Privacy Policy — Irina-Maria Peter Law Office

I. General information

The Irina-Maria Peter Law Office, attorney at law and member of the Bucharest Bar, with its registered office in Sector 2, Bucharest, Romania (the “Office” or “we”), is the controller of the personal data processed through this website and in the course of its professional activity.

This policy describes how we process the personal data of persons who visit the website, contact us or use our services, in accordance with Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (the “GDPR”), Romanian Law no. 190/2018 implementing the GDPR, and the legislation governing the legal profession.

For any question about the processing of your data you can reach us at av.irinapeter@gmail.com or by phone at +40 785 117 334.

II. Categories of personal data processed

II.1. Clients and prospective clients

If you contact us through the form on the Contact page, by phone, email or WhatsApp, or if you retain us, we process:

identification and contact data: full name, email address, phone number;
the area of law you are interested in and the description of your situation, as you choose to write it;
the date and time of the form submission, together with the version of this policy you accepted;
where a legal assistance contract is concluded: the data needed to draw up the contract and the tax documents (address, personal identification number or ID data, bank details), as well as the data contained in the case file.

II.2. Website visitors

Simply visiting the website does not require you to provide any information. However, the hosting provider and the web font provider automatically process technical data: IP address, browser and device type, page requested and time of access. The Office does not use this data to identify you.

III. Purposes and legal bases of processing

III.1. Clients and prospective clients

Responding to your request and arranging a consultation — legal basis: Article 6(1)(b) GDPR, as the processing is necessary in order to take steps at your request prior to entering into a contract.
Performing the legal assistance contract: legal advice, drafting of documents, representation before courts and authorities — legal basis: Article 6(1)(b) GDPR.
Complying with the Office's legal obligations: professional records required by the legislation governing the legal profession, tax and archiving duties — legal basis: Article 6(1)(c) GDPR.
Defending the Office's rights and interests, including in case of a dispute, and preventing spam and abuse — legal basis: Article 6(1)(f) GDPR, our legitimate interest.
Special categories of data (see section IV) — legal basis: your explicit consent, Article 9(2)(a) GDPR, and, within a mandate, the necessity of establishing, exercising or defending legal claims, Article 9(2)(f) GDPR.

Ticking the box “I have read and agree to the Privacy Policy” confirms that you have read this notice. The fields marked as required in the form are necessary for us to reply; without them we cannot act on your request.

III.2. Website visitors

Operating and securing the website: delivering pages and fonts, protection against attacks — legal basis: Article 6(1)(f) GDPR, the legitimate interest of the Office and of its providers.

We do not send marketing communications, do not profile visitors and do not make decisions based solely on automated processing.

IV. Special categories of data

Describing a legal situation may involve sensitive data: health, ethnic origin or religion, sexual orientation, criminal convictions or pending criminal proceedings. We recommend that you do not include such details in the form and that you keep them for the consultation itself, which takes place under the protection of legal professional privilege.

If you nevertheless choose to include them, by submitting the form and ticking the agreement box you give your explicit consent to their processing for the purpose of assessing your request. You may withdraw this consent at any time by email, without affecting the lawfulness of processing carried out before the withdrawal.

V. How long we keep your data

Requests not followed by a legal assistance contract: no longer than 3 years from the last communication, in line with the general limitation period, after which the data is deleted.
Clients: for the duration of the legal assistance contract and thereafter for the periods required by law. Case files are archived in accordance with the Statute of the legal profession, and accounting documents are kept for the periods set by tax and accounting legislation, up to 10 years from the end of the financial year.
Copy of the submission held by Web3Forms: no longer than 3 years from submission, according to the provider's policy, or less at the Office's request.
Technical logs of the hosting provider: according to its retention policy, usually no more than a few weeks.

Withdrawing consent, where processing relies on it, ends the processing for that purpose, without affecting prior processing.

VI. Disclosure of personal data

We do not sell your data and do not share it for marketing purposes. Data may be disclosed, to the extent strictly necessary, to the following categories of recipients:

Technical service providers acting as processors: Web3Forms (receiving and forwarding the form), Google LLC (email service and web fonts), GitHub, Inc. (website hosting) and, only at your initiative, WhatsApp (Meta Platforms Ireland Ltd.). Details of international transfers are set out in section VII.
Courts, authorities, bailiffs, notaries, experts and opposing parties, within the limits of the mandate granted and only to the extent necessary for your representation.
Professional collaborators of the Office (associate attorneys, accountant), bound by the same duty of confidentiality.
Public authorities, where the law requires it, subject to the attorney's duty of professional secrecy.

VII. Transfers of personal data

As a rule, data is processed in Romania and in the European Union. The use of technical service providers involves the following transfers outside the European Economic Area:

Web3Forms (Web3Creative, India) — the service that receives the content of the form and forwards it to the Office's email address. According to its privacy policy, Web3Forms keeps a copy of the submission for no longer than 3 years from submission, after which it is deleted automatically; the Office may request earlier deletion. The provider uses infrastructure in the United States (Amazon Web Services, Cloudflare, Hetzner) and anti-spam services (CleanTalk, Akismet). Transfers of data to India and the USA rely on the standard contractual clauses provided for in Article 46(2)(c) GDPR, incorporated in the data processing agreement concluded with the provider.
Google LLC (USA) — the provider of the email service through which we receive and keep correspondence, and of the web fonts displayed on the site (Google Fonts). When pages load, your browser sends your IP address to Google's servers to deliver the fonts. Google LLC is certified under the EU-U.S. Data Privacy Framework.
GitHub, Inc. (USA) — the website hosting provider (GitHub Pages), which processes technical access logs in order to deliver and secure the service. GitHub, Inc. is certified under the EU-U.S. Data Privacy Framework.
WhatsApp (Meta Platforms Ireland Ltd.) — only if you choose to contact us through the WhatsApp button on the site. That communication is governed by WhatsApp's privacy policy.

VIII. Data security and professional secrecy

The website is served exclusively over an encrypted connection (HTTPS), and the form is submitted over the same secure channel. Access to incoming correspondence is restricted to the attorney. Beyond the GDPR, all information you entrust to us is protected by the attorney's duty of professional secrecy under Romanian Law no. 51/1995 on the organisation and practice of the legal profession and the Statute of the profession.

IX. Cookies

This website does not use cookies and does not use traffic analytics, advertising or behavioural tracking tools. The only technical data processed when you visit the site is described in section II.2 and is needed to deliver the pages and fonts.

X. Your rights

As a data subject, you have the following rights under the GDPR:

the right to be informed about the processing of your data, which we fulfil through this policy (Articles 13-14);
the right of access to the data we hold about you (Article 15);
the right to rectification of inaccurate or incomplete data (Article 16);
the right to erasure (“right to be forgotten”), within the limits of the law (Article 17);
the right to restriction of processing (Article 18);
the right to data portability for the data you provided (Article 20);
the right to object to processing based on legitimate interest (Article 21);
the right not to be subject to a decision based solely on automated processing, including profiling (Article 22); the Office does not make such decisions;
the right to withdraw consent, where processing relies on it (Article 7(3));
the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), 28-30 G-ral. Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro, or with the supervisory authority of your country of residence, and to seek a judicial remedy (Articles 77-79).

To exercise any of your rights, send a request to av.irinapeter@gmail.com. We will reply within one month of receiving your request; in complex cases this period may be extended by two months, in which case you will be informed. To protect your data, we may ask for additional information to verify your identity.

XI. Minors

Our services are addressed to persons with full legal capacity. We do not knowingly collect data from persons under 16; where a minor needs legal assistance, the request must be submitted by a parent or legal guardian.

XII. Changes to this policy

This policy may be updated to reflect changes in legislation or in the services we use. The version in force is always published on this page, with the version number and date shown below. The version you accepted when submitting a form is recorded together with your message.

Version: v1 — 26 September 2026