Privacy Policy

Last updated: 13 October 2026

This policy explains how personal data are processed when you visit delazzerolawyers.com or contact the office by e-mail or telephone, in accordance with Regulation (EU) 2016/679 (the “GDPR”) and applicable Romanian law.

1. Data controller

Cabinet de Avocat „De Lazzero Cristina-Marilena”, principal lawyer Cristina De Lazzero, member of the Bucharest Bar (Baroul București).

• Address: Str. Popa Soare nr. 50, Sector 2, Bucharest, Romania
• E-mail: delazzerolawyers@gmail.com
• Telephone: +40 722 852 824
• Website: https://delazzerolawyers.com

Any questions about your data may be sent to the e-mail address above.

2. The website: what we do not collect

This is a purely informational website. It has no contact form and uses no cookies, analytics, tracking pixels or embedded third-party content. Fonts are self-hosted, so visiting the site does not send data to font providers.

3. Technical data processed by the hosting provider

The website is hosted on Cloudflare Pages, a service provided by Cloudflare, Inc. When pages are requested, the provider may process technical data such as your IP address, browser type and the date and time of the request in server and security logs.

• Purpose: delivering the pages and protecting the website against misuse.
• Legal basis: legitimate interest in operating the website securely (Article 6(1)(f) GDPR).
• Retention: in accordance with the hosting provider’s retention policies.

For transfers of data outside the European Economic Area, see section 6.

4. Data you send by e-mail or telephone

When you contact us by e-mail or telephone, we process the information you choose to provide: your name, contact details, a description of your situation and, where applicable, documents.

4.1. Purposes

• assessing and responding to your enquiry;
• where a legal assistance contract is concluded, providing legal services, invoicing and complying with professional obligations.

4.2. Legal bases

• Article 6(1)(b) GDPR – taking steps at your request prior to entering into a contract, and performing that contract;
• Article 6(1)(c) GDPR – compliance with legal obligations, including those under Law no. 51/1995 on the organisation and practice of the legal profession, accounting and tax legislation and, where applicable, Law no. 129/2019 on the prevention and combating of money laundering and terrorist financing;
• Article 6(1)(f) GDPR – legitimate interest in the establishment, exercise or defence of legal claims.

4.3. Whether you must provide data

Providing data is not a statutory requirement. The data are, however, necessary for us to answer your enquiry and, if a legal assistance contract follows, to conclude and perform that contract and to meet the office’s legal obligations (for example, client identification). Without them, the office cannot answer your enquiry or take on your matter.

4.4. Special categories of data

In some matters (for example, family law) you may choose to share information about your health, family life or other special categories of data. Such data are processed only to the extent necessary for the establishment, exercise or defence of legal claims (Article 9(2)(f) GDPR) or, where the matter is non-contentious and no other condition applies, on the basis of your explicit consent (Article 9(2)(a) GDPR), which you may withdraw at any time. We recommend sharing such information and documents only insofar as they are needed to assess your enquiry.

4.5. Data about other people

Clients may provide us with data about third parties, such as opposing parties, former spouses, children or witnesses. These data are processed solely for the purposes of the mandate. Under Article 14(5)(d) GDPR, the individuals concerned are not informed individually where the data must remain confidential under the duty of professional secrecy laid down by Law no. 51/1995.

4.6. Professional secrecy

All information received is protected by the lawyer’s duty of professional secrecy under Law no. 51/1995 and the rules of the profession.

4.7. E-mail communication (Gmail)

E-mail messages are transmitted and stored via Gmail, a service of Google (Google Ireland Ltd. / Google LLC). Google also processes these data as an independent controller under its own privacy policy (policies.google.com/privacy), which may involve their transfer to the United States under the EU-US Data Privacy Framework.

For particularly sensitive information or documents, please agree with the office in advance on how they should be sent.

5. Retention

• correspondence not followed by a legal assistance contract – up to 12 months from the last communication;
• client files – for the periods required by the rules of the legal profession and by accounting and tax law;
• website technical logs – in accordance with the hosting provider’s policies.

6. Recipients and transfers outside the EEA

Data are disclosed only where necessary for the purposes above, to:

• courts, notaries, experts and public authorities;
• IT service providers: Cloudflare, Inc. (website hosting) and Google (e-mail, via Gmail), which also process data under their own policies, Google acting among other things as an independent controller (section 4.7).

Cloudflare and Google may process data outside the European Economic Area, including in the United States. Any such transfer relies on appropriate safeguards, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses adopted by the European Commission.

Your data are never sold and are not used for marketing.

7. Your rights

Under the GDPR you have the right to:

• access your data;
• rectification;
• erasure;
• restriction of processing;
• data portability;
• object to processing;
• withdraw consent, where processing is based on consent, without affecting the lawfulness of prior processing.

Requests may be sent to delazzerolawyers@gmail.com. These rights may be limited by statutory retention obligations and by the duty of professional secrecy.

You also have the right to lodge a complaint with the Romanian supervisory authority, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, Bucharest, www.dataprotection.ro.

8. Automated decisions and children

We do not take decisions based solely on automated processing and do not carry out profiling. This website is not directed at children.

9. Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, consistent with the duty of professional secrecy.

10. Changes

This policy may be updated. The current version is published on this page, together with the date of the last update.