We assisted the local subsidiary of Sodexho group in fulfilling the legal requirements related to the implementation of a whistle blowing policy involving the processing and transfer of data abroad, including drafting information notices for its employees and submitting the relevant notification to the data protection authority.
We assisted Microsoft in drafting data protection clauses for the standard individual employment agreement of its Romanian subsidiary.
We advised Nokia on the main data protection obligations related to the processing of its employees' personal data, including minimum information obligations, rules and limitations applicable in respect of recruitment practices and notification requirements.
We advised Stryker on the rules applicable with respect to background checks during the recruitment process and the notification obligations in case of the transfer of employees’ data abroad.
Benefits plans
We assisted Arcelor Mittal in meeting the data protection information requirements in connection with its 2008 and 2009 worldwide employees' share purchase plan and in obtaining confirmation from the National Authority on the Supervision of Personal Data Processing on the applicability of a notification exemption to the processing related to the implementation of the contemplated plan.
We advised Plexus Corp. on the data protection implications of the 2008 Long-Term Incentive Plan, including in connection with the possible transfer of employees’ data from the Romanian Plexus affiliate as part of implementing the plan.
We assist Baker & McKenzie clients on all aspects related to the implementation of Employee Stock Option Plans, Employee Stock Purchase Plans, Employee Restricted Stock and Employee Restricted Stock Unit Plans within Romania by contributing on a regular basis to the Global Equity Helpdesk, including in respect of data protection implications of such plans.
We assisted Lafarge with the implementation of the 2005 Employee Reserved Offering for the employees participating in the International Group Savings Plan, including drafting and filing the processing and transfer notifications required under data protection law.
Data protection compliance assessment and training
We assisted Microsoft in carrying out an internal audit in order to identify processing operations carried out by the local subsidiary and the related data protection obligations and held training sessions with the human resources, sales and marketing teams to present and discuss the main data protection aspects of relevance for their activities.
We advised Novartis on the data protection requirements applicable in respect of clinical trials and reviewed service agreements with entities carrying out the clinical trials on the client’s behalf and information notices for clinical trial participants in order to include data protection related language.
We provided dedicated, specialized training to Actavis’ management team on the main data protection requirements and on the advisable conduct in case of dawn raids from the National Authority for the Supervision of Personal Data Processing.
Data sharing
We advised Ringier on the data protection requirements related to the sale of some of its business units, including information and notification related requirements.
We advised Citibank on data protection matters related to the cross-border merger of the client’s Romanian subsidiary with another Citibank affiliate.
We advised Kraft on the data protection implications related to the sale of its sugar candy business which involved the transfer of databases, including employees' data.
We advised Aon Romania on the requirements applicable in case of personal data sharing with another company’s local affiliate.
We advised KGB on the data protection requirements related to the establishment of directories based on databases maintained by telecommunication services provides for the purpose of providing directory inquiry services.
Processing and transfer notifications/authorizations
We filed processing and transfer notifications for the Romanian subsidiary of Office Depot in connection with the processing and transfer of employees’ data to be included in worldwide database (PeopleSoft) and obtained the authorization for the transfer of data to the US. We also assisted the client in notifying the processing related to the implementation of a video monitoring system for security purposes.
We assisted several Weatherford entities operating in Romania in ensuring data protection compliance in connection with the processing of their employees' data, including by preparing and submitting data transfer notifications with the National Authority for the Supervision of Personal Data Processing and obtaining the authorization for the transfer to a US affiliate that does not hold a Safe Harbor certificate.
We assisted the Romanian affiliates of Aon in preparing the supporting documentation, including information notices, and submitting the notifications related to the transfer of their employees’ data abroad for inclusion in the group’s database.
We assist BP’s Romanian subsidiaries in preparing the necessary documents and submitting processing and transfer notifications in respect of the processing of their employees’ data, in connection with the implementation of an Open Talk reporting line.
We assisted Vodafone in drafting and submitting the notifications on the processing of data as part of the provision of telecom services.
Marketing related processing
We advise Nokia on the minimum information to be included in its privacy policy made available on its website.
We assisted GTC in preparing the data protection related wording to be included in the marketing materials prepared in connection with loyalty programs implemented in various shopping centers, prepared and submitted the notifications with the data protection authority.
We advise Herbalife on the data protection requirements applicable in connection with the implementation of its distribution structure in Romania.
We advised Quadrant on the data protection requirements to be met during the carrying out of marketing campaigns, including reviewing the regulations and individual participation forms in order to provide the minimum information required by data protection law.
We advised one of the major tobacco manufacturers on the categories of sensitive data that may be collected from individuals during marketing activities and possible justifications for such collection to be provided to the data protection authority.