Data Protection Policy

  1. General provisions

MOREANU Law (“we” or “us”) with office in Romania, Bucharest, 1st District, 19 Ficusului blvd., is a Romanian law firm providing legal advice in business law and litigation.

We are committed to ensuring that we collect and process the personal data belonging to our website’s visitors in accordance with the applicable laws.

We generally act as the controller of personal data provided to us, determining the purposes for which, and the way in which, personal data is processed.

This Data Protection Policy is intended to inform clients, prospective clients and more generally all visitors to this website about how we collect, use, disclose, protect or otherwise process personal data.

  1. Personal data

According to the data privacy legislation personal data represents any information relating to an identified or identifiable natural person.

An identifiable person is the person that may be identified directly or indirectly.

The personal data you provide us by filling in the contact form or Legal Newsletter form:

– Name, surname and job title

– Contact information respectively email address and telephone number

Once you have provided your consent regarding our Legal Newsletter, we shall use your email address to deliver such Legal Newsletter.

  1. When, how and what personal data we may process

3.1 Our website

When using the website for mere information purposes, we may collect the personal data that your web browser transmits to our server, including your IP address, the date and time of your visit, and data relating to your operating system and web browser.

The purpose of this processing is strictly to ensure the security and successful navigation of our website, and to compile statistical data on the use of our website.

3.2 Cookies

Our website uses cookies. For more information in this regard, please refer to our Cookies policy.

3.3 Rendering of services

During an engagement, or when preparing for/ in relation to an engagement, we may collect and process personal data about our clients, prospective clients, their affiliates, their representatives or the relevant members of their personnel.

All personal data processed by us is necessary to fulfill the purposes for which they were collected, as indicated below.

The processing of your personal data includes any operation or set of operations which is performed upon personal data, such as collection, recording, organization, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission or otherwise making available, alignment or combination, blocking, erasure or destruction of data, and such processing will always be carried out in compliance with data protection rules.

Kindly note that, when you provide us information about third parties you must have provided the data subjects with information about such disclosures and established a legal basis for sharing the personal data with us, to the extent required by applicable law.

3.4 Recruitment

If you are a potential recruit, we may collect and process personal data, including name and job title, e-mail and telephone, curriculum vitae (which might include age and gender, if provided to us, education, employment track, etc.) and other information relevant for the recruitment process. We use this data exclusively for the recruitment process, and we limit the data processing for what is strictly necessary to attain this purpose.

  1. Why do we use your personal data

We use your personal data to process your request, to contact you and to provide you with the information that you voluntarily have requested.

We may also use personal data:

  • to conduct pre-engagement assessments and formalities such as conflict checks, etc.
  • to perform the tasks entrusted to us by our clients
  • for client relationship management purposes
  • for internal administrative or operational processes
  • to send invitations and information about events, publications, and services provided by the firm
  • to send Legal Newsletters, and
  • to satisfy any legal, regulatory, accounting or reporting requirements
  1. Legal basis

We will process personal data if and to the extent the applicable law provides a lawful basis for us to do so and in particular where the processing is necessary:

  • to perform the contract we have entered into with a data subject or in order to take steps at the data subjects’ request prior to entering into a contract
  • to comply with a legal obligation to which we are subject, or
  • for our (or a third party’s) legitimate interest which is not overridden by the data subjects’ interests or fundamental rights and freedoms.

Additionally, we may process personal data for a specific purpose where we have obtained the data subjects’ consent.

  1. Disclosure of personal data

Please note that we may need to share your personal data with service providers with which we work. Such third-party service providers may include: couriers, accountants, management and tax consultants; credit institutions; information technology and telecommunications providers.

We may also communicate your personal data for the purposes described above and according to your general instructions, to your other advisors, your counter-parties and their legal representatives and, generally, all those individuals to whom transmission is required for the purpose of our engagement by you.

We will not share personal data with any other third party, except as required to do so by law.

  1. Duration of personal data retention

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected and processed in compliance with this Data Protection Policy. To determine the retention period for personal data, we will take into consideration the purposes for which they were collected, as well as the nature and sensitivity of the information and the applicable legal requirements.

Where we have based our processing of your personal data on your consent, you have the right at any time to withdraw your consent.

  1. Transfer abroad of personal data

In the context of performing the above operations, your personal data may be transferred abroad to European Union or European Economic Area countries.

Where such a transfer occurs, adequate safeguards are taken to comply with the legal requirements set out in the General Data Protection Regulation no. 2016/679 adopted by the European Parliament.

  1. Your rights in relation to personal data processing

Access: You may contact us at any time to request access to your personal data, and we will confirm to you whether we are processing your personal data and for what purposes, as well as provide details of the categories of personal data concerned, the recipients of the personal data, the retention periods (where possible) and your rights.

Rectification: If any of your personal data that we hold appears to be inaccurate or incomplete, you may ask us to correct or complete it at any time.

Erasure: You may ask us to have your personal data erased if it is no longer necessary for us to keep it in connection with the purposes for which it was collected. However, we must keep track of certain information necessary in order to comply with legal obligations, and/or to handle any claims or litigation.

Restriction: You may ask us to limit the way in which we process your personal data (i.e., require us to continue to store your personal data but not to process it without your consent), for example where you think the personal data we hold is inaccurate, for a period enabling us to verify the accuracy of personal data, or where you have objected to our processing.

Objection: You may object to our processing of your personal data on grounds relating to your specific situation, where we are processing your personal data to pursue our legitimate interests.

Portability: You may ask us to send you your personal data in an electronic, structured, commonly-used and machine-readable format and have your personal data transmitted directly from us to another data controller, where technically feasible without hindrance where the processing is carried out by automated means and is based on your consent or is necessary for the performance of a contract to which you are party.

Withdrawal of your consent: You may withdraw your consent at any time, where the processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent before it was withdrawn.

You also have the right to contact us at any time if you wish to complain about our processing of your personal data and you may lodge a complaint at any time with a supervisory authority.

  1. Automated individual decision-making, including profiling

Your personal data are not subject to any decisional process based solely on automated processing, including profiling.

  1. Amendments to the Data Protection Policy

Any amendments to this Data Protection Policy will be posted on this page.

  1. Contact

You can address any questions, using the following contact details:


Postal address: Romania, Bucharest, 1st District, 19 Ficusului blvd.

E-mail address:

If you currently receive marketing information from us which you would prefer not to receive in the future please press the “unsubscribe” bottom included in our marketing communications or email us at: