Privacy Policy GDPR




We are committed to implement the highest standards of confidentiality and transparency in relation to the personal data that we process in our current activity. Our core values are defined by a complete protection and transparency in the processing of your personal data within the performance of our legal services.

This Privacy Policy describes the categories of your personal data that we process, the methods and purposes for which we collect them, the cases when we transfer personal data and your rights and options in this respect. At the same time, the Privacy Policy details the way we process personal data in managing our client relationship.

Please also refer to our Terms & Conditions at and our Cookies Policy (detailed therein) for further information on how we use of cookies and other similar technologies on our website.



The controller of your personal data is The Law Office “Gabriel Toma”, hereinafter referred to as “Romaniancitizenship”).



The personal data that we process may include:

·         Contact information, such as your name, job title, postal address, including your home address (if provided to us), business address, telephone number, mobile phone number, fax number and email address;

·         Further information processed in a contractual relationship with Romaniancitizenship or voluntarily provided by you, such as instructions given, payments made, information on any legal matters, disputes, litigation or other legal claims in which you or your ancestors are/were involved in any capacity (i.e., defendant, plaintiff, intervenor, barrister, counsel, expert, etc.);

·         In the context of the services provided to you we may also collect and process special categories of personal data, such as: data on trade union membership, data concerning health, data on your political opinions, data on criminal convictions and offences;

·         Details of your visits of our offices or any other details on how you interact with us;

·         Data resulting from your browsing on our website, collected via cookies and similar technologies, according to our Cookies Policy.


Any data processing activity of your personal data shall be performed under one of the following legal bases:

·         Processing is necessary in order to execute or perform a contract to which you are party;

·         Processing is necessary for compliance with a legal obligation of the controller;

·         Processing is performed with your consent;

·         Processing is necessary to protect your or other natural person’s vital interests;

·         Processing is necessary for the legitimate interests pursued by Romaniancitizenship  or by a third party (e.g. when processing is necessary for the performance of a contract concluded with your organisation), except where such interests are overridden by your interests or your fundamental rights and freedoms;

·         For the special categories of personal data, processing shall be made if, in addition to a general legal basis for data processing, one the following specific processing conditions are met:

  • The consent of the data subject has been obtained;
  • We have a legal obligation to process such data categories;
  • Processing is necessary for the establishment, exercise or defence of legal claims.



We may use your personal data for the following purposes (“Permitted Purposes“):

·         Providing legal services, including legal representation before the courts of law, arbitral tribunals or other competent authorities;

·         Management of the contractual relationship with our clients;

·         Complying with our legal obligations (such as anti-money laundering and anti-terrorism financing obligations, obligations of reporting to the tax authorities);

·         Managing the security and access to our premises, the use of the IT systems used by Romaniancitizenship  (e.g., website, data management platforms, communication systems), including preventing and detecting security threats, fraud or other unauthorized or malicious activities;

·         For the purpose of complying with court judgments and exercising and/or defending our legal claims;

·         Analysing and improving our services and communications to you, including (since we have a legitimate interest to continuously improve our services) to carry out client surveys regarding the client satisfaction level on Romaniancitizenship services; and

·         For any purpose related and/or ancillary to any of the above or any other purpose for which your personal data were provided to us, in compliance with the applicable law.

Also, based on your consent, we may send you various communications through the channels you have approved, to keep you up to date on the latest legal developments, announcements and other information about the Romaniancitizenship services, products, events and projects or other promotional events.


We may share your personal data with other lawyers (including other legal professionals with whom we cooperate in the provision of services) and legal specialists (including mediators, industrial property advisors), consultants or experts involved in the cases we manage and the services we provide, courts of justice or arbitral tribunals, other public authorities, entities nominated by you, parties involved in your case (which can be our client or a third party) or other entities in the context of the provision of Romaniancitizenship services (such as: insurers, cloud, telecommunications, e-mail service providers, etc.)




We may transfer your personal data to EEA countries or countries recognized by the European Commission as offering an adequate level of protection, if such transfer is required for the processing in accordance with the Permitted Purposes described above.

We will not transfer your personal data to third countries which were not recognized by the European Commission as offering an adequate level of protection.


If any of the personal data that you have provided to us changes, for example if you change your name, surname or your email address or if you wish to cancel any request addressed to us, or if you become aware we have any inaccurate personal data about you, please e-mail us at

We will not be responsible for any loss arising from any inaccurate, inauthentic, insufficient or incomplete personal data that you provide to us.



We will cease any processing of your personal data when it is no longer reasonably required for the Permitted Purposes or when you withdraw your consent (if applicable) and (i) there are no compelling legitimate grounds for Romaniancitizenship to continue processing of your personal data (including Romaniancitizenship’s legal obligation to continue storing such data) which override your interests, rights and freedoms or (ii) if the personal data are no longer necessary to us for the establishment, exercise or defence of legal claims.



Subject to certain legal conditions, you have the following rights in relation to the processing of your personal data:

·         The right to request a copy of your personal data which we hold;

·         The right to the rectification of any inaccurate or incomplete personal data;

·         The right to object to or restrict our use of your personal data;

·         The right to withdraw your consent for the processing of personal data based on the consent;

·         The right to the erasure of your personal data, when you withdrew your consent, the processing is no longer necessary, or such processing is unlawful;

·         The right to data portability which allows you to receive a copy of the processed data which we received from you or to share them with another entity nominated by you;

·         The right to withdraw your consent for the consent-based processing. Withdrawal of consent shall not affect the lawfulness of processing based on consent before consent withdrawal. If you withdraw your consent, Romaniancitizenship will no longer process your personal data and shall take the necessary measures to erase your personal data.

If you wish to exercise the rights detailed above, please contact us using the following contact details:

·         Strada Nuferilor, nr. 40-48, bl. B1, sc. F, et. 2, ap. 10, sector 1, Bucharest, România

·         E-mail:

·         Fax: (40-31) 108 36 77

To comply with our legal data security and confidentiality obligations, when you exercise one of your rights as a data subject, we may request you to prove your identity by providing us with a copy of a valid identification document or any other information which is necessary to verify that the request came for the entitled data subject.

We will consider any requests or complaints which we receive and send you a response within the terms provided by the law. If you are not satisfied with our response or you consider that we do not process your personal data in compliance with the applicable legal provisions, you may lodge a complaint with the Romanian supervisory authority:                     The National Supervisory Authority for Personal Data Processing, headquartered in 28-30 Gheorghe Magheru Blvd., Bucharest, Romania.



The latest update to this Privacy Policy was made in May 2018. We reserve the right to update and change this Privacy Policy from time to time in order to reflect any changes in how we process your personal data or any changes of the applicable legal requirements. If any such amendment occurs, we will post the amended Privacy Policy on our website and/or otherwise make it available to you.