Privacy and data protection
The avocatbucuresti.ro website presents the work of Constantin Andor Law Office and provides legal information. This policy concerns data communicated through the website and the law office’s contact channels.
Data controller and contact details
The controller of personal data relating to requests for legal assistance is Constantin Andor Law Office, Bucharest. For questions about personal data or to exercise your rights, contact vreau@avocatbucuresti.ro or call 0732.710.701.
What data are needed
When you contact the law office, we may process your name, contact details and the information you include in your message. Additional data and documents may be needed to assess or handle a case, depending on your request. Do not include your Romanian personal identification number (CNP), copies of identity documents, medical information or unnecessary confidential documents in your initial message. Agree the method for sending documents with the law office.
Purposes and legal bases
Data are used to respond to enquiries, clarify the scope of legal assistance, check for conflicts of interest and, if an agreement is concluded, provide legal services and fulfil professional and statutory obligations. Depending on the circumstances, the legal basis may be taking steps at your request before entering into an agreement, performing that agreement, complying with a legal obligation or pursuing a legitimate interest, such as website security and protection of the law office’s rights, subject to the GDPR.
If a case requires special categories of data, including health data, processing is carried out only where the law and an applicable exception permit it, including where necessary to establish, exercise or defend legal claims. Data concerning criminal convictions and offences are handled under the specific legal rules that apply. Consent is requested where it is the required legal basis.
Access to and disclosure of data
Access is limited to people who need the data for the purpose of the enquiry, subject to professional secrecy and confidentiality obligations. Depending on the agreed services and legal requirements, collaborating lawyers, experts, technical service providers, competent authorities or courts may be involved. Disclosure must be necessary and have a legal basis.
If you choose an external communication service, such as WhatsApp, its use is also subject to the provider’s privacy policy. Contact the law office for information about specific recipients or any transfers outside the European Economic Area and the applicable safeguards.
Data retention
The retention period depends on the purpose of the enquiry, whether a contractual relationship exists and statutory or professional retention and archiving obligations. Data are retained no longer than necessary for these purposes, including the resolution of claims. You may request information about the criteria and period applicable to your circumstances.
Your rights
Subject to the GDPR, you may request access, rectification, erasure and restriction of processing and, where applicable, data portability or object to processing. Where processing relies on consent, you may withdraw it for future processing. Requests may be limited by legal obligations, other people’s rights or the need to defend legal claims. Send requests to the law office’s email address; identity verification may be required.
You may also contact the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) or the competent court.
Cookies and security
The website provides a cookie preference panel. You can review your choices using the “Manage consent” button and change optional cookie preferences. Technical data, such as your IP address and browser information, may be necessary for website operation and security. Do not post case documents in comments.
Last updated: 7 November 2026.