Privacy Policy

BAA Legitimus
Last Updated: 07.04.2025

This privacy policy describes how we collect, use, store, and protect your personal data in accordance with the provisions of Law No. 195/2024 on the protection of personal data, the Council of Europe Convention No. 108+, and other applicable legal acts.

1. Who are we?

Data Controller:
BAA Legitimus
Legal address: Republic of Moldova, Chișinău, 31 August 1989 St., office 4
Phone: +37369311589
Email: office@legitimus.md
Data Protection Officer (if appointed): office@legitimus.md

2. What data do we collect?

• Full name
• Contact details (email, phone)
• Information voluntarily provided via forms on the website
• Data from electronic correspondence
• Data necessary for providing legal services (including relevant documents)

3. Legal basis for processing

Personal data is processed based on Article 6 of Law No. 195/2024, if at least one of the following conditions is met:

• The data subject has given explicit consent
• Processing is necessary for the performance of a contract or pre-contractual steps
• Processing is necessary to fulfill a legal obligation
• Processing is necessary to protect vital interests
• Processing is necessary for the performance of a task carried out in the public interest
• Processing is necessary for the legitimate interests of the controller or third parties (while respecting the rights of the data subject)

4. Purpose of processing

• Responding to inquiries submitted through the website
• Providing legal services
• Compliance with legal and archiving obligations
• Administrative and contractual communication
• Improving the website’s functionality and user experience

5. Data recipients

Data may be disclosed, within the limits of the law, to:

• Public authorities (courts, law enforcement)
• Trusted partners (notaries, translators, experts involved in service delivery)
• IT or hosting service providers, under confidentiality obligations

Data transfers outside the Republic of Moldova are carried out only based on standard contractual clauses (SCCs) approved by the NCPDP.

6. Data retention period

• For the duration of legal services and archiving (typically 5 years)
• For the duration of consent (e.g., newsletter), until withdrawn
• Data from unsolicited forms – up to 12 months

7. Your rights

In accordance with Law No. 195/2024, you have the following rights:

• Right of access to your data
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to object and restrict processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with the NCPDP – www.datepersonale.md

To exercise your rights, please contact us at: office@legitimus.md

8. Data security

We apply technical and organizational measures to protect data against unauthorized access, loss, destruction, or disclosure.

9. Use of cookies

Our website may use cookies to analyze traffic and improve its functionality.

10. Policy changes

We reserve the right to update this Policy in response to legal changes or internal processes. The current version will always be available on our website.