Privacy policy
Last updated: 17.07.2026
1. Who we are
SCA Laza & Asociații, with its professional office at Zece Mese 8, ap. 1, ground floor, Sector 2, Bucharest, registered with the Bucharest Bar Association, is the data controller for personal data collected through the website www.laza-lawyers.ro.
For any questions regarding the processing of personal data, you can contact us at:
- Email: office@laza-lawyers.ro
- Address: Zece Mese 8, ap. 1, ground floor, Sector 2, Bucharest
2. What data we collect and why
| Purpose | Data collected | Source |
|---|---|---|
| Responding to inquiries via the contact form | Name, email, phone, message content | Contact form (WPForms) |
| Measuring traffic and improving the website | Aggregated/anonymized usage data (pages visited, duration, device) | Google Analytics 4, via MonsterInsights |
| Measuring traffic without cookies, including for visitors who decline consent | Aggregated usage data, without individual identification | Independent Analytics |
| Managing cookie consent | Consent preference and its date | Complianz |
We do not collect bank card or payment data – the website does not process payments. We do not use targeted advertising and do not sell data to third parties.
3. Legal basis for processing (Art. 6 GDPR)
- Contact form: your explicit consent, given by ticking the GDPR consent checkbox when submitting the form (Art. 6(1)(a)).
- Traffic analysis (GA4/MonsterInsights): your consent, given via the cookie banner (Art. 6(1)(a)) – these cookies are only activated after acceptance.
- Cookieless traffic analysis (Independent Analytics): legitimate interest (Art. 6(1)(f)) – data is collected in aggregate form, without individual identification and without setting cookies.
4. Retention period
- Contact form inquiries that did not lead to a representation mandate: 12 months from the last interaction, then deleted.
- Documents and correspondence related to a legal representation mandate: for the duration of the mandate, plus the period required by the archiving obligations applicable to the legal profession.
- Traffic analysis data (GA4, Independent Analytics): according to the standard retention period configured in the respective platform (14 months by default for GA4).
5. Who we share data with
Data may be accessed by technical providers operating the website’s infrastructure (WordPress hosting, Google LLC for GA4, the Independent Analytics provider), strictly for the purpose of providing the service, under contractual confidentiality obligations. We do not transfer data to third parties for marketing purposes.
6. Your rights
You have the right to request access, rectification, or erasure of your personal data, to request restriction of processing, to object to processing based on legitimate interest, to request portability of the data you provided, and to withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal. You also have the right to lodge a complaint with the National Supervisory Authority for Personal Data Processing (ANSPDCP) – B-dul G-ral. Gheorghe Magheru 28-30, Sector 1, Bucharest, anspdcp.ro.
To exercise these rights, you can contact us at office@laza-lawyers.ro.
7. Data security
We take reasonable technical and organizational measures to protect data against unauthorized access, loss, or accidental disclosure.
8. Changes to this policy
This policy may be updated periodically. The date of the last update is shown at the beginning of the document.
