GDPR Information

Your rights under the General Data Protection Regulation

GDPR Information

General Data Protection Regulation

1. What is GDPR?

The General Data Protection Regulation (GDPR) is EU legislation that protects the personal data of European citizens. It came into force on May 25, 2018 and applies to all organizations that process personal data of EU residents.

2. Our Commitment

Boga Law Firm is committed to strictly respecting GDPR provisions and protecting the personal data of our clients and website visitors.

3. Your Rights under GDPR

3.1 Right to Information (Art. 13-14)

You have the right to be informed about:

  • Identity of the data controller
  • Purposes and legal basis of processing
  • Categories of data processed
  • Data recipients
  • Storage period
  • Rights available to you

3.2 Right of Access (Art. 15)

You have the right to obtain:

  • Confirmation that your data is being processed
  • A copy of the personal data processed
  • Information about processing purposes
  • Categories of data and recipients

3.3 Right to Rectification (Art. 16)

You may request correction of inaccurate data or completion of incomplete data.

3.4 Right to Erasure - "Right to be Forgotten" (Art. 17)

You may request deletion of data in certain circumstances:

  • Data is no longer necessary for the original purpose
  • You withdraw consent
  • Data has been unlawfully processed
  • Erasure is necessary for legal compliance

3.5 Right to Restriction of Processing (Art. 18)

You may request limitation of processing when:

  • You contest the accuracy of data
  • Processing is unlawful but you don't want erasure
  • We need data for legal defense

3.6 Right to Data Portability (Art. 20)

You have the right to:

  • Receive data in a structured and usable format
  • Transfer data to another controller

3.7 Right to Object (Art. 21)

You may object to processing based on:

  • Legitimate interest of the controller
  • Performance of a task of public interest
  • Direct marketing

3.8 Right not to be Subject to Automated Decision-making (Art. 22)

You have the right not to be subject to decisions based solely on automated processing.

4. How to Exercise Rights

4.1 Written Request

Send a request to:

Email: contact@legalstudio.biz
Subject: "GDPR Rights Exercise"
Address: Bd. Pipera 2, One North, corp C6, Voluntari, Ilfov

4.2 Required Information

For identity verification, include:

  • Name and surname
  • Associated email address
  • Description of the right you are exercising
  • Request motivation (if applicable)

4.3 Response Time

We will respond within 30 days of receiving the request. In complex cases, the deadline may be extended by another 60 days.

5. Fee

Exercising rights is free. In exceptional cases (manifestly unfounded or excessive requests), we may charge a reasonable fee.

6. Complaints

If you believe your rights have been violated, you may file a complaint with:

National Supervisory Authority for Personal Data Processing (ANSPDCP)
Address: B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest
Email: anspdcp@dataprotection.ro
Phone: +40.318.059.211

7. Data Protection Officer

For specific GDPR questions, contact our data protection officer:

Email: contact@legalstudio.biz
Subject: "GDPR - Data Protection Officer"

8. Updates

This page is regularly updated to reflect legislative changes and best practices in data protection.