The company:
360CompetitioTM– Cabinet de avocat Ster Silviu-Adrian, an individual law practice duly authorised by the Bucharest Bar (hereinafter referred to as “we,” “us,” or “360Competition”), hereby communicates this Privacy Policy to provide you with an overview of our practices regarding the collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, blocking, erasure or destruction of personal data (hereinafter referred to as the “Processing”).
CATEGORIES OF PERSONAL DATA
For the purposes of the Processing stipulated in point III below, we process your personal data (hereinafter referred to as the “Personal Data”). The Personal Data will include, as appropriate, both your Personal information and the Special categories of personal data, as defined hereinafter. The “Personal Information” means: your name and surname, date and place of birth, job title and name of the company/entity you belong to, postal address including home address, business address, telephone number, mobile phone number, fax number, email address, and other similar data in respect to you, payments carried out, requests and projects, information collected from public sources and databases, information on relevant and important litigation or other court actions initiated against you or by you against one of your third-party affiliates, IP address, other personal data regarding your preferences, which may be relevant for any purposes regarding the performance of our services, details and information about your visits to our offices, as well as other data related to interaction with us.
In addition, in the course of our activities, we may process the following Special categories of personal data about you, such as: personal identification number, Identity Card series and number, data on your political opinions, data on your health, data on union membership, and data relating to criminal convictions and offences.
We shall collect your Personal Data directly from you, in certain circumstances, including:
- When you request legal consultancy or representation from us;
- When you navigate, request information, or interact on our website;
- When you render or offer yourself to render services for us;
- When you willingly communicate to us, for any reason, your Personal Data.
In certain circumstances, we collect your Personal Data from a third-party source. For example, we can collect Personal Data from your employer, other companies or individuals with which/whom you are connected, governmental agencies, credit bureaus, information or services providers, or from public archives.
PURPOSES OF PROCESSING
We process your Personal Data to the extent allowed or required by the applicable law for the following purposes:
- Communication with you, in order to inform you about the development of the requested service, analysis and improvement of your services and communications to you, provision of legal consultancy, including tax and insolvency-related consultancy or other services and other measures which you may have requested, including legal representation before the courts of law, arbitral tribunals, or other competent authorities;
- Management and administration of the business relationship between you and 360Competition, including payments processing, accounting, audit, invoicing, and collection, assistance services;
- Compliance with our legal obligations (such as the obligations to keep records), obligations to review compliance or to record (such as pursuant to the commercial sanctioning and embargo laws, antitrust laws, for fighting money laundering purposes, financial review and compliance, for purposes of preventing and identifying fraud and crimes), which may include automated checks of your Personal Data against the applicable lists of persons subject to sanctions and contacting you to confirm your identity, in the event of a possible positive result, or registration of the interaction we had with you, which could be relevant for compliance purposes;
- Protection of safety and management of the access to our headquarters, IT and communication systems, online platforms, websites and other systems, prevention and detection of security threats, frauds, or other criminal activities;
- To provide assurance, monitoring, and assessment of the compliance with our policies and standards, in order to identify the persons authorized to perform transactions on behalf of our clients, our services beneficiaries, suppliers, and/or providers;
- To provide compliance with the court judgments and application and/or defense of our legal rights; and
- For any purpose related and/or additional to any of the above.
In respect of the marketing-related communications, we will make available to you, if required by the law, such information only after you select this option to receive such communications and will provide you with the possibility to unsubscribe at any time if you no longer want to receive marketing-related communications from us. We will not use your Personal Data when making automated decisions that may affect you or create profiles, other than those described above.
PURPOSES OF PROCESSING
Any operation which is the equivalent of a Processing of your Personal Data shall be carried out based on one or several of the legal grounds described below:
- The Processing is based on your consent as the legal ground for collecting, storing, and using your Personal Data, as allowed by the applicable law;
- The Processing is required for the performance of an agreement to which you are a part, or such Processing is required for entering into an agreement with you;
- The Processing is required for compliance with a legal obligation;
- The Processing is required to protect your vital interests or those of another individual;
- The Processing is required for the legitimate interests of 360Competition or of a third party, unless your interests and rights and freedoms prevail over such interests. We use your Personal Data for our legitimate interests, namely, to exercise our obligations and rights deriving from an agreement concluded with your company/entity, in order to improve our performance and the working method and for administrative and fraud detection purposes.
If the applicable legal provisions require your prior and explicit consent for the Processing of some Special categories of personal data, we shall process such data only based on your prior and explicit consent.
We may choose to withdraw your consent in respect of the marketing materials at any time, simply by accessing the “unsubscribe” link in the footer of every newsletter or invitation to events.
DATA TRANSFERS, RECIPIENTS AND LEGAL GROUNDS FOR SUCH TRANSFERS
While performing our activity, we may send your Personal Data to:
- Lawyers, other legal professionals, including mediators, notaries, bailiffs, consultants or experts involved in your case, if such data transmission is required due to the subject matter of your case;
- Courts of law, law enforcement authorities, regulatory authorities, or lawyers or other individuals, if this proves to be necessary in a justified manner, in order to establish, exercise, or defend a right in court or a natural right, or for an alternative and confidential resolution of disputes;
- Foreign law firms with a view to obtaining foreign legal advice when such advice is required to resolve the mandate entrusted by you or your company;
- Companies providing services related to anti-money laundering controls, credit risk mitigation and for other purposes related to fraud and crime prevention, and companies rendering similar services, including financial institutions, credit reporting agencies, and regulatory authorities that such data are shared with;
- Any third party towards which we assign or novate any rights or obligations under the law.
Furthermore, we may transfer your Personal Data to our processors, mainly to the service providers within or outside 360Competition, with a view to the Processing of your Personal Data for the authorized purposes, on our behalf and strictly based on our instructions. 360Competition will maintain control over your Personal Data and will use appropriate safeguards, as provided under the applicable law, to ensure the integrity and security of your Personal Data in relation with those processors.
Otherwise, we will transmit your Personal Data only when instructed or authorized by you in this respect or when this is required under the applicable law or by requests from judicial or public authorities.
We may transfer your Personal Data abroad. Certain recipients of your Personal Data may be located in countries for which the European Commission has not issued a decision regarding the provision of an adequate level of data protection, namely: the United States of America or some of the countries outside Europe.Certain recipients outside the European Economic Area (“EEA”) are certified under the privacy agreement concluded between Europe and the USA called “EU-US Privacy Shield,” while others are located in countries for which the European Commission issued compliance decisions [Andorra, Argentina, Canada (for private organizations subject to the Personal Information Protection and Electronic Documents Act), Switzerland, Faroe Islands, Guernsey, Israel, Isle of Man, Jersey, and New Zealand]. In each case, the transfer is recognized as providing an adequate level of data protection from the perspective of the European data protection law (Article 45 of GDPR).
We may conclude data transfer agreements based on the Standard Contractual Clauses (European Commission Decision 2010/87/EU and/or European Commission Decision 2004/915/EC) pursuant to Article 46 (5) GDPR or by using other appropriate means, making sure that all other recipients outside the EEA will provide an adequate level of data protection for Personal Data and that there are adequate technical and organizational security measures to protect Personal Data against accidental or unlawful destruction, accidental loss or alteration, unauthorized disclosure or access and against all other unlawful Processing methods.
SECURITY OF YOUR PERSONAL DATA
360Competition has implemented appropriate technical and organizational measures to maintain the privacy and security of your Personal Data in line with the internal procedures on storage, dissemination, and access to Personal Data. The Personal Data may be kept either stored on our Personal Data technological systems or on paper.
RETENTION PERIOD
Personal Data processed for the purposes specified herein shall be retained only as long as it may be necessary during your relation with 360Competition, as well as subsequently for the retention periods required under the applicable law. Should any legal proceedings be initiated, the Personal Data are retained until the end of such proceedings, including throughout any period of appeal or extraordinary appeal, and subsequently erased or archived, as provided under the applicable law.
In principle, your Personal Data will be kept for as long as it is required or permitted under the applicable law. Subsequently, after the expiry of such periods or upon your exercise of one of your rights, as provided under the law, we will remove/erase your Personal Data from our systems and records and/or will take any actions for their redaction so that you may no longer be identified based thereon.
YOUR LEGAL RIGHTS
If you expressed your consent with respect to the Processing activities, you may withdraw such consent at any time with future effects. Such withdrawal will not affect the legality of the Processing prior to the withdrawal of your consent. As a general rule, if you withdraw your consent, 360Competition will no longer allow the Processing of your Personal Data and will take any appropriate actions to erase any records containing your Personal Data. However, if the Processing is mandatory for the provision of 360Competition services and the Processing may be performed on other legal bases stipulated by the applicable legal provisions, 360Competition shall proceed to such Processing and will notify you in this respect.
Under the applicable laws, you have the following rights:
- Right of access: You have the right to be informed, upon request, as to whether or not your Personal Data are being processed, and, where that is the case, to request access to the Personal Data. The access information includes, inter alia, the purposes of the Processing, the categories of Personal Data concerned, and the recipients or categories of recipients to whom your Personal Data have been or will be disclosed. You have the right to obtain a copy of your Personal Data processed. For any additional copies, we may charge a reasonable fee based on administrative costs.
- Right to rectification: You have the right to have your inaccurate Personal Data rectified. Depending on the purposes of the Processing, you have the right to have your incomplete Personal Data completed, including by means of providing a supplementary statement.
- Right to erasure (“the right to be forgotten”): You have the right to ask us to erase your Personal Data.
- Right to restriction of Processing: You have the right to request the restriction of your Personal Data Processing. In this case, the respective data will be marked and may be processed by us for certain purposes only.
- Right to data portability: You have the right to receive your Personal Data provided to us in a structured, commonly used, and machine-readable format and you have the right to transmit those Personal Data to another entity without hindrance from us.
- Right to object: You have the right to object, on grounds relating to your particular situation, at any time to the Processing of your Personal Data by us, and we can be required to no longer process your Personal Data.
You may exercise any of the abovementioned rights and receive more information on such rights by submitting to us, in our capacity as data controller, a written application at the address: 360Competition, Cabinet de avocat Ster Silviu-Adrian, Bucharest, Romania, Tiriac Tower, 82-94 Buzesti street, or via e-mail at office@360competition.eu.You also have the right to file a complaint with the National Authority for the Supervision of Personal Data Processing.
VERSIONS OF THIS PRIVACY POLICY
This Privacy Policy shall become effective as of 20 March 2025.
This Privacy Policy may be updated from time to time. Any updated version shall become effective as of the date of its publication on the 360Competition website or as of the date it is notified to you in any way.