INTRODUCTION

Cabinet de Avocat Ludușan Florin (hereinafter referred to as "C.A. Ludușan" or "We"), legally established and operating in accordance with the laws of Romania, having its professional headquarters in Târgu Mureș, 2-4 Dr. Knöpfler Vilmos Street, 2nd floor, Mureș County, Romania, holding the Fiscal Identification Code (C.I.F.) RO 20518369 and the registration decision with the Mureș Bar Association no. 76 of 19.12.2006, acting as a Data Controller, attaches great importance to the protection of your personal data.

This Privacy Policy explains how we collect, use, transfer, and protect your data when you access the website https://www.avocatludusan.ro/ (the "Website"), when you request legal assistance from us, or when you interact with us in any other way. We are committed to processing personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the applicable national legislation.

CATEGORIES OF PERSONAL DATA

For the purposes of the Processing mentioned below, we process your personal data, hereinafter referred to as „Personal Data”. Personal Data will include, as appropriate, both your Personal Information and Special Categories of personal data, as defined below. „Personal Information” refers to: first and last name, date and place of birth, job title and the company/entity you are part of, postal address, including residential address, professional address, telephone number, mobile phone number, fax number and e-mail address, and other similar data about you, payments made, requests and projects, information collected from public sources and databases, information regarding relevant and significant litigation or other legal actions initiated against you or by you, against a third party affiliated with you, IP address, other personal data regarding your preferences that might prove relevant for any purposes regarding the provision of our services, details and information about your visits to our offices, as well as other data relating to your interaction with us.

Additionally, in the conduct of our activities, we may process the following Special Categories of personal data about you, such as: personal numerical code (CNP), series and number of the Identity Card, data concerning your political opinions, health data, data concerning trade union membership, and data concerning criminal convictions and offenses.

We collect your Personal Data directly from you, under certain circumstances, including:

• When you request legal, tax, or insolvency consulting, or representation from us;
• When you browse, request information, or interact on our website;
• When you provide or offer to provide services to us;
• When you voluntarily communicate your Personal Data to us, for any reason.

Under certain circumstances, we collect Personal Data about you from a third-party source. For example, we may collect Personal Data from your employer, other companies or individuals with whom you are connected, government agencies, credit bureaus, information or service providers, or from public records.

WHEN AND HOW WE COLLECT DATA

We collect your personal data in the following situations:

• When you browse, request information, or interact on our Website (via contact forms or e-mail);

• When you request consulting, legal assistance, or representation from us;

• When you provide or offer to provide services to our law office (as suppliers or collaborators);

• When you voluntarily communicate your data to us, for any reason.

PURPOSES OF PROCESSING

We process your Personal Data to the extent permitted or required by applicable law for the following purposes:

• Communicating with you to keep you constantly informed regarding the progress of the requested service, analyzing and improving our services and communications to you, providing legal advice, including tax and insolvency matters, or other services and steps you may have requested, including legal representation in courts of law, arbitral tribunals, or other competent authorities;
• Managing and administering the business relationship between you and C.A. Ludușan, including payment processing services, accounting, auditing, billing and collection, and support;
• Complying with our legal obligations (such as record-keeping obligations), compliance verification or recording obligations (such as under trade sanction and embargo laws, antitrust laws, for anti-money laundering purposes, financial verification and compliance, for the purposes of preventing and identifying fraud and crime), which may include automated checks of your Personal Data against applicable sanctioned party lists and contacting you to confirm your identity in the event of a potential positive match, or recording interaction with you that might be relevant for compliance purposes;
• Protecting security and managing access to our premises, IT and communication systems, online platforms, websites, and other systems, preventing and detecting security threats, fraud, or other criminal activities;
• For the purposes of ensuring, monitoring, and evaluating compliance with our policies and standards, identifying persons authorized to transact on behalf of our clients, beneficiaries, suppliers, and/or service providers;
• For the purpose of complying with court orders and exercising and/or defending our legal rights; and
• For any purpose related and/or incidental to any of the above.

Regarding marketing-related communications, we will provide you, if legally required, with the respective information only after you have opted-in to receive these communications, and we will offer you the possibility to unsubscribe at any time, should you no longer wish to receive marketing-related communications from us. We will not use your Personal Data in making automated decisions that affect you or create profiles other than those described above.

GROUNDS FOR YOUR PERSONAL DATA PROCESSING

Any operation that amounts to a Processing of your Personal Data will be carried out based on one or more of the legal grounds below:

• The Processing is based on your consent as a legal basis for the collection, storage, and use of your Personal Data, as permitted by applicable law;
• The Processing is necessary for the performance of a contract to which you are a party, or such Processing is necessary in order to enter into a contract with you;
• The Processing is necessary for compliance with a legal obligation;
• The Processing is necessary in order to protect your vital interests or those of another natural person;
• The Processing is necessary for the purposes of the legitimate interests pursued by C.A. Ludușan or by a third party, except where such interests are overridden by your fundamental rights and freedoms. We use your Personal Data for our legitimate interests, namely for exercising our obligations and rights deriving from a contract concluded with the company/entity you are part of, to improve our performance and working methods, and for administrative and fraud detection purposes.

In cases where applicable legal provisions require your prior and explicit consent for the Processing of Special Categories of personal data, we will process such data only on the basis of your prior and explicit consent.

DATA SECURITY AND STORAGE

C.A. Ludușan implements appropriate technical and organizational measures to protect your data against unauthorized access, accidental loss, destruction, or alteration. Personal data may be kept on our technological systems or in printed format (in physical client files), under the strict incidence of legal professional privilege.

We retain your data only for as long as necessary to fulfill the purposes for which it was collected or to comply with the legal archiving periods applicable to the legal profession and financial-accounting legislation.

DATA TRANSFERS, RECIPIENTS AND LEGAL GROUNDS FOR SUCH TRANSFERS

In the course of our activity, we may transmit your Personal Data to:

• Litigating attorneys, other legal professionals, including mediators, notaries public, bailiffs, consultants, or experts involved in your case, if the data transmission is required by the scope of work related to your case;
• Courts of law, law enforcement authorities, regulatory authorities, or lawyers or other persons if it is reasonably proven necessary for the establishment, exercise, or defense of a legal claim, or for the purpose of an alternative dispute resolution process;
• Foreign law firms for the purpose of obtaining foreign legal advice, when such advice is required for the resolution of the mandate entrusted by you or by the company you are part of;
• Companies providing services for anti-money laundering checks, credit risk reduction, and other fraud and crime prevention purposes, and companies providing similar services, including financial institutions, credit bureaus, and regulatory authorities with whom such data is shared;
• Any third party to whom we assign or novate any rights or obligations, under the conditions of the law;

Furthermore, we may transmit your Personal Data to our data processors, primarily service providers within or outside C.A. Ludușan, for the purpose of Processing Personal Data for permitted purposes, on our behalf, and strictly in accordance with our instructions. C.A. Ludușan will retain control over your Personal Data and will use appropriate safeguards, according to applicable law, to ensure the integrity and security of your Personal Data in the relationship with those processors.

Otherwise, we will only transmit your Personal Data when you instruct us or grant us permission, or when we are required by applicable law or by requests from judicial or official bodies to do so.

We may transfer your Personal Data outside the country. Some recipients of your Personal Data may be located in countries in relation to which the European Commission has not issued an adequacy decision regarding the level of data protection, namely: the United States of America or some of the locations outside Europe.

Some recipients located outside the European Economic Area („EEA”) are certified under the "EU-US Privacy Shield" agreement, and others are located in countries for which the European Commission has issued adequacy decisions [Andorra, Argentina, Canada (for private organizations subject to the Canadian Personal Information Protection and Electronic Documents Act), Switzerland, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, and New Zealand]. In each case, the transfer is recognized as providing an adequate level of data protection from the perspective of European data protection legislation (Art. 45 GDPR).

We may conclude data transfer agreements based on Standard Contractual Clauses (European Commission Decision 2010/87/EU and/or European Commission Decision 2004/915/EC), pursuant to Art. 46 (5) GDPR or by using other appropriate means, thus ensuring that all other recipients located outside the EEA will provide an adequate level of data protection for Personal Data, and that appropriate technical and organizational security measures are in place to protect Personal Data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access, and against all other unlawful forms of Processing.

DISCLOSURE OF DATA TO THIRD PARTIES

By virtue of professional secrecy, your data is strictly confidential. However, in order to execute the received mandate or for the operation of the law office, we may transmit certain data to:

• Courts of law, notaries public, bailiffs, experts, translators, or other public authorities (only within the limits of the entrusted mandate and the law);

• IT service providers (web hosting, maintenance) and accounting providers, who are contractually bound to ensure the confidentiality and security of the data.

YOUR LEGAL RIGHTS

In accordance with GDPR provisions, you have the following rights regarding your personal data:

• Right of acces: You can request confirmation of data processing and access to it;

• Right to rectification: You can request the correction of inaccurate or incomplete data;

• Right to erasure (“the right to be forgotten”): You can request the deletion of data, under the conditions of the law, unless their retention is legally mandatory or necessary for the exercise of a right in court;

• Right to restriction of Processing: You can request the limitation of how we process your data;

• Right to data portability: You have the right to receive the data provided in a structured and machine-readable format;

• Right to object: You can object to the processing of your data for reasons related to your particular situation.

POLICY UPDATES

This Privacy Policy may be updated from time to time. Any modification will become applicable from the moment the new version is published on the C.A. Ludușan Website. We recommend that you review this page periodically.

CONTACT

For any questions or requests regarding the processing of your personal data, you can contact us by e-mail at office.cabinetludusan@gmail.com or by mail at our headquarters in Târgu Mureș, 2-4 Dr. Knöpfler Vilmos Street, 2nd floor, Mureș County, Romania.