Privacy Policy
Last updated: 13.08.2026
1. Data controller
The website dreptulsportului.ro is operated by Gherdan & Associates SCA, with its registered office at City of Cluj-Napoca, Calea Turzii Street no. 30, apt. 9, Cluj County, Romania member of the Cluj Bar fiscal identification code RO43614667, e-mail: office (at) gherdanassociates.co (the “Controller”, “we”, “us”).
This policy describes how we process the personal data of website visitors, in accordance with Regulation (EU) 2016/679 (“GDPR”) and Romanian Law no. 190/2018.
2. What data we process and for what purposes
a) Contact form
Data processed: name, e-mail address, phone number,, content of your message. Purpose: responding to your enquiry. Legal basis: our legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR) and, where applicable, steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
b) Legal matter submission form
Data processed: name, contact details, description of your legal situation and any other information you choose to include. Purpose: preliminary assessment of your request and, where applicable, establishing a legal assistance relationship. Legal basis: pre-contractual steps taken at your request (Art. 6(1)(b) GDPR).
Important: describing a legal matter may, by its nature, include sensitive information (for example, health data, trade union membership, disputes or court proceedings). We recommend including only the information strictly necessary for an initial assessment. To the extent that you voluntarily provide special categories of data, their processing is based on Art. 9(2)(f) GDPR (establishment, exercise or defence of legal claims) or, where applicable, on your explicit consent (Art. 9(2)(a) GDPR). Information submitted is treated in accordance with the attorney’s duty of professional secrecy under Romanian Law no. 51/1995.
c) Newsletter
Data processed: e-mail address, [name, if applicable]. Purpose: sending periodic updates on articles and legal news. Legal basis: your consent (Art. 6(1)(a) GDPR), given by subscribing to the newsletter. You may withdraw your consent at any time via the unsubscribe link in each e-mail or by sending a request to [e-mail address].
d) Technical data
When you access the website, technical data may be processed automatically (IP address, browser type, server log data) to ensure the operation and security of the website, based on our legitimate interest (Art. 6(1)(f) GDPR).
e) Traffic analytics (Google Analytics)
Data processed: cookie identifiers, IP address (truncated/pseudonymised by Google), device and browser data, pages visited, visit duration and source. Purpose: understanding how the website is used and improving its content. Legal basis: your consent (Art. 6(1)(a) GDPR), given via the cookie banner. You may refuse or withdraw your consent at any time, without any consequence for your use of the website. Recipient: Google Ireland Limited, as provider of the Google Analytics 4 service; data may be transferred to Google LLC (USA) on the basis of appropriate safeguards (the EU–US Data Privacy Framework / standard contractual clauses).
For details on the cookies used, please see our Cookie Policy.
3. Who we share data with
We do not sell or rent your data. Data may be disclosed, strictly to the extent necessary, to:
- service providers supporting the operation of the website (web hosting, e-mail service, newsletter platform, Google Ireland Limited for the analytics service — [insert the names of the other providers]), acting as processors under contracts ensuring data protection;
- public authorities, where required by law.
If any provider processes data outside the European Economic Area, the transfer is carried out on the basis of appropriate safeguards (for example, standard contractual clauses approved by the European Commission).
4. How long we keep your data
- Contact form messages: [e.g. 1 year] from the resolution of your enquiry;
- Legal matter submissions that do not lead to an engagement: [e.g. 1 year]; if a legal assistance agreement is concluded, data is retained in accordance with applicable legal and professional obligations;
- Newsletter data: until you withdraw your consent;
- Technical log data: [e.g. 6 months];
- Google Analytics data: [e.g. 14 months — the retention period set in your Google Analytics account].
5. Your rights
Under the GDPR, you have the following rights:
- right of access to the data we process about you;
- right to rectification of inaccurate or incomplete data;
- right to erasure (“right to be forgotten”), under the conditions provided by law;
- right to restriction of processing;
- right to data portability;
- right to object to processing based on legitimate interest;
- right to withdraw your consent at any time, without affecting the lawfulness of prior processing;
- right not to be subject to a decision based solely on automated processing (we do not use such decision-making).
To exercise these rights, you can contact us at [e-mail address]. We will respond within one month of receiving your request, with the possibility of extension as provided by law.
You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP) — 28-30 G-ral Gheorghe Magheru Blvd., Sector 1, Bucharest, www.dataprotection.ro.
6. Data security
We implement reasonable technical and organisational measures to protect data against unauthorised access, loss or disclosure (secure HTTPS connection, restricted access to data, confidentiality obligations). Information communicated in connection with legal matters additionally benefits from the protection of professional secrecy.
7. Children’s data
The website is not directed at minors under 16 and we do not knowingly collect their data. If you become aware of such a situation, please contact us.
8. Changes to this policy
We may update this policy from time to time. The updated version will be published on this page, together with the date of the latest revision.
9. Contact
For any questions regarding the processing of your data: office (at) gherdanassociates.com