Privacy and personal data

Controller

The controller of your data is Cabinetul de avocat Alina Pufu (Alina Pufu Law Office), CUI 22345710, with its registered office at 43 Câmpia Libertății Street, Block MC6, Entrance A, Floor 1, Apt. 8, Office no. 14, Sector 3, Bucharest, Romania. Contact for personal data matters: [email protected].

What data we process

Through the contact form: your name, email address or phone number and your message. Please do not send identity documents, sensitive data or confidential information through the form.

We use the data solely to respond to your enquiry and, should you so decide, to prepare a legal services agreement (Article 6(1)(b) and (f) of Regulation (EU) 2016/679).

Retention

Messages that do not lead to an engagement are kept for no more than 12 months. Data in client files is retained in accordance with the lawyer’s professional obligations.

Who has access

The lawyer and strictly necessary technical providers (website hosting and email service) and, only with your consent, Google for Google Analytics statistics. We do not sell or share your data for marketing purposes.

For statistics about how the website is used we use Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Google Analytics is loaded only after you press “Accept” in the cookie banner or turn analytics on in “Settings”. Without your consent no data is sent to Google.

  • What data: the pages visited, the source of the visit (for example a search engine), technical data about your device and browser (type, language, screen resolution), an approximate region and online identifiers stored in the _ga and _ga_NK2ZME6CD4 cookies. Google Analytics 4 does not log or store IP addresses. We do not use advertising, remarketing or Google Signals, and we do not link this data to your name or to messages sent through the form.
  • Purpose: to understand, in aggregate, which pages are read and how we can improve the website.
  • Legal basis: your consent (Article 6(1)(a) of Regulation (EU) 2016/679 and Article 4(5) of Law no. 506/2004).
  • Retention: analytics data is kept in Google Analytics for the period set in our account, no more than 14 months, and is then deleted automatically. The cookies expire after no more than 13 months.
  • Transfers outside the EEA: Google may process data outside the European Economic Area, including in the United States. Such transfers rely on the EU–US Data Privacy Framework (the European Commission’s adequacy decision) and on the standard contractual clauses approved by the Commission.
  • Withdrawing consent: at any time, from the “Cookie settings” link in the footer of every page. Withdrawal does not affect processing carried out before. Details in the cookie policy.

More about how Google processes data: Google Privacy Policy and How Google uses information from sites that use its services.

Your rights

You have the right of access, rectification, erasure, restriction, objection and data portability, as well as the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP). To exercise your rights, write to [email protected].

Professional secrecy

Information you provide about your situation is protected by the lawyer’s duty of professional secrecy.