PRIVACY NOTICE

issued pursuant to Articles 13 and 14 of the EU Regulation 2016/679 (GDPR)

1. Data Controller

ANGHEL SI ASOCIATII CIVIL LAWYERS SOCIETY

Registered office: 33-35 Dr. Staicovici Str., Sector 5, Bucharest, postal code 050557, Romania
Tel: +40213260553 | Email: office@anghel-associates.ro
VAT Number: RO22774550

Established based on Decision no. 2028/2007 issued by the Bucharest Bar.
Representative: Atty. Laurențiu-Liviu Anghel

2. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

• Performance of the concluded contract and provision of the requested services.
• Invoicing for services and management of financial obligations.
• Compliance with legal obligations (e.g., tax, accounting).

Legal grounds:

• (i) Performance of a contract – necessary to provide you with our services.
• (ii) Compliance with a legal obligation – applicable for obligations imposed by national laws.
• (iii) The legitimate interest of the controller – for essential business activities, while respecting your rights.

3. Categories of Data Processed

We process the following categories of data, as provided in your identity documents and other submitted paperwork:

• Last Name, First Name
• Domicile and/or Residence
• Date and Place of Birth
• Personal Numeric Code (CNP)
• Series and Number of Identity Document
• Bank Account Details (for making or receiving payments)

4. Data Recipients

Your data may be disclosed to the following recipients, only to the extent necessary:

• Authorized staff and proxies of our firm.
• Public authorities and judicial institutions (e.g., courts, bailiffs), when required by law.
• Other legal or natural persons involved in the execution of the contract (e.g., opposing parties, experts, translators).

5. Transfer of Data Outside the EU/EEA

We do not intend to transfer your personal data to third countries (located outside the European Economic Area - EEA). Should such a transfer become necessary, we will ensure an adequate level of protection through legal measures, such as the use of Standard Contractual Clauses approved by the European Commission.

6. Data Storage Period

We will retain your personal data only for as long as necessary to achieve the purposes for which they were collected, including for compliance with legal, statistical, or archiving obligations. Upon the expiry of this period, data will be securely deleted or anonymized.

7. Your Rights

In accordance with the GDPR, you have the following rights:

• The right of access to your personal data.
• The right to rectification of inaccurate or incomplete data.
• The right to erasure ("the right to be forgotten") under certain conditions.
• The right to restriction of processing in specific situations.
• The right to object to processing based on legitimate interest.
• The right to data portability for data processed based on contract or consent.
• The right to lodge a complaint with The National Supervisory Authority for Personal Data Processing (for Romania) or with the supervisory authority in your country of residence or work.

How to Exercise Your Rights?
You can request to exercise your rights by submitting a written, dated, and signed request:
By email: office@anghel-associates.ro
By mail: to the registered office address mentioned above.

8. Automated Decision-Making and Profiling

We do not use automated decision-making processes, including profiling, which would produce legal effects concerning you or similarly significantly affect you.

9. Communication and Updates

This Privacy Notice may be brought to your attention through any appropriate means of communication, such as: email, messaging (WhatsApp), post, or publication on our website. Any changes to this document will be communicated in a similar manner.