Skip to content
Bucharest Bar member since 2000 · law office founded in 2003Request a consultation
Chituc

Privacy notice

Last updated: 15 September 2026

How we process the personal data sent through the contact form

This notice explains how Chituc Cătălin Law Office (Cabinet de avocat Chituc Cătălin) processes the personal data you send through the website's contact form, under Regulation (EU) 2016/679 on data protection (GDPR).

The website does not use cookies and does not include traffic analytics or advertising tools.

This notice is being reviewed by the principal lawyer and may be supplemented.

Contents

  1. 1.Data controller
  2. 2.What data we process
  3. 3.Purpose of processing
  4. 4.Legal basis
  5. 5.How long we keep your data
  6. 6.Who receives your data
  7. 7.Your rights
  8. 8.Cookies and local storage
  9. 9.Professional secrecy
  10. 10.Contact
  11. 11.Updates to this notice
Return to top

1.Data controller

The controller is Cabinet de avocat Chituc Cătălin, an individual law office in the Bucharest Bar, founded by Decision no. 2162/2003 of the Bucharest Bar. Principal lawyer: Cătălin-Ioan Chituc.

Return to top

2.What data we process

Through the contact form we collect only the data you fill in:

  • first name and last name
  • email address
  • phone number, if you provide it
  • client type: individual or legal entity
  • the practice area your request concerns
  • your message
  • confirmation that you have read this notice

A few technical details are sent with your message: the page and language from which the form was sent, and the date and time of sending. The service that receives the form processes your IP address and browser information to deliver the message and for security.

Please include in your message only the information needed to understand your request. If your message contains information about criminal offences, it is processed only to assess your request, subject to professional secrecy.

Return to top

3.Purpose of processing

Your data are used to reply to your request and, where appropriate, to arrange a discussion with the lawyer. Technical data are used to deliver the message and to protect the form against abuse.

Your data are not used for marketing and are not sold or passed to anyone else for that purpose.

Return to top

4.Legal basis

The processing is based on:

  • Article 6(1)(b) GDPR, for steps taken at your request before a possible legal assistance contract is concluded
  • Article 6(1)(f) GDPR, the office's legitimate interest in replying to the requests it receives and in keeping the form secure
Return to top

5.How long we keep your data

Data from requests that are not followed by a legal assistance contract are kept for no more than 12 months from receipt, and are then deleted.

If a request is followed by a legal assistance contract, the data become part of the records of the mandate and are kept in line with the lawyer's professional obligations.

Return to top

6.Who receives your data

Requests are read only by the principal lawyer. To run the website and the form we use the following providers, acting as processors:

  • Amazon Web Services (AWS): hosting of the site files, receipt of the form and sending of the message through Amazon SES, in the EU region (Frankfurt, eu-central-1); pages are delivered through the AWS CloudFront network, which may serve visitors from locations outside the EU, under standard contractual clauses
  • Google, the provider of the Gmail email service in which the office receives messages
  • the website's technical administrator, only as far as needed to maintain it

Google may also process data outside the European Economic Area. In that case, the transfer takes place under the mechanisms provided by the GDPR, such as adequacy decisions or standard contractual clauses.

Data may be disclosed to public authorities only where the law requires it, subject to professional secrecy.

Return to top

7.Your rights

Under the GDPR and within the limits set by law, you have the following rights:

  • the right of access to the data processed
  • the right to have inaccurate data rectified
  • the right to erasure
  • the right to restriction of processing
  • the right to data portability
  • the right to object to processing based on legitimate interest
  • the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro

To exercise your rights, you can write to catalin.chituc@gmail.com or call 0723 171 934. We reply within the period set by the GDPR, normally within one month.

Your data are not used for decisions based solely on automated processing.

Return to top

9.Professional secrecy

Communications with the lawyer are protected by professional secrecy under Law no. 51/1995 on the organisation and exercise of the legal profession.

Sending the form does not, in itself, conclude a legal assistance contract and does not constitute legal advice.

Return to top

10.Contact

For questions about this notice or the processing of your data, you can contact us:

Return to top

11.Updates to this notice

This notice may be updated when the way the website works or the legal requirements change. The date of the latest update is shown at the top of the page.

Return to top