PRIVACY AND PERSONAL DATA PROTECTION POLICY
Information on the use of data submitted through the contact form.
LAWYER | MEDIATOR — MARCO DUMITRU
Website: www.avocat-mediator.md
Last updated: October 27, 2026
I. GENERAL PROVISIONS
1.1. Respect for privacy, the protection of personal data, and the confidentiality of information disclosed are fundamental principles of the professional activities carried out by lawyer and mediator Marco Dumitru.
1.2. This Policy establishes the conditions under which personal data are collected, used, stored, protected and, where applicable, disclosed or transferred in relation to individuals who visit www.avocat-mediator.md, submit requests for legal services or mediation services, or subsequently enter into a professional relationship.
1.3. Personal data are processed in accordance with:
- Law No. 195 of July 25, 2024, on Personal Data Protection;
- Law No. 1260 of July 19, 2002, on the Legal Profession;
- Law No. 9 of February 12, 2026, on Mediation and the Status of Mediators;
- Other legislative and regulatory provisions applicable to professional activities, tax obligations and the protection of confidential information.
1.4. In relation to legal practice, the data controller is the Law Office of Marco Dumitru. In relation to mediation services, the data controller is identified according to the duly authorized form of professional organization specified in the documents relating to the respective service.
1.5. This Policy applies to website visitors, individuals submitting enquiries, clients, parties involved in mediation proceedings, and other individuals whose personal data are lawfully processed in the course of professional activities.
II. PRINCIPLES OF PERSONAL DATA PROCESSING
2.1. Personal data are processed in accordance with the following principles:
a) Lawfulness, fairness and transparency. Processing is carried out only on an appropriate legal basis, fairly and transparently in relation to the data subject.
b) Purpose limitation. Personal data are collected for specified, explicit and legitimate purposes and are not subsequently processed in a manner incompatible with those purposes.
c) Data minimization. Only personal data that are adequate, relevant and necessary for examining an enquiry or providing the requested professional service are collected and processed.
d) Accuracy. Reasonable measures are taken to ensure that personal data remain accurate and up to date, including the possibility of correcting inaccurate information.
e) Storage limitation. Personal data are retained only for the period necessary to fulfil the purposes of processing or for the period required by applicable law.
f) Integrity and confidentiality. Appropriate technical and organizational measures are implemented to protect information against unauthorized access, unlawful disclosure, loss, destruction or accidental alteration.
g) Accountability. The controller is responsible for complying with applicable legal principles and demonstrating the justification for personal data processing activities.
III. CATEGORIES OF PERSONAL DATA PROCESSED
3.1. Data submitted through website forms
Depending on the requested service, the following information may be collected:
- First and last name;
- Email address;
- Telephone number;
- Type of service requested: legal assistance or mediation;
- Content of the message voluntarily submitted;
- Any additional information provided at the applicant’s own initiative.
3.2. Technical data
For the operation and security of the website, technical service providers may process information such as IP addresses, dates and times of access, browser types, device information, and data necessary to prevent unauthorized access or unsolicited messages.
3.3. Data subsequently processed in the course of professional services
Where an initial enquiry results in the establishment of a professional relationship, additional information may become necessary concerning identity, place of residence, legal representation, legal status, contractual relationships, property or family matters, and other circumstances relevant to the case under consideration.
3.4. Special categories of personal data
Information concerning health, private life, personal beliefs, as well as information relating to criminal convictions and offences, is subject to special legal protection.
Such information may be processed only where an appropriate legal basis exists and processing is necessary for the legitimate purposes of providing legal assistance, protecting rights, or conducting professional proceedings permitted by law.
IV. PURPOSES OF PERSONAL DATA PROCESSING
4.1. Personal data may be used for the following purposes:
a) receiving, reviewing and responding to enquiries submitted through the website;
b) identifying the nature of the requested service and establishing appropriate communication methods;
c) arranging legal consultations and mediation sessions;
d) conducting a preliminary assessment of whether legal assistance or mediation services can be provided;
e) concluding, performing and administering legal assistance or mediation agreements;
f) preparing legal documents, applications, procedural documents and other necessary written materials;
g) representing and protecting rights and legitimate interests in accordance with the law;
h) organizing and documenting mediation proceedings, including mandatory registration and record-keeping activities;
i) complying with statutory financial, tax, accounting, archiving and reporting obligations;
j) complying with anti-money laundering obligations where such requirements apply to the professional activities actually performed;
k) ensuring the security of the information infrastructure and preventing misuse of contact forms;
l) establishing, exercising or defending legal rights in judicial or extrajudicial proceedings.
4.2. Personal data submitted for the purpose of requesting a service will not be used to promote services without an appropriate legal basis.
4.3. Personal data are not sold or disclosed to third parties for unauthorized advertising purposes.
V. PROFESSIONAL CONFIDENTIALITY
5.1. Information obtained in the course of legal practice is subject to professional secrecy obligations under the legislation governing the legal profession.
5.2. Information obtained during mediation is protected by the principle of confidentiality of mediation proceedings, in accordance with Law No. 9/2026.
5.3. Professional confidentiality requires the protection of information and documents disclosed within professional relationships, including personal, family, financial, property-related and legal circumstances learned in the performance of professional duties.
5.4. When acting as a lawyer or mediator, information may be disclosed only under the conditions and within the limits permitted or required by law.
5.5. The professional obligations applicable to legal practice and mediation apply separately, according to the nature of the requested service and the professional capacity in which Marco Dumitru acts.
5.6. Merely submitting a contact form does not constitute the conclusion of a legal assistance agreement, acceptance of a legal representation mandate, or formal commencement of mediation proceedings.
VI. CONTACT FORMS AND ELECTRONIC COMMUNICATION
6.1. The website allows visitors to submit enquiries concerning two distinct categories of services:
Legal Services
Email address for correspondence:
Mediation Services
Email address for correspondence:
6.2. Electronic contact forms are primarily intended for initial communication, identifying the nature of an enquiry and arranging subsequent correspondence.
6.3. Messages submitted through WordPress/Jetpack forms may be forwarded by email notifications to the address corresponding to the selected service. Depending on the platform configuration, these messages may also be stored within the WordPress administration system.
6.4. Access to received messages must be restricted to individuals authorized to review and manage them.
6.5. Visitors are advised not to submit copies of identity documents, medical records, confidential procedural documents, passwords, banking information or other sensitive personal data that are unnecessary for establishing initial contact.
6.6. If reviewing an enquiry requires additional confidential information or documents, an appropriate method of transmission will be determined during subsequent communication.
6.7. Electronic communication involves the use of technical infrastructure and third-party service providers. No electronic transmission system can be considered entirely free from security risks. Accordingly, the communication of information should comply with the principles of necessity and proportionality.
VII. LEGAL BASES FOR PROCESSING PERSONAL DATA
7.1. Depending on the circumstances, personal data processing may be based on:
a) the consent of the data subject, where consent constitutes the appropriate legal basis;
b) the necessity of taking steps requested by the data subject prior to entering into a contract;
c) the performance of a legal assistance or mediation agreement;
d) compliance with legal obligations arising from professional activities;
e) the pursuit of legitimate interests, including website security, prevention of abuse and protection of the controller’s rights, subject to the applicable legal requirements;
f) other legal bases expressly provided for under applicable legislation.
7.2. Where processing is based on consent, that consent may be withdrawn at any time without affecting the lawfulness of processing carried out before its withdrawal.
7.3. Withdrawal of consent does not automatically require the deletion of information that must be retained on another lawful basis.
VIII. DATA STORAGE AND RETENTION PERIODS
8.1. Personal data may be stored electronically or in paper form, depending on the nature of the information, the purposes of processing and applicable professional obligations.
8.2. Retention periods vary according to the category of documents:
a) Initial enquiries: are retained for as long as necessary to review the request, manage correspondence and, where appropriate, protect the controller’s rights.
b) Legal assistance case files: are retained in accordance with professional obligations, statutory archiving requirements and the need to protect rights and legitimate interests.
c) Mediation case files: are retained in accordance with the periods and conditions established by the legislation specifically governing mediation.
d) Financial and tax documents: are retained for the mandatory periods established by applicable tax, accounting and archiving legislation.
e) Technical data: are retained in accordance with security requirements, operational needs and the applicable policies of technical service providers.
8.3. Upon expiry of the applicable retention periods, personal data are deleted, anonymized or securely destroyed, unless there is a legal obligation or lawful entitlement to retain them.
IX. ACCESS TO PERSONAL DATA AND DISCLOSURE TO THIRD PARTIES
9.1. Access to personal data is restricted according to the legitimate requirements of professional activities and applicable professional confidentiality obligations.
9.2. Where necessary, personal data may be processed by or disclosed to the following categories of recipients:
a) website hosting and technical administration service providers;
b) email and communication service providers;
c) information technology service providers, within the scope of authorized activities;
d) public authorities and competent institutions where disclosure is required or permitted by law;
e) courts, criminal investigation authorities and other public bodies, in accordance with applicable procedural rules;
f) official information systems used in professional activities where their use is mandatory.
9.3. Personal data are not disclosed to unauthorized persons.
9.4. The use of certain electronic service providers may involve the processing of personal data in other countries. Such international transfers are carried out in compliance with applicable legal provisions and appropriate safeguards governing cross-border data transfers.
X. PERSONAL DATA SECURITY
10.1. Protecting personal data requires the implementation of technical and organizational measures appropriate to the risks associated with processing.
10.2. Such measures may include access controls for professional accounts, protection of equipment and email correspondence, updates to software components, authorized document management and restrictions on the circulation of confidential information.
10.3. In the event of a security incident, the circumstances will be assessed and appropriate measures taken, including notification of the competent supervisory authority and communication with affected data subjects where required by law.
XI. RIGHTS OF DATA SUBJECTS
11.1. Under Law No. 195/2024, data subjects are entitled, where applicable, to the following rights:
a) the right to be informed about the processing of their personal data;
b) the right of access to personal data concerning them;
c) the right to request rectification of inaccurate data or completion of incomplete information;
d) the right to request erasure of personal data where the applicable legal conditions are met;
e) the right to request restriction of processing;
f) the right to data portability in cases provided for by law;
g) the right to object to certain processing activities;
h) the right not to be subject to decisions based solely on automated processing, under the conditions established by law;
i) the right to lodge a complaint with the supervisory authority;
j) the right to seek legal remedies and, where applicable, compensation for damages.
11.2. The exercise of these rights may be subject to limitations established by law, including where document retention obligations, procedural requirements or the rights and freedoms of other persons must be respected.
11.3. Requests concerning personal data may be submitted by email to the address corresponding to the service for which the data were provided.
11.4. Requests are examined without undue delay and no later than one month after receipt. This period may be extended by up to two additional months in cases provided for by law, provided that the data subject is informed of the reasons for the extension.
11.5. Where reasonable doubts exist concerning the identity of the person submitting a request, additional information strictly necessary to verify the person’s identity may be requested.
XII. COOKIES, TECHNICAL SERVICES AND EXTERNAL LINKS
12.1. The website is designed as a professional information and contact platform. Browsing its pages does not require visitors to provide additional personal information.
12.2. The website theme does not intentionally include proprietary personalized advertising modules, externally hosted fonts or embedded maps.
12.3. WordPress infrastructure and related technical services may use cookies or other technologies necessary for website operation, security, session management, prevention of unsolicited messages and other enabled functionalities.
12.4. Any use of analytics or marketing cookies depends on the actual configuration of the platform and its activated services. Information concerning these technologies will be updated to reflect the website’s actual settings.
12.5. The website may contain links to external platforms, including location services, electronic communication services and messaging applications. Accessing such links is the user’s choice, and any subsequent processing by the relevant providers is governed by their respective privacy policies.
XIII. RIGHT TO LODGE A COMPLAINT
13.1. Any individual who believes that the processing of their personal data violates applicable legislation may contact the controller to seek clarification.
13.2. The data subject may lodge a complaint with:
National Center for Personal Data Protection of the Republic of Moldova (CNPDCP)
- Address: 48 Serghei Lazo Street, Chișinău, MD-2004, Republic of Moldova
- Telephone: +373 22 820 801
- Email: centru@datepersonale.md
- Website: www.datepersonale.md
13.3. The right to lodge a complaint with the competent supervisory authority does not exclude the exercise of other legal remedies.
XIV. CONTACT INFORMATION
For any enquiries concerning the processing of personal data, the exercise of statutory rights or clarification of confidentiality arrangements, interested persons may contact:
Marco Dumitru — Lawyer | Mediator
For Legal Services:
For Mediation Services:
Website: www.avocat-mediator.md
Requests concerning personal data protection are examined in accordance with confidentiality obligations and applicable statutory deadlines.
XV. FINAL PROVISIONS
15.1. This Policy may be updated to reflect legislative amendments, organizational changes, developments in professional services and changes to the technical infrastructure used.
15.2. The updated version will be published on the website, indicating the date of the latest amendment.
15.3. Individuals using the contact forms are encouraged to review this Policy before submitting their personal data.
15.4. Confidentiality, respect for human dignity, the protection of privacy and responsible use of information are essential principles of the professional relationships promoted through www.avocat-mediator.md.