Privacy notice

Last updated: October 2026

This page explains how personal data is processed when you visit this website or get in touch with the practice. It is deliberately short and concrete, because it concerns your data.

1. Who processes the data

The data controller is the law office of Ioana Tăbușcă — IT LAW, practising in Bucharest and a member of the Bucharest Bar. For any question about personal data, write to office@itlaw.ro.

2. What we process

  • Data you send us directly — name, email address, telephone number, the content of your message and any documents you choose to send us when you make contact by email or telephone.
  • Minimal technical data — required for the website to function and stay secure, such as the IP address recorded in the logs of the server that hosts the site.

We do not ask for data that is not needed for the legal matter you describe.

3. Purposes and legal bases

  • Providing legal advice and assistance — performance of the legal assistance agreement, or steps taken at your request before such an agreement is concluded.
  • Legal obligations — the duties imposed on us by law and by professional rules, including document retention.
  • Legitimate interest — communicating with you, defending rights in the event of a dispute, and keeping the website secure.

4. How long we keep it

We keep data for the duration of the engagement and afterwards for the period required by the statutory retention rules applicable to the legal profession and by any limitation periods. Once those periods expire, the data is deleted or anonymised.

5. Who it may be disclosed to

We do not sell or rent personal data. Data may be accessed by the technical service providers that keep us running, acting as processors:

  • Cloudflare, Inc. — website hosting, DNS services and routing of messages sent to the practice's addresses;
  • Google — the mailbox in which correspondence is read and archived;
  • the transactional email provider used to send messages from the practice's address.

Data may also be disclosed to public authorities, courts or other recipients where the law requires it, or where necessary to defend a right in legal proceedings.

6. Transfers outside the European Economic Area

Some technical providers may process data outside the EEA. In those cases the transfer relies on the safeguards set out in Regulation (EU) 2016/679, principally the standard contractual clauses.

7. Your rights

In relation to your personal data you have the right of access, rectification, erasure, restriction of processing, objection and portability, subject to the conditions set by law. To exercise them, write to office@itlaw.ro.

If you consider that the processing infringes the law, you may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP).

8. Cookies and tracking

This website uses no cookies and includes no analytics or tracking tools. Fonts and images are served from this domain itself, so a visit generates no requests to other companies.

9. Professional confidentiality

Beyond data protection, correspondence with a lawyer is covered by professional secrecy. Information you share in a consultation is treated as confidential.

10. Changes

If the way we process data changes, we will update this page and amend the date above.

← Back to the home page