Privacy Policy

Data controller

Cristea D. Flavius - Victor - Cabinet de Avocat, member of the Iași Bar, tax ID 41862194, contact address Str. Grigore Ureche, nr. 1-3, ARPA Office Center, office 08, 700044 Iași, Romania, processes personal data under the terms set out below.

For any question regarding data processing, you may write to flavius.cristea@yahoo.com.

What data this website collects

This is a presentation website. It has no database, creates no user accounts and stores no information about visitors.

The contact form does not send data to any server of ours. When you press the send button, the e-mail application on your device opens with the message already composed. You send it yourself, through your own e-mail provider.

We therefore receive only the data you choose to send us: your name, the content of your message and the e-mail address you send it from.

Cookies and tracking technologies

This website uses no cookies, runs no traffic analytics and loads no third-party resources automatically. Nothing is written to your browser.

The address shown in the Contact section is a link to Google Maps. It opens only if you click it; only then does your data reach Google, subject to that company's policy. If you do not click the link, nothing is transmitted.

The same applies to the WhatsApp link: the page loads nothing from Meta unless you click it. If you do, the WhatsApp app opens and the conversation takes place outside this website.

Purposes and legal bases

• Responding to enquiries sent by e-mail or WhatsApp — basis: pre-contractual steps taken at your request, art. 6(1)(b) GDPR;
• Communication within an existing legal assistance relationship — basis: performance of the legal assistance contract, art. 6(1)(b) GDPR;
• Compliance with the legal and professional obligations of a lawyer — basis: art. 6(1)(c) GDPR.

If your enquiry contains special categories of data — for example health data in a malpractice matter — or data relating to criminal offences, processing takes place under art. 9(2)(f) GDPR: the establishment, exercise or defence of legal claims.

Professional secrecy

All information received is protected by lawyer's professional secrecy under Law no. 51/1995 and the Statute of the legal profession. This obligation is stricter than general confidentiality requirements and continues after the client relationship ends.

Who else has access to the data

We do not sell, rent or transfer your data for marketing purposes.

E-mail correspondence passes through the servers of the e-mail provider used by the office. As with any e-mail communication, the provider has technical access to messages.

Messages sent via WhatsApp travel through the service operated by WhatsApp Ireland Limited, part of the Meta group. The content of the conversation is end-to-end encrypted, but Meta processes the associated data — your phone number, the time and frequency of messages — under its own privacy policy, over which the office has no control.

For sensitive information we recommend a meeting at the office.

The website is hosted by Hostinger. Like any web server, it may automatically record the IP address and technical request data in its logs — ordinary processing, necessary for the operation and security of the site.

Data may be disclosed to courts, public authorities or other participants in proceedings where this is necessary to defend the client's interests or is required by law.

How long we keep the data

Messages that do not lead to a working relationship are kept for as long as needed to handle the enquiry, then deleted.

Case documents are kept for the period required by the professional and legal obligations applicable to the practice of law, including accounting archiving periods.

Your rights

Under the GDPR, you have the following rights:

• the right of access to the data processed;
• the right to rectification of inaccurate data;
• the right to erasure;
• the right to restriction of processing;
• the right to data portability;
• the right to object to processing;
• the right not to be subject to automated decision-making — we use no automated decisions and no profiling.

The exercise of these rights may be limited where the data is protected by professional secrecy or where retention is required by law.

To exercise your rights, write to flavius.cristea@yahoo.com.

Right to lodge a complaint

If you consider that the processing of your data infringes applicable law, you may contact the Romanian National Supervisory Authority for Personal Data Processing:

• B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, 010336 Bucharest, Romania;
• anspdcp@dataprotection.ro;
• www.dataprotection.ro.

Changes to this policy

This policy may be updated. The applicable version is always the one published on this page, with the date of last update shown at the top.