Skip to content
Personal data

Privacy policy

Last updated: 13 September 2026

1. Data controller

The controller of personal data collected through this site is Octavian Popescu, an Attorney at Law of the Bucharest Bar, practising within Popescu & Asociații, with professional offices at Cube Victoriei Center, Bd. Buzești 75–77, 13th Floor, Sector 1, 011013 Bucharest, Romania.

Messages sent through the form are delivered to the mailbox provided by Popescu & Asociații and are read by Octavian Popescu.

For any request concerning the processing of your data, please write to octavian.popescu@popescu-asociatii.ro.

2. What data we process

Through the contact form we collect the name, email address, subject and message content that you choose to submit. Providing this data is voluntary; without a name, email address and message we cannot reply.

Please do not include health data, criminal matters or other special categories of data in your message. If you do, we use them solely to assess your enquiry, under Article 9(2)(f) and Article 10 GDPR, in connection with the establishment, exercise or defence of legal claims.

We keep no access logs for this site. To limit repeated form submissions, the sender's IP address is held in server memory for no more than one minute. Cloudflare, as hosting provider, processes IP addresses to deliver and secure the site.

We use no cookies or analytics, advertising or tracking services, and we build no visitor profiles.

3. Purposes and legal bases

We use form data to reply to your enquiry, to check for conflicts of interest and, where relevant, to assess whether we are able to assist you. The legal basis is Article 6(1)(b) GDPR – steps taken at your request before entering into a contract – and, in the alternative, Article 6(1)(f) – our legitimate interest in responding to communications we receive.

Holding IP addresses briefly to limit repeated submissions relies on our legitimate interest in keeping the site secure (Article 6(1)(f) GDPR).

We make no decisions based solely on automated processing and carry out no profiling.

4. Recipients and transfers

Messages are read by Octavian Popescu. If an enquiry leads to an engagement, it is concluded with Popescu & Asociații, and the data is shared, to the extent necessary, with the firm's attorneys at law involved.

We use providers acting as processors, who process the data solely on our instructions: Cloudflare, Inc. (site hosting), Resend, Inc. (delivery of messages sent through the form) and the email service provider of Popescu & Asociații (storage of correspondence).

Cloudflare, Inc. and Resend, Inc. are established in the United States. Transfers to them rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework and, additionally, on the standard contractual clauses in our data processing agreements with them.

The map on the contact page loads only at your request. If you click “Show map”, Google Ireland Limited / Google LLC receives your IP address and may set cookies, as an independent controller under Google's policy (policies.google.com/privacy). Transfers to the US rely on Google's certification under the EU–US Data Privacy Framework.

We do not sell the data or disclose it to third parties for marketing purposes.

5. How long we keep the data

Correspondence received through the form is kept for as long as needed to deal with the enquiry. Where no engagement follows, messages are deleted within 12 months.

Where the enquiry leads to an engagement, the data is kept in line with the legal and professional obligations that apply to attorneys at law.

6. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing and data portability, and the right to object to processing based on legitimate interest.

You may exercise these rights by writing to octavian.popescu@popescu-asociatii.ro. We will respond within one month of receiving your request.

You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), B-dul G-ral. Gheorghe Magheru 28–30, Sector 1, 010336 Bucharest, www.dataprotection.ro.

7. Confidentiality and the limits of this channel

Sending a message through this site does not create an Attorney at Law–client relationship and does not, in itself, give rise to the professional duty of confidentiality attaching to a legal engagement. Such a relationship arises only once the engagement is expressly accepted and a legal services agreement is signed.

We recommend that you do not send confidential or sensitive information about a dispute through the form. For such matters, please contact us by telephone or request a meeting.

The form is intended for adults.

8. Changes to this notice

We may update this notice to reflect legislative or operational changes. The version in force is always the one published on this page, together with the date it was last updated.