Privacy Policy

The data controller is Cabinet Individual de Avocat Olaru Răzvan Alexandru (Baroul București (Reg. no. 14381)), Bd. Râmnicu Sărat nr. 3, 031901 București, România, contactable at raz@olawru.com. We are not required to appoint a Data Protection Officer; privacy queries go directly to the controller.

Contact details you give us (such as your email when you request the checklist or book a clinic); the documents and information you submit for review; correspondence; and basic technical and usage data from the website.

We rely on: your consent (for marketing emails such as the checklist and follow-ups); performance of a contract and our legitimate interests (to provide and improve the service); and legal obligation (for example, anti-money-laundering checks where an engagement triggers them).

To deliver the resource or service you asked for, to respond to you, to perform attestations and reviews, to meet professional and legal obligations, and to send you material you have consented to receive.

With service providers acting on our instructions — currently our hosting provider (Vercel), our email provider (Google Workspace) and our scheduling provider (Calendly), when you open the booking calendar. We do not sell your data. We may disclose where required by law or professional rules.

Our providers may process limited data outside the EEA; where they do, transfers rest on the European Commission’s adequacy decision for the EU–US Data Privacy Framework or on standard contractual clauses, per each provider’s data-processing terms.

We keep personal data only as long as needed for the purpose collected, for our professional records, and to meet legal retention duties (for example, AML records), after which it is deleted or anonymised. In practice: correspondence and leads, two years from last contact; matter files, five years from matter close (professional and AML retention); accounting records, ten years (Codul fiscal); newsletter emails, until you unsubscribe.

Subject to limits (including legal professional privilege and our retention duties), you may request access, rectification, erasure, restriction or portability, and may object to processing or withdraw consent at any time. To exercise these, email raz@olawru.com.

We apply appropriate technical and organisational measures to protect your data. Document fingerprints used in attestation are computed in your browser; documents you submit for review are handled under professional confidentiality.

This site does not use advertising or analytics cookies. Strictly necessary items only: our hosting provider may set technical cookies required to serve the site securely. Two embedded services set their own cookies when you choose to use them: Calendly, when you open the booking calendar, and our payment processor, when you pay — each under its own privacy policy. Because we set nothing non-essential, there is no cookie banner; if we ever add analytics, we will ask first.

You may complain to the Romanian supervisory authority, ANSPDCP (www.dataprotection.ro), or your local EU authority. We’d appreciate the chance to resolve it first: raz@olawru.com.