Last updated: August 13, 2026
This policy describes how S.C.P.A. Pintilie și Asociații processes the personal data of visitors to www.pintiliesiasociatii.ro and of anyone who contacts us.
The controller of your personal data is Societatea Civilă Profesională de Avocați "Pintilie și Asociații" (a Romanian civil law partnership of attorneys), with its registered office at 5 Nicolae Gane Street, ap. 3B, 700110 Iași, Iași County, Romania, tax ID (CIF) 48809384, formed of attorneys admitted to the Iași Bar and legally represented by its Managing Partner, Cezar Pintilie ("Pintilie și Asociații", "we", "the firm").
The firm operates from its offices at 8 Gavriil Musicescu Street, Building 8, Iași (entrance from Alexandru Lăpușneanu Street).
Email: office@pintiliesiasociatii.ro General line: +40 721 076 076 · Emergency line: +40 753 968 517
The person designated for data protection matters is Cătălina Chiriac, attorney — catalina.chiriac@pintiliesiasociatii.ro. Any question or request concerning your data should be addressed there.
This policy describes the processing of personal data of visitors to pintiliesiasociatii.ro and of anyone who contacts us — through the website forms (Request Assessment, Contact), by email, telephone or WhatsApp — as well as interactions with our social media pages.
The processing of data within an established attorney–client relationship is governed by the engagement agreement and by attorney-client privilege and professional secrecy (Romanian Law no. 51/1995 and the Statute of the Legal Profession), and falls outside the scope of this page.
Data submitted through the forms: company name, contact name, industry and business area, role, location, request type, description of your situation, urgency level, and any documents you choose to upload (doc, pdf, png, txt, rtf, docx, jpg). The forms are processed by the website's own infrastructure, hosted in Romania, and delivered to the firm's email through the Resend sending service; form data is not saved to any database or CRM. Uploaded documents are not stored on the website's server — they are processed in memory only and sent directly as email attachments, so they reach only the firm's internal working environment (Google Workspace — email and document storage).
Correspondence data: the content of emails, WhatsApp conversations you initiate, and telephone calls, including on the dedicated emergency line. Telephone calls are not recorded.
Data collected automatically: visiting the site generates standard technical logs (IP address, browser type, pages visited) on the servers hosting the site, in Romania. For usage statistics the site uses Google Analytics 4, activated through the consent banner; the site does not use marketing pixels, embedded third-party video, or fonts loaded from external CDNs (fonts are self-hosted). Details about cookies — lifespans and preference management — can be found in the Cookie Policy, which this policy does not duplicate.
Important — sensitive data. Given the nature of our services, the description of your situation or the documents you submit may contain information relating to criminal investigations, proceedings or convictions (Article 10 GDPR) or special categories of data (Article 9 GDPR). Please share only what is necessary for an initial assessment; any information we receive is treated as strictly confidential.
a) Analyzing and responding to your request submitted through a form, by email, telephone or WhatsApp, including our reply within 24–48 working hours — legal basis: steps taken at your request prior to entering into a contract [Article 6(1)(b) GDPR].
b) Running conflict-of-interest checks, a professional obligation that precedes the acceptance of any engagement — legal basis: legitimate interest and the attorney's professional obligations [Article 6(1)(c) and (f) GDPR, Law no. 51/1995].
c) Complying with legal obligations applicable to the profession, including, upon entering a contractual relationship, the know-your-client obligations under Law no. 129/2019 on the prevention of money laundering — legal basis: Article 6(1)(c) GDPR.
d) Establishing, exercising or defending our legal rights and keeping the website secure — legal basis: legitimate interest [Article 6(1)(f) GDPR].
We do not use your data for direct marketing, we do not send newsletters and we make no automated decisions producing legal effects about you. If we launch periodic communications (such as newsletters about Risk Notes by email), they will operate exclusively on a voluntary subscription basis, and this policy will be updated beforehand.
Information submitted for assessment is protected by the attorney's duty of confidentiality, whether or not an engagement agreement is subsequently concluded. Requests are received into the firm's internal working environment and may be accessed by the firm's lawyers — all bound by the same duty of professional confidentiality — until a responsible lawyer is designated, who then takes over the assessment.
We do not sell or rent your data. It may be accessed, strictly to the extent necessary, by our infrastructure providers, acting as processors under contractual safeguards:
Data may be disclosed to public authorities where the law requires it, and to the firm's professional advisers (e.g. accounting, audit), under confidentiality obligations.
The website and its forms are hosted on servers located in Romania. Google services (Workspace, Analytics) and the Resend sending service may involve transfers outside the European Economic Area; these take place under the safeguards provided by the GDPR — the EU–US adequacy decision (the EU–US Data Privacy Framework, under which both Google and Resend are certified) and Standard Contractual Clauses. The same safeguards apply to WhatsApp communications, if you choose that channel.
Requests that do not lead to an engagement: 3 years from the last contact — the period needed for conflict-of-interest checks and the defense of our legal rights.
Requests followed by an engagement agreement: for the duration of the relationship and for 5 years after the engagement closes, unless a specific legal obligation requires a longer period.
Technical logs: for the short, standard periods of the hosting server. Documents uploaded through the form are not retained on the website's server (see Section 3). For cookie lifespans, see the Cookie Policy.
Under the GDPR, you have the right of access to your data (Article 15), the rights to rectification (Article 16) and erasure (Article 17), the right to restriction of processing (Article 18), the right to data portability (Article 20), and the right to object (Article 21) — including to processing based on legitimate interest.
Requests should be sent to catalina.chiriac@pintiliesiasociatii.ro. We respond within a month, extendable in complex cases as provided by the GDPR. Certain rights may be limited by our legal obligations and by the attorney's professional secrecy.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — 28-30 G-ral. Gheorghe Magheru Blvd., District 1, Bucharest, www.dataprotection.ro.
We apply appropriate technical and organizational measures: encrypted data transmission (HTTPS), secure authentication and access controls on working systems, confidentiality obligations binding the entire team, and careful selection of providers. No transmission over the internet is entirely risk-free; for highly sensitive matters, we recommend contacting us directly by telephone.
Our LinkedIn, Facebook and Instagram pages are active. For the audience statistics of these pages we act as joint controllers with the respective platforms, within the limits set by CJEU case law; the processing of data on the platforms themselves is governed primarily by their own privacy policies. We do not import social media data into our systems.
The website does not currently collect applications for positions with the firm. If the Careers page begins accepting applications, this policy will first be updated with the applicable processing rules.
Submitting a form or a message does not create a contractual or attorney–client relationship; such a relationship arises exclusively upon the conclusion of an engagement agreement. The website is not intended for minors.
This policy is published in Romanian and English; in the event of any divergence, the Romanian version prevails.
We may update this policy from time to time; the current version, with the date of its last update, is permanently available on this page. Significant changes will be flagged visibly on the site.