Legal documents
Privacy Policy
Your privacy is very important to us. This Privacy Policy explains what personal data we collect from you, how we use it, how we protect it, and the rights you have regarding your data. By using this website, you agree to the collection and use of information in accordance with this policy.
Last updated 25 June 2026
This Privacy Policy explains how Boian, Gaina & Associates SPARL processes your personal data when you visit bg-law.ro or contact us, in accordance with Regulation (EU) 2016/679 (the "GDPR") and applicable Romanian law. The use of cookies is described separately in our Cookies Policy.
1. Data Controller
The controller of your personal data is:
Boian, Gaina & Associates SPARL Louis Blanc Offices, 9 Argentina Street, 4th Floor, Sector 1, 011047 Bucharest, Romania Sole registration code (CUI): 49225030 · Bucharest Bar Association
Email: office@bg-law.ro Phone: +40 749 781 238
For any request relating to your personal data, contact us using the details above.
2. Personal Data We Collect
We collect personal data that you provide voluntarily and data generated automatically when you use the site:
- Identification and contact data – name, email address, phone number, postal address.
- Content of your communications – information you include in the contact form, emails, or other messages to us.
- Technical data – IP address, browser type, device and usage information, collected via cookies and similar technologies (see the Cookies Policy).
We do not seek to collect special categories of data (e.g., health, political opinions) through the website. Please do not submit such data via our forms.
3. Purposes and Legal Bases
We process your personal data for the following purposes, each with its legal basis under Article 6 GDPR:
- Responding to your enquiries and contact requests – to take steps at your request prior to a possible engagement (Art. 6(1)(b) – pre-contractual steps; or Art. 6(1)(f) – our legitimate interest in answering enquiries).
- Providing legal services and managing the client relationship, where an engagement follows (Art. 6(1)(b) – performance of a contract).
- Complying with legal, tax, and professional obligations applicable to a law firm (Art. 6(1)(c) – legal obligation).
- Sending newsletters or updates, only where you have subscribed (Art. 6(1)(a) – consent).
- Operating, securing, and improving the website, including optional analytics (Art. 6(1)(f) – legitimate interest; analytics cookies are used only with your consent under Art. 6(1)(a)).
4. Retention Periods
We keep personal data only as long as necessary for the purposes above:
- Contact enquiries that do not lead to an engagement: up to 2 years from the last contact.
- Client files and related documents: for the duration of the engagement and thereafter for the periods required by professional, accounting, and tax legislation (generally up to 10 years).
- Newsletter data: until you withdraw your consent / unsubscribe.
When retention is no longer justified, data is securely deleted or anonymised.
5. Recipients and Disclosure
We do not sell your personal data. We may disclose it to:
- Service providers (processors) acting on our behalf (e.g., hosting, email, IT support), bound by confidentiality and data-processing agreements.
- Public authorities or courts, where required by law or to establish, exercise, or defend legal claims.
Your data is stored within the European Economic Area (EEA). Where any transfer outside the EEA becomes necessary, we ensure appropriate safeguards as required by the GDPR.
All personal data received in the context of legal services is additionally protected by the professional secrecy obligations binding on lawyers.
6. Your Rights
Under the GDPR, you have the right to:
- Access – obtain confirmation and a copy of the personal data we hold about you.
- Rectification – have inaccurate or incomplete data corrected.
- Erasure – request deletion of your data where no longer necessary.
- Restriction – request that we limit processing in certain circumstances.
- Data portability – receive your data in a structured, machine-readable format.
- Objection – object to processing based on our legitimate interests.
- Withdraw consent – at any time, where processing is based on consent, without affecting prior lawful processing.
To exercise any of these rights, contact us at office@bg-law.ro. We will respond within the time limits set by law.
You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP) — dataprotection.ro.
7. Cookies
We use cookies and similar technologies as described in our Cookies Policy, where you can also find how to manage and withdraw your consent.
8. Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, misuse, alteration, disclosure, or destruction.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. All updates will be posted on this page, with the "Last updated" date modified accordingly.
10. Contact
For questions or to exercise your rights regarding this Privacy Policy, please contact us:
Boian, Gaina & Associates SPARL Email: office@bg-law.ro Phone: +40 749 781 238