Facebook

Privacy Notice

1. General provisions

This Privacy Notice sets out the data processing practices of the Law Office of Katalin Lukácsi (hereinafter: the Controller) and provides information on the rights of data subjects.

The Controller processes personal data in accordance with:

  • Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR)
  • applicable national data protection legislation; Law NO. 190/2018, Law No. 506/2004
  • Law No. 506/2004
  • legislation governing the legal profession, Law No. 51/1995
  • applicable professional rules and regulations.

Due to the specific nature of the legal profession, the Controller is bound by strict professional secrecy, which is unlimited in time and of a mandatory.

2. Controller’s details

Name: Law Office of Katalin Lukácsi
Registered office: 7/5 Bethlen Gábor Street, Odorheiu Secuiesc, 535600, Harghita County, Romania
Email: lukacsi.katalin@gmail.com; office@lukacsikatalin.ro
Phone: +40 744 477 500; +40 266 217 037

3. Principles of data processing

Personal data are processed in accordance with the following principles:

  • lawfulness, fairness and transparency
  • purpose limitation
  • data minimization
  • accuracy
  • storage limitation
  • integrity and confidentiality.

4. Categories of personal data processed

4.1. Data collected automatically

When using the website, the following technical data may be collected:

  • IP address
  • device and browser information
  • access logs
  • other technical data necessary for operation and security.

4.2. Data provided by the data subject

In the context of contact (via contact form or email):

  • name
  • email address
  • phone number
  • message content.

4.3. Data processed in the context of legal services

In the event of establishing a client relationship, the Controller may process additional data, including special categories of personal data, strictly to the extent necessary for the provision of legal services and in compliance with legal obligations.

5. Purpose and legal basis of processing

5.1. Handling enquiries

Purpose: responding to enquiries

Legal basis:

  • Article 6(1)(b) GDPR;
  • Article 6(1)(f) GDPR.

5.2. Provision of legal services

Purpose: performance of a legal services agreement

Legal basis:

  • Article 6(1)(b) GDPR;
  • Article 6(1)(c) GDPR;
  • Article 9(2)(f) GDPR (where applicable).

5.3. Compliance with legal obligations

Purpose: compliance with legal and professional requirements

Legal basis: Article 6(1)(c) GDPR;

5.4. Operation and security of the website

Purpose: ensuring security and proper functioning

Legal basis: Article 6(1)(f) GDPR

6. Professional secrecy

All data provided to the Controller are protected by attorney–client privilege (legal professional secrecy).

This obligation:

  • is unlimited in time
  • applies to all data and information
  • prevails over any other disclosure obligations, except where otherwise required by law.

7. Destinatarii datelor

Personal data are not used for marketing purposes.

Data may be disclosed only to:

  • public authorities, where required by law
  • courts and other bodies involved in the administration of justice
  • service providers (e.g. hosting providers), subject to strict confidentiality obligations.

8. Data retention

Personal data are retained:

  • for the period necessary to handle enquiries
  • for the duration of the contractual relationship
  • thereafter, in accordance with legal and professional retention obligations (including file archiving).

9. Data security

The Controller implements appropriate technical and organizational measures, including:

  • access control
  • protection of IT systems
  • internal confidentiality policies
  • training of authorized personnel.

10. Rights of data subjects

Data subjects have the following rights under the GDPR:

  • right of access
  • right to rectification
  • right to erasure
  • right to restriction of processing
  • right to object
  • right to data portability.

The exercise of these rights may be restricted where necessary to preserve legal professional secrecy. Complaints may be lodged with the competent supervisory authority: ANSPDCP – www.dataprotection.ro, https://www.dataprotection.ro/servlet/ViewDocument?id=3109 - complaint form

11. Cookies

The website uses only strictly necessary cookies and does not employ tracking or analytics mechanisms.

12. International data transfers

The Controller does not transfer personal data outside the European Economic Area. Should such transfers occur, appropriate safeguards in accordance with the GDPR will be ensured.

13. Nature of data provision

The provision of personal data is voluntary, but necessary for:

  • establishing contact
  • assessing enquiries
  • providing legal services.

14. Amendments

The Controller reserves the right to amend this Privacy Notice. The current version will always be available on the website.

15. Contact

For any questions or to exercise your rights:
office@lukacsikatalin.ro