Privacy policy

Updated: 28 October 2026

Who processes your information

The data controller is Murar și Asociații – Societate Civilă Profesională de Avocați, a Romanian civil professional law firm, tax identification number RO23913338, with its professional office at 3 Răsuri Street, ground floor, apartments 2–3, Sector 2, Bucharest, Romania, registered with the Bucharest Bar.

You can contact us at office@avocatmurar.ro, on +40 21 330 52 62, or in writing at our professional office. These contact details may also be used for questions and requests concerning personal data.

This notice covers visits to avocatmurar.ro, the contact form and initial communications with our firm. Processing specific to a legal engagement is also explained in the documents governing that relationship. We comply with Regulation (EU) 2016/679 (GDPR), Romanian Law No. 190/2018 and the rules governing the legal profession. Romanian Law No. 506/2004 also applies to cookies and similar technologies.

What information we use and why

Enquiries and correspondence. We use your name, email address, telephone number if provided, enquiry subject and message to understand and respond to your enquiry and assess a potential engagement. When an individual asks us to take steps towards entering into a contract, the legal basis is Article 6(1)(b) GDPR. For communications with company representatives and the management of professional correspondence, we rely on our legitimate interest in assessing and handling enquiries under Article 6(1)(f). Checks required by law or professional rules rely, where applicable, on Article 6(1)(c).

Website operation and security. Technical information, including IP address, access time and information provided by the browser, may be used to deliver the website, prevent abusive messages and investigate incidents. The legal basis is our legitimate interest in maintaining secure systems and communications under Article 6(1)(f), together with any applicable legal security duties.

Statistics and campaign performance measurement. These are two optional purposes accepted separately in the cookie panel. With statistics consent, Google Analytics 4 receives limited page and interaction information. With campaign performance measurement consent, we may retain a Google advertising click identifier; once the form reports a successful submission, a technical “form submitted” conversion event may be sent directly to Google for attribution. With statistics consent, Analytics may separately receive generate_lead without the advertising identifier. The legal basis is Article 6(1)(a) GDPR and the rules governing access to information on your device. We do not send names, email addresses, telephone numbers, enquiry subjects, messages or documents to Google. Advertising personalisation and remarketing remain off. Our Cookie Policy explains technical data, duration and choices.

Information requiring additional protection

Where a legal enquiry requires health information or other special categories of data, we process it only under the conditions of Article 9 GDPR, including where necessary for the establishment, exercise or defence of legal claims. Information about convictions and offences is handled under Article 10 GDPR and the law applicable to our professional activities. Please limit the initial message to necessary information.

The contact form

Your name, email address and a message are needed to handle an enquiry through the form. A telephone number is optional. You may also contact us by email or telephone. Please include only information needed for an initial discussion; we will agree separately how any documents should be provided.

The checkbox beside the form acknowledges receipt of this notice. It is not consent to marketing and does not replace the relevant legal bases for processing. You do not have to accept statistics or campaign performance measurement to contact us.

Messages are transmitted to the firm's email system. The confirmation displayed by the form means that the sending system has accepted the message. Contacting us does not establish a legal engagement or suspend statutory or procedural time limits.

Who may receive your information

Information is accessible to people within our firm who need it to handle the enquiry and to hosting, maintenance, security and electronic communications providers, to the extent needed to deliver their services. We use Virtono for website hosting. With statistics consent, the corresponding technical information is processed through Google Analytics. With campaign performance measurement consent, the corresponding information is processed directly through Google’s campaign performance measurement service; that choice alone does not start Google Analytics. Technical communications may include IP address and browser information. See how Google uses data.

In connection with an engagement or a legal obligation, relevant information may be disclosed to authorities, courts, professional bodies or other participants in the legal matter, subject to the law and professional secrecy. We do not publish contact form messages.

International transfers

Google Analytics and Google’s campaign performance measurement service may involve processing information outside the European Economic Area, including in the United States. Google's documentation on transfers describes the mechanisms it uses, including the EU–US Data Privacy Framework and standard contractual clauses. Transfers are subject to the safeguards applicable to the service under Chapter V GDPR. You may contact office@avocatmurar.ro for information about the relevant safeguards and how to obtain a copy.

How long information is kept

For initial enquiries, retention depends on the conclusion of discussions, any follow-up requested, the need to document our response and any obligations concerning conflicts of interest or the defence of rights. If an engagement follows, professional archive, contractual and financial record obligations also apply. We do not apply a single period to all information or retain an entire message merely because limited identification information is needed for a professional check.

Security information is retained according to the needs of abuse prevention and incident investigation. Cookie and measurement preference durations are set out in the Cookie Policy. Deleting a browser cookie does not automatically delete information already processed by the analytics provider.

Your rights

Subject to the GDPR, you may request access, rectification, erasure, restriction of processing and, where applicable, data portability. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may separately withdraw statistics or campaign performance measurement consent at any time through “Cookie settings”, without affecting the lawfulness of earlier processing.

Please send requests to office@avocatmurar.ro. We respond in accordance with Article 12 GDPR and request further information only where needed to identify the request or verify identity. Legal retention duties, the rights of others and professional secrecy must also be respected. You may complain to the Romanian National Supervisory Authority for Personal Data Processing, www.dataprotection.ro.

We do not use the contact form or website statistics to make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.