Politica de confidențialitate

Privacy Policy

1. Introduction

Welcome to Adesman & Asociații!

As a civil law firm of attorneys, we understand the importance of confidentiality and the sensitive nature of the information you share with us. This Privacy Policy describes how we collect, use, disclose and protect your personal data when you interact with our website, use our legal services or communicate with us.

We make constant efforts to ensure that all personal data processing activities carried out by our firm comply with the principles laid down by national and European data protection legislation, including Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, which repealed Directive 95/46/EC (the “GDPR”).

“Personal data” means any information relating to an identified or identifiable natural person. A person is considered identifiable where they can be identified, directly or indirectly, in particular by reference to a specific element of their identity — such as a name, an identification number, location data or one or more factors specific to their physical, psychological, economic, cultural or social identity.

This Privacy Policy applies to all personal data belonging to clients, business partners, collaborators, visitors to our website, prospective employees, trainees and associates, without being limited to them.
The Policy extends to information collected through our website, www.adesman.ro, as well as to any other personal data obtained through email or telephone correspondence, through contact forms or in the context of offline interactions.

Please read this Privacy Policy carefully. For any question regarding the processing of your data, you may contact us at office@adesman.ro.

2. Data controller

The controller responsible for the processing of personal data is:
Adesman & Asociații Societate civilă de avocați
Registered office: Bucharest, 64 Aviator Maior Ștefan Sănătescu Street, 2nd floor, Sector 1

Contact email for data protection: office@adesman.ro.
Website: www.adesman.ro

3. Categories of personal data collected

We may collect the following categories of personal data, depending on the context of your interaction with us:

Identification information: surname, first name, contact details (telephone, email, postal address);
Data relating to professional activity or the legal matter: documents, correspondence, information about the case;
Payment data: bank accounts, invoices, other financial information (for invoicing purposes);
Website usage data: IP address, device type, browser, pages visited, date and time of access;
Cookies and similar technologies: used for the operation of the website and, only with your consent, for traffic analysis (details in section 8);
Any other personal data that you may provide to us directly, as required for the provision of legal services;

These data are collected directly from you (for example, through contact forms, correspondence or by telephone) or automatically, through the use of the website.

4. Purposes and legal bases of processing

We process your personal data in order to prepare and provide the legal services you request.

The main purposes and legal bases of processing are:

Provision of legal services, advice and representation – legal basis: performance of the legal assistance agreement or, prior to its conclusion, steps taken at your request (Article 6(1)(b) GDPR);
Communication with clients and prospective clients, including replies to messages received through the contact form, by email or by telephone – legal basis: steps prior to entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to the requests received (Article 6(1)(f) GDPR);
Compliance with legal and professional obligations, including those relating to invoicing, accounting records, client identification and document archiving – legal basis: compliance with a legal obligation (Article 6(1)(c) GDPR);
Administration, security and improvement of the firm’s website and IT systems – legal basis: our legitimate interest in ensuring their secure operation (Article 6(1)(f) GDPR);
Establishment, exercise or defence of legal claims – legal basis: our legitimate interest (Article 6(1)(f) GDPR);
Sending, in electronic format, our newsletters on important developments in legislation, case law and the practice of public authorities – legal basis: your consent (Article 6(1)(a) GDPR), which you may withdraw at any time via the unsubscribe link in each message;
Analysis of website traffic through Google Analytics, only if you have given your consent through the cookie banner – legal basis: your consent (Article 6(1)(a) GDPR and Article 4(5) of Law no. 506/2004).

Where, in the context of legal services, we process special categories of data (for example, health data) or data relating to criminal convictions and offences, such processing is carried out only to the extent necessary for the establishment, exercise or defence of legal claims (Article 9(2)(f) GDPR), in compliance with Article 10 GDPR and with the duty of professional secrecy.

5. Disclosure of personal data

Personal data may be shared in the following situations:

Legal professionals: lawyers, other legal specialists, including mediators, notaries public, bailiffs, consultants or experts involved in your matter, where the transfer of data is required by the subject matter of the work relating to your case;
Service providers: contractual partners providing IT services, web hosting, document archiving, translations, etc., who are subject to strict confidentiality obligations;
The provider of the website traffic analysis service (Google Ireland Limited – Google Analytics), only if you have consented to analytics cookies;
Public authorities or courts: where required by law or by professional standards;
Third parties, only with your explicit consent.

Otherwise, we will disclose your personal data only when you request us to do so or give us permission, or when we are required to do so by applicable law or by requests from judicial or official bodies.

Certain personal data may be transferred to recipients located outside Romania or the European Economic Area. In some cases, these recipients may be located in countries for which the European Commission has not issued a decision on the existence of an adequate level of data protection, such as the United States of America or other jurisdictions outside Europe. In such cases, the transfer takes place only on the basis of the safeguards provided for in Articles 44–49 GDPR: an adequacy decision of the European Commission (including the EU–US Data Privacy Framework, for certified recipients such as Google), the standard contractual clauses approved by the European Commission or, in their absence, one of the derogations under Article 49 GDPR (for example, where the transfer is necessary for the performance of the contract or for the defence of legal claims). Upon request, we can provide you with information about the applicable safeguards.

The firm does not sell, rent or disclose your data to third parties for marketing purposes.

6. Retention periods

Personal data collected for the purposes set out in this policy will be retained only for as long as necessary to fulfil those purposes, namely for the duration of your relationship with Adesman & Asociații and thereafter for the retention periods required by applicable law.

Accordingly:

Data relating to legal services may be retained for up to 5 (five) years after the completion of the legal services, in accordance with the legal and ethical requirements applicable to the legal profession;
Financial and accounting documents (for example, invoices) are retained for the period required by financial and accounting legislation (currently, generally 10 years, under Accounting Law no. 82/1991);
Data from contact forms are retained for a maximum period of 24 (twenty-four) months, unless a contractual relationship results;
Data used to send the newsletter are retained until consent is withdrawn (unsubscription);
Traffic analysis data collected through Google Analytics are retained for 14 months, and the related cookies expire after no more than 2 years;

Once these periods have expired, the data are deleted or anonymised.

7. Rights of data subjects

In accordance with the GDPR, you have the following rights regarding your personal data:

Right of access:

We give you the possibility to confirm whether your data are being processed by us and, where applicable, to receive detailed information on how they are used.

Right to rectification of inaccurate or incomplete data:

You may request the correction of any inaccurate or incomplete personal data.

Right to erasure (“right to be forgotten”):

You have the right to request the erasure of personal data in certain situations, for example where they are no longer necessary in relation to the purposes for which they were collected.

Important: Not all requests can be accepted; the retention of data may be necessary where legal provisions require us to retain the data for a certain period or for legal purposes.

Right to restriction of processing:

You may request the restriction of processing, in which case the data will only be stored and will not be used in any other way, in particular where:

you contest the accuracy of the data, for the period necessary to verify it;
the processing is unlawful, but you oppose the erasure of the data;
we no longer need the data, but you require them for the establishment, exercise or defence of legal claims;
you have objected to the processing, pending verification of whether our legitimate interests override yours.

Right to object:

You may object to further processing of your personal data under certain conditions and within the limits provided by law. In the case of specific requests, we will weigh our legitimate interests against your particular situation. We recommend that you state the reasons for which you object to the processing of your data.

Right to data portability:

You may request the transfer of the personal data you have provided to us, in a structured, commonly used and machine-readable format, either to receive them directly or to transmit them to another controller.

Important: This right applies only to data processed automatically on the basis of your consent or of a contract concluded with us, and only where the processing is carried out by automated means.

Right to withdraw your consent:

Where the processing is based on your consent (for example, for the newsletter or for analytics cookies), you may withdraw it at any time, without affecting the lawfulness of the processing carried out before its withdrawal.

Right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – https://www.dataprotection.ro/ - with its registered office in Bucharest, 28-30 Gheorghe Magheru Boulevard, Sector 1, Romania.

To exercise these rights, you may contact us at the following email address: office@adesman.ro.

We will reply without undue delay and, in any event, within one month of receipt of the request. This period may be extended by two further months, under the conditions laid down in Article 12(3) GDPR, in which case we will inform you.

The website uses cookies, i.e. small files stored in your browser. We use two categories:

Strictly necessary cookies, which do not require consent: the cookie that stores your cookie choice (adesman_consent, 6 months) and technical cookies of the server and of the caching system, used for the operation and security of the website;
Analytics cookies (Google Analytics, provided by Google Ireland Limited): _ga and _ga_148VXF41N5, with a duration of up to 2 years. They show us, in aggregate form, which pages are read, where visitors come from and what type of device they use. They are set only after you give your consent through the banner displayed on your first visit.

Google Analytics 4 does not store visitors’ full IP addresses. We do not use advertising cookies or cookies that track you across other websites.

You may withdraw or change your consent at any time via the “Cookie settings” link in the website footer. You may also delete or block cookies in your browser settings; blocking strictly necessary cookies may affect the operation of the website.

9. Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including the website’s encrypted connection (HTTPS), access to data only for the persons who need it, and the confidentiality and professional secrecy obligations that apply to the firm’s lawyers and staff.

10. Mandatory or voluntary nature of providing data

Providing data through the contact form, by email or by telephone is voluntary. Without certain data (for example, your name and a means of contact) we cannot reply to you. For the provision of legal services, some data are necessary for entering into and performing the contract and for complying with legal obligations, including those relating to client identification; without them, we cannot provide you with legal assistance.

11. Automated decision-making

We do not take decisions based solely on automated processing of data, including profiling, which produce legal effects concerning you or similarly significantly affect you.

12. Changes to this Policy

This Privacy Policy may be updated periodically to reflect legislative or organisational changes. The updated version will be published on this page, together with the date of the last update.

Last updated: 29 October 2026