Privacy notice on personal data processing (GDPR) in the provision of legal services

1. Who processes your personal data

Murar și Asociații – Societate Civilă Profesională de Avocați, tax identification number RO23913338, with its professional office at 3 Răsuri Street, ground floor, apartments 2–3, Sector 2, Bucharest, Romania, processes personal data as a controller.

For questions about personal data processing or the exercise of your rights, you can contact us at office@avocatmurar.ro or in writing at our professional office.

2. Who this notice covers and what data we process

This notice covers clients and prospective clients who are individuals, representatives and contact persons of clients that are legal entities, and other people whose data is relevant to the provision of legal services.

Depending on the enquiry, we process identification and contact details, professional information, information about legal, financial or family circumstances, data required for invoicing and payments, and relevant information contained in documents, correspondence and case files.

Data comes from you, from the client we represent or their representatives and, where applicable, from courts, authorities, registers and other public sources, professionals or people involved in the case or legal matter.

3. Purposes and legal bases for processing

We process the data necessary for:

• assessing enquiries, entering into and performing legal services agreements, providing advice, drafting documents, and providing legal assistance and representation. For a client who is an individual, the legal basis is performance of the contract or taking steps at their request before entering into it, under Article 6(1)(b) GDPR;
• meeting legal and professional obligations, including checks required by law, professional records, invoicing, accounting and archiving, under Article 6(1)(c) GDPR;
• managing relationships with representatives of clients that are legal entities, processing data about other people involved in cases, and protecting the rights of clients or the firm, on the basis of the relevant legitimate interests, under Article 6(1)(f) GDPR;
• securing documents, communications and IT systems, on the basis of the legitimate interest in protecting the firm's professional activities and applicable legal obligations.

Where the nature of a case requires the processing of special categories of personal data, we do so only under the conditions of Article 9 GDPR, including where the data is necessary for the establishment, exercise or defence of legal claims.

Providing the data needed for identification, entering into the agreement, providing services or complying with legal obligations may be mandatory. Without it, we may be unable to accept the enquiry or carry out certain steps.

4. Who may receive your personal data

Data is accessible to the firm's lawyers and staff to the extent necessary for their duties. Depending on the services requested and legal obligations, relevant data may be disclosed to courts, authorities, professional bodies, participants in proceedings and their representatives, as well as experts, enforcement officers, notaries, translators and other professionals involved.

We use providers of IT, communications, document management, accounting and archiving services. Their access is limited to what is necessary to provide their services and is subject to applicable confidentiality and data protection obligations.

The use of certain IT services may involve transfers outside the European Economic Area, including to the United States. Where applicable, these transfers are subject to adequacy decisions or safeguards such as standard contractual clauses approved by the European Commission. You can request information about the applicable safeguards and a copy of them at office@avocatmurar.ro.

5. How long we retain personal data

We retain data for as long as necessary to assess the enquiry and provide the services. After that, the retention period depends on the category of documents, legal and professional retention obligations, limitation periods, and any proceedings or obligations to preserve records.

Data no longer needed for these purposes is erased or anonymised, subject to the obligations applicable to professional archives.

6. Your rights

Subject to the GDPR, you may request access to your personal data, rectification, erasure or restriction of processing and, where the legal conditions are met, data portability.

You may object to processing based on legitimate interests on grounds relating to your particular situation. For any processing based on consent, you may withdraw that consent at any time, without affecting the lawfulness of the processing carried out before withdrawal.

Please send requests to office@avocatmurar.ro. The exercise of rights is assessed in accordance with the law, including professional secrecy, the rights of others and retention obligations. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing, www.dataprotection.ro.

This notice supplements the website's privacy policy. Relevant changes will be reflected in the updated version.