Privacy policy

The controller of personal data processed through this website is Dimofte I. George - Cabinet Individual de Avocat, Consultant Fiscal, tax identification code 30857834, with its professional seat at Str. Domnească nr. 84, Bl. Miorița, Sc. 2, parter, ap. Birou 1, Galați 800215, Galați County, Romania, member of Baroul Galați.

You can contact us about your data at office@avocatidimofte.ro or at +40 723 255 392. Full identification details are on the company details page.

We have not appointed a data protection officer, because none of the situations in which Article 37 of Regulation (EU) 2016/679 imposes this obligation applies to us. Requests concerning personal data should be addressed directly to the controller, at the contact points above.

Technical access data. On every visit, the server hosting the website automatically records in its own logs the IP address, the date and time of access, the requested page, the response code, the browser type and the operating system. These data are generated by any web server and are necessary for the operation and security of the site.

Data you send us. If you email us or call us, we process the data you communicate: your name, email address, phone number and the information about the situation you are contacting us about.

Visit statistics. We use Umami, a traffic analysis tool installed on the same infrastructure that runs the website, inside the European Union. Umami installs no cookies, stores no IP addresses and does not follow visitors from one site to another. It only keeps aggregated data: the page visited, the source, the device type and the country. In the same aggregated manner we also count how many clicks the phone numbers and the email address receive, with no information about who clicks. These data cannot identify you.

What we do not process. The website has no contact form, no user accounts, no shopping cart and asks for no data in order to be used. We build no profiles, run no behavioural advertising and make no automated decisions producing effects on you.

This website installs no cookies at all in your browser: not functional, not analytical, not marketing ones. That is why you will see no cookie consent banner here, and none is needed.

The site loads no advertising pixels, social media buttons or third-party fonts. Fonts are served from the same domain as the website.

Visit statistics are measured with Umami, served from the same infrastructure as the website. Umami is designed precisely to work without cookies: it writes nothing to your browser and cannot recognise you on a later visit. It also respects the Do Not Track signal, if enabled in your browser.

The single exception is the map on the Contact page, served by Google Maps. The map does not load automatically: it appears only when you press the button requesting it, so nothing is written to your browser until then. If you display it, Google may set its own cookies and may process your IP address, under the terms of the Google privacy policy. You can avoid this entirely by using the written address and the phone numbers on the page instead of the map.

• Operation and security of the website, prevention of abuse and attacks: the legal basis is legitimate interest, Article 6(1)(f) of the Regulation. The legitimate interest lies in keeping a site available and protected.
• Answering your requests sent by email or phone: the basis is taking steps at your request before entering into a contract, Article 6(1)(b).
• Compliance with the legal obligations of our profession, including tax obligations and anti-money-laundering duties: the basis is Article 6(1)(c).

We do not sell, rent or transmit your data to third parties for commercial purposes. Technical access to the data generated by the site is held only by the following providers, strictly to deliver their service:

• The hosting provider: the server running the website is operated by netcup GmbH and is physically located in Vienna, Austria, inside the European Union.
• Cloudflare, Inc., which provides the content delivery network service, the security certificate and protection against attacks. Traffic to the site passes through Cloudflare's infrastructure, which temporarily processes the IP address for security purposes.

Visit statistics reach no provider beyond those listed above. Umami runs on the same infrastructure as the website; it is not an external analytics service and the data are not passed to any advertising company. This is the main difference from Google Analytics.

We may pass data to public authorities when a legal obligation compels us, within the limits of that obligation and without breaching professional secrecy.

The hosting of the website is inside the European Union. Cloudflare, Inc. is a United States company, and any transfers take place under the standard contractual clauses adopted by the European Commission and the EU-US Data Privacy Framework. We make no other transfers of data outside the European Economic Area.

• Technical server logs: at most 90 days, after which they are deleted automatically.
• Email correspondence: for as long as needed to resolve your request, and where a legal assistance contract results from it, for the period required by law for professional documents.
• Case files: according to the periods imposed by Romanian Law no. 51/1995, by the Statute of the Legal Profession and by tax legislation.

Independently of data protection rules, any information you give us is covered by professional secrecy, guaranteed by Article 11 of Romanian Law no. 51/1995 and by the Statute of the Legal Profession.

Professional secrecy applies from the first contact, including if no legal assistance contract is concluded in the end; it is unlimited in time and can be lifted only in the situations strictly provided by law. It is stronger protection than general personal data rules offer.

Under Regulation (EU) 2016/679 you have the following rights regarding your data:

• Right of access, Art. 15: to find out whether we process data about you and to receive a copy.
• Right to rectification, Art. 16: to have inaccurate or incomplete data corrected.
• Right to erasure, Art. 17: to have data deleted, in the situations provided by the Regulation.
• Right to restriction of processing, Art. 18.
• Right to data portability, Art. 20: to receive the data in a structured, commonly used format.
• Right to object, Art. 21: to object to processing based on legitimate interest.

These rights are exercised by a request sent to office@avocatidimofte.ro. We reply within one month of receiving the request, extendable by two further months for complex requests, in which case we inform you.

The exercise of these rights may be limited where the data fall under professional secrecy or where their retention is required by a legal obligation.

If you believe we have violated your rights, you may address the National Supervisory Authority for Personal Data Processing:

B-dul G-ral. Gheorghe Magheru nr. 28-30, sector 1, Bucharest, postal code 010336, Romania,
phone +40 318 059 211, email anspdcp@dataprotection.ro,
www.dataprotection.ro

You also have the right to address the competent courts.

The website is served exclusively over an encrypted HTTPS connection. Access to the infrastructure it runs on is restricted and protected by authentication. We apply technical and organisational measures appropriate to the risk, but no measure can guarantee the absolute security of an internet transmission.

For sensitive documents we recommend handing them over at our seat or sending them through a channel agreed in advance, not through unsecured email.

We may update this policy when the way the website works changes, or when legal requirements change. The version in force is always the one published here, and the date of the last update is shown at the top of the page. Substantial changes will be signalled visibly.

See also the terms and conditions for using the website.