Data Protection/IP & IT&C

We tailor our advice to your business:

addressing current concerns, considering the specific business environment and keeping future developments in mind.

BirișGoran and PrivacyON, a boutique law firm specialized in legal advice on personal data protection and e-commerce, joined forces to provide consolidated advisory services in the field of personal data protection. The expertise of PrivacyON in managing data protection compliance programs in a wide variety of business sectors comes to complete the portfolio of services offered by BirișGoran with thorough and practical GDPR & privacy knowledge.

PrivacyON offers privacy compliance advice and program management, with a customized and practical approach. Clients also benefit from personalized training modules and courses, which help them create a compliance-oriented organizational culture, with positive effects on the long term.

Transparency

We are skilled at drafting data protection related documentation, such as information notices and other materials that need to have an accessible language and be easily understood by the general public.

Data mapping

We assist clients with setting up and filling in registers of data processing activities. This means that we conduct interviews with all departments of the company and make sure that all relevant processes are considered.

Data processing agreements

Our experience provides us with a very practical approach, and we aim to help all parties create legal arrangements which work in the real business world.

Websites & apps

Our approach to websites and apps is highly customized – we don’t believe in template privacy policies. First, we need to know all the details about our client’s online projects and propose personalized documentation, as well as practical mechanisms for GDPR compliance, so as to allow our clients to carry out their activity smoothly while also observing data protection legal requirements.

Marketing

There is no one-size-fits-all solution when it comes to marketing. Rather, we discuss together with clients about their objectives, and then we help in choosing mechanisms which allow them to carry out their marketing activities in compliance with the legal requirements.

Data subject requests

In Romania, the failure to reply to data subjects is the most frequent issue leading to GDPR sanctions. We make sure that our clients are equipped with efficient procedures and with relevant awareness, and we advise on how best to address any claims related to the processing of personal data.

Trainings and DPO coaching

In 2021 the PrivacyON partners founded the Privacy Learning project, an educational platform aimed at improving the quality of GDPR knowledge through trainings for companies and courses for the public.

We designed a unique one-to-one training program for Data Protection Officers and other privacy specialists. The aim is to go deeper into both theoretical and practical GDPR compliance issues, through a personalized learning and coaching experience.

Day to day data protection assistance

GDPR compliance is a continuous effort, because personal data processing is a continuous activity. We maintain a close connection to our clients, for all ongoing privacy-related matters. We spend a fair amount of time getting to know our clients’ businesses and therefore we are able to provide relevant advice in a very efficient and integrated way.

More information about their services and professional approach cand be accessed on the PrivacyON website.

Recent mandates include:

Ferrero Romania
Ferrero Romania
Part of Ferrero Group, one of the leading European manufacturers of branded chocolate and confectionery products. We assisted on compliance with data protection legislation and training of personnel. The project implies continuous coordination with the entire Ferrero Group, in order to ensure the GDPR implementation is aligned and consistent throughout the entire group of companies.
Leading energy producer and distributor
Leading energy producer and distributor
Assisting one of the most important energy producers and distributors in Romania with full GDPR compliance measures. With a very large number of clients, personal data protection activities require sophisticated consultancy and rigorous GDPR compliance measures, combined with a thorough knowledge of energy-related regulations.
OTP Bank
OTP Bank
Assisting an important bank in Romania, member of one of the leading European Financial Groups, with a comprehensive GDPR compliance project for their Human Resources activities consisting of: reviewing HR policies and guidelines, drafting privacy information notices and advising the client on creating internal data processing records.
Netopia Payments
Netopia Payments
Netopia is a card payments processor covering an important share of its relevant market in Romania. We assisted with all aspects of data protection compliance, from day to day advice to the companies DPO to structuring of documentation and websites, drafting of internal policies and procedures, management of data subject requests, keeping of records of processing activities.
Leading real estate companies in the CEE
Leading real estate companies in the CEE
The services are very diverse and include drafting of internal policies, trainings, drafting and negotiating data processing agreements, implementing data privacy by design as well as ongoing support for the compliance teams.
One of the biggest telecommunication operators in the CEE
One of the biggest telecommunication operators in the CEE
The mandate included devising cookie consent mechanisms for websites and apps, drafting of privacy policies, assisting with various issues related to the protection of personal data in the electronic communication sector (Facebook pixel, device fingerprinting, using third party authentication services, etc), training services, day to day assistance to the DPO, as well as assistance in a litigation, challenging measures imposed by the data protection authority.
Beer market leader in Romania
Beer market leader in Romania
Assisting with the conception and implementation of a complex GDPR compliance program, as well as day-to-day assistance on data protection and privacy matters.
Important oil&gas company in Romania
Important oil&gas company in Romania
Assisting an important oil&gas company in Romania, member of an international group, with in-house training for staff, mapping the data processing activities performed by the company and other GDPR related matters.
Well-established international Business Process Outsourcing solutions provider
Well-established international Business Process Outsourcing solutions provider
Assisting an important Business Process Outsourcing solutions provider with a presence of over 30 years in the USA and a significant number of employees in Romania with a comprehensive GDPR compliance project.
LeasePlan Romania
LeasePlan Romania
Assisting with privacy compliance in various activities.