personal Data

As a rule, your personal data may not be disclosed by DHA to third parties, and we have taken appropriate organizational and technical measures to ensure protection of your personal data.

Nevertheless, if it is in your interest and only if this becomes necessary, we may disclose the relevant personal data to the courts of law or other jurisdictional bodies or relevant authorities, in the context of providing the services you have requested from us.

Please note that we may not assume any liability of any kind for the disclosure of information due to errors in the data transfer and/or unauthorized access by third parties (i.e., hacking of e-mail accounts, telephone, interception of fax messages or other malware).

V. Recipients of your personal data

The categories of data recipients may be one or more of the following:

• suppliers or service providers in the IT or other technical area (including our web-hosting and e-mail hosting), service providers, external accounting collaborator(s), insurance entities;
• other contractual partners and their collaborators/contractors;
• courts or other jurisdictional bodies, as well as public authorities and institutions;
• other lawyers (regardless of their organizational form or structure), specialists, involved in the services in other projects in which we are involved (including mediators, advisors, consultants, or experts);
• persons concerned by the correspondence received by DHA or other persons involved in projects in relation to whom correspondence was exchanged or their consultants;

Some or more of the above recipients of your personal data may be located abroad or outside the EU/ EEA. We cannot rule out the possibility that the level of data protection in countries outside the EU/EEA may not be similar to the level of protection in Romania. Under these circumstances, we will transfer your personal data only to countries for which the EU Commission decided that they have an appropriate level of data protection. In any case, we will take measures to ensure that all recipients maintain an appropriate level of data protection.

VI. Personal Data Storage Period

Your personal data will be stored during the validity period of the legal assistance agreement and afterwards, in accordance with our internal policies and legal obligations.

If the data are not stored based on a contractual relation, such data shall be kept as long as necessary in order to achieve the purpose of their processing pursuant to the applicable legal provisions.

The following criteria may be applicable in order to determine personal data storage period: (i) the terms imposed by specific laws; (ii) terms while legal liability could be triggered at the initiative of or against DHA; (iii) if the case, the term of collaboration or contract; and (iv) the term practically necessary at the expiry of legal terms or legal statutes of limitation for the anonymization or effective deletion of data.

VII. Contact

For any requests or additional information concerning your personal data, we kindly ask you to contact us using the below details:

Danilescu Hulub & Partners LLP

Eliade Tower, 18 Mircea Eliade Boulevard, Entrance A, 6^th floor, 1^st District, Bucharest

office@dha.ro