'/%3E%3C/svg%3E){kind=small}
Last updated: 24 October 2026
Summary
Dragne & Asociații is the controller of the personal data described in this policy. The website has no forms and no user accounts. We receive personal data only when you write to us or call us, and through the technical data that every website receives. Google Analytics runs only if you accept analytics cookies.
Who we are
Dragne & Asociații, 6 Matei Millo Street, Millo Offices, Sector 1, Bucharest 010145, Romania. You can reach us through the Contact page or by letter to this address.
When this policy applies
- when you visit dragne.ro (dragne.com redirects here);
- when you contact us by email, phone or letter, or when we contact you;
- when you apply for a job or an internship with us;
- when we measure how the website is used, only with your consent.
What personal data we collect
Data you give us
- Contact details, such as your name, job title, postal address, telephone number and email address, and what you write to us.
- When your personal data is sent to us for recruitment, we use it only to contact you about recruitment and the opportunities you asked about.
Data collected automatically
- Like every website, our server receives technical data from your browser: IP address, browser type, operating system, language, referring page, and the date and time of access. This data is kept in server logs.
- If you accept analytics cookies, Google Analytics records how you use the website, for example the pages you visit and your approximate location based on your IP address. For details and to change your consent, see our Cookies Policy.
Why we use your data and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Deliver the website and keep it secure | Technical data, server logs | Legitimate interest |
| Answer your messages | Contact details, your message | Legitimate interest, or steps before a contract |
| Recruitment | CV and contact details | Steps before a contract |
| Website statistics | Google Analytics data | Consent |
| Legal obligations and legal claims | As needed | Legal obligation, or legitimate interest |
Who we share your data with
- our website hosting provider, which stores the website and the server logs;
- Google Ireland Limited (Google Analytics), only if you accept analytics cookies. Google may transfer data to the United States under the EU–US Data Privacy Framework;
- public authorities, courts or professional advisers, when the law requires it or to establish, exercise or defend legal claims.
We do not sell personal data.
How long we keep your data
We keep server logs for approximately 30 days, to analyse traffic and investigate problems. Google Analytics data is kept for the retention period set in our Google Analytics account. We keep other personal data only as long as we need it for the purposes above, or as long as the law requires.
Security
We use up-to-date data storage and security measures to hold your personal information securely in electronic and physical form, protecting it from unauthorised access, improper use or disclosure, unauthorised modification, or unlawful destruction or accidental loss. All our partners, staff and third-party service providers who have access to confidential information (including personal information) are subject to confidentiality obligations.
However, the transmission of information via the internet is not completely secure. Although we take appropriate and proportionate steps to manage the risks, we cannot guarantee the security of information transmitted to our online services.
Your legal rights
Under certain circumstances, you have rights under data protection laws in relation to your personal data. It is our policy to respect your rights and we will act promptly and in accordance with applicable law. These rights include the right to:
- request access to your personal information (known as a subject access request) and request certain information in relation to its processing;
- request rectification of your personal information;
- request the erasure of your personal information;
- request that we restrict the processing of your personal information;
- object to the processing of your personal information;
- request a copy of any personal data that we hold about you in a structured, commonly used and machine-readable format (data portability), where technically feasible;
- be provided with certain related information about how we process your personal data. There are exceptions to this right; for example, where information is legally privileged or if providing you with the information would reveal personal data about another person.
Where you have given consent to the processing of your personal information for a specific purpose, you have the right to withdraw that consent at any time. Once we have received notification that you have withdrawn your consent, we will no longer process your information for that purpose, unless we have another legitimate basis for doing so in law.
You also have the right to lodge a complaint with the Romanian supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, București, www.dataprotection.ro. If you would like to exercise any of your rights, please contact us via the Contact page or by letter to: 6 Matei Millo Street, Millo Offices, Sector 1, Bucharest, 010145, Romania.
Changes to this policy
We may change this Privacy Policy from time to time; most changes are likely to be minor. If we make changes, we will update the date at the top of this page and the change log below.
Change log
- October 24, 2026: Updated for the new website — removed references to contact forms and a separate mobile site; added the recipients of personal data, the international transfer through Google Analytics and a table of purposes and legal bases.
- March 15, 2026: Full update — fixed typographical errors; added right to lodge a complaint with ANSPDCP; updated cookies reference to reflect active consent mechanism.
- May 25, 2018: Added more specific information to help clarify our practices, and added information to reflect the requirements of the EU’s General Data Protection Regulation.
- May 01, 2018: Published.