Privacy Policy | Cristian, Lungulescu & Partners

Last updated: 28 August 2026

1. Data controller

Cristian, Lungulescu and Associates — Professional Law Partnership with Limited Liability, with its main office in Babadag, 43 Cabanei St., Tulcea County, and a secondary office in Bucharest, 26 Vlaicu Vodă St. ("the Firm", "we", "the controller"), processes your personal data as data controller, in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data ("GDPR") and Romanian Law No. 190/2018 on measures implementing the GDPR.

For any request regarding the protection of personal data, you may contact us at office@lawadvice.ro or at the offices listed above.

2. What data we collect

Source	Categories of data
Contact form	Name, email address, phone number (optional), area of interest, content of the message submitted
Careers application form	Name, email address, phone number (optional), position of interest, cover letter, CV and the data it contains (education, professional experience, and any other data voluntarily provided by the applicant)
Browsing the Website	Technical data strictly necessary for the Website to function (see our Cookie Policy)

3. Purposes and legal bases for processing

Purpose	Legal basis (GDPR Art. 6)
Responding to requests submitted through the contact form	Our legitimate interest in communicating with individuals interested in our services (Art. 6(1)(f)); pre-contractual steps taken at the data subject's request (Art. 6(1)(b))
Reviewing applications submitted for open positions	Pre-contractual steps taken at the data subject's request, for the purpose of a possible hiring decision (Art. 6(1)(b))
Preventing misuse of the forms (anti-spam mechanism)	Our legitimate interest in ensuring the security of the Website (Art. 6(1)(f))
Complying with legal obligations (for example, retaining correspondence relevant to a contractual relationship)	Legal obligation (Art. 6(1)(c))

We do not use your data for direct marketing without your prior consent, and we do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you.

4. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

Requests submitted through the contact form that do not result in a contractual relationship are kept for up to 24 months, to allow for possible follow-up on the discussion, after which they are deleted;
Applications submitted for open positions are kept for up to 12 months from submission, unless the applicant expressly requests earlier deletion or agrees to a longer retention period for future opportunities;
Data relating to a legal services engagement is retained for the period required by the legislation governing the organization and practice of the legal profession and by applicable tax and accounting rules, including profession-specific record-keeping obligations.

5. Confidentiality and professional secrecy

As a law firm, we are subject to the statutory confidentiality and professional secrecy obligations set out in Romanian Law No. 51/1995 on the organization and practice of the legal profession and the Statute of the legal profession, which apply in addition to our obligations under the GDPR, for any information obtained in connection with a legal services relationship.

6. Recipients of your data

Your data may be shared, strictly to the extent necessary for the purposes described above, with:

the Firm's associate lawyers and administrative staff, on a need-to-know basis;
technical service providers who host and operate the Website, under data processing agreements compliant with GDPR Art. 28;
public authorities, courts, or other authorized bodies, where such disclosure is required by law.

We do not share your data with third parties for marketing purposes and we do not sell it.

7. Transfers outside the European Economic Area

As a rule, your data is processed and stored within the European Union / European Economic Area. Where a technical service provider used by the Firm involves a transfer of data outside the EEA, such transfer takes place only under appropriate safeguards provided for by the GDPR (for example, standard contractual clauses approved by the European Commission).

8. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access — to obtain confirmation of whether we process your data and information about that processing;
Right to rectification — to request correction of inaccurate data or completion of incomplete data;
Right to erasure ("right to be forgotten") — to request deletion of your data, in the cases provided for by law;
Right to restriction of processing — in certain situations set out in the GDPR;
Right to data portability — to receive the data you provided in a structured, commonly used format and to transmit it to another controller;
Right to object — to processing based on our legitimate interest;
Right not to be subject to a decision based solely on automated processing, including profiling;
Right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro, or with the competent courts.

To exercise any of these rights, you may contact us at office@lawadvice.ro. We will respond within one month of receiving your request, a period which may be extended by two further months where necessary, taking into account the complexity and number of requests.

9. Data security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction, or accidental disclosure, proportionate to the risks associated with the processing.

10. Cookies

For information on the use of cookies on this Website, please see our Cookie Policy.

11. Changes to this policy

We may periodically update this Privacy Policy. Any change will be published on this page, together with the date of the last update.