1. Who We Are
Grigoriu C. Elisabeta – Cabinet de avocat is a legal practice registered with the Bucharest Bar Association. We provide B2B legal advisory services in areas such as data protection, artificial intelligence (AI), cybersecurity, diversity, equity and inclusion (DEI), whistleblowing and business law in general.
The HUMAN CENTRIC is our commercial brand name and does not represent a separate legal entity.
In accordance with the General Data Protection Regulation (GDPR), we act as a Data Controller for the personal data we process.
We also deliver professional training services, both face-to-face and online. These services may involve the processing of personal data of participants, trainers, and organisational contacts.
2. What Personal Data We Collect
Depending on your interaction with us, we may collect and process the following categories of personal data:
3. Why We Collect Your Data
We process your personal data for the following purposes:
We may also rely on your consent to process data related to your website navigation, as outlined in our Cookie Banner and Cookie Notice or for sending you our newsletter.
4. How We Use and Share Your Data
Your personal data is processed by Grigoriu C. Elisabeta – Cabinet de avocat, based in Bucharest, Romania. Our website hosting and data storage services are also located in Romania.
We may share website navigation data with third-party partners, as described in our Cookie Notice.
For online training services, we may use platforms such as Microsoft Teams. These platforms may process your data in accordance with their own privacy policies. We ensure that any such processing complies with the GDPR and that appropriate safeguards are in place.
5. Data Retention
If no contractual relationship is established, we retain correspondence data for up to six months.
Where a contract is in place, we retain personal data in accordance with Romanian legal requirements and GDPR.
Training-related data (e.g. attendance, feedback, certificates) is retained for up to five years, unless a longer period is required by law or justified by legitimate business needs.
6. Your Rights and how to exercise them
As a data subject under the GDPR, you have a number of important rights regarding your personal data. We are committed to ensuring that your rights are respected and upheld. These include:
Right to Access
You have the right to request access to the personal data we hold about you, including information about how we use it and who we share it with.
Right to Rectification
If you believe that any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
Right to Erasure ("Right to be Forgotten")
You can request that we delete your personal data in certain circumstances, such as when it is no longer necessary for the purposes for which it was collected or if you withdraw your consent.
Right to Restrict Processing
You have the right to request that we restrict the processing of your personal data in specific situations, such as when you contest its accuracy or object to its processing.
Right to Data Portability
You may request to receive your personal data in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller.
Right to Object
You have the right to object to the processing of your personal data where we rely on legitimate interests as our legal basis, or where your data is being used for direct marketing purposes.
Rights Related to Automated Decision-Making and Profiling
You have the right not to be subject to decisions based solely on automated processing, including profiling, which produces legal effects or significantly affects you. Please note that we do not make any automated decisions or engage in profiling through this website.
If you believe that the personal data we hold about you is incorrect or incomplete, you have the right to request access to this data, to rectify it, or to request its erasure.
Should you wish to raise a concern regarding our handling of your personal data, please contact us at: office@thehumancentric.eu. We will fully cooperate in resolving any issues brought to our attention.
If you are not satisfied with the outcome, you may contact the Romanian Data Protection Authority (ANSPDCP) and submit a formal complaint:
https://www.dataprotection.ro/?page=contact&lang=ro