Marcel Sandu-Ciocîrlan

1. Data Controller

Marcel Sandu-Ciocîrlan - Law Office (Tax code: 20670188), headquartered in Bucharest, Romania, is the controller of personal data collected through this website and in professional relationships with clients.

2. Personal Data Collected

We collect exclusively data strictly necessary for providing legal services and communicating with clients: identification data (surname, first name), contact data (phone number, email address, postal address), information relevant to the legal case in question, data necessary for fulfilling contractual and legal obligations.

3. Processing Purposes

Personal data is processed exclusively for the following purposes: providing legal assistance and representation services, communication with current and potential clients, fulfillment of legal and contractual obligations, defense of the firm's rights and legitimate interests in litigation situations.

4. Legal Basis for Processing

The processing of personal data is carried out on the following legal bases: your express consent for certain processing, execution of the legal assistance contract concluded between the parties, the lawyer's legal obligations, especially professional secrecy provided in art. 19 of Law 51/1995, the legitimate interests of the firm within the limits provided by law.

5. Data Recipients

Your data may be disclosed to: courts and other public authorities, within the limits provided by law, other natural or legal persons, only with your express consent or in cases provided by law, collaborators or service providers who assist the firm, subject to strict confidentiality obligations.

6. Storage Period

Personal data is stored for the period necessary to fulfill the purposes for which it was collected and according to the legal archiving obligations applicable to the legal profession. In general, client files are kept according to the regulations of the Bucharest Bar and the legislation in force.

7. Your Rights

In accordance with GDPR, you benefit from the following rights: the right of access to personal data, the right to rectification of inaccurate data, the right to erasure of data under certain conditions, the right to restriction of processing, the right to data portability, the right to object to processing, the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP). These rights are exercised within the limits provided by law and the lawyer's professional secrecy.

8. Data Security

We implement adequate technical and organizational measures to protect your data against unauthorized access, loss, destruction or modification. These measures include: IT security systems, authentication and access control procedures, ongoing staff training on data protection, regular backups and continuity plans.

9. Policy Modifications

We reserve the right to periodically update this privacy policy to reflect legislative changes or changes in our practices. The updated version will be published on this site.

10. Contact for Data Protection

For any questions or requests regarding the processing of your personal data, please contact us at the coordinates mentioned in the Contact section.