Eftimie & Asociatii – Societate Civilă de Avocați (SCA) is committed to compliance with Regulation (EU) 2016/679 (the "General Data Protection Regulation" or "GDPR"), Romanian Law no. 190/2018 implementing the GDPR, and all other applicable data protection laws.
This page summarises your rights under the GDPR and explains how to exercise them. For full details on what personal data we process and on what legal basis, see our Privacy Policy.
Data controller
Eftimie & Asociatii – Societate Civilă de Avocați (SCA)
64 Ing. Zablovschi St., RO-011313, Bucharest, Romania
Phone: +40 21 207 91 29
Email: office@eftimie-asociatii.ro
Your rights under GDPR
As a data subject, you have the following rights in relation to the personal data we process about you:
- Right to be informed (Article 13 GDPR) — to receive clear information about how we collect and use your personal data.
- Right of access (Article 15 GDPR) — to obtain confirmation as to whether or not we process personal data concerning you and, where we do, to receive a copy of that data.
- Right to rectification (Article 16 GDPR) — to have inaccurate personal data corrected and incomplete personal data completed.
- Right to erasure / "right to be forgotten" (Article 17 GDPR) — to have your personal data erased in defined circumstances, including when it is no longer necessary for the purposes for which it was collected, or when you withdraw consent and there is no other legal basis for processing.
- Right to restriction of processing (Article 18 GDPR) — to have processing restricted in defined circumstances, such as when you contest the accuracy of the data.
- Right to data portability (Article 20 GDPR) — to receive personal data you have provided to us in a structured, commonly used and machine-readable format, and to transmit that data to another controller, where the processing is based on your consent or on a contract.
- Right to object (Article 21 GDPR) — to object to processing based on our legitimate interests, including profiling and analytics.
- Rights related to automated decision-making and profiling (Article 22 GDPR) — not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you. We do not engage in such automated decision-making.
- Right to withdraw consent (Article 7(3) GDPR) — where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing performed before withdrawal.
- Right to lodge a complaint (Article 77 GDPR) — to file a complaint with the competent supervisory authority (see below).
How to exercise your rights
To exercise any of the rights above, please contact us at office@eftimie-asociatii.ro or in writing at 64 Ing. Zablovschi St., RO-011313, Bucharest, Romania.
We may need to verify your identity before responding to a request. We will respond within one month of receipt of the request. For complex or numerous requests, the period may be extended by up to two further months, in which case we will inform you within the first month and explain the reason for the delay.
Exercising your rights is, in principle, free of charge. We may charge a reasonable fee or refuse to act on your request only if it is manifestly unfounded or excessive (Article 12(5) GDPR).
Withdrawing consent for cookies and Google Analytics 4
We use Google Analytics 4 (Measurement ID G-M65L7CQ083) only after you have given consent through the cookie banner. You may withdraw your consent at any time by:
- clicking "Settings" in our cookie banner and disabling the "Analytics cookies" toggle;
- installing the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout;
- clearing the cookies stored by our domain in your browser, which will re-trigger the cookie banner on your next visit.
For full details on how Google Analytics processes your data, including international transfers to the United States under the EU-U.S. Data Privacy Framework, please see Section 2 of our Privacy Policy.
Data Protection Officer
We have not appointed a designated Data Protection Officer (DPO) because the nature, scope and purposes of our processing do not trigger the mandatory designation criteria under Article 37 GDPR. For any question regarding data protection at the Firm, you may contact us directly at the email address above; your enquiry will be handled by the partner responsible for data-protection matters.
Right to lodge a complaint
If you believe that the processing of your personal data infringes the GDPR or other applicable data protection laws, you have the right to lodge a complaint with the competent supervisory authority. In Romania, this is:
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, 010336 București, Romania
Phone: +40 318 059 211 / +40 318 059 212
Email: anspdcp@dataprotection.ro
Website: www.dataprotection.ro
You may also lodge a complaint with the supervisory authority in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement.
Updates to this page
This GDPR page may be updated from time to time to reflect changes in our practices or in the law. The "Last updated" date at the top of this page indicates the latest revision.
For more details about how we process your personal data, please refer to our Privacy Policy.