Privacy & Cyber Security

We advise on all aspects of Romanian national and European legislation relating to data protection, cyber security and information technology, and offer exceptional legal advice and support tailored to each client’s specific needs.

Overview


 

The ability to convey information quickly, accurately and efficiently has always been one of the main drivers of innovation and we understand and appreciate the key role communication plays in social and economic development. Our flexible and individualised approach to legal solutions for our clients comes from an in-depth understanding of their strategic goals and objectives.

We provide all the legal assistance necessary in connection with a multitude of issues in relation to national and European legislation on data protection, including reviewing commercial agreements for compliance with the legislation, registration with the appropriate authorities, assistance throughout inspections carried out by the relevant authorities and revision of confidentiality policies to include the requirements set out by data protection legislation, including information and notification, data protection implications from marketing initiatives and drafting appropriately worded documents for promotional campaigns and regulations as well as image rights.

Key Contacts

Privacy & Data protection


Legislation in virtually all jurisdictions has established new data protection standards that apply to activities in all sectors and to businesses large and small. Every entity that deals with data must appreciate the changes in their operating environment and how the law defines the specific roles and responsibilities of each participant in the field.

We take a client-orientated approach to these issues based on a thorough review of the situation, and we guide our clients through the process of identifying requirements and implementing solutions step-by-step.

We assist clients in mapping and implementing the processes required for handling personal data and assess their current practices against current legal and GDPR data protection requirements. We help our clients to bring their business into line with the applicable standards and ensure their on-going compliance. Our recommendations are not only appropriate but are specifically tailored to our clients’ individual needs and the needs of their industry.

Our legal services include a review of our clients’ existing contractual frameworks to ensure that they are in compliance with all applicable laws and regulations.

We provide our clients with comprehensive advice and assistance on all data protection issues and, when required, guidance on handling trade secrets in the client’s profession or industry including:

  • Drafting specific data protection legal opinions.
  • Assessing the current status of the client’s GDPR compliance processes.
  • Implementing risk mitigation measures.
  • Reviewing and drafting internal forms and procedures to comply with the GDPR requirements.
  • Expanding the Data Protection Impact Assessment procedures based on the type of data processed.
  • Drafting internal IT security policies, particularly about the use of the client’s IT resources.
 

Our Relevant Experience

  • Advised the Bog’Art companies in the GDPR audit carried out within the group in order to assess the level GDPR compliance, recommending risk mitigation measures and offering continuous support in implementation, as well as advising on complex issues involving data protection.
  • Advised A&D Pharma, one of the most important pharmaceutical retailers, in respect of a complex audit of their data processing application.
  • Advised the Romanian branch of Merck, one of the most important healthcare and life sciences companies, in complying fully with data protection requirements.
  • Advised the Romanian branch of DP World, one of the top 10 terminal container operators, on data protection implications, including sensitive matters regarding biometric data processing and the security/transfer of personal data.
  • Advised World Class Romania regarding complex data protection matters resulting from the new data protection legislation, as well as providing practical solutions to day-to-day matters regarding the processing of personal data.
  • Advised Next Romania, one of the most important clothing retailers, in order to ensure compliance with data protection provisions.
  • Advised Creative Eye SRL, creator and owner of the platform Litoralul Romanesc, one of the most well known Romanian travel agencies, in complying with data protection provisions, personal data security and a data processing audit.
  • Advised Bancpost in relation to data protection matters by providing dedicated legal training and assessing their current GDPR compliance, as well as providing advice on the implementation of measures to mitigate risks, privacy information and data subject access rights/protection.
  • Advised Resource Partners on the current GDPR compliance of Preturi Pentru Tine SRL, identifying non-compliance risks as well as recommending risk mitigation measures in order to achieve the necessary level of compliance, including an in-depth analysis on the use of third party software as well as risks associated with the use of open source software.
  • Advised EDS Romania SRL with the analysis and revision of various data protection aspects, including the GDPR compliance of Infopress, including recommending the implementation of risk mitigation measures.
  • Advised Medicover with the analysis and revision of various intellectual property and data protection aspects, including the GDPR compliance of the target companies, highlighting potential risks and offering recommendations for customised risk mitigation measures.

Key Contacts

Communications


The ability to convey information quickly, accurately and efficiently has always been one of the main drivers of innovation and we understand and appreciate the key role communication plays in social and economic development. Our flexible and individualised approach to legal solutions for our clients comes from an in-depth understanding of their strategic goals and objectives

We provide legal advice and assistance to our clients in connection with the implementation of new media technology and related services and revising agreements with telecommunications companies about specific telecom infrastructures and network projects in the field.

Our Relevant Experience

  • Advised the multichannel video programming distributor UPC Romania with specific regulatory media and IP advice in relation to the implementation of a media project involving online content.
 

Key Contacts

eCommerce


 

Online developments have revolutionised the way companies do business and interact with their customers. The attractiveness of an online business is the ability to reach customers worldwide.

Our specialised team advises clients about the best approach for its business.  We provide specific regulatory advice on implementing online platforms, projects for the sale of products and recommendations for ensuring the conformity of an online platform’s general terms and conditions of use with Romanian law.

 

Our Relevant Experience

  • Advised Beez, a cash-back platform that uses gamification to create healthy financial habits, on a 1.2 milion Euro Seed Funding Round, led by GapMinder and Roca X.
  • Advised GapMinder, a VC Fund financed via Competitiveness Operational Programme 2014 – 2020 and co-financed by the European Fund for Regional Development, on its investment in Frisbo.
  • Advised Next Romania, one of the most important clothing retailers, to ensure their compliance with data protection provisions and providing specific regulatory advice on the implementation of their online platform.
  • Advised World Class Romania regarding compliance with the applicable legislation of their online e-Commerce platform.
  • Advised numerous e-Commerce businesses with advice on the compliance of their websites with Romanian legislation and making recommendations in order to achieve compliance, as well as drafting and revising the Terms of Use, Privacy Policies and Cookie Policies for their websites.

Key Contacts

Enterprise Technology


 

In the light of the new approach to the protection of personal data, we are committed to helping our clients understand the basic concept of connected devices and to be aware of the substantial implications for security.

Our aim is to act as our clients’ trusted and expert technology adviser and to assist in the selection, design and delivery of solutions specifically tailored to their business needs and which ensure their enterprise achieves maximum success.

 

Our Relevant Experience

  • Advised Druid AI-driven on the USD 15 Million  Series A Financing, the largest funding round in Romania to date in 2022.
  • Advised Avira, a cybersecurity software company headquartered in Germany and with additional offices in the US, China, Romania and Japan, on the acquisition of the award-winning cybersecurity BullGuard.
  • Advised GapMinder, a VC Fund financed via Competitiveness Operational Programme 2014 – 2020 and co-financed by the European Fund for Regional Development, on its investment in Druid AI-driven chatbots, a company specialized in conversational technology.
  • Advised Brillio, a leading digital technology consulting company, in connection with the acquisition of Cognetik, a data and insights company with deep expertise in improving digital experiences for its customers.
  • Advised CODA Intelligence, a technology startup operating in the area of cyber security, on a 800,000 EUR Seed Funding Round, led by Early Game Ventures and Roca X. 
  • Advised Glory Global Solutions (International) Ltd, a wholly-owned subsidiary of Glory Ltd, on its investment in Acrelec Group SAS.
  • Advised GapMinder, a VC Fund financed via Competitiveness Operational Programme 2014 – 2020 and co-financed by the European Fund for Regional Development, on its investment in the USD 7M Series A funding round of the A.I. based typing biometrics technology provider Typing DNA.
  • Advised CalCon Group, a software development and consulting group that offers a wide range of services for the European real estate market, in the sale of the majority stake to Aareon.
  • Advised Centrade Cheil, a regional communication network in South-East Europe, headquartered in Bucharest and with local offices in Belgrade, Budapest and Zagreb, in relation to complex matters concerning data protection implications of a new face recognition system, as well as mapping and auditing the compliance levels within the company and offering appropriate recommendations.
  • Advised GapMinder on the implementation of their investments in Romanian start-up companies active in the IT sector. 
  • Advised GapMinder on their investment in Typing DNA, offering an in-depth analysis of issues concerning intellectual property rights over software solutions, potential risks involved with the use of third party and open source software, as well as data privacy matters, including the applicability of GDPR principles relating to data privacy by design and data privacy by default.

Key Contacts

AdTech


We understand and appreciate that advertising is a key activity for a flourishing enterprise. We provide our clients with strategic advice about advertising technology, media and data products.

We assist our international clients with data protection issues resulting from advertising campaign regulations.

Our Relevant Experience

  • Advised on multiple competition regulations for companies such as World Class Romania, Promoveritas and Prizeology, including revising contest regulations, representation in notarisation procedures as well as offering advice on the contest mechanisms and highlighting potential risks from a consumer protection, fiscal and data protection perspective.
  • Reviewed advertising scripts and all marketing materials for Mondelez International Inc., one of the biggest chocolate and sweet producers, in order to ensure compliance with Romanian legislation.

Key Contacts

Fintech


 

The fintech sector is driven by constantly evolving technology.  We provide our clients with the most up-to-date advice about the latest financial technologies and tailor our service to fulfil the needs of each individual client.

We are a leading provider of legal services to the fintech sector and, in particular, we have extensive experience in crypto-currency, including all aspects of initial coin offerings. Our expertise covers all aspects, including drafting and negotiating specific software agreements and related documents for the implementation of electronic payment platforms for various clients and assisting clients throughout the development and launch phases of initial coin offerings.

Our Relevant Experience

  • Advised PayPoint, one of the main payment operators in Romania, on the acquisition of the majority shareholding in PTP Online, the developer of the 24Pay app.
  • Advised SIBS, a major payment processor operating in Europe and Africa, on the acquisition of Wirecard companies in Romania, namely Wirecard Romania (previously Provus Service Provider), Romcard and Supercard Solutions & Services.
  • Advised FinExpert, a well-known accounting, payroll, audit and tax company, on the obligations relating to the security of personal data movement through complex agreements with its clients, contractors and service providers. We also advised on the compliance level of their marketing communications and the mechanisms for obtaining consent.
  • Advised GapMinder regarding the implementation of  their investments in Romanian start-up companies active in the IT sector. One of the largest target companies invested in was Fintech OS SRL, a fintech accelerator software platform providing software solutions to banks, financial institutions and insurance companies. Part of our assistance included specialised technical legal advice on the use of third party software, as well as the risks associated with the use of open source software.
  • Advised GapMinder on its investment in FintechOS, for the purposes of financing the expansion of operations globally and the acceleration of the development of AI technologies.

 

Key Contacts

Games & Interactive entertainment


 

We have an in-depth understanding and appreciation of developments in the entertainment industry, which ensures we can assist our clients, quickly and effectively, with issues that are often international in scope and multidisciplinary in nature, particularly with regard to regulatory media advice relating to the implementation of media projects that include online content.

Our Relevant Experience

  • Advised Edward Neuk Company S.R.L. on various issues on technology law, data protection and intellectual property matters related to the social platform Kuende, including advice related to privacy by design, open source software, ICO (Initial Coin Offering) Financing and patent protection issues. SAA’s input can be considered a corner stone in developing the Kuende Social Platform. Our legal assistance on matters regarding technology law, data protection legislation and intellectual property matters ensured the legal compliance of the platform while granting the envisaged growth in the online world.

 

Key Contacts

eGaming & Gambling


 

Online gaming, online gambling and eSports are becoming increasingly prominent worldwide. We recognise the need for legal services in support of clients active in the gambling sector and we aim to provide a comprehensive approach to all our client’s needs and objectives.

We provide extensive legal advice regarding the Romanian regulations governing advertising in the gambling sector, assist with all regulatory requirements and help mediate the relationship between clients and the Romanian National Gambling Office.

Our Relevant Experience

  • Advised gaming start-up Machinations.io on a 3.3 million USD Series A Financing.
  • Advised the founders of local game developer Metagame Studios on their exit towards global video game developer and publisher Fortis Games.
  • Advised Edward Neuk Company on various issues on technology law, data protection and intellectual property matters related to the social platform Kuende, including advice related to privacy by design, open source software, ICO (Initial Coin Offering) Financing and patent protection issues. SAA’s input can be considered a corner stone in developing the Kuende Social Platform. Our legal assistance on matters regarding technology law, data protection legislation and intellectual property matters ensured the legal compliance of the platform while granting the envisaged growth in the online world.
  •  

Key Contacts

Cloud Services & Infrastructure


 

We understand the nature of internet privacy issues that involve cloud servers and, together with our partnerships with IT service providers, we are able to address the needs of our clients for alternative methods of storing information.

We tailor our legal solutions to fit the cloud services model chosen by our client and assist on data protection and compliance with the legal and procedural requirements established by Romanian, European and global cloud solutions (including the development of concepts for the export of data).  We also provide advice regarding the structuring and negotiating of basic contracts for the acquisition of software and any related support and maintenance services.

Our Relevant Experience

  • Advised Cyscale software developer and VC Fund GapMinder on a 3M EUR Seed funding round.
  • Advised clients like World Class Romania, Next, Merck, Edward Neuk Company, with regard to risks associated with the usage of various cloud services, as well as similar technologies and providing risk mitigation measures, as well as practical advice, depending on the industry the client activates in.

Key Contacts

Other Legal expertise