1. Who we are
The controller of the personal data collected through this site is Emblematic Advertising SRL, with its registered office at Str. Pitar Moș nr. 27, et. 5, ap. 17, sector 1, Bucharest, Romania, tax identification number 33730699, which publishes MonitorLegal.ro. You can contact us at contact [at] monitorlegal [dot] ro.
2. What we collect and why
If you only read the site
- Technical data, through analytics cookies: only with your explicit consent, so we can understand which content is useful. Legal basis: consent. Details in the Cookie Policy.
- The categories you read, kept solely in your own browser so we can pre-select your topics of interest when you subscribe. This never reaches our servers.
If you subscribe to the free digest
- Your email address, language and chosen categories. Legal basis: your consent (Article 6(1)(a) GDPR), confirmed by clicking the link in a verification email. We use it solely to send you the legislative news you selected.
If you create an account and buy the PRO subscription
- Your email address and password, the latter stored only in encrypted form, which not even we can read. Legal basis: performance of the contract (Article 6(1)(b) GDPR).
- Billing details: full name and address for individuals, or company name, tax identification number, trade register number and registered address for businesses, plus your phone number if you provide it. Legal basis: performance of the contract and our legal obligation to issue an invoice.
- Subscription data: the plan chosen, the period paid for, payment status and technical identifiers from the payment processor. Legal basis: performance of the contract.
If you write to us
- Name, email and message, so we can reply. Legal basis: our legitimate interest in handling correspondence.
3. Card details
We never see, transmit or store your card details. Payment takes place entirely on Stripe’s infrastructure, on a page hosted by them. We receive back only the payment confirmation and technical identifiers, never the card number.
4. Who we share data with
We work with a small number of providers, each acting as a processor and bound by contract to process data only on our instructions:
- Stripe Payments Europe Ltd. (Ireland), for payment processing and subscription management.
- Our email service provider (European Union), for sending emails and hosting the subscriber list.
- Our web hosting provider.
We also disclose data to public authorities where the law requires it. Billing data reaches our accountants and, through them, the tax authorities, as required by law.
5. What we do NOT do
- We do not sell or rent your data to anyone.
- We do not take automated decisions with legal effect on you and we do not carry out profiling.
- We do not use your address to advertise other companies.
- We do not transfer data outside the European Economic Area unless the provider offers the safeguards required by the GDPR, such as the European Commission’s standard contractual clauses.
6. How long we keep data
- Newsletter email address: until you unsubscribe. The unsubscribe link is in the footer of every message.
- Account and subscription data: for the lifetime of the account, plus 3 years after it is closed, for any complaints.
- Invoices and accounting documents: 10 years, a period imposed by Romanian accounting law. This period cannot be shortened on request.
- Contact correspondence: a maximum of 3 years from the last exchange.
- Cookie consent records: 12 months.
7. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw your consent at any time without affecting processing carried out beforehand. You can change your topics of interest or unsubscribe yourself using the link in every email, and you can see your account data on your account page.
For any other request, write to us at contact [at] monitorlegal [dot] ro with the subject “GDPR” and we will reply within 30 days at the latest. Please note that deleting your account cannot delete invoices already issued, which the law requires us to keep.
8. Security
The site runs entirely over an encrypted connection. Passwords are stored as cryptographic hashes, never in plain text. Access to subscriber data is limited to the people who need it to run the service.
9. Complaints
If you believe the processing breaches the law, you may contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), dataprotection.ro. You also have the right to go to court.
10. Changes
Any change to this policy is published on this page, together with the date of the update. Significant changes are announced visibly on the site and, if you have an account, by email.