Privacy policy

The protection of personal data is an essential aspect of the activity of Avocat David Mariana Emilia, who carries out her professional activity as an associate attorney within SCP Peticaru, David & Asociații. Respecting the confidentiality of the information entrusted to us by clients and by the persons who contact us is a professional and legal obligation.

This Privacy policy explains how Avocat David Mariana Emilia, who carries out her professional activity as an associate attorney within SCP Peticaru, David & Asociații, processes the personal data collected through the website www.davidemilia.ro, as well as the data transmitted through the contact form, e-mail, telephone or through any other means of communication used in the professional relationship.

Personal data is processed in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data ("GDPR"), Law no. 190/2018 and the other applicable legal provisions.

1. The controller of personal data

The controller of personal data is Avocat David Mariana Emilia, who carries out her professional activity as an associate attorney within SCP Peticaru, David & Asociații.

For any questions regarding the processing of personal data or to exercise the rights provided by the GDPR, you may contact us using the contact details available on the website.

2. Scope

This Privacy policy applies to all persons who use the website www.davidemilia.ro, submit requests through the contact form, e-mail or telephone, or request information regarding the legal services offered by the attorney.

This policy applies exclusively to the website www.davidemilia.ro and does not apply to third-party websites to which this website may contain links.

3. Principles of data processing

The attorney processes personal data in compliance with the principles laid down by the GDPR, namely:

lawfulness, fairness and transparency;
purpose limitation;
data minimisation;
accuracy of data;
storage limitation;
integrity and confidentiality;
accountability.

Only the data necessary for the purposes described in this policy is processed, with appropriate technical and organisational measures implemented for its protection.

4. The categories of personal data processed

Depending on how you interact with the attorney, the following categories of data may be processed:

first and last name;
e-mail address;
telephone number;
IP address and other technical data generated through the use of the website, under the conditions described in this Privacy policy and in the Cookies policy;
the content of messages and correspondence;
identification data communicated for the purpose of providing legal services;
documents and information provided in connection with your request;
any other data you decide to communicate to us.

If you give your consent through the cookie banner, certain technical information regarding the use of the website may also be collected, including the anonymised IP address, the browser type, the operating system, the pages visited, the duration of the visit and other statistical information generated through Google Analytics.

To the extent necessary for the provision of the requested legal services, special categories of personal data or other categories of data whose processing is permitted by the GDPR and by the legislation applicable to the profession of attorney may also be processed.

5. The purposes, categories of data and legal bases of processing

Processing activity	Purpose of processing	Categories of data	Legal basis
Handling requests submitted through the contact form, e-mail or telephone	Analysing the request and providing a response	First and last name, e-mail address, telephone number (if provided), the content of the message	Art. 6 (1) (b) GDPR – taking steps at the request of the data subject prior to entering into a contract
Providing legal services	Analysing the legal situation, concluding and performing the legal assistance contract, drafting legal documents, representing and assisting the client	Identification data, contact data, documents and information necessary to resolve the case, as well as any other relevant data communicated by the client	Art. 6 (1) (b), (c) and (f) GDPR, as well as, where applicable, art. 9 (2) and art. 10 GDPR
Fulfilling legal and professional obligations	Complying with the obligations provided by Law no. 51/1995 on the organisation and exercise of the profession of attorney, the Statute of the profession of attorney, tax and accounting legislation and other applicable regulations	Data necessary to fulfil legal obligations	Art. 6 (1) (c) GDPR
Administration and security of the website	Ensuring the functioning, administration and security of the website, preventing incidents and protecting the IT infrastructure	Technical data regarding access to the website, including the IP address, browser and device information	Art. 6 (1) (f) GDPR – the legitimate interest of the controller
Analysis of website traffic	Obtaining statistical information regarding the use of the website and improving the user experience	Data collected through Google Analytics and online identifiers	Art. 6 (1) (a) GDPR – the consent of the data subject

The contact form is protected by an anti-spam verification provided by Cloudflare (Turnstile), which processes technical data, including the IP address, on the basis of the controller's legitimate interest in preventing abusive use of the form [Art. 6 (1) (f) GDPR].

The contact page embeds a Google Maps map that loads automatically when the page is opened, at which point the browser transmits the IP address to Google; the legal basis for this processing is the controller's legitimate interest in offering the map functionality [Art. 6 (1) (f) GDPR].

The controller does not carry out automated individual decision-making or profiling within the meaning of art. 22 GDPR.

6. The source of data

Personal data is collected:

directly from you;
through the contact form;
by e-mail;
by telephone;
through cookies, under the conditions described in the Cookies policy.

7. The recipients of data

The attorney does not sell or disclose your personal data to third parties for commercial purposes.

To the extent necessary for carrying out the activity, data may be communicated to:

the web hosting service provider;
the e-mail service provider;
IT service providers;
Google Ireland Limited, when the Google Analytics service is used and only if you have given your consent;
public authorities and institutions, when there is a legal obligation;
courts, criminal prosecution bodies, bailiffs, notaries public or other legal professionals, when this is necessary for the provision of legal services or is provided by law.

The processors that process personal data on behalf of the attorney are:

Vercel Inc. – hosting of the website;
Resend – delivery of the messages transmitted through the contact form;
Cloudflare, Inc. – anti-spam verification of the contact form (Turnstile);
Google – Google Analytics (traffic statistics, solely with consent) and Google Maps (the map embedded on the contact page).

The processors that process data on behalf of the attorney are obliged to ensure an adequate level of protection of personal data.

8. Transfer of data outside the European Economic Area

Certain services used within the website, such as Google Workspace or Google Analytics, may involve the transfer of personal data to states outside the European Economic Area.

In these situations, the transfers are carried out in compliance with the provisions of Chapter V of the GDPR and using the protection mechanisms approved by the European Commission.

9. Storage period

Personal data is kept only for the period necessary to fulfil the purposes for which it was collected.

The data transmitted through the contact form is kept, as a rule, for a period of no more than 3 years, except in situations where it becomes part of a legal assistance file or where legal obligations require a longer retention period.

The data processed in the course of providing legal services is kept for the period provided by the legislation applicable to the profession of attorney and by the other relevant regulations.

The statistical data collected through Google Analytics is retained according to the retention period configured within the Google Analytics service, and the technical and security logs are retained by the hosting provider for short periods of time.

10. Data security

The attorney implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or accidental disclosure.

These measures are reviewed periodically and adapted according to the evolution of technology and legal requirements.

11. The rights of data subjects

Under the conditions provided by the GDPR, you have the following rights:

The right of access – the right to obtain confirmation that your data is being processed and to receive information regarding this processing, as well as a copy of the data.
The right to rectification – the right to request the correction of inaccurate data or the completion of incomplete data.
The right to erasure of data – the right to request the erasure of data in the cases provided by the GDPR.

This right is not absolute. The request cannot be granted where there are legal obligations to retain the data or where processing is necessary for the establishment, exercise or defence of a legal claim.
The right to restriction of processing – the right to request the limitation of the use of data in the situations provided by the GDPR.
The right to object – the right to object to processing based on the legitimate interest of the controller, on grounds relating to your particular situation. Each request will be analysed individually, in accordance with the provisions of the GDPR.
The right to data portability – the right to receive the data provided in a structured, commonly used and machine-readable format and to request its transmission to another controller, when the conditions provided by law are met.
The right to withdraw consent – when processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of the processing carried out prior to the withdrawal.
The right to lodge a complaint – the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) or to address the competent courts.

To exercise the rights provided above or for any questions regarding the processing of personal data, you may contact us at office@davidemilia.ro.

12. The processing of data belonging to minors

The website is not intended for persons under the age of 16 and does not knowingly collect personal data belonging to minors without the consent of the legal representative.

If it is found that such data has been transmitted, it will be erased as soon as possible.

13. Cookies policy

The website uses cookies strictly necessary for its functioning and, only with your consent, analytics and performance measurement cookies.

Independently of the cookie options, the contact page embeds a Google Maps map provided by a third party, which loads automatically when the page is opened (see the Cookies policy).

Complete information regarding the categories of cookies used, their purpose and the way to manage preferences is available in the Cookies policy.

14. Amendment of the privacy policy

The attorney reserves the right to update this Privacy policy periodically in order to reflect legislative, jurisprudential, technical or organisational changes regarding the processing of personal data.

Any updated version will be published on this page, and the date of the last update will be modified accordingly.