Expertise

We work with clients to identify the data protection requirements applicable to them and implement the necessary mechanisms to ensure compliance therewith. We assist our clients in filing the notifications with the competent authority, in preparing and including data protection language in the relevant documents concluded with employees, (potential) clients and suppliers, in ensuring the necessary training for employees having privacy related obligations.

Our advice encompasses:

Processing of employees’ data

We assist clients in developing internal data processing and confidentiality policies, including in consideration of the employers' monitoring activities and cross-border data flows, in preparing data protection information and consent documentation.

Benefits plans

We assist clients in identifying the data protection implications of share option and similar benefits plans, including in respect of the information obligations incumbent upon the grantor of the benefits and/or the local employers as well as the notification and authorization obligations and possible exemptions therefrom.

Whistleblowing and ethics checks

We assist clients in meeting data protection requirements, including information and notification, in connection with the implementation of whistleblowing schemes and performance of ethics checks in accordance with the policies adopted at group level.

Video monitoring

We assist clients in implementing the data protection requirements for implementing closed circuit video monitoring systems.

Marketing related processing

We draft data protection provisions for commercial agreements, including agreements providing for database sharing; we advise on data protection implications of marketing initiatives and draft appropriate wording for promotional campaigns, regulations and related documents.

Database sharing

We assist clients in implementing data protection related requirements in case of business transfers that include transfer of databases. We also assist clients in identifying and complying with data protection implications of intra-group disclosure of employee data, including where data is transferred within and outside the EU/EEA.

Data protection compliance assessment and training

We assist our clients in identifying the data processing carried out as part of their activity and implement related solutions to ensure compliance with legal requirements, including in respect of the minimum security requirements imposed by law. We also conduct data protection related training sessions, including on recommendations in case of down raids or requests/complaints received from individuals whose data is processed.

Data processors

We draft processing and representation agreements with Romanian and foreign data processors.

Relations with individuals and authorities

We assist clients in handling requests from individuals in respect of their processed data, in preparing and filing processing and transfer notifications with the National Authority for the Supervision of Personal Data Processing and we represent clients in interactions with this authority.

Key projects