Legal

Privacy Policy

Mihaela Maravela Law Office is a personal data controller in relation to your personal data. Mihaela Maravela Law Office is aware of the importance of your personal data and undertakes to protect its security and confidentiality in accordance with the Regulation no. 679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation — GDPR).

This Privacy Policy explains how we collect and use your personal data and which rights and options you have in this matter. Mihaela Maravela Law Office will only process your personal data to the extent that it is necessary for the purposes set out below, with due observance of the legal safeguards and confidentiality of the data. This policy was last updated on the date below and may vary from time to time so please check it regularly. The changes will take effect as soon as they are posted on this Website.

Responsibility for your personal data

Mihaela Maravela Law Office, registered with the Bucharest Bar Association under Decision no. 336 of 6 February 2020 is responsible for and controls your personal data, as data controller.

Types of personal data we collect

The personal data we collect may include both general data (e.g. name and surname, function, the name of the employer) and special identification data number and series of your identity card, personal ID code:

contact information, such as your name, job title, phone number, fax number, email address, business address, including your home address (where you have provided this to us);
financial data such as IBAN number of the bank account and bank details where you have your bank account open;
technical information such as IP address, log-in details and other technical information collected by visiting our Website;
information collected following any meeting with us;
further business information necessarily processed in a project or client contractual relationship with the Office or voluntarily provided by you, such as instructions given, payments made, requests and projects;
information collected from publicly available resources;
information about your membership of a professional or trade association or union;
other personal information submitted for the provision of legal services. Some of these information falls under the category of special data, such as health related data, political opinion, data regarding criminal convictions and offences etc.
when visitors leave comments on the site we collect the data shown in the comments form, and also the visitor's IP address and browser user agent string to help spam detection.

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included. Visitors to the website can download and extract any location data from images on the website.

Articles on this site may include embedded content (e.g. videos, images, articles, etc.). Embedded content from other websites behaves in the exact same way as if the visitor has visited the other website. These websites may collect data about you, use cookies, embed additional third-party tracking, and monitor your interaction with that embedded content.

Ways in which your personal data is collected and used

We may collect personal data about you in a number of ways, including:

when you or your organisation browse, make an enquiry or otherwise interact on our Website;
when you or your organisation seek legal advice from us or when we do;
when you or your organisation attend a meeting with us;
when you or your organisation are in touch with us or via e-mail or otherwise;
when you attend a seminar or another event of the Office or sign up to receive personal data from us, including training;
when you or your organisation offer to, or request us to, provide services;
through recruitment procedure: we may collect your personal data included in your CV and cover letter when you apply for a job / internship opportunity directly on our Website;
through cookies: our Website uses cookies to permit the proper functionality of the Website and to benefit of the safe areas of the Website.

If you request a password reset, your IP address will be included in the reset email.

Purposes for using your personal data

We may use your personal data for the following purposes only ("Permitted Purposes"):

to provide legal advice or other services or things you or your organisation may have requested;
to monitor and assess compliance with our policies and standards;
to manage and administer our relationship with you and our clients;
to comply with our legal and regulatory obligations and requests anywhere in the world;
to analyse and improve our services and communications to you;
to protect the security of and managing access to our premises, IT and communication systems;
for insurance purposes;
to identify persons authorised to trade on behalf of our clients;
to comply with court orders, court or arbitral decisions/awards and exercises and/or defend our legal rights;
to manage the collaboration and employment contracts;
for the purposes of recruitment;
for any other purpose for which you provide your personal data to the Office.

Following your express and unequivocal consent, we may process your personal data also for marketing purposes, by sending newsletters, legal updates, invitations to events or publications of interest to you. We do not use the personal data for automated processing nor for creating profiles.

Legal grounds for processing your personal data

Depending for which of the above Permitted Purposes we use your personal data, we may process your personal data on one or more of the following legal grounds:

to perform a client instruction or other contract with you or your organisation;
based on our legitimate interest or those of any third party recipients;
to comply with our legal and regulatory obligations;
for the establishment, exercise or defence of legal claims or proceedings; and/or
where we have obtained your express consent.

Sharing your personal data

We may share your personal information with certain third parties in accordance with contractual arrangements in place with them, including:

lawyers, experts, auditors, accountants, notaries, bailiffs, subcontractors, consultants, mediators, IP counselors, public authorities, service providers, etc;
suppliers to whom we outsource certain support services such as word processing, translation, photocopying and document review;
IT service providers;
third parties involved in hosting or organising events or seminars.

Where necessary, or for the reasons set out in this policy, personal information may also be shared with regulatory authorities, courts, tribunals, government agencies and law enforcement agencies.

Storage of your personal data

We will take appropriate technical and organisational measures to keep your personal data confidential and secure in accordance with our internal procedures covering the storage, disclosure of and access to personal data.

Your personal data will be deleted when it is no longer reasonably required for the Permitted Purposes or you withdraw your consent (where applicable) and we are not legally required or otherwise permitted to continue storing such data.

Your rights

The European Union's General Data Protection Regulation and other applicable data protection laws provide certain rights for data subjects:

Right of access: you are entitled to request access to your personal data.

Right of rectification: in case the personal data that we retain appears to be inaccurate or incomplete, you may ask us to correct or complete it at any time.

Right of erasure: you may ask us to have your personal data erased if it is no longer necessary for us to keep it.

Right to restrict the processing: you may ask us to limit the way in which we process your personal data.

Right to opposition: you may object to our processing of your personal data on grounds relating to your specific situation.

Right to data portability: you may ask us to send you your personal data in an electronic, structured, commonly-used and machine-readable format.

Right to withdraw your consent: when the processing is done based on consent, the data subjects have the right to withdraw their consent at any time in writing to us.

Right to file a complaint: you also have the right to contact us at any time if you wish to complain about our processing of your personal data.

Right to not be subject of an automated individual decision-making, including profiling: your personal data are not subject to any decisional process based solely on automated processing, including profiling.

Personal data about other people which you provide to us

If you provide personal data to us about someone else you must ensure that you are entitled to disclose that personal data to us and that, without our taking any further steps, we may collect, use and disclose that personal data as described in this Privacy Policy.

Cookies

We use cookies to enhance your experience on our website. For more information, please see our Cookie Policy.

Version: March 2026