Privacy Policy
Last updated: January 2025
1. Data Controller
Boga Law Firm
Headquarters: Bd. Pipera 2, One North, corp C6, Voluntari, Ilfov
Email: contact@legalstudio.biz
Phone: 0746 991 159
2. Personal Data Collected
We collect the following categories of personal data:
- Identification data: name, surname
- Contact data: email address, phone number
- Professional data: company, position (optional)
- Navigation data: IP address, browser, date and time of access
- Communications: content of messages sent through contact form
3. Processing Purposes
We process personal data for:
- Providing requested legal services
- Responding to consultation requests
- Communication with clients and potential clients
- Improving offered services
- Complying with legal obligations (document archiving)
- Website traffic analysis for optimization
4. Legal Basis
Processing is based on:
- Consent for marketing and promotional communications
- Contract performance for legal services
- Legitimate interest for service improvement
- Legal obligation for document archiving
5. Data Sharing
We do not sell, rent or distribute personal data to third parties, except:
- Competent authorities (upon legal request)
- IT service providers (with confidentiality agreements)
- Case collaborators (with client consent)
6. International Transfers
Data may be transferred to EU service providers who comply with GDPR standards. We do not transfer data outside the European Economic Area without adequate safeguards.
7. Retention Period
- Active clients: duration of contractual relationship + 10 years
- Consultation requests: 3 years from last communication
- Marketing data: until consent withdrawal
- Legal obligations: according to applicable legal terms
8. Your Rights (GDPR)
In accordance with GDPR, you have the following rights:
- Right of access - to obtain a copy of processed data
- Right to rectification - to correct inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restriction of processing
- Right to data portability
- Right to object to processing
- Right not to be subject to automated decisions
9. Data Security
We implement adequate technical and organizational measures to protect data:
- Transmission encryption (SSL/TLS)
- Restricted data access on a need-to-know basis
- Regular and secure backups
- Continuous staff training in data protection
10. Cookies and Similar Technologies
We use cookies according to the Cookie Policy. You can manage cookie preferences in your browser settings.
11. Exercising Rights
To exercise rights or for questions about this policy:
Email: contact@legalstudio.biz
Subject: "Personal Data Protection"
Phone: 0746 991 159
12. Complaints
You have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) if you consider that processing violates GDPR.