Privacy Policy
Last updated: 20 October 2026
Who we are
The controller of your personal data is Societatea Civilă de Avocați Trifan, Cuibuș, Bălan (CIF RO44284389), Calea Dorobanților 25, Ap.21, 400117 Cluj-Napoca, Cluj (“we”). For any question about your data, write to us at office [at] tcb-law.ro.
This notice explains what data we collect through tcb-law.ro, why, how long we keep it and what your rights are, under the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and Romanian Law no. 190/2018.
What we collect and why
- The contact form – your name, email address and message, so we can reply. Legal basis: steps taken at your request before entering into a legal services agreement (Art. 6(1)(b) GDPR) and our legitimate interest in answering enquiries (Art. 6(1)(f)).
- The “Forget me” form – your name, email and the details of your request, so we can deal with it. Legal basis: our legal obligation to answer data protection requests (Art. 6(1)(c)).
- Technical data – IP address, browser type and pages requested, kept briefly in the server logs and used by Cloudflare to protect the website against attacks and spam. Legal basis: our legitimate interest in keeping the website secure (Art. 6(1)(f)).
- The map on the contact pages uses OpenStreetMap data, but its pictures are delivered by our own server: your browser contacts no other website for the map, and the map uses no cookies.
- Visitor statistics – only if you accept statistics cookies, Google Analytics measures anonymously how many people visit and which pages they read. Legal basis: your consent (Art. 6(1)(a)), which you can withdraw at any time in the cookie settings.
Please don’t send sensitive details about a case through the form (for example health data or criminal matters) – we will discuss them in confidence once we have agreed to work together. Everything you tell us is covered by lawyers’ professional secrecy (Romanian Law no. 51/1995).
Who receives your data
We never sell or rent your data. It is processed on our behalf, under data processing agreements, only by the providers we need for the website and email to work: the website’s hosting company (EU), Mailjet (sending the form emails, EU), Zoho (the firm’s mailbox, EU data centres), Cloudflare (website protection and delivery) and Google (Google Analytics, only with your consent). Cloudflare and Google may transfer data outside the European Economic Area; such transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. We disclose data to authorities only where the law requires it.
How long we keep it
- Contact form messages: up to 24 months after our last exchange, then deleted – unless you become a client, in which case the lawyers’ file-keeping rules apply.
- Data protection requests: 3 years, as proof that we dealt with them.
- Server logs: 30 days at most.
- Google Analytics data: 14 months.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability and to object to processing based on legitimate interest. Where processing is based on consent you can withdraw it at any time, without affecting what was done before. To use any of these rights, write to office [at] tcb-law.ro or use the “Forget me” form. We reply within one month.
If you think we are not respecting your rights, you can complain to the Romanian data protection authority (ANSPDCP), 28–30 G-ral. Gheorghe Magheru Blvd, District 1, Bucharest, www.dataprotection.ro, or to the authority in the EU country where you live.
Security
The website only uses encrypted connections (HTTPS), and access to messages is limited to members of the firm, with two-step sign-in. We don’t make automated decisions or build profiles from your data.
Changes
If we change this notice, the new version is published here with its date.