GDPR

Definitions

CONSENT means any freely given, specific, informed and unambiguous indication of the data subject's wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her. PERSONAL DATA means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is a person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more specific elements specific to his or her physical identity, physiological, genetic, mental, economic, cultural or social;

GDPR REGULATION = means Regulation (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General data Protection Regulation); PROCESSING OF personal DATA means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

DATA SUBJECT means any identified or identifiable natural person whose data is processed by us as a controller, such as potential customers or visitors to the website; NEWSLETTER = means a periodic newsletter communicated to users who have expressed their consent to receive such communications. It includes news, information about the activities, projects and news of our company; SPAM means any unsolicited commercial communication prohibited by law.

What is your quality under this privacy policy?

Any individual who uses the Site, our social media channels, is considered a data subject.

What data do we process?

Depending on the functionalities you wish to benefit from, we will need to process certain personal data, which will generally be as follows:

• identification data (name, surname, e-mail address, telephone number). Where you provide us with your number By phone, we may use this number to communicate to you via SMS, confirmations or changes to meetings/appointments for legal advice established with us.
• billing data (name, first name, address, email address, value of services, method of payment, services requested, date of their request)
• direct marketing data: name, surname, email address, history of website navigation, your preferences. regarding the communication of the newsletter and free materials.
• connection, geo-location and navigation data (if you interact with us, for example, from your mobile phone);
• information and content provided by you (questions, requests);
• information provided by you through social networks (name/alias used on the social network, profile picture used, likes, location and any other information described on the social network when you use these networks to relate to us).

We may obtain your data. from several sources, such as the data provided by you. Through the website through the contact form, through the social media pages you access, but also through the Google Analytics tool through which we can see how you interact with our website, to improve your experience. on the site, but also to have a statistics of users interested in our services or articles.

For what purposes do we process your data? personal?

Depending on how you interact with our website, we will process your personal data for the following purposes:

• To communicate with you, depending on the type of service you have requested, to provide you with advice on your request
• To manage the collaboration relationship between you and our team – accounting, billing, payments
• To comply with our legal record-keeping obligations,
• To prevent or combat any cyber attack or threat to our systems,
• For marketing purposes, if you have subscribed to our newsletter, we will use your data for the purpose of providing the newsletter service, as well as for the purpose of conducting a profile analysis to determine your preferences based on your browsing history on our website and to determine what type of free materials suit you, based on your interests and searches.
• To communicate with you through social networks
• To operate, evaluate and improve our services and your experience with the website and social media channels (including the development of new service niches you request, the improvement of the services already offered, the management of communication relations with users, the analysis of our services, conducting data analysis and audit analyzes)
• To be able to comply with legal requirements.

What is the legal basis on which we process the data?

We will process your data. on the basis of the following legal grounds:

• Based on your consent (in accordance with art. 6 (1) (a) GDPR) – when you agree to receive relevant and personalized content from us in order to receive newsletters from us.
• For the conclusion and performance of a contract (in accordance with Article 6(1)(b) of the GDPR Regulation) – for example, in the pre-contractual phase, at your request, certain personal data must be processed for the purpose of concluding the contract.
• For the performance of a task which serves a public interest (in accordance with art. 6 paragraph (1) letter (e) of the GDPR Regulation).in accordance with Article 39 of Law no. 51/1995, in the exercise of the profession, lawyers are indispensable partners of justice. Therefore, the professional activity of the lawyer is exercised for the purpose of justice, thus serving a public interest.
• For the purpose of a legitimate interest (art. 6 paragraph (1) lit. (F) of the GDPR) – including when we have a legitimate interest in carrying out marketing activities, research activities, data analysis, internal management, processing and enforcing legal requests, conducting our business in accordance with applicable law.

How long will we keep your data?

Your data they will only be retained for the period necessary to respond to your request if we have a warrant from you. in order to assist or represent you before authorities or courts, we will keep the data until the final settlement of the proceedings, and then delete the data or archive it, depending on the provisions of the applicable law.

Billing data is deleted after 1 year in accordance with the regulations in force.

With regard to the data processed for marketing purposes, it will be deleted when your choice is expressed. to unsubscribe.

After these retention periods expire and if there is no other legal basis for which we need to keep/process your data, it will be deleted from our systems.

Transfers of data to third parties

We will only pass on your data when we receive your instruction or permission. or when the law or certain institutions or authorities require us to do so.

We may transfer your data. Outside of Romania. If the recipients are established outside the European Economic Area, we will verify that there are judgments, laws that recognize that these countries provide an adequate level of data protection.

Processing of your data on social networks

We may have access to your profile and public profile data, as well as comments posted by you, if you choose to like us, share or leave comments on social media.

We will also have access to the content of the private messages you send us, if you choose to write to us privately on the social media pages.

We have access to general statistics about your interaction with our social media pages.

All this data is retained by us for the period necessary for the promotion of our team and services, until the closure of the social media pages.

The purpose of processing this data is to promote our team, our services, to respond to messages we receive through social media, to analyze your statistics and your interaction with our social media pages, but also to personalize advertising campaigns.

The legal basis for this data processing is our legitimate interest to promote our team and services, to maintain interaction with users, to respond to messages received through these communication channels and to have a measure of how our social media pages deliver results.

Social media networks create certain user profiles using your data, and in relation to the transfer of data, some of the social media data transmitted by you may reach outside the European Economic Area, in accordance with the terms and conditions of Google, Facebook and/or LinkedIn.

Your rights in relation to your data

Under the GDPR you have the following rights in relation to your data. personal data that we process:

• Right to be informed about the processing of your data
• Right of access to data – you can ask us for access to your data. personal data that we process.
• Right to rectify inaccurate or incomplete data – you can ask us to rectify your data. personal data that we already have.
• Right to erasure (“right to be forgotten”) – you can ask us to delete your data. personal data, where we have no other legal basis for processing them.
• Right to restriction of processing – you can ask us to suspend the processing of your data for a period of time. personal.
• Right to transmit the data we have about you To another operator – you can ask us to pass on your data. personal data to another operator.
• Right to object to data processing – where we have consent to the processing of your data. for any purpose, you have the right to withdraw it at any time.
• You have the right not to be subject to a decision based solely on automated processing, including profiling with similar legal effects or significant effects on you.
• The right to appeal to justice for the protection of your rights and interests.
• The right to lodge a complaint with a supervisory authority.

National Supervisory Authority for personal data processing

Address: B-dul G-ral. Gheorghe Magheru 28-30, sector 1, postal code 010336, Bucharest, Romania, tel. +40,318,059,211; +40,318,059,212, fax: +40,318,059,220, anspdcp@dataprotection.ro, www.dataprotection.ro

If you wish to exercise any of these rights, please send us a request to do so at the email address: contact@nest-inn.ro