1. Controller
The controller is ȚÂRU ȘI ASOCIAȚII — SOCIETATE CIVILĂ PROFESIONALĂ DE AVOCAȚI, with its registered office at 69 Banul Antonache, staircase A, 1st floor, Bucharest, Tax ID (CIF) 31251452, registered in the Roll kept by the Bucharest Bar Association (Baroul București).
For any request concerning personal data, write to office@tarusiasociatii.ro or call +40 (723) 526 310.
2. Data we process
Through the contact form: name, email address, phone (optional), subject and message content. Through the portfolio access form: name, organisation, email and professional role.
Through strictly necessary cookies we process minimal technical data, described in the cookie policy.
3. Purposes and legal bases
Responding to enquiries and assessing a possible engagement — our legitimate interest in communicating with those who contact us, and pre-contractual steps.
Granting access to the portfolio of matters — your consent, given when completing the form.
Compliance with the legal obligations of the legal profession, including anti-money-laundering duties, once an engagement is accepted.
4. Professional secrecy
Data communicated within an engagement is protected by attorney professional secrecy under Law no. 51/1995 and the Statute of the profession. Information sent before the engagement is confirmed does not benefit from this protection.
5. Recipients
Data is never sold or transferred for marketing purposes. It may be accessed by the providers hosting the website, the email service and the database, acting as processors under contracts imposing adequate safeguards.
6. Transfers outside the EU/EEA
We do not initiate transfers outside the European Economic Area. Where a provider processes data outside the EEA, the transfer relies on the standard contractual clauses adopted by the European Commission.
7. Retention
Contact messages are kept for 24 months from the last correspondence. Portfolio access requests are kept for 24 months. Engagement files are kept in accordance with the applicable legal and professional obligations.
8. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent without affecting the lawfulness of prior processing.
You may at any time lodge a complaint with the Romanian Data Protection Authority (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., District 1, Bucharest.
Complaints regarding the processing of personal data may be submitted to the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, District 1, Bucharest, www.dataprotection.ro.
9. Security
We apply technical and organisational measures proportionate to the risk: restricted access, encrypted transmission and separation of working environments.