Privacy policy

1. Preamble

DBP Insolvency and restructuring (hereinafter referred to as “DBP Insolvency and restructuring“, “us” or “we“) is required by law to protect the personal data and to comply with all data protection regulations, including but not limited to the EU General Data Protection Regulation No. 2016/679 (hereinafter referred to as “GDPR“).

In this document we detail the following aspects:

• what types of personal data we process about you;

• what are the purposes for which we process your personal data and what are the legal grounds for such processing purpose;

• duration of the personal data processing;

• who are the people with whom we share your personal data;

• how can you exercise your rights under the applicable legislation.

Personal data means any information relating to an identified or identifiable natural person, the latter being the person who can be identified directly or indirectly by reference to specific elements of identification or identity. Specifically, the personal data we process includes data such as name, surname, telephone number, e-mail address, business address, position within a company, or other details about personal or material situations, such as date of birth, age, sex, various national identification numbers, videos, correspondence, photographs, etc. Personal data may also include special categories of data, such as medical data or data relating to criminal proceedings.

This data privacy statement refers to the processing we carry out regarding the personal data of our clients and our business partners, of their representatives, employees, and collaborators, of our collaborators, of the persons who are interested in becoming associate attorneys within DBP Insolvency and restructuring or of the persons who contact us for exercising their rights under the data protection law or for any other reasons.

2. Purposes and grounds for data processing

We process the following personal data for the following purposes and based on the following legal grounds:

In relation with DBP Insolvency and restructuring clients and their representatives

If you are a client or potential client of ours or a representative (including legal representative, employee, or collaborator) of one of our clients, we will use your identification and contact information in order to prepare and / or provide our services, as well as to communicate with you, in reliance on the legal relationship between us and you / our client, thus based on the contractual relationship between client and attorney. The legal ground for processing your personal data, in this case, is the execution of our contracts for legal assistance and representation or taking steps to conclude such a contract (art. 6 paragraph 1 letter b) GDPR), if you are or want to become a client respectively, our legitimate interest in ensuring the proper performance of the contracts to which we are party or which we wish to conclude (art. 6 para. 1 letter f) GDPR), when you are our client’s representative.

We will process your contact details based on our legitimate interest (art. 6 para. 1 letter f) GDPR) to optimize our contact management with you. Furthermore, based on our legitimate interest, we may process your personal data for the internal purposes of Domokos Partners, which include the billing of our services and the administration of Domokos Partners contracts and contacts.

At the same time, we inform you that following the regulations in force on the prevention of money laundering, we are obliged in certain situations to comply with the statutory obligations to verify, monitor, report, and keep records of customers. Specifically, we may be obliged to require proof from you and your beneficial owner(s) and, as the case may be, from your management or from natural or legal persons for whom you are acting as a representative, satisfactory identity and, where appropriate, the power of representation. We will perform such data processing only to comply with our legal obligations (art. 6 para. 1, letter c) GDPR).

Please note that, in certain situations, we may have to refrain from accepting an engagement if you do not provide or incompletely provide us with the personal data that is necessary to perform and implement our legal services.

If you disclose to us your or your relatives’, coworkers’ or other third parties’ personal data and/or business or trade secrets, we generally assume that you are authorized to disclose this data. We will use such data only to the extent this is necessary for the proper establishment and processing of our mandate or contractual relationship with you or your company. At the same time, we kindly ask you, to the extend possible, to inform these third parties about the disclosure of their data to DBP Insolvency and restructuring and about the processing of their data by DBP Insolvency and restructuring in accordance with this privacy notice.

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfil any other obligations, we have according to the applicable legislation or statutory provisions, or if we deem such data necessary for the establishment, exercise or defense of our rights. We may also use your personal data for statistical purposes, only after such data has been priorly anonymized.

In relation with our contractual partners, service providers or associates, or their representatives, respectively

If you are a business partner, service provider or collaborator of DBP Insolvency and restructuring, or a representative thereof, we will process your personal data to assure the smooth performance of our contractual relationship with you, or with your company.

We will collect your personal data (name, surname, personal identification number, if applicable, identity card information, if applicable, e-mail, phone number, professional address) directly from you or from your company at signing or for the performance of the contracts concluded with you/ your company, and to communicate with you. At the same time, we may obtain your personal data mentioned above from public sources (e.g. your employer’s website, trade registry, etc.), or from the correspondence/notifications you or your company send(s) to us.

When we have direct contact with you, we process your personal data in order to perform our rights and obligations provided under our service/ collaboration agreement concluded with you (art. 6 para. 1 letter b) of GDPR). When our contract is concluded with your company, we will use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to conclude and/or perform the contract concluded with your company. Also, based on our legitimate interest we may process your personal data for DBP Insolvency and restructurings’ internal purposes, including service billing and contracts or contacts administration.

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfil any other obligations we may have according to the applicable legislation or statutory provisions, or if we consider such data necessary in order to establish, exercise or defend our rights.

We may also use your personal data in order to fulfil any other obligations we have according to the applicable legislation or statutory provisions (art. 6 para. 1 letter c) of GDPR).

In relation with other third parties

Depending on the scope of work and the extent of our mandate, we may also process personal data of third parties (opponents, opponents’ lawyers, employees or collaborators of our clients or the opponents, authorities’ representatives). We may obtain your data directly from you or from the company you represent, from our clients or our clients’ representatives, as well as from public sources (public registers, authorities’/companies’ websites).

We will process such personal data only to the extent necessary to perform our rights and obligations provided under the mandate granted to us by our client (art. 6 para. 1 letter f) of GDPR).

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfill any other obligations we have according to the applicable legislation or statutory provisions, or if we deem such data necessary for the establishment, exercise or defence of our rights. We may also use your personal data to fulfil any other obligations we have according to the applicable legislation or statutory provisions (art. 6 para. 1 letter c) of GDPR).

In our marketing activities

Our marketing activities are addressed to our existing clients and to other interested third par- ties (employees/collaborators of DBP Insolvency and restructurings’ clients, potential or former clients and/or their representatives, other lawyers, DBP Insolvency and restructurings’ collaborators or potential collaborators, authorities’ representatives, journalists, participants at our events or at events where we participate). The processing activities we carry out in our marketing activities concerning persons mentioned above relate to the following:

a) Newsletter

We will process your contact details in order to send you our newsletter on the latest legal information in Romania, based on your consent, which you can withdraw at any time by expressing your wish to not receive such communications in the future. The withdrawal of your consent will not affect the processing performed by us until that moment.

b) Refferals

We may process your contact details (name, surname, company, phone number, e-mail, city, country) for marketing purposes, through legal directories.

In marketing activities regarding legal services, the term “Legal Directories” describes a series of products released by companies that, based on independent research, assess, identify, and rank by performance lawyers and law firms active in various jurisdictions and practice areas. The purpose of this marketing activity is to obtain credible third-party endorsement from internationally recognized research organisms, and ultimately to use the rankings and recommendations released by the Legal Directories regarding DBP Insolvency and restructuring and our lawyers and consultants, as a differentiation means in our promotional activities, and as a profile-raising/branding marketing technique.

For this purpose, DBP Insolvency and restructuring contributes with details in the research performed by three companies that constitute international Legal Directories: Chambers and Partners, Legal500 and IFLR1000 (the „Legal Directories”).

The research method of these Legal Directories is based on collecting feedback from clients/ former clients, consultants, and/or other lawyers. As part of this research process, we are required to supply a list of referees, whom the Legal Directories may interview via telephone or e-mail during their research. All Legal Directories base their research on these referees’ feedback. The referees can be clients, former clients, counter-party lawyers in various projects, other consultants or experts in general, or persons who know about our activity. The Legal Directories ensure that interviews with referees (either conducted by phone or in writing) are non-attributable, and any quotes they publish are anonymous.

In this context, we will ask for your explicit consent to send your contact details to the Legal Directories, to carry out the abovementioned research. The legal grounds for such processing is represented by your consent, (art. 6 para. 1 letter a) of GDPR). You can withdraw your consent at any time; however, the withdrawal of consent will not affect in any way the processing we have performed before the withdrawal.

c) Social Media and website

DBP Insolvency and restructuring uses the social media pages LinkedIn and Facebook, and the website https://www.dp-insolvency.ro to promote its activities.

Therefore, the data disclosed about you via our social media pages may include images from DBP Insolvency and restructuring Events, where you participated, as well as your name, position/profession and company, if you participated as speaker at a certain Event. Regarding the website, we may publish information about Events, including speakers’ personal data (name, position/ profession and company).

We will carry out such processing activity only based on your consent (art. 6 para. 1 letter a) of GDPR), which you can withdraw at any time; such withdrawal will not affect any prior processing activities carried out by us.

In relation with our headquarters’ visitors

a) WI-FI connection

If you want to connect to our WI-FI network during your visit to our office, our system will allocate automatically a dynamic, randomly generated IP address that is not able to identify you or your device, and which will be stored only during the connection to the system.

In relation with the persons interested in becoming associate attorneys of DBP Insolvency and restructuring

If you are interested in a possible position as a collaborating lawyer of DBP Insolvency and restructuring, we will process your data that you transmit to us when applying (such as identification data, e-mail address, data that you decide to include in your CV, correspondence with you, possible answers to professional assessment tests, etc.), to evaluate your application and to decide to what extent you are suitable for the open position within DBP Insolvency and restructuring.

We perform the above data processing, based on the preliminary steps at your request before concluding the collaboration contract (art. 6 para. 1 letter b) of GDPR).

When you exercise your rights under the GDPR

When you exercise your rights provided under the GDPR, as a data subject, we must process your data (name, surname, image, other data included in your identification card, other data you choose to send us) in order to manage your requests under the GDPR. In this case, the processing ground for using your personal data is represented by our legal obligation (art. 6 para. 1 letter c) of GDPR).

The establishment, exercise, and defense of our rights

We have a general interest to establish, exercise, and defend our rights, and we consider it is reasonable to invoke specific documents and information for this purpose, including when they reveal personal data about you. We will do this only under strict observance of our statutory confidentiality obligation and by limiting the data we use as much as possible. In this case, the processing ground is represented by our legitimate interest (art. 6 para. 1 letter f) of GDPR).

We emphasize that whenever we process your personal data based on our legitimate interest, you have the right to object to such processing. For details, please refer to Section 3 below.

3. Your rights in connection with your personal data

As a data subject according to GDPR, you have the right of access and information on your personal data that we process, on their origin and recipients, the duration of storage, and the purpose of data processing.

If we process inaccurate or incomplete personal data, you have the right to rectification or completion of such data.

You may also request us to erase your data, which is processed unlawfully. You will be entitled to exercise this right in specific situations set out in the GDPR. If in exercising this right, we will consider that we can keep your data for certain purposes, we will inform you in this respect within the applicable legal periods.

If it is unclear whether your data are inaccurate, incomplete, or unlawfully processed, you may request us to restrict the processing of your data until the matters raised by you are finally solved.

At the same time, you have the right to oppose the processing of your personal data when we process these data relying on legitimate interest. If you exercise your right to oppose, we kindly ask you to indicate the reasons for doing so. If you send us a reasoned opposition request, we will consider the facts, and, either we will cease/adjust our processing activities, or we will inform you of our legitimate and justified reasons for which it is necessary to continue the processing of your personal data.

In certain cases, you also have the right to receive your personal data processed by us in a machine-readable format of our choice, or to instruct us to transmit such data directly to a third party of your choice; we will not object to transmitting your data to the third party you designated in such circumstance.

As mentioned above, when we process your data relying on your consent, you have the right to withdraw your consent at any moment, such withdrawal of consent not affecting the lawfulness of processing based on consent before the withdrawal moment.

You can exercise any of the rights above-mentioned by a written request using any of the contact details mentioned in Section 7 below. We kindly ask you to send us, together with your inquiries, a copy of an identity document to verify your identity.

We ask that you notify us of any change in your personal data that you provided to us.

Despite our best efforts to guarantee the protection and integrity of your data, we cannot fully rule out the possibility of any contradictions regarding the nature of the use of your data use. If you consider that we are unlawfully using your data, you may complain directly with the Romanian Data Protection Authority. However, we hope that you will contact us first so that together we can resolve and eliminate any queries, unclarities, or other matters that you may point to us.

4. Data security

We have taken appropriate organizational and technical measures to ensure your personal data protection, particularly against unauthorized, unlawful, or accidental access, processing, loss, use, and modification.

Despite our efforts of ensuring an appropriately high standard of security requirements at all times, it cannot be ruled out that the information you have provided via the internet will be accessed or used by other persons.

Please note that we cannot assume any liability of any kind for the disclosure of information due to errors in the data transfer and/or unauthorized access by third parties, not imputable to us (e.g. hacking of e-mail accounts, telephone, or interception of fax messages).

We aim to ensure that data security incidents are detected at an early stage and immediately reported to you or the competent authorities, in accordance with applicable legal requirements.

5. Recipients of your personal data

Depending on the purpose and extent of our mandate, as well as the purposes of data processing, we may transmit your data to the following categories of recipients:

Recipients of clients/clients’ representatives data

• Persons/entities that are or may be connected to the object of the contract concluded between us and the client (courts and arbitration commissions, other public authorities, opposing parties, lawyers/ consultants/ representatives of the opposing party, services providers, etc.) in view of rendering our services;

• Services providers/collaborators involved in the performance of the mandate that you entrusted us with (including our data processors);

• Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or de- fend our rights;

• Our web-hosting, email hosting and billing service providers, as proxies.

 

Recipients of our services providers’/ collaborators’ data, or of their representatives

• As a rule, we do not transmit such data to third parties, except for when this is required by public authorities, in accor- dance with the law, or if the data is needed to establish, exercise, or defend our rights.

Recipients of other third parties’ data

• DBP Insolvency and restructurings‘ client who entrusted us the mandate, based on the contract we concluded with the client;

• Other persons/ entities that are or may be connected with the object of the mandate that the client entrusted us with (courts and arbitration commissions, other public authorities, opposing parties, lawyers/ consultants/ representatives of the opposing party, services providers, etc.);

• Service providers / collaborators involved in the performance of the mandate that our client entrusted us with (including our data processors);

• Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or de- fend our rights.

Recipients of data used for marketing purposes

 

• Services providers/ collaborators involved in our marketing activities (event organizers, Legal Directories, social media administrators , logistics providers, journalists, other marketing services providers, etc.);

 

• Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or defend our rights.

 

Recipients of data submitted by candidates applying for any openings within Domokos Partners

• Our web-hosting and e-mail hosting service providers, as proxies, in order to perform the services contracted from

Recipients of data used in the exercise of our rights

• Courts and arbitration commissions, other public authorities, other lawyers/ consultants / experts , services providers, insurance companies, banks, public notaries, bailiffs, companies that grant financing, operators of an electronic archive for secured transactions, etc.

In all the above-mentioned cases, we will always ensure that the transfer of your personal data is made in accordance with legal data protection regulations and that we protect your data adequately.

Some of the above recipients of your personal data may be located abroad or outside the EU/ EEA. It cannot be excluded that the level of data protection in countries outside the EU/EEA may not be similar to the level of protection in Romania. For this reason, we will transfer your personal data only to countries for which the EU Commission decided that they have an appropriate level of data protection, or we will take measures to ensure that all recipients maintain an appropriate level of data protection; for this purpose, we will conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC). We may also seek your consent to such transfer, as permitted by the GDPR.

Please contact us if you would like more details on the standard contractual clauses mentioned above.

6. Storage of data

We will not store your data for any longer than is necessary to fulfill our contractual or legal obligations and to allow us to establish, exercise, or defend our rights if any, or for periods that we consider reasonable, when we process your data for marketing purposes.

Thus, we will store your data for the entire duration of the contract concluded with you/your company, plus an additional five-year period, starting with the end of the calendar year when we finalized the provision of our services to you/ the company you represent, which is necessary for us to ensure that we can defend and exer- cise our rights in court if needed.

Also, the applicable legislation requires us to store (i) data collected for prevention of money laundering for five years, and (ii) your data from financial and accounting documents (such as invoices, fiscal notes, receipts, evidence of the time spent by us with the provision of our services) for a period of five or ten years, depending on the document.

Concerning our marketing activities, we will store your data as follows:

• The data of subscribers to newsletters will be stored for the subscription period, until withdrawal of your consent for receiving our newsletter;

• The data related to your attendance to our Events will be stored for a twoyear period in view of liaising with you for any potential future Events;

• If you unsubscribe from our newsletter, or you no longer wish to receive invitations to our Events, we will store your data in dedicated lists for a three-years period to ensure that we will not send you any such information without your express consent;

• If you agree to participate in the Legal Directories’ research as a referee for us, we will store your data for a two-year period, in view of liaising with you for the same purpose in the future;

• Your data posted on our social media pages or on the website – dp-insolvency.ro will be stored for the entire duration of our social media account, or on the duration of the website, respectively, or until you will ask us to delete your data from the social media pages or from the website.

We will store the data submitted when applying for a position within DBP Insolvency and restructuring until the end of the recruitment process, as well as 3 years after occupying the position you applied for (general limitation period – in order to exercise, defend or establish our rights if you formulate any appeal in court or before any public institution/authority regarding the conduct of the recruitment process).

7. Contact details

For any requests, clarifications or additional in- formation in connection you’re your personal data we kindly ask you to contact us using any of the below contact details:

DBP Insolvency and restructuring

10 Gheorghe Manu Street, 1st District, Bucharest, Romania

You can also contact us via email at office@dp-insolvency.ro.

Privacy policy

1. Preamble

DBP Insolvency and restructuring (hereinafter referred to as “DBP Insolvency and restructuring“, “us” or “we“) is required by law to protect the personal data and to comply with all data protection regulations, including but not limited to the EU General Data Protection Regulation No. 2016/679 (hereinafter referred to as “GDPR“).

In this document we detail the following aspects:

• what types of personal data we process about you;

• what are the purposes for which we process your personal data and what are the legal grounds for such processing purpose;

• duration of the personal data processing;

• who are the people with whom we share your personal data;

• how can you exercise your rights under the applicable legislation.

 

Personal data means any information relating to an identified or identifiable natural person, the latter being the person who can be identified directly or indirectly by reference to specific elements of identification or identity. Specifically, the personal data we process includes data such as name, surname, telephone number, e-mail address, business address, position within a company, or other details about personal or material situations, such as date of birth, age, sex, various national identification numbers, videos, correspondence, photographs, etc. Personal data may also include special categories of data, such as medical data or data relating to criminal proceedings.

This data privacy statement refers to the processing we carry out regarding the personal data of our clients and our business partners, of their representatives, employees, and collaborators, of our collaborators, of the persons who are interested in becoming associate attorneys within DBP Insolvency and restructuring or of the persons who contact us for exercising their rights under the data protection law or for any other reasons.

2. Purposes and grounds for data processing

We process the following personal data for the following purposes and based on the following legal grounds:

In relation with DBP Insolvency and restructuring clients and their representatives

If you are a client or potential client of ours or a representative (including legal representative, employee, or collaborator) of one of our clients, we will use your identification and contact in- formation in order to prepare and / or provide our services, as well as to communicate with you, in reliance on the legal relationship between us and you / our client, thus based on the contractual relationship between client and attorney. The legal ground for processing your personal data, in this case, is the execution of our contracts for legal assistance and representation or taking steps to conclude such a contract (art. 6 paragraph 1 letter b) GDPR), if you are or want to become a client respectively, our legitimate interest in ensuring the proper performance of the contracts to which we are party or which we wish to conclude (art. 6 para. 1 letter f) GDPR), when you are our client’s representative.

We will process your contact details based on our legitimate interest (art. 6 para. 1 letter f) GDPR) to optimize our contact management with you. Furthermore, based on our legitimate interest, we may process your personal data for the internal purposes of Domokos Partners, which include the billing of our services and the administration of Domokos Partners contracts and contacts.

At the same time, we inform you that following the regulations in force on the prevention of money laundering, we are obliged in certain situations to comply with the statutory obligations to verify, monitor, report, and keep records of customers. Specifically, we may be obliged to require proof from you and your beneficial owner(s) and, as the case may be, from your management or from natural or legal persons for whom you are acting as a representative, satisfactory identity and, where appropriate, the power of representation. We will perform such data processing only to comply with our legal obligations (art. 6 para. 1, letter c) GDPR).

Please note that, in certain situations, we may have to refrain from accepting an engagement if you do not provide or incompletely provide us with the personal data that is necessary to perform and implement our legal services.

If you disclose to us your or your relatives’, coworkers’ or other third parties’ personal data and/or business or trade secrets, we generally assume that you are authorized to disclose this data. We will use such data only to the extent this is necessary for the proper establishment and processing of our mandate or contractual relationship with you or your company. At the same time, we kindly ask you, to the extend possible, to inform these third parties about the disclosure of their data to DBP Insolvency and restructuring and about the processing of their data by DBP Insolvency and restructuring in accordance with this privacy notice.

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfil any other obligations, we have according to the applicable legislation or statutory provisions, or if we deem such data necessary for the establishment, exercise or defense of our rights. We may also use your personal data for statistical purposes, only after such data has been priorly anonymized.

In relation with our contractual partners, service providers or associates, or their representatives, respectively

If you are a business partner, service provider or collaborator of DBP Insolvency and restructuring, or a representative thereof, we will process your personal data to assure the smooth performance of our contractual relationship with you, or with your company.

We will collect your personal data (name, sur- name, personal identification number, if applicable, identity card information, if applicable, e-mail, phone number, professional address) directly from you or from your company at signing or for the performance of the contracts concluded with you/ your company, and to communicate with you. At the same time, we may obtain your personal data mentioned above from public sources (e.g. your employer’s website, trade registry, etc.), or from the correspondence/notifications you or your company send(s) to us.

When we have direct contact with you, we process your personal data in order to perform our rights and obligations provided under our service/ collaboration agreement concluded with you (art. 6 para. 1 letter b) of GDPR). When our contract is concluded with your company, we will use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to conclude and/or perform the contract concluded with your company. Also, based on our legitimate interest we may process your personal data for DBP Insolvecy and restructurings’ internal purposes, including service billing and contracts or contacts administration.

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfil any other obligations we may have according to the applicable legislation or statutory provisions, or if we consider such data necessary in order to establish, exercise or defend our rights.

We may also use your personal data in order to fulfil any other obligations we have according to the applicable legislation or statutory provisions (art. 6 para. 1 letter c) of GDPR).

In relation with other third parties

Depending on the scope of work and the extent of our mandate, we may also process personal data of third parties (opponents, opponents’ lawyers, employees or collaborators of our clients or the opponents, authorities’ represen- tatives). We may obtain your data directly from you or from the company you represent, from our clients or our clients’ representatives, as well as from public sources (public registers, authorities’/companies’ websites).

We will process such personal data only to the extent necessary to perform our rights and obligations provided under the mandate granted to us by our client (art. 6 para. 1 letter f) of GDPR).

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfill any other obligations we have according to the applicable legislation or statutory provisions, or if we deem such data necessary for the establishment, exercise or defence of our rights. We may also use your personal data to fulfil any other obligations we have according to the applicable legislation or statutory provisions (art. 6 para. 1 letter c) of GDPR).

In our marketing activities

Our marketing activities are addressed to our existing clients and to other interested third par- ties (employees/collaborators of DBP Insolvency and restructurings’ clients, potential or former clients and/or their representatives, other lawyers, DBP Insolvency and restructurings’ collaborators or potential collaborators, authorities’ representatives, journalists, participants at our events or at events where we participate). The processing activities we carry out in our marketing activities concerning per- sons mentioned above relate to the following:

a) Newsletter

We will process your contact details in order to send you our newsletter on the latest legal information in Romania, based on your consent, which you can withdraw at any time by expressing your wish to not receive such communications in the future. The withdrawal of your consent will not affect the processing performed by us until that moment.

b) Refferals

We may process your contact details (name, surname, company, phone number, e-mail, city, country) for marketing purposes, through legal directories.

In marketing activities regarding legal services, the term “Legal Directories” describes a series of products released by companies that, based on independent research, assess, identify, and rank by performance lawyers and law firms active in various jurisdictions and practice areas. The purpose of this marketing activity is to obtain credible third-party endorsement from internationally recognized research organisms, and ultimately to use the rankings and recommendations released by the Legal Directories regarding DBP Insolvency and restructuring and our lawyers and consultants, as a differentiation means in our promotional activities, and as a profile-raising/branding marketing technique.

For this purpose, DBP Insolvency and restructuring contributes with details in the research performed by three companies that constitute international Legal Directories: Chambers and Partners, Legal500 and IFLR1000 (the „Legal Directories”).

The research method of these Legal Directories is based on collecting feedback from clients/ former clients, consultants, and/or other lawyers. As part of this research process, we are required to supply a list of referees, whom the Legal Directories may interview via telephone or e-mail during their research. All Legal Directories base their research on these referees’ feedback. The referees can be clients, former clients, counter-party lawyers in various projects, other consultants or experts in general, or persons who know about our activity. The Legal Directories ensure that interviews with referees (either conducted by phone or in writing) are non-attributable, and any quotes they publish are anonymous.

In this context, we will ask for your explicit consent to send your contact details to the Legal Directories, to carry out the abovementioned research. The legal grounds for such processing is represented by your consent, (art. 6 para. 1 letter a) of GDPR). You can withdraw your consent at any time; however, the withdrawal of consent will not affect in any way the processing we have performed before the withdrawal.

c) Social Media and website

DBP Insolvency and restructuring uses the social media pages LinkedIn and Facebook, and the website https://www.dp-insolvency.ro to promote its activities.

Therefore, the data disclosed about you via our social media pages may include images from DBP Insolvency and restructuring Events, where you participated, as well as your name, position/profession and company, if you participated as speaker at a certain Event. Regarding the website, we may publish information about Events, including speakers’ personal data (name, position/ profession and company).

We will carry out such processing activity only based on your consent (art. 6 para. 1 letter a) of GDPR), which you can withdraw at any time; such withdrawal will not affect any prior processing activities carried out by us.

In relation with our headquartes’ visitors

a) WI-FI connection

If you want to connect to our WI-FI network during your visit to our office, our system will allocate automatically a dynamic, randomly generated IP address that is not able to identify you or your device, and which will be stored only during the connection to the system.

In relation with the persons interested in becoming associate attorneys of DBP Insolvency and restructuring

If you are interested in a possible position as a collaborating lawyer of DBP Insolvency and restructuring, we will process your data that you transmit to us when applying (such as identification data, e- mail address, data that you decide to include in your CV, correspondence with you, possible answers to professional assessment tests, etc.), to evaluate your application and to decide to what extent you are suitable for the open position within DBP Insolvency and restructuring.

We perform the above data processing, based on the preliminary steps at your request before concluding the collaboration contract (art. 6 para. 1 letter b) of GDPR).

When you exercise your rights under the GDPR

When you exercise your rights provided under the GDPR, as a data subject, we must process your data (name, surname, image, other data included in your identification card, other data you choose to send us) in order to manage your requests under the GDPR. In this case, the processing ground for using your personal data is represented by our legal obligation (art. 6 para. 1 letter c) of GDPR).

The establishment, exercise, and defense of our rights

We have a general interest to establish, exercise, and defend our rights, and we consider it is reasonable to invoke specific documents and information for this purpose, including when they reveal personal data about you. We will do this only under strict observance of our statutory confidentiality obligation and by limiting the data we use as much as possible. In this case, the processing ground is represented by our legitimate interest (art. 6 para. 1 letter f) of GDPR).

We emphasize that whenever we process your personal data based on our legitimate interest, you have the right to object to such processing. For details, please refer to Section 3 below.

3. Your rights in connection with your personal data

As a data subject according to GDPR, you have the right of access and information on your personal data that we process, on their origin and recipients, the duration of storage, and the purpose of data processing.

If we process inaccurate or incomplete personal data, you have the right to rectification or completion of such data.

You may also request us to erase your data, which is processed unlawfully. You will be entitled to exercise this right in specific situations set out in the GDPR. If in exercising this right, we will consider that we can keep your data for certain purposes, we will inform you in this respect within the applicable legal periods.

If it is unclear whether your data are inaccurate, incomplete, or unlawfully processed, you may request us to restrict the processing of your data until the matters raised by you are finally solved.

At the same time, you have the right to oppose the processing of your personal data when we process these data relying on legitimate interest. If you exercise your right to oppose, we kindly ask you to indicate the reasons for doing so. If you send us a reasoned opposition request, we will consider the facts, and, either we will cease/adjust our processing activities, or we will inform you of our legitimate and justified reasons for which it is necessary to continue the processing of your personal data.

In certain cases, you also have the right to receive your personal data processed by us in a machine-readable format of our choice, or to instruct us to transmit such data directly to a third party of your choice; we will not object to transmitting your data to the third party you designated in such circumstance.

As mentioned above, when we process your data relying on your consent, you have the right to withdraw your consent at any moment, such withdrawal of consent not affecting the lawfulness of processing based on consent before the withdrawal moment.

You can exercise any of the rights above-mentioned by a written request using any of the contact details mentioned in Section 7 below. We kindly ask you to send us, together with your inquiries, a copy of an identity document to verify your identity.

We ask that you notify us of any change in your personal data that you provided to us.

Despite our best efforts to guarantee the protection and integrity of your data, we cannot fully rule out the possibility of any contradictions regarding the nature of the use of your data use. If you consider that we are unlawfully using your data, you may complain directly with the Romanian Data Protection Authority. However, we hope that you will contact us first so that together we can resolve and eliminate any queries, unclarities, or other matters that you may point to us.

4. Data security

We have taken appropriate organizational and technical measures to ensure your personal data protection, particularly against unauthorized, unlawful, or accidental access, processing, loss, use, and modification.

Despite our efforts of ensuring an appropriately high standard of security requirements at all times, it cannot be ruled out that the information you have provided via the internet will be accessed or used by other persons.

Please note that we cannot assume any liability of any kind for the disclosure of information due to errors in the data transfer and/or unauthorized access by third parties, not imputable to us (e.g. hacking of e-mail accounts, telephone, or interception of fax messages).

We aim to ensure that data security incidents are detected at an early stage and immediately reported to you or the competent authorities, in accordance with applicable legal requirements.

5. Recipients of your personal data

Depending on the purpose and extent of our mandate, as well as the purposes of data processing, we may transmit your data to the following categories of recipients:

Recipients of clients/clients’ representatives data

• Persons/entities that are or may be connected to the object of the contract concluded between us and the client (courts and arbitration commissions, other public authorities, opposing parties, lawyers/ consultants/ representatives of the opposing party, services providers, etc.) in view of rendering our services;

• Services providers/collaborators involved in the performance of the mandate that you entrusted us with (including our data processors);

• Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or de- fend our rights;

• Our web-hosting, email hosting and billing service providers, as proxies.

 

Recipients of our services providers’/ collaborators’ data, or of their representatives

• As a rule, we do not transmit such data to third parties, except for when this is required by public authorities, in accordance with the law, or if the data is needed to establish, exercise, or defend our rights.

Recipients of other third parties’ data

• DBP Insolvency and restructurings‘ client who entrusted us the mandate, based on the contract we concluded with the client;

• Other persons/ entities that are or may be connected with the object of the mandate that the client entrusted us with (courts and arbitration commissions, other public authorities, opposing parties, lawyers/ consultants/ representatives of the opposing party, services providers, etc.);

• Service providers / collaborators involved in the performance of the mandate that our client entrusted us with (including our data processors);

• Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or defend our rights.

 

Recipients of data used for marketing purposes

 

• Services providers/ collaborators involved in our marketing activities (event organizers, Legal Directories, social media administrators , logistics providers, journalists, other marketing services providers, etc.);

 

• Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or defend our rights.

 

Recipients of data submitted by candidates applying for any openings within Domokos Partners

• Our web-hosting and e-mail hosting service providers, as proxies, in order to perform the services contracted from

 

Recipients of data used in the exercise of our rights

• Courts and arbitration commissions, other public authorities, other lawyers/ consultants / experts , services providers, insurance companies, banks, public notaries, bailiffs, companies that grant financing, operators of an electronic archive for secured transactions, etc.

In all the above-mentioned cases, we will always ensure that the transfer of your personal data is made in accordance with legal data protection regulations and that we protect your data adequately.

Some of the above recipients of your personal data may be located abroad or outside the EU/ EEA. It cannot be excluded that the level of data protection in countries outside the EU/EEA may not be similar to the level of protection in Romania. For this reason, we will transfer your personal data only to countries for which the EU Commission decided that they have an appropriate level of data protection, or we will take measures to ensure that all recipients maintain an appropriate level of data protection; for this purpose, we will conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC). We may also seek your consent to such transfer, as permitted by the GDPR.

Please contact us if you would like more details on the standard contractual clauses mentioned above.

6. Storage of data

We will not store your data for any longer than is necessary to fulfill our contractual or legal obligations and to allow us to establish, exercise, or defend our rights if any, or for periods that we consider reasonable, when we process your data for marketing purposes.

Thus, we will store your data for the entire duration of the contract concluded with you/your company, plus an additional five-year period, starting with the end of the calendar year when we finalized the provision of our services to you/ the company you represent, which is necessary for us to ensure that we can defend and exer- cise our rights in court if needed.

Also, the applicable legislation requires us to store (i) data collected for prevention of money laundering for five years, and (ii) your data from financial and accounting documents (such as invoices, fiscal notes, receipts, evidence of the time spent by us with the provision of our services) for a period of five or ten years, depending on the document.

Concerning our marketing activities, we will store your data as follows:

• The data of subscribers to newsletters will be stored for the subscription period, until withdrawal of your consent for receiving our newsletter;

The data related to your attendance to our Events will be stored for a twoyear period in view of liaising with you for any potential future Events;

• If you unsubscribe from our newsletter, or you no longer wish to receive invitations to our Events, we will store your data in dedicated lists for a three-years period to ensure that we will not send you any such information without your express consent;

• If you agree to participate in the Legal Directories’ research as a referee for us, we will store your data for a two-year period, in view of liaising with you for the same purpose in the future;

• Your data posted on our social media pages or on the website – dp-insolvency.ro will be stored for the entire duration of our social media account, or on the duration of the website, respectively, or until you will ask us to delete your data from the social media pages or from the website.

We will store the data submitted when applying for a position within DBP Insolvency and restructuring until the end of the recruitment process, as well as 3 years after occupying the position you applied for (general limitation period – in order to exercise, defend or establish our rights if you formulate any appeal in court or before any public institution/authority regarding the conduct of the recruitment process).

7. Contact details

For any requests, clarifications or additional in- formation in connection you’re your personal data we kindly ask you to contact us using any of the below contact details:

DBP Insolvency and restructuring

10 Gheorghe Manu Street, 1st District, Bucharest, Romania

You can also contact us via email at office@dp-insolvency.ro.

Privacy policy

1. Preamble

DBP Insolvency and restructuring (hereinafter referred to as “DBP Insolvency and restructuring“, “us” or “we“) is required by law to protect the personal data and to comply with all data protection regulations, including but not limited to the EU General Data Protection Regulation No. 2016/679 (hereinafter referred to as “GDPR“).

In this document we detail the following aspects:

 what types of personal data we process about you;

 what are the purposes for which we process your personal data and what are the legal grounds for such processing purpose;

 duration of the personal data processing;

 who are the people with whom we share your personal data;

 how can you exercise your rights under the applicable legislation.

Personal data means any information relating to an identified or identifiable natural person, the latter being the person who can be identified directly or indirectly by reference to specific elements of identification or identity. Specifically, the personal data we process includes data such as name, surname, telephone number, e-mail address, business address, position within a company, or other details about personal or material situations, such as date of birth, age, sex, various national identification numbers, videos, correspondence, photographs, etc. Personal data may also include special categories of data, such as medical data or data relating to criminal proceedings.

This data privacy statement refers to the processing we carry out regarding the personal data of our clients and our business partners, of their representatives, employees, and collaborators, of our collaborators, of the persons who are interested in becoming associate attorneys within DBP Insolvency and restructuring or of the persons who contact us for exercising their rights under the data protection law or for any other reasons.

2. Purposes and grounds for data processing

We process the following personal data for the following purposes and based on the following legal grounds:

In relation with DBP Insolvency and restructuring clients and their representatives

If you are a client or potential client of ours or a representative (including legal representative, employee, or collaborator) of one of our clients, we will use your identification and contact information in order to prepare and / or provide our services, as well as to communicate with you, in reliance on the legal relationship between us and you / our client, thus based on the contractual relationship between client and attorney. The legal ground for processing your personal data, in this case, is the execution of our contracts for legal assistance and representation or taking steps to conclude such a contract (art. 6 paragraph 1 letter b) GDPR), if you are or want to become a client respectively, our legitimate interest in ensuring the proper performance of the contracts to which we are party or which we wish to conclude (art. 6 para. 1 letter f) GDPR), when you are our client’s representative.

We will process your contact details based on our legitimate interest (art. 6 para. 1 letter f) GDPR) to optimize our contact management with you. Furthermore, based on our legitimate interest, we may process your personal data for the internal purposes of Domokos Partners, which include the billing of our services and the administration of Domokos Partners contracts and contacts.

At the same time, we inform you that following the regulations in force on the prevention of money laundering, we are obliged in certain situations to comply with the statutory obligations to verify, monitor, report, and keep records of customers. Specifically, we may be obliged to require proof from you and your beneficial owner(s) and, as the case may be, from your management or from natural or legal persons for whom you are acting as a representative, satisfactory identity and, where appropriate, the power of representation. We will perform such data processing only to comply with our legal obligations (art. 6 para. 1, letter c) GDPR).

Please note that, in certain situations, we may have to refrain from accepting an engagement if you do not provide or incompletely provide us with the personal data that is necessary to perform and implement our legal services.

If you disclose to us your or your relatives’, coworkers’ or other third parties’ personal data and/or business or trade secrets, we generally assume that you are authorized to disclose this data. We will use such data only to the extent this is necessary for the proper establishment and processing of our mandate or contractual relationship with you or your company. At the same time, we kindly ask you, to the extend possible, to inform these third parties about the disclosure of their data to DBP Insolvency and restructuring and about the processing of their data by DBP Insolvency and restructuring in accordance with this privacy notice.

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfil any other obligations, we have according to the applicable legislation or statutory provisions, or if we deem such data necessary for the establishment, exercise or defense of our rights. We may also use your personal data for statistical purposes, only after such data has been priorly anonymized.

In relation with our contractual partners, service providers or associates, or their representatives, respectively

If you are a business partner, service provider or collaborator of DBP Insolvency and restructuring, or a representative thereof, we will process your personal data to assure the smooth performance of our contractual relationship with you, or with your company.

We will collect your personal data (name, sur- name, personal identification number, if applicable, identity card information, if applicable, e-mail, phone number, professional address) directly from you or from your company at signing or for the performance of the contracts concluded with you/ your company, and to communicate with you. At the same time, we may obtain your personal data mentioned above from public sources (e.g. your employer’s website, trade registry, etc.), or from the correspondence/notifications you or your company send(s) to us.

When we have direct contact with you, we process your personal data in order to perform our rights and obligations provided under our service/ collaboration agreement concluded with you (art. 6 para. 1 letter b) of GDPR). When our contract is concluded with your company, we will use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to conclude and/or perform the contract concluded with your company. Also, based on our legitimate interest we may process your personal data for DBP Insolvency and restructurings’ internal purposes, including service billing and contracts or contacts administration.

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfil any other obligations we may have according to the applicable legislation or statutory provisions, or if we consider such data necessary in order to establish, exercise or defend our rights.

We may also use your personal data in order to fulfil any other obligations we have according to the applicable legislation or statutory provisions (art. 6 para. 1 letter c) of GDPR).

In relation with other third parties

Depending on the scope of work and the extent of our mandate, we may also process personal data of third parties (opponents, opponents’ lawyers, employees or collaborators of our clients or the opponents, authorities’ representatives). We may obtain your data directly from you or from the company you represent, from our clients or our clients’ representatives, as well as from public sources (public registers, authorities’/companies’ websites).

We will process such personal data only to the extent necessary to perform our rights and obligations provided under the mandate granted to us by our client (art. 6 para. 1 letter f) of GDPR).

Moreover, we may use your personal data based on our legitimate interest (art. 6 para. 1 letter f) of GDPR) in order to fulfill any other obligations we have according to the applicable legislation or statutory provisions, or if we deem such data necessary for the establishment, exercise or defence of our rights. We may also use your personal data to fulfil any other obligations we have according to the applicable legislation or statutory provisions (art. 6 para. 1 letter c) of GDPR).

In our marketing activities

Our marketing activities are addressed to our existing clients and to other interested third par- ties (employees/collaborators of DBP Insolvency and restructurings’ clients, potential or former clients and/or their representatives, other lawyers, DBP Insolvency and restructurings’ collaborators or potential collaborators, authorities’ representatives, journalists, participants at our events or at events where we participate). The processing activities we carry out in our marketing activities concerning per- sons mentioned above relate to the following:

a) Newsletter

We will process your contact details in order to send you our newsletter on the latest legal information in Romania, based on your consent, which you can withdraw at any time by expressing your wish to not receive such communications in the future. The withdrawal of your consent will not affect the processing performed by us until that moment.

b) Referals

We may process your contact details (name, surname, company, phone number, e-mail, city, country) for marketing purposes, through legal directories.

In marketing activities regarding legal services, the term “Legal Directories” describes a series of products released by companies that, based on independent research, assess, identify, and rank by performance lawyers and law firms active in various jurisdictions and practice areas. The purpose of this marketing activity is to obtain credible third-party endorsement from internationally recognized research organisms, and ultimately to use the rankings and recommendations released by the Legal Directories regarding DBP Insolvency and restructuring and our lawyers and consultants, as a differentiation means in our promotional activities, and as a profile-raising/branding marketing technique.

For this purpose, DBP Insolvency and restructuring contributes with details in the research performed by three companies that constitute international Legal Directories: Chambers and Partners, Legal500 and IFLR1000 (the „Legal Directories”).

The research method of these Legal Directories is based on collecting feedback from clients/ former clients, consultants, and/or other lawyers. As part of this research process, we are required to supply a list of referees, whom the Legal Directories may interview via telephone or e-mail during their research. All Legal Directories base their research on these referees’ feedback. The referees can be clients, former clients, counter-party lawyers in various projects, other consultants or experts in general, or persons who know about our activity. The Legal Directories ensure that interviews with referees (either conducted by phone or in writing) are non-attributable, and any quotes they publish are anonymous.

In this context, we will ask for your explicit consent to send your contact details to the Legal Directories, to carry out the abovementioned research. The legal grounds for such processing is represented by your consent, (art. 6 para. 1 letter a) of GDPR). You can withdraw your consent at any time; however, the withdrawal of consent will not affect in any way the processing we have performed before the withdrawal.

c) Social Media and website

DBP Insolvency and restructuring uses the social media pages LinkedIn and Facebook, and the website https://www.dp-insolvency.ro to promote its activities.

Therefore, the data disclosed about you via our social media pages may include images from DBP Insolvency and restructuring Events, where you participated, as well as your name, position/profession and company, if you participated as speaker at a certain Event. Regarding the website, we may publish information about Events, including speakers’ personal data (name, position/ profession and company).

We will carry out such processing activity only based on your consent (art. 6 para. 1 letter a) of GDPR), which you can withdraw at any time; such withdrawal will not affect any prior processing activities carried out by us.

In relation with our headquarters’ visitors

a) WI-FI connection

If you want to connect to our WI-FI network during your visit to our office, our system will allocate automatically a dynamic, randomly generated IP address that is not able to identify you or your device, and which will be stored only during the connection to the system.

In relation with the persons interested in becoming associate attorneys of DBP Insolvency and restructuring

If you are interested in a possible position as a collaborating lawyer of DBP Insolvency and restructuring, we will process your data that you transmit to us when applying (such as identification data, e- mail address, data that you decide to include in your CV, correspondence with you, possible answers to professional assessment tests, etc.), to evaluate your application and to decide to what extent you are suitable for the open position within DBP Insolvency and restructuring.

We perform the above data processing, based on the preliminary steps at your request before concluding the collaboration contract (art. 6 para. 1 letter b) of GDPR).

When you exercise your rights under the GDPR

When you exercise your rights provided under the GDPR, as a data subject, we must process your data (name, surname, image, other data included in your identification card, other data you choose to send us) in order to manage your requests under the GDPR. In this case, the processing ground for using your personal data is represented by our legal obligation (art. 6 para. 1 letter c) of GDPR).

The establishment, exercise, and defense of our rights

We have a general interest to establish, exercise, and defend our rights, and we consider it is reasonable to invoke specific documents and information for this purpose, including when they reveal personal data about you. We will do this only under strict observance of our statutory confidentiality obligation and by limiting the data we use as much as possible. In this case, the processing ground is represented by our legitimate interest (art. 6 para. 1 letter f) of GDPR).

We emphasize that whenever we process your personal data based on our legitimate interest, you have the right to object to such processing. For details, please refer to Section 3 below.

3. Your rights in connection with your personal data

As a data subject according to GDPR, you have the right of access and information on your personal data that we process, on their origin and recipients, the duration of storage, and the purpose of data processing.

If we process inaccurate or incomplete personal data, you have the right to rectification or completion of such data.

You may also request us to erase your data, which is processed unlawfully. You will be entitled to exercise this right in specific situations set out in the GDPR. If in exercising this right, we will consider that we can keep your data for certain purposes, we will inform you in this respect within the applicable legal periods.

If it is unclear whether your data are inaccurate, incomplete, or unlawfully processed, you may request us to restrict the processing of your data until the matters raised by you are finally solved.

At the same time, you have the right to oppose the processing of your personal data when we process these data relying on legitimate interest. If you exercise your right to oppose, we kindly ask you to indicate the reasons for doing so. If you send us a reasoned opposition request, we will consider the facts, and, either we will cease/adjust our processing activities, or we will inform you of our legitimate and justified reasons for which it is necessary to continue the processing of your personal data.

In certain cases, you also have the right to receive your personal data processed by us in a machine-readable format of our choice, or to instruct us to transmit such data directly to a third party of your choice; we will not object to transmitting your data to the third party you designated in such circumstance.

As mentioned above, when we process your data relying on your consent, you have the right to withdraw your consent at any moment, such withdrawal of consent not affecting the lawfulness of processing based on consent before the withdrawal moment.

You can exercise any of the rights above-mentioned by a written request using any of the contact details mentioned in Section 7 below. We kindly ask you to send us, together with your inquiries, a copy of an identity document to verify your identity.

We ask that you notify us of any change in your personal data that you provided to us.

Despite our best efforts to guarantee the protection and integrity of your data, we cannot fully rule out the possibility of any contradictions regarding the nature of the use of your data use. If you consider that we are unlawfully using your data, you may complain directly with the Romanian Data Protection Authority. However, we hope that you will contact us first so that together we can resolve and eliminate any queries, unclarities, or other matters that you may point to us.

4. Data security

We have taken appropriate organizational and technical measures to ensure your personal data protection, particularly against unauthorized, unlawful, or accidental access, processing, loss, use, and modification.

Despite our efforts of ensuring an appropriately high standard of security requirements at all times, it cannot be ruled out that the information you have provided via the internet will be accessed or used by other persons.

Please note that we cannot assume any liability of any kind for the disclosure of information due to errors in the data transfer and/or unauthorized access by third parties, not imputable to us (e.g. hacking of e-mail accounts, telephone, or interception of fax messages).

We aim to ensure that data security incidents are detected at an early stage and immediately reported to you or the competent authorities, in accordance with applicable legal requirements.

5. Recipients of your personal data

Depending on the purpose and extent of our mandate, as well as the purposes of data processing, we may transmit your data to the following categories of recipients:

Recipients of clients/clients’ representatives data

 Persons/entities that are or may be connected to the object of the contract concluded between us and the client (courts and arbitration commissions, other public authorities, opposing parties, lawyers/ consultants/ representatives of the opposing party, services providers, etc.) in view of rendering our services;

 Services providers/collaborators involved in the performance of the mandate that you entrusted us with (including our data processors);

 Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or de- fend our rights;

 Our web-hosting, email hosting and billing service providers, as proxies.

Recipients of our services providers’/ collaborators’ data, or of their representatives

 As a rule, we do not transmit such data to third parties, except for when this is required by public authorities, in accordance with the law, or if the data is needed to establish, exercise, or defend our rights.

Recipients of other third parties’ dat

 DBP Insolvency and restructurings‘ client who entrusted us the mandate, based on the contract we concluded with the client;

 Other persons/ entities that are or may be connected with the object of the mandate that the client entrusted us with (courts and arbitration commissions, other public authorities, opposing parties, lawyers/ consultants/ representatives of the opposing party, services providers, etc.);

 Service providers / collaborators involved in the performance of the mandate that our client entrusted us with (including our data processors);

 Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or defend our rights.

Recipients of data used for marketing purposes

 

• Services providers/ collaborators involved in our marketing activities (event organizers, Legal Directories, social media administrators , logistics providers, journalists, other marketing services providers, etc.);

 

 Public institutions and authorities, if this is required as per the law, or if the data is needed to establish, exercise or defend our rights.

 

Recipients of data submitted by candidates applying for any openings within Domokos Partners

 Our web-hosting and e-mail hosting service providers, as proxies, in order to perform the services contracted from

Recipients of data used in the exercise of our rights

 Courts and arbitration commissions, other public authorities, other lawyers/ consultants / experts , services providers, insurance companies, banks, public notaries, bailiffs, companies that grant financing, operators of an electronic archive for secured transactions, etc.

In all the above-mentioned cases, we will always ensure that the transfer of your personal data is made in accordance with legal data protection regulations and that we protect your data adequately.

Some of the above recipients of your personal data may be located abroad or outside the EU/ EEA. It cannot be excluded that the level of data protection in countries outside the EU/EEA may not be similar to the level of protection in Romania. For this reason, we will transfer your personal data only to countries for which the EU Commission decided that they have an appropriate level of data protection, or we will take measures to ensure that all recipients maintain an appropriate level of data protection; for this purpose, we will conclude standard contractual clauses (2010/87/EC and/or 2004/915/EC). We may also seek your consent to such transfer, as permitted by the GDPR.

Please contact us if you would like more details on the standard contractual clauses mentioned above.

6. Storage of data

We will not store your data for any longer than is necessary to fulfill our contractual or legal obligations and to allow us to establish, exercise, or defend our rights if any, or for periods that we consider reasonable, when we process your data for marketing purposes.

Thus, we will store your data for the entire duration of the contract concluded with you/your company, plus an additional five-year period, starting with the end of the calendar year when we finalized the provision of our services to you/ the company you represent, which is necessary for us to ensure that we can defend and exer- cise our rights in court if needed.

Also, the applicable legislation requires us to store (i) data collected for prevention of money laundering for five years, and (ii) your data from financial and accounting documents (such as invoices, fiscal notes, receipts, evidence of the time spent by us with the provision of our services) for a period of five or ten years, depending on the document.

Concerning our marketing activities, we will store your data as follows:

 The data of subscribers to newsletters will be stored for the subscription period, until withdrawal of your consent for receiving our newsletter;

 The data related to your attendance to our Events will be stored for a two year period in view of liaising with you for any potential future Events;

 If you unsubscribe from our newsletter, or you no longer wish to receive invitations to our Events, we will store your data in dedicated lists for a three-years period to ensure that we will not send you any such information without your express consent;

 If you agree to participate in the Legal Directories’ research as a referee for us, we will store your data for a two-year period, in view of liaising with you for the same purpose in the future;

 Your data posted on our social media pages or on the website – dp-insolvency.ro will be stored for the entire duration of our social media account, or on the duration of the website, respectively, or until you will ask us to delete your data from the social media pages or from the website.

We will store the data submitted when applying for a position within DBP Insolvency and restructuring until the end of the recruitment process, as well as 3 years after occupying the position you applied for (general limitation period – in order to exercise, defend or establish our rights if you formulate any appeal in court or before any public institution/authority regarding the conduct of the recruitment process).

7. Contact details

For any requests, clarifications or additional in- formation in connection you’re your personal data we kindly ask you to contact us using any of the below contact details:

DBP Insolvency and restructuring

10 Gheorghe Manu Street, 1st District, Bucharest, Romania

You can also contact us via email at office@dp-insolvency.ro.