Privacy Policy

Effective Date: October 1, 2025
Last Update: October 1, 2025

At LiA Law Office, we value the trust you place in us. Protecting your personal data is a responsibility we take seriously, both as a matter of professional ethics and legal compliance. The data controller is Liviță Andreea-Alexandra – Cabinet de Avocat, operating under the brand “LiA Law Office” (“LiA Law Office”, “we”, “us” or “our”). This website (the “Website”) is not intended for children under the age of 18, and we do not knowingly collect personal data from them. If you are under 18, you must obtain parental or guardian consent before providing personal data. By using the website, you confirm that you are over 18 or have obtained such consent.

WHAT DOES THIS PRIVACY POLICY COVER?

This Privacy Policy explains how we collect, process, and safeguard personal data, in line with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and any other legislation applicable in Romania. Our aim is to make sure that your data are safe and secure, used only for legitimate purposes, and that you always remain fully informed and in control. This Privacy Policy applies to:

users of our Website;
clients and potential clients;
representatives, employees, or associates of clients and potential clients;
business partners and their representatives, employees, or associates;
job or internship applicants;
visitors to our premises;
participants in events organized by or with our involvement.

WHAT IS PERSONAL DATA?

Personal data is any information relating to an identified or identifiable natural person. An identifiable person is someone who can be identified directly or indirectly, for example by reference to an identification number, contact details, professional role, or other factors specific to their physical, economic, cultural, or social identity.

HOW DO WE COLLECT YOUR PERSONAL DATA?

We collect personal data in several ways:

through our Website, www.lialaw.ro, or while monitoring our technology tools;
via e-mails or other communication with you;
through business acceptance and as necessary in the course of providing legal services;
during offline interactions (meetings, phone calls, or face-to-face discussions);
at events organized by or with our involvement;
from other sources: publicly available sources may be used to keep your contact details up to date.

WHAT PERSONAL DATA DO WE COLLECT?

1. Website Users When you use the Website, we use cookies to automatically collect technical information, such as your IP address, type of browser, operating system, number of visits, time spent on the Website, method of accessing the Website, behaviour on the Website and traffic generated on our Website. For more information in this regard, please consult our Cookies Policy. Also, when you access and use the contact form, we collect and process the data provided by you directly, such as your name, phone number, message and email address, so that we can respond to your request. If you subscribe to our newsletter, we will also collect your name, phone number and email address for communication purposes, based on your explicit consent. You may withdraw your consent at any time by using the unsubscribe link included in our communications or by contacting us directly. Withdrawing consent does not affect the lawfulness of processing carried out before such withdrawal. We also use personal information to understand whether you read the emails and other materials, such as legal publications that we send to you, click on the links to the information that we include in them and whether and how you visit our Website after you click on that link (immediately and on future visits). We do this by using software that places a cookie on your device which tracks this activity and records it against your email address. Please see our Cookie Policy for more information and instructions on managing or removing these cookies. Removal of these cookies will not affect your experience on our Website. 2. Clients, Representatives, and Business Partners When providing legal services, or carrying out our activity, including our client acceptance, finance, administration and marketing processes, anti-money laundering, conflict, reputational and financial checks, we process documents and information that could contain personal data, including special categories of data (e.g., health data, criminal records), strictly when necessary for establishing, exercising, or defending legal claims, or when required for reasons of substantial public interest under applicable law. Such data will always be protected by legal professional secrecy and may include:

contact details: name, email, phone, fax, address;
identification data (for contracts or legal proceedings);
any data provided for legal services, including special categories (e.g., health, criminal records) where necessary for legal claims or professional secrecy.

During an engagement, or when preparing for/ in relation to an engagement, we may collect and process personal data about our clients, prospective clients, their affiliates, their representatives or the relevant members of their personnel. All personal data processed by us are necessary to fulfil the purposes for which they were collected, as indicated below. Please note that if you provide information about third parties, you must have informed them about this Privacy Policy and established a legal basis for sharing their data with us. 3. Job/ Internship Applicants If you upload or send to us any recruitment documents (e.g., CVs, contact data), we may process personal data contained in those materials, with your explicit consent or based on our legitimate interest in recruitment. 4. Visitors and Event Participants We will collect and process personal information about you in relation to your attendance at our offices or at an event or seminar organised by us or our business partners, such as visitor data for security purposes, photo or video recordings at events, etc. We will only process and use special categories of personal information about your dietary or access requirements in order to cater for your needs and to meet any other legal or regulatory obligations we may have. Note: If you provide data about other people, please make sure they are informed of this Privacy Policy.

WHY DO WE NEED YOUR PERSONAL DATA?

Website functionality, analytics, and security;
providing legal services and consultancy;
managing client relationships and contracts;
complying with our legal, regulatory, accounting, reporting and professional obligations;
communicating with you and responding to inquiries;
newsletter distribution and event invitations (with consent);
ensuring the security of premises and participants in events;
for the purposes of recruitment.

ON WHAT LEGAL BASIS DO WE PROCESS YOUR DATA?

performance of a contract or pre-contractual steps;
legal obligations (e.g., accounting, archiving, compliance with regulations);
legitimate interests (e.g., IT security, protecting our rights in court, optimising Website performance) and legitimate business purposes;
consent (e.g., cookies, newsletter subscriptions, or other marketing communications);
special categories of data only when necessary for legal claims, substantial public interest, or with explicit consent.

WHO DO WE SHARE YOUR DATA WITH?

We never sell or rent your data. However, we may rely on trusted third parties for technical, professional, or consultancy services.

courts and public authorities, when required by law;
professional advisors, auditors, collaborators and consultants (lawyers, accountants, experts, IT), bound by confidentiality;
suppliers to whom we outsource certain support services such as word processing, translation, photocopying and document review;
third parties engaged in the course of the services we provide to clients and with their prior consent, such as technology service providers like data rooms;
third parties involved in hosting or organising events or seminars;
service providers (e.g., marketing, hosting and IT solutions) who are contractually bound to protect your data;
third-party platforms for newsletter or social media communications, subject to GDPR safeguards.

Data stored outside the EEA only occurs with appropriate safeguards (SCCs, adequacy decisions, encryption).

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

We retain personal data only as long as necessary for the purposes for which it was collected, in accordance with legal and professional obligations.

Data Category	Purpose	Legal Basis	Retention Period
Contact form details (name, email, message)	Responding to enquiries	Consent; pre-contractual steps	12 months from last communication
Newsletter subscription data (name, email)	Sending newsletters and updates	Consent	Until withdrawal of consent
Client file information	Providing legal services and advice	Performance of a contract; legal obligations; legal claims	Duration of contract + 10 years
Technical data (cookies, IP, device info)	Website functionality, analytics, security	Consent; Legitimate interest	Up to 24 months

WHAT HAPPENS AFTER PROCESSING ENDS?

We process personal data only for the period necessary to achieve the data processing purposes explained in the above sections, for each category of data subjects, while complying with the legal requirements in force.

YOUR RIGHTS

As a data subject, you have the following rights: access, rectification, erasure, restriction, portability, objection, complaint to ANSPDCP, and withdrawal of consent at any time. Contact:
LIVIȚĂ ANDREEA-ALEXANDRA – CABINET DE AVOCAT
Registered Office: 10 Banul Udrea Alley, District 3, Bucharest
Phone: +40 731 945 818
E-mail: andreea@lialaw.ro