Privacy Policy
This Privacy Policy explains how Ghera Lawyers collects and uses personal data through gheralawyers.com (the “Website”), when you contact us, subscribe to our newsletter or apply for a position with us.
1. Who we are
Ghera Lawyers is the trading name of Ghera și Asociații SPARL, a Romanian professional limited liability law partnership, fiscal code RO49463539 (“Ghera Lawyers”, “we”, “us”). We are the controller of the personal data described in this policy.
For any question about this policy or your personal data, you can write to us at contact@gheralawyers.com or call us at +40 762 726 347.
When we act for a client, personal data processed in that matter is also governed by our engagement terms and by the professional secrecy obligations that apply to lawyers under Romanian law.
2. What personal data we collect
Enquiries: your name, email address, the subject and content of your message, and any other information you choose to share with us through the contact form, by email or by phone.
Newsletter: your email address and a record of your subscription.
Job applications: your CV, cover letter and the information they contain, together with our correspondence with you.
Use of the Website: technical data such as IP address, browser and device type, pages visited and the date and time of your visit, collected through cookies in line with your choices, as described in our Cookie Policy, and data used by Google reCAPTCHA to protect our forms against spam.
Please do not send us confidential information, or information about health, criminal matters or other special categories of personal data, before we have confirmed in writing that we can act for you.
3. Why we use your data and on what legal basis
Replying to enquiries and preparing a possible engagement, including conflict checks: to take steps at your request before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in running our practice (Article 6(1)(f) GDPR).
Sending our newsletter: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time using the unsubscribe link in each email or by writing to us.
Assessing job applications: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR). We keep your application for future opportunities only with your consent.
Operating and securing the Website: our legitimate interest in providing a secure and functional website (Article 6(1)(f) GDPR). Analytics cookies are used only with your consent (Article 6(1)(a) GDPR and Law no. 506/2004).
Meeting our legal obligations, including the rules of the legal profession and, where applicable, anti-money laundering, accounting and tax requirements (Article 6(1)(c) GDPR).
Establishing, exercising or defending legal claims: our legitimate interest (Article 6(1)(f) GDPR).
We do not sell personal data, use it for advertising or make decisions about you based solely on automated processing.
4. Who we share your data with
We share personal data only where necessary, with:
service providers that support our practice and the Website, such as Squarespace (website hosting, forms and newsletter), our email and IT providers, and Google, which provides the reCAPTCHA spam protection used on our forms;
professional advisers, auditors and insurers, who are bound by confidentiality obligations;
courts, public authorities and bar bodies, where required by law.
5. International transfers
Some of our service providers, including Squarespace and Google, may process personal data outside the European Economic Area, in particular in the United States. Such transfers rely on the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework, where the recipient is certified under it, or on the standard contractual clauses approved by the European Commission.
6. How long we keep your data
Enquiries that do not lead to an engagement: up to 12 months from our last exchange.
Enquiries that lead to an engagement: as part of the client file, for the duration of the engagement and afterwards for as long as required by the rules of the legal profession, accounting and tax legislation and the applicable limitation periods.
Newsletter: until you unsubscribe. We keep a record of your consent and of your unsubscription for up to three years, so that we can prove them.
Job applications: up to 12 months from the end of the recruitment process, unless you agree to a longer period.
Cookies: for the periods set out in our Cookie Policy.
We may keep data for longer where it is needed to establish, exercise or defend a legal claim.
7. Your rights
Under the General Data Protection Regulation (EU) 2016/679 (“GDPR”), you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing and to data portability. Where we rely on your consent, you can withdraw it at any time, without affecting the lawfulness of the processing carried out before. You can also object at any time to the use of your data for direct marketing.
To exercise your rights, write to us at contact@gheralawyers.com. We will reply within one month, which may be extended by two further months for complex requests. Some rights may be limited where the data is covered by professional secrecy or is needed for a legal claim.
You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral Gheorghe Magheru Blvd., District 1, 010336 Bucharest, Romania, www.dataprotection.ro, or with the supervisory authority of the EU Member State where you live or work.
8. Security
We use appropriate technical and organisational measures to protect personal data, and our lawyers are bound by professional secrecy under Law no. 51/1995 on the organisation and practice of the legal profession. No transmission over the internet is completely secure, so please use the contact form only for initial, non-confidential enquiries.
9. Changes to this policy
We may update this policy from time to time. The current version is always available on this page.