What personal data I process through this website and through the contact channels, for what purpose, on what legal basis, how long I keep it and what rights you have, under Regulation (EU) 2016/679 (GDPR). Last updated: 16 October 2026.
Florin Hrițuliac, lawyer, member of the Brașov Bar, collaborating with the law office Cabinet de Avocat Mihai Guran, tax adviser (Chamber of Tax Advisers, CCF) and forensic tax expert, with professional address at Str. Mihail Kogălniceanu nr. 18-20, Brașov. Contact for any question about the data: rolegal@pm.me.
| Context | Data | Purpose | Legal basis |
|---|---|---|---|
| The request form on the Contact page | name, telephone number and/or e-mail address, the capacity in which you are writing, the type of situation and of document, the deadline indicated, the optional description and the page from which you reached the form | replying to the request, the orientation call, the consultation proposal and the record of requests | steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) and the legitimate interest in keeping a record of requests (Article 6(1)(f) GDPR) |
| Direct correspondence (telephone, e-mail, WhatsApp, Signal, Threema) | contact details and the information you choose to send | replying to the request and, where applicable, pre-contractual steps | Article 6(1)(b) and (f) GDPR |
| Usage statistics (Google Analytics 4) and advertising (Google, Meta), only with the consent given in the cookie banner | pseudonymised usage data; the fact that a form was submitted, without its content (no name, contact details, type of situation or description) | measuring the audience and the effectiveness of the pages | consent (Article 6(1)(a) GDPR); details in the Cookie policy |
Information sent with a view to a consultation is also protected by the lawyer's professional secrecy, including information in preliminary communications, before the contract is concluded.
Please do not send your personal identification number (CNP), account numbers or documents through the form. Where necessary, I request them after the first contact, through an appropriate channel.
The data are not sold or rented out. Requests submitted through the form are stored on the infrastructure of Cloudflare (Cloudflare, Inc., USA), which hosts the website and acts as processor; the transfer takes place on the basis of the EU-US Data Privacy Framework or of standard contractual clauses. The internal notification of a new request is sent through Cloudflare's e-mail service to the professional e-mail address, hosted by Proton AG (Switzerland, a state for which the European Commission has adopted an adequacy decision).
The administrative staff who organise appointments have access to the contact details and to the type of situation, subject to a duty of confidentiality.
The data may be disclosed to public authorities only where the law requires it and within the limits of professional secrecy.
Where a provider processes data outside the European Economic Area, the transfer takes place on the basis of an adequacy decision of the European Commission or of standard contractual clauses.
Requests that do not lead to a contract: no more than 12 months from the last contact, after which they are deleted.
Requests that lead to a contract: the data are transferred to the client's file and kept for the period required by the rules of the profession and by the legislation applicable to archiving.
Statistics data: according to the settings in the Cookie policy.
You have the right of access, to rectification, to erasure, to restriction of processing, to data portability and to object, as well as the right not to be subject to a decision based solely on automated processing. Where processing is based on consent, you may withdraw it at any time, without affecting the processing carried out before the withdrawal.
Write to me at rolegal@pm.me. You also have the right to lodge a complaint with the Romanian supervisory authority, the National Supervisory Authority for Personal Data Processing, ANSPDCP (dataprotection.ro), and to apply to the courts.
The website uses HTTPS, access to the register of requests is restricted, and the content of the form does not reach the statistics or advertising tools.
Without the consent given in the cookie banner, Google receives only cookieless signals (Consent Mode), without user identifiers.