1. Who we are
This website is operated by Șomlea & Asociații (the “Firm”, “we”, “us”), acting as the data controller for personal data processed through this website.
Offices:
Cluj-Napoca: 22 Milton Lehrer St., 2nd Floor, 400071, Cluj-Napoca, Romania
Bucharest: Șos. Nicolae Titulescu nr. 4-8, America House, West Wing, 8th Floor, Sector 1, 011141, Bucharest, Romania
Contact: For privacy-related requests, please use the contact details displayed on the Contact page of this website.
2. What this policy covers
This policy explains how we collect and use personal data when you browse our website, contact us through our forms, apply for a role, or communicate with us by phone or email using the details shown on this website.
3. Personal data we collect
Depending on how you interact with the website, we may process the following categories of personal data:
- Contact form data: first name, last name, phone, email, selected practice area, message content.
- Recruitment data: first name, last name, selected position, CV and any information included in it, and any additional details you submit (for example a LinkedIn profile link).
- Technical data: IP address, device and browser information, pages accessed, timestamps, and similar data generated through normal website operation (for example server logs). If enabled, cookies or similar technologies may also collect usage data.
4. Purposes and legal bases
We process personal data for the following purposes and based on the legal grounds below:
- Responding to inquiries and communications: to reply to messages and manage communications. Legal basis: legitimate interests (GDPR Art. 6(1)(f)) and, where applicable, steps prior to entering a contract or contract performance (GDPR Art. 6(1)(b)).
- Recruitment: to assess applications, contact candidates, and manage recruitment. Legal basis: legitimate interests (GDPR Art. 6(1)(f)) and steps prior to entering a contract (GDPR Art. 6(1)(b)).
- Website security and operation: to prevent abuse, ensure security, troubleshoot, and maintain the website. Legal basis: legitimate interests (GDPR Art. 6(1)(f)).
- Cookies and analytics (if enabled): to measure usage and improve content and performance. Legal basis: consent where required for non-essential cookies (GDPR Art. 6(1)(a)).
5. Special categories of data
We do not request sensitive data (for example health data) through this website. If you include sensitive data in a message or CV, we will process it only to the extent necessary and permitted by law. We recommend that you avoid including unnecessary sensitive data.
6. Who we share data with
We may share personal data with:
- IT, hosting, and website maintenance providers that support the website and communications, acting as processors under our instructions.
- Professional advisers where necessary (for example auditors or legal advisers).
- Public authorities, courts, or other parties where required by law or to protect our rights.
We do not sell personal data.
7. International transfers
If any service providers process data outside the European Economic Area, we will ensure appropriate safeguards are in place (for example Standard Contractual Clauses) and apply additional measures where required.
8. Data retention
We keep personal data only as long as necessary for the purposes described in this policy, taking into account legal obligations and limitation periods. As a general rule:
- Contact messages are retained for the time needed to respond and for a reasonable period to manage follow-ups and recordkeeping.
- Recruitment data is retained for the duration of the recruitment process and a reasonable period afterwards, unless you request deletion and we have no legal reason to retain it.
- Technical logs are retained for limited periods for security and operational purposes.
9. Your rights
Under GDPR, you may have the right to access, rectify, delete, restrict processing, object to processing based on legitimate interests, and request data portability (where applicable). Where processing is based on consent, you may withdraw consent at any time. You also have the right to lodge a complaint with the competent supervisory authority.
10. Cookies
Your browser may store cookies that are strictly necessary for website operation and security. If enabled, analytics cookies may also be used to measure traffic and improve the website. You can manage cookies through your browser settings and, where available, through any cookie preferences tool on the website.
11. Security
We apply reasonable technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, and misuse.
12. Updates to this policy
We may update this policy from time to time. The latest version will be published on this page.
