Rada & Asociații SCA (“R&A“, “we“, “our” or “us“) is committed to protecting your privacy and ensuring that your personal data is processed lawfully, fairly and transparently.

This Privacy Policy explains how we collect, use, disclose and protect personal data through www.rada.ro (the “Website“), as well as the rights available to individuals under applicable data protection legislation, including Regulation (EU) 2016/679 (“GDPR“).

1. Data Controller

The controller responsible for the processing of your personal data is:

Rada & Asociații SCA

155 Piața Victoriei, Wing 8, 3rd Floor

Sector 1, Bucharest 010073

Romania

Registered with the Bucharest Bar pursuant to Decision No. 2348/2011

Registration Code: RO29606561

E-mail: office@rada.ro

2. Categories of Personal Data We Process

Depending on how you interact with the Website, we may process different categories of personal data.

These may include:

  • name;
  • e-mail address;
  • telephone number;
  • information contained in your enquiry or message;
  • curriculum vitae;
  • cover letters;
  • diplomas and certificates;
  • professional experience;
  • references and recommendation letters;
  • documents uploaded through the recruitment form;
  • technical information relating to your interaction with the Website (where applicable);
  • cookie-related information.

We do not intentionally collect special categories of personal data unless you voluntarily include such information in documents submitted to us.

3. Contact Requests

If you contact us through the contact form available on the Website or by e-mail, we process the personal data that you choose to provide, including your name, e-mail address and the contents of your message.

We process such data for the purposes of:

  • responding to your enquiry;
  • communicating with you;
  • assessing whether legal services may be provided;
  • taking steps prior to entering into a contractual relationship, where applicable.

Legal basis

  • Article 6(1)(f) GDPR – our legitimate interest in responding to enquiries;
  • where applicable, Article 6(1)(b) GDPR – taking steps prior to entering into a contract.

We retain contact requests only for as long as reasonably necessary to respond to your enquiry and, where appropriate, for the period required to establish, exercise or defend legal claims.

4. Recruitment

If you submit an application through the Careers section or the recruitment form available on the Website, we process the personal data contained in your application documents.

This may include:

  • name;
  • contact details;
  • curriculum vitae;
  • cover letter;
  • education;
  • qualifications;
  • employment history;
  • language skills;
  • professional references;
  • any additional information voluntarily provided by you.

We process such information solely for recruitment purposes, including:

  • assessing your qualifications;
  • evaluating your suitability for available positions;
  • communicating with you during the recruitment process.

Legal basis

Article 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract.

Where your application is not successful, we may retain your application for future recruitment opportunities for up to 12 months, unless you object or request earlier deletion.

Submission of an application does not guarantee employment, create any contractual relationship or oblige R&A to continue the recruitment process.

5. Newsletter

If you subscribe to our newsletter, we process:

  • your e-mail address;
  • your name (where voluntarily provided).

We process this information exclusively for sending legal updates, publications and other communications relating to our areas of practice.

Legal basis

Article 6(1)(a) GDPR – your consent.

You may withdraw your consent at any time by using the unsubscribe link included in each newsletter or by contacting us at office@rada.ro.

6. Cookies

The Website uses cookies and similar technologies to ensure its proper functioning and improve user experience.

Necessary cookies are used to enable core Website functionalities and do not require consent under applicable legislation.

Where non-essential cookies are used, they will only be placed following your consent through our cookie management platform.

Detailed information regarding the cookies used, their purpose, duration and your available choices is available in our Cookie Policy.

7. Legal Bases for Processing

Depending on the circumstances, we process personal data on one or more of the following legal grounds:

  • your consent (Article 6(1)(a) GDPR);
  • performance of a contract or taking steps prior to entering into a contract (Article 6(1)(b) GDPR);
  • compliance with legal obligations (Article 6(1)(c) GDPR);
  • our legitimate interests (Article 6(1)(f) GDPR), provided such interests are not overridden by your fundamental rights and freedoms.

8. Recipients of Personal Data

Personal data is accessed only by persons who require such access for legitimate business purposes.

Where necessary, personal data may be disclosed to:

  • IT service providers;
  • website hosting providers;
  • cloud storage providers;
  • e-mail service providers;
  • recruitment service providers;
  • professional advisers;
  • competent courts, public authorities or regulatory bodies where disclosure is required by law.

All third-party service providers are required to process personal data in accordance with applicable data protection legislation.

9. International Transfers

As a rule, R&A does not transfer personal data outside the European Economic Area.

Should an international transfer become necessary, it will only take place where appropriate safeguards have been implemented in accordance with Chapter V GDPR, including, where applicable, the European Commission’s Standard Contractual Clauses or another recognised transfer mechanism.

10. Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or to comply with legal obligations.

In particular:

  • contact requests – for the period necessary to respond to your enquiry and, where appropriate, to establish, exercise or defend legal claims;
  • recruitment applications – during the recruitment process and, unless you request otherwise, for up to 12 months thereafter;
  • newsletter subscriptions – until you withdraw your consent;
  • cookies – in accordance with our Cookie Policy.

When retention is no longer necessary, personal data will be securely deleted or anonymised.

11. Security

R&A implements appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

Although we apply industry-standard security measures, no electronic transmission or storage system can be guaranteed to be completely secure.

12. Your Rights

Subject to the conditions laid down by applicable law, you may exercise the following rights:

  • the right of access;
  • the right to rectification;
  • the right to erasure (“right to be forgotten”);
  • the right to restriction of processing;
  • the right to data portability;
  • the right to object to processing carried out on the basis of legitimate interests;
  • the right to withdraw consent at any time where processing is based on consent;
  • the right not to be subject to automated decision-making, including profiling, where applicable;
  • the right to lodge a complaint with the competent supervisory authority.

We do not carry out automated decision-making or profiling within the meaning of Article 22 GDPR.

We will respond to requests without undue delay and, in any event, within one month of receipt, unless applicable law permits a longer period.

Where necessary, we may request additional information to verify your identity before acting upon your request.

13. Supervisory Authority

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with:

The National Supervisory Authority for Personal Data Processing (ANSPDCP)

28-30 General Gheorghe Magheru Boulevard
District 1, Bucharest 010336
Romania

You may also seek judicial remedies in accordance with applicable law.

14. Children’s Privacy

The Website is intended for individuals aged 16 years or older.

We do not knowingly collect personal data from children under the age of 16.

If we become aware that personal data relating to a child has been submitted without appropriate legal basis, we will delete such information without undue delay.

15. Changes to this Privacy Policy

We may update this Privacy Policy from time to time in order to reflect changes in applicable legislation, regulatory guidance or our processing activities.

The latest version will always be available on this Website, together with the date of its latest revision.

Continued use of the Website after publication of an updated version constitutes acknowledgement of the revised Privacy Policy.

16. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact:

Rada & Asociații SCA
155 Piața Victoriei, Wing 8, 3rd Floor
Sector 1, Bucharest 010073
Romania
E-mail: office@rada.ro