Public Advisors S.R.L. (hereinafter referred to as “Public Advisors” or the “Controller”), acting as the data controller, hereby informs you about the way your personal data is processed when you use the website publicadvisors.ro and the contact form available on it. The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 on data protection (GDPR) and Romanian Law no. 190/2018.

Data Controller and Contact Details

Data Controller: Public Advisors S.R.L., a limited liability company registered in Romania.
Contact details: For any inquiries related to data protection, you can contact us at office@publicadvisors.ro.

Personal Data Processed

Through the contact form available on the website, Public Advisors processes the following categories of personal data provided by users:

  • Full name – for the proper identification of the person submitting the request;
  • Email address – in order to provide a reply to your inquiry;
  • Phone number – to contact you if needed for clarifications by phone;
  • Message content – the information you voluntarily provide in the message field of the contact form.

Public Advisors does not require and kindly asks you not to disclose in your message any sensitive data (such as data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, or criminal records). The data you provide should be adequate and limited to what is necessary to process your request.

Purpose of Processing

The personal data collected via the contact form is processed exclusively for the purpose of managing and handling your requests. This includes analyzing your message, contacting you in order to provide an answer or the requested information, and taking the necessary steps to respond effectively to your inquiry.

Legal Basis for Processing

The legal basis for processing the personal data you provide through the contact form is the legitimate interest of Public Advisors to respond to inquiries and messages received from visitors of the website, pursuant to Article 6 (1) (f) GDPR. This legitimate interest consists of the necessity to ensure effective communication with users and to provide assistance or information.

Data Recipients

To ensure the efficient operation of the website and the management of contact forms, your data may be accessed by trusted technical partners of Public Advisors, acting as data processors (e.g., hosting providers, IT maintenance providers). These processors act solely on the instructions of Public Advisors and are contractually bound to protect the confidentiality and security of your data.

Other than in these situations or where disclosure is required by law, Public Advisors will not disclose your data to third parties.

Data Transfers outside the EEA

Public Advisors does not transfer personal data collected through the website outside the European Economic Area (EEA). All processing activities are carried out within the EEA or in jurisdictions considered to provide an adequate level of protection. (Note: see the section below on Google reCAPTCHA regarding possible transfers to Google.)

Data Retention

Personal data collected via the contact form will be stored for a maximum period of 12 months from your last interaction with us. After handling your request, we retain the data for this limited period to follow up on any subsequent inquiries or clarifications.

Exceptions: If there are legal obligations requiring longer retention periods or if Public Advisors has a legitimate interest (e.g., for the defense of rights in case of a potential dispute), data may be retained for longer, strictly limited to such purposes.

After the retention period expires, your personal data will be securely deleted or anonymized.

Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access – to obtain confirmation of whether your data is being processed and access to such data;
  • Right to rectification – to have your personal data corrected or completed if inaccurate or incomplete;
  • Right to erasure (“right to be forgotten”) – to request the deletion of your data under certain circumstances (e.g., if it is no longer necessary for the purposes for which it was collected);
  • Right to restriction of processing – to request the suspension of processing in certain situations;
  • Right to object – to object, on grounds relating to your particular situation, to processing carried out on the basis of the Controller’s legitimate interest;
  • Right to data portability – to receive the personal data you have provided in a structured, commonly used, machine-readable format, or to request the transmission of such data to another controller;
  • Right to lodge a complaint – to file a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or the competent authority in your country of residence, if you consider your rights have been infringed.

To exercise any of these rights, you may contact us at office@publicadvisors.ro. We will respond without undue delay, within one month, which may be extended if necessary as allowed by law.

Anti-Spam Protection – Google reCAPTCHA

To protect the site and the contact form against spam and automated abuse, Public Advisors uses the Google reCAPTCHA service. This service helps determine whether data entered into the form is submitted by a human or an automated program.

The use of reCAPTCHA involves transmitting certain information about the user to Google (such as IP address, browser characteristics, and interactions with the site). Such data may be stored on servers located outside the EEA. Public Advisors does not control how Google processes this data. Use of reCAPTCHA is subject to Google’s Privacy Policy and Terms of Service, which you can consult here: Google Privacy Policy and Google Terms of Service. By using the contact form, you agree to the processing of this data by Google in accordance with its policies.

Data Processing in Client Projects

In the context of projects developed for clients, Public Advisors may process other categories of personal data depending on the specific project (e.g., participants in campaigns, studies, events). In such cases, data subjects will be informed separately and specifically, through dedicated privacy notices provided at the time of data collection, in compliance with GDPR and applicable legislation.

This privacy notice applies exclusively to the data processing carried out via the website publicadvisors.ro. Public Advisors S.R.L. reserves the right to update this notice from time to time to reflect changes in processing practices or applicable legislation. We encourage you to check this page periodically to stay informed about how we protect your personal data.