Privacy Policy

Personal data protection according to GDPR

1. General Information

Andra Badiu, lawyer registered with the Cluj Bar, based in Florești, 180 Eroilor Street, sc. II, ground floor, ap. 15, Cluj County, Romania, is the personal data controller in accordance with Regulation (EU) 2016/679 (GDPR) and Law no. 190/2018 regarding the implementation measures of GDPR in Romania.

This privacy policy explains how we collect, use, protect and process personal data of visitors to the cabinetavocatbadiuandra.ro website and our clients.

2. Personal Data Collected

We collect the following categories of personal data:

2.1 Identification data

  • First and last name
  • Email address
  • Phone number
  • Home address

2.2 Browsing data

  • IP address
  • Browser type
  • Referrer page
  • Visit duration
  • Pages accessed

2.3 Legal data

  • Information about the legal case
  • Legal documents
  • Communications within the professional relationship

3. Purposes of Data Processing

We process personal data for the following purposes:

  • Execution of the legal mandate contract - according to art. 6(1)(b) GDPR
  • Fulfillment of legal obligations - according to art. 6(1)(c) GDPR
  • Protection of legitimate interests - according to art. 6(1)(f) GDPR
  • Express consent - according to art. 6(1)(a) GDPR

Specific purposes:

  • Provision of legal services
  • Communication with clients
  • Fulfillment of tax and accounting obligations
  • Protection of clients' rights and interests
  • Marketing and promotion (only with consent)

4. Legal Basis for Processing

Personal data processing is based on:

  • Legal mandate contract - for legal services
  • Legal obligations - according to the Civil Procedure Code, Tax Code
  • Legitimate interests - for protection of clients' rights
  • Consent - for marketing and commercial communications

5. Data Retention Period

Personal data is retained for the following periods:

  • Client data: 10 years from the end of the mandate (according to the Professional Ethics Code)
  • Browsing data: 2 years
  • Marketing data: until consent withdrawal
  • Tax data: according to tax legislation (5 years)

6. Data Subject Rights

According to GDPR, you have the following rights:

  • Right to information (art. 13-14 GDPR)
  • Right of access (art. 15 GDPR)
  • Right to rectification (art. 16 GDPR)
  • Right to erasure (art. 17 GDPR)
  • Right to restriction of processing (art. 18 GDPR)
  • Right to data portability (art. 20 GDPR)
  • Right to object (art. 21 GDPR)
  • Right not to be subject to automated decision-making (art. 22 GDPR)

To exercise these rights, please contact us at contact@cabinetavocatbadiuandra.ro or by mail to our office address.

7. Data Sharing with Third Parties

Personal data may be shared with:

  • Courts of law - within legal proceedings
  • Competent authorities - upon their request
  • IT service providers - for website operation
  • Accountant - for tax obligations

We do not sell, rent or share personal data with third parties for commercial purposes without the express consent of the data subject.

8. Data Security

We implement adequate security measures to protect personal data:

  • Encryption of sensitive data
  • Restricted access to data
  • Regular backups
  • Access monitoring
  • Staff training

9. Cookies

The website uses cookies for:

  • Technical operation of the website
  • Traffic analysis
  • Improving user experience

You can control cookies through your browser settings. Disabling cookies may affect website functionality.

10. Complaints and Supervisory Authority

You have the right to file a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP):

ANSPDCP

B-dul G-ral. Gheorghe Magheru 28-30

Sector 1, Bucharest, Romania

Tel: +40.318.059.211

Email: anspdcp@dataprotection.ro

11. Contact for Data Protection

For questions related to personal data protection, please contact:

Andra Badiu

Personal data controller

Lawyer registered with the Cluj Bar

Florești, Cluj County, Romania

Email: contact@cabinetavocatbadiuandra.ro

12. Policy Changes

This privacy policy may be updated periodically. Changes will be published on the website and will take effect immediately after publication.

We recommend that you check this page periodically to stay informed of any changes.

Last updated: 10/17/2026