Last updated: 7 October 2026
How we process personal data: the contact form, traffic statistics and cookies
This notice explains how Chituc Cătălin Law Office (Cabinet de avocat Chituc Cătălin) processes the personal data you send through the website's contact form, and data about visits to the website, under Regulation (EU) 2016/679 on data protection (GDPR).
The website uses Google Analytics for traffic statistics. Analytics cookies are set only with your consent; the details are in the section “Cookies and traffic statistics”.
This notice is being reviewed by the principal lawyer and may be supplemented.
Contents
- 1.Data controller
- 2.What data we process
- 3.Purpose of processing
- 4.Legal basis
- 5.How long we keep your data
- 6.Who receives your data
- 7.Your rights
- 8.Cookies and traffic statistics
- 9.Professional secrecy
- 10.Contact
- 11.Updates to this notice
1.Data controller
The controller is Cabinet de avocat Chituc Cătălin, an individual law office in the Bucharest Bar, founded by Decision no. 2162/2003 of the Bucharest Bar. Principal lawyer: Cătălin-Ioan Chituc.
- Office: Strada Tudor Arghezi 21, 030167 București
- Phone: 0723 171 934
- Email: catalin.chituc@gmail.com
2.What data we process
Through the contact form we collect only the data you fill in:
- first name and last name
- email address
- phone number, if you provide it
- client type: individual or legal entity
- the practice area your request concerns
- your message
- confirmation that you have read this notice
A few technical details are sent with your message: the page and language from which the form was sent, and the date and time of sending. The service that receives the form processes your IP address and browser information to deliver the message and for security.
Please include in your message only the information needed to understand your request. If your message contains information about criminal offences, it is processed only to assess your request, subject to professional secrecy.
Return to top3.Purpose of processing
Your data are used to reply to your request and, where appropriate, to arrange a discussion with the lawyer. Technical data are used to deliver the message and to protect the form against abuse.
Data about visits to the website are used only for aggregate traffic statistics: how many people visit the website, which pages are read and where visitors come from.
Your data are not used for marketing and are not sold or passed to anyone else for that purpose.
Return to top4.Legal basis
The processing is based on:
- Article 6(1)(b) GDPR, for steps taken at your request before a possible legal assistance contract is concluded
- Article 6(1)(f) GDPR, the office's legitimate interest in replying to the requests it receives and in keeping the form secure
- Article 6(1)(a) GDPR and Article 4(5) of Romanian Law no. 506/2004, your consent, for analytics cookies; Article 6(1)(f) GDPR, the office's legitimate interest in knowing, in aggregate, how the website is used, for cookieless measurement signals (section “Cookies and traffic statistics”)
5.How long we keep your data
Data from requests that are not followed by a legal assistance contract are kept for no more than 12 months from receipt, and are then deleted.
If a request is followed by a legal assistance contract, the data become part of the records of the mandate and are kept in line with the lawyer's professional obligations.
Return to top6.Who receives your data
Requests are read only by the principal lawyer. To run the website and the form we use the following providers, acting as processors:
- Amazon Web Services (AWS): hosting of the site files, receipt of the form and sending of the message through Amazon SES, in the EU region (Frankfurt, eu-central-1); pages are delivered through the AWS CloudFront network, which may serve visitors from locations outside the EU, under standard contractual clauses
- Google, the provider of the Gmail email service in which the office receives messages
- Google Ireland Limited, the provider of Google Analytics, for traffic statistics (section “Cookies and traffic statistics”)
- the website's technical administrator, only as far as needed to maintain it
Google may also process data outside the European Economic Area. In that case, the transfer takes place under the mechanisms provided by the GDPR, such as adequacy decisions or standard contractual clauses.
Data may be disclosed to public authorities only where the law requires it, subject to professional secrecy.
Return to top7.Your rights
Under the GDPR and within the limits set by law, you have the following rights:
- the right of access to the data processed
- the right to have inaccurate data rectified
- the right to erasure
- the right to restriction of processing
- the right to data portability
- the right to object to processing based on legitimate interest
- the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), www.dataprotection.ro
To exercise your rights, you can write to catalin.chituc@gmail.com or call 0723 171 934. We reply within the period set by the GDPR, normally within one month.
Your data are not used for decisions based solely on automated processing.
Return to top9.Professional secrecy
Communications with the lawyer are protected by professional secrecy under Law no. 51/1995 on the organisation and exercise of the legal profession.
Sending the form does not, in itself, conclude a legal assistance contract and does not constitute legal advice.
Return to top10.Contact
For questions about this notice or the processing of your data, you can contact us:
- email: catalin.chituc@gmail.com
- phone: 0723 171 934
- office: Strada Tudor Arghezi 21, 030167 București
11.Updates to this notice
This notice may be updated when the way the website works or the legal requirements change. The date of the latest update is shown at the top of the page.
Return to top