IM Legal Boutique’s website (the “Website
”) is the property of Iuliana Mihalciuc Law Office.
1. Which are the personal data we collect through the Website, social media or other communication channels
The personal data collected by us are only those that you will provide while surfing thought our Website/ social media/ other communication channel. More specifically, each time you will want to contact us, you may provide us with personal data such as:
- the basic identity information you provide us with, such as name, e-mail address, postal address, telephone number, the company you work for, your function;
- the content of your communication and the technical details of the communication itself (with whom you correspond at our end, date and time, etc.);
- technical information associated with the device you use, such as your IP address, browser type, geographical location and operating system;
- information concerning your browsing behavior, such as how long you visit, what links you click on, what pages you visit and how many times you visit a page.
- any other personal data you choose to provide to us.
2. When are your personal data collected and used?
We collect your personal data whenever you:
- Use our website or other social media channels or communicate with us by e-mail, phone or other communication channel;
- Register to our newsletters;
- Apply for one of our vacancies
3. Which is the purpose for collecting your personal data?
We will collect and use your personal data in order to:
- allow for the communication between you and us. We need to collect your personal data in order to be able to respond to your requests, questions or remarks or to contact you for inquiries of whatever kind. The collection of your personal data is made when, for example, you respond to a blog, use our contact form or contact us via social media, phone, e-mail or fax;
- improve the Website’s and social media pages’ content and the overall experience. We rely on our own legitimate interest to monitor the manner our Website is used in order to offer our visitors an interesting online space and to improve the layout and the information available;
- protect the security and effective functioning of our Website by detecting and preventing malware, illegal content and behavior and other types of misuse. We rely on our legitimate interest to keep our online presence safe;
- be able to enter into, execute and perform our contract concluded with you as a client or supplier, while strictly complying with our obligations as a lawyer, including our deontology. When you as an individual are our client or supplier, we rely on the necessity of processing your personal data for executing and performing the contract we have with you. Should you act on behalf of a company or other legal entity, we rely on our legitimate interest to be able to contract with clients and suppliers when processing your personal data;
- defend ourselves in legal proceedings, when it is in our legitimate interest to use your personal data in these proceedings.
- assess your application, for which we rely on the necessity of processing your personal data in order to come to a potential agreement with you;
4. Are your personal data shared to third parties?
As a rule, we will not share your personal data with anyone but the team of lawyers and the people working for IMLegal Boutique, as well as our suppliers who help us process your personal data. Anyone who has access to your personal data will always be bound by strict legal or contractual obligations to keep your personal data safe and confidential. This means that only the following recipients will receive your personal data:
- authorities insofar we are required to send them your personal data.
- IMLegal Botique’s lawyers, staff and suppliers;
- your employer or business partners, but only when required given the purposes mentioned above (e.g. when your employer is our supplier or client);
5. How long do we keep your personal data?
Your personal data are only processed for as long as needed to achieve the purposes which are described above or, when we asked for your consent, up until such time where you withdraw your consent.
All personal data we collect through our interactions with you via the website, social media, phone, fax, e-mail and other digital communication channels we keep for as long as required to communicate with you, but also to keep an historical archive of our communications. This allows us to revert back to earlier communications if you return to us with new questions, request, remarks or other input.
All personal data we collect in order to send you our newsletter will be kept for as long as you remain subscribed to our mailing list or for as long as you remain our client.
All personal data we collect in the context of your application with us we will keep for the duration of the application process.
6. Which rights do you have with regard to your personal data?
When we collect and use your personal data, you enjoy a number of rights which you can exercise in the manner described below.
- You have the right to access your personal data, which means that you can ask us to provide you information regarding the personal data we have about you and ask for a copy of your personal data. Should you have such a request, please note that you must specify for which processing activities you would like to have access to your personal data.
- You have the right to ask us to correct your personal data if you can show that the personal data we process about you are incorrect, incomplete or outdated. Please specify the context in which we use your personal data (e.g. to send you newsletters or to respond to a request), so that we may assess your request swiftly and accurately.
- If we asked for your consent to collect and use your personal data, e.g. to send you newsletters, you have the right to withdraw that earlier given consent.
- You can ask that we delete your personal data, if these personal data are no longer needed for the purposes for which we collected them in the first place, if our collection of them was illegitimate or if you have successfully exercised your right to withdraw your consent or your right to object to the processing of your personal data. When one of these circumstances applies, we will immediately delete your personal data unless the law, regulatory obligations or administrative or judicial orders prohibit us to delete your personal data.
- You can ask that we restrict the processing of your personal data in the following circumstances:
- during the time we are assessing your request for correction of your personal data;
- we no longer need your personal data, but you require them for the establishment, exercise or defence of a legal claim.
- when such processing was unlawful but you prefer restriction to erasure;
- during the time we are assessing your objection to the processing of your personal data;
- When we process your personal data on the basis of our own interests, i.e. you have not given us your consent and we do not need them for the execution or performance of an agreement nor to comply with legal obligations, you have the right to oppose our processing of your personal data. When our interest relates to direct marketing, we will grant you your request immediately. For other interests, e.g. our security interests, we will ask you to describe your specific circumstances giving rise to request. We then need to balance your circumstances against our interests. If this balancing exercise results in your circumstances outweighing our interests, we will cease processing your personal data.
- When we have collected your personal data on the basis of your consent or because they were necessary for the execution or the performance of an agreement with you, you have the right to obtain a copy from us in a structured, commonly used and machine-readable format. However, this right only applies to personal data you have provided to us.
If you would like to exercise any of these rights, we ask that you send us an e-mail. You can reach us at firstname.lastname@example.org
. A request should clearly state and specify which right you wish to exercise. Always indicate the context in which we have obtained your personal data so that we may handle your request swiftly and diligently. Your request should also be dated and signed, and accompanied by a digitally scanned copy of your valid identity card proving your identity. We will promptly inform you of having received this request. If the request proves valid, we will notify you as soon as reasonably possible and at the latest 30 (thirty) days after having received the request.
If you have any complaint regarding the processing of your personal data by us, you may always contact us via the e-mail address mentioned in the first paragraph of this clause. If you remain unsatisfied with our response, you may file a complaint with the competent data protection authority, i.e. the Romanian data protection authority (https://www.dataprotection.ro/)