Who to contact
The data controller is LAW FIRM S.R.L., company IDNO 1024600071076.
This policy concerns the LAW FIRM website and communications initiated through its published contact details. Office details and the telephone number are available on the Contact page.
The controller’s general contact is [email protected]. For personal data requests, use [email protected].
Visiting the website
The pages do not set cookies and contain no forms, advertising services or visitor analytics tools. Scripts are loaded from the website’s own files; fonts are those available on your device.
Your choice of light or dark theme is stored locally in your browser using localStorage, under the key lawfirm-theme. The website script does not send this preference to the server. You can remove it by clearing the site’s data in your browser settings.
The hosting infrastructure may generate technical logs containing your IP address, the requested resource and the time of the request. These are distinct from information you voluntarily provide in correspondence.
For browser storage details and preference management, see our Cookie policy.
The page code does not include session recording, visitor profiling or solely automated decisions producing legal effects on visitors.
Correspondence and processing purposes
An email may contain your name, email address, telephone number, an account of your situation and documents you choose to attach. Send only information relevant to your enquiry.
The purpose and legal basis are determined for each processing activity under Article 6 of Law No. 195/2024:
- Discussing and carrying out an engagement: steps requested by the data subject before entering a contract, or performance of a contract to which that person is a party — Article 6(1)(b).
- Statutory duties, including handling data rights requests: the applicable legal obligation — point (c).
- Handling correspondence and defending legal claims, where another basis does not apply: legitimate interests in responding and protecting rights, subject to assessing necessity and balancing them against the individual’s rights — point (f).
- A purpose for which consent is requested: specific consent, where used as the basis — point (a). Merely visiting the site is not consent to other purposes.
Sending a message is voluntary. If information needed to understand the enquiry or identify the data subject is missing, clarification may be required. Data needed for a contract or legal obligation and the consequences of not supplying it must be explained in that context.
Do not send identity documents or sensitive data unnecessary for your enquiry. Before sending documents concerning others, check your authority to share them and agree an appropriate channel.
Recipients, storage and transfers
Depending on the enquiry, access may be needed by people involved in responding and technical hosting or email providers. Disclosure to authorities or other recipients is subject to applicable legal requirements.
The website and data in email accounts are stored in European Economic Area (EEA) countries.
Documents are kept locally and, where needed, on offline storage devices in the Republic of Moldova or in secure storage facilities in EEA countries. The EEA comprises the European Union Member States, Iceland, Liechtenstein and Norway.
For information about the technical providers used and the storage of your data, email [email protected].
Retention periods
Documents supplied by clients under a legal services agreement are retained for the agreed period needed to complete the contracted services and are used exclusively to carry out the corresponding tasks.
After completion of the work, acceptance of the services and completion of payments, clients’ personal and/or confidential information is deleted after 30 days. This period starts once all three conditions have been met.
An exception applies where applicable laws impose a mandatory retention obligation. In those cases, only the information covered by that obligation is retained for the legally required period.
The rule above concerns client documents and information relating to contracted services. To clarify the period applicable to another category of correspondence or your data, contact [email protected].
Your rights
The following rights are subject to the conditions and exceptions in Law No. 195/2024:
- Access — Article 15: find out whether your data is processed and request information about the processing and a copy.
- Rectification — Article 16: request correction of inaccurate data and completion of incomplete data.
- Erasure — Article 17: request deletion where the statutory conditions apply; retention duties and legal claims may limit erasure.
- Restriction — Article 18: request limits on processing in the circumstances set out by law.
- Portability — Article 20: for data you supplied, where processing is automated and based on consent or a contract, request a structured format and, where technically feasible, transmission to another controller.
- Objection — Article 21: object to processing based on legitimate interests for reasons relating to your circumstances; the controller must assess the reasons and the legal conditions for continuing.
- Withdrawal of consent — Article 7: where consent is the basis, withdraw it at any time without affecting the lawfulness of earlier processing.
- Automated decisions — Article 22: benefit from statutory safeguards for solely automated decisions with legal or similarly significant effects.
How to exercise your rights
Email [email protected], stating the right you wish to exercise, the data or correspondence concerned and how to contact you. No website account is required. Where there are reasonable doubts about identity, only additional information needed for verification may be requested.
Under Article 12, a response is provided without undue delay and within one month of receiving the request. The period may be extended by two months where justified by the complexity or number of requests; you will be informed of the extension and reasons within the first month.
Requests are generally handled free of charge. For manifestly unfounded or excessive requests, the law allows a reasonable fee or a reasoned refusal; the controller must demonstrate that character. Where no action is taken, the explanation and available remedies are communicated within one month.
You may complain to the National Centre for Personal Data Protection under Article 72, or apply to the competent court under Article 74.
Policy updates
This policy may be revised when website features or processing practices change. The date above identifies the current version. For information specific to an engagement, also consult the documents provided within that relationship.