Privacy Policy

We do not buy contact lists and we do not collect data about you from other sources. All the data we hold comes either directly from you or from the technical operation of the website.

Every processing operation we carry out has a determined purpose and a legal basis from among those laid down in art. 6 of Law no. 195/2024. The table below sets out all of them — we do not process data for purposes other than those listed here.

The form has a free-text field for describing your situation. By the nature of things, what you write there may contain data that the law treats with heightened protection: information about health, about family life, about your beliefs, or information relating to a criminal charge or conviction (art. 9 and art. 10 of Law no. 195/2024).

We do not ask you for such data and the form has no fields dedicated to it. We process it only if you choose to include it, on the basis of your explicit consent, given by ticking the box before submission. If we take the case on, the basis becomes that under art. 9(2)(f) — the establishment, exercise or defence of a right in administrative, judicial or extrajudicial proceedings before the courts.

Independently of data protection legislation, any information you communicate to us in connection with a legal matter is covered by the attorney's professional secrecy, guaranteed by Law no. 1260/2002 on the profession of advocate and by the Code of Ethics of the advocate. The secrecy applies even where the attorney-client relationship does not come about: the fact that you wrote to us, and what you wrote to us, remain confidential.

The protection goes further than you might expect: when the Centrul Național pentru Protecția Datelor cu Caracter Personal (National Centre for Personal Data Protection) requests documents in the course of an investigation, the law allows it to set aside banking, commercial, tax or medical confidentiality, but expressly excepts the attorney's professional secrecy laid down in art. 55 of Law no. 1260/2002 (art. 82(1) of Law no. 195/2024). Not even the supervisory authority can compel us to disclose what you have told us.

In practice, professional secrecy operates as an additional protection in your favour. It may, however, also limit the exercise of other persons' rights: if a third party asks us for access to their data appearing in a client's file, we are bound to refuse, to the extent that disclosure would breach professional secrecy (see art. 23 of Law no. 195/2024, on restrictions).

The data is not disclosed publicly and is not passed on to other attorneys or firms. It reaches only the technical providers we need in order for the website and the e-mail to work, in their capacity as processors (art. 28 of Law no. 195/2024), and, where the law requires it, the authorities.

The providers listed above process data either in the European Economic Area or in the United States. The two situations are governed differently, so we treat them separately.

Transfers within the European Economic Area are not, in law, transfers at all. Art. 44(2) of Law no. 195/2024 expressly provides that the chapter on transfers “does not apply to transfers of personal data to member states of the European Economic Area” and that “no special authorisations are required for such transfers”. Our server (Hetzner, Germany) and the region in which Resend processes the messages (Ireland) fall into this category: no special mechanism is needed.

For the United States, Chapter V (arts. 44–49) applies in full. This concerns Resend, Inc. and Google LLC, and also Cloudflare, Inc. if the anti-bot check were enabled. The law obliges us to tell you explicitly whether or not there is a decision of the Centrul Național pentru Protecția Datelor cu Caracter Personal on the adequacy of the level of protection (art. 13(1)(f)). As at the date of this version, we are not aware of any such decision being in force for the United States. These transfers are therefore based on the appropriate safeguards provided for in art. 46 — principally the standard contractual clauses contained in the data processing agreements concluded with those providers. You can obtain a copy of those safeguards by writing to us at the contact address.

If your case requires steps in another country — a frequent situation for clients in the diaspora — the necessary data may be sent to the authorities, courts or correspondents of that country, strictly to the extent required by the mandate and with your prior agreement. Such disclosures rely, as applicable, on the derogations in art. 49, including the one covering the establishment, exercise or defence of a right.

The measures below are those we actually apply, not a list of intentions (art. 32 of Law no. 195/2024).

If a personal data breach occurs that is likely to affect your rights, we notify it to the Centre within 72 hours at the latest from the moment we become aware of it, in accordance with art. 33 of Law no. 195/2024. If the risk to you is high, we also inform you, directly and without undue delay (art. 34).

We have a written procedure for such situations, which establishes who identifies the incident, what is recorded and within what period.

In relation to the data we process, you have the following rights, laid down in art. 15–22 of Law no. 195/2024:

Send a request to ludmila@avocata.md, with the words “personal data” in the subject line, or in writing to the office address indicated above. No particular form is required — it is enough to tell us clearly what you want.

Write to us first — most situations are resolved directly and quickly. Independently of that, you have the right to lodge a complaint with the supervisory authority:

As at the date of this version, avocata.md places no cookies and uses no traffic analytics tools. The website saves in your browser only two strictly necessary pieces of information — the visual theme you chose and a counter that limits repeated submissions of the form — which are not transmitted to us.

The full details, including what would change if we were ever to activate an analytics tool, are set out in the Cookie and Local Storage Policy.

The website is addressed to adults. We do not intentionally collect data from children through the contact form and we do not offer information society services directed at children.

For reference: in the Republic of Moldova, a child's consent for information society services is valid from the age of 14; below that age, the consent of the legal representative is required (art. 8 of Law no. 195/2024).

Within a case we may process data concerning children — for example in a family matter — but such data is communicated to us by the parent, by the legal representative or by the competent authority, within the mandate, not through this website.

We update this policy whenever the way in which we process data or the applicable legal framework changes. The date of the last update is displayed at the top of the page, and previous versions can be requested at the contact address.

If a change significantly affects your rights, we flag it visibly on the website before it becomes applicable.