Who you can contact
For enquiries and consultations, contact Mihai Popa, mihai.popa@popalaw.ro, +40 720 562 066, or Simona Gridan (Popa), simona.gridan@popalaw.ro, +40 721 225 699. The lawyers are based in Bucharest and offer representation throughout Romania.
The exact professional name, organisational form, full address and data controller’s identity have not yet been confirmed. The name Popa Law used on this draft website does not by itself identify the controller. Before publication, any joint controller arrangement, responsibility for privacy requests and the need for a data protection officer must also be clarified.
What this local version does
The informational pages are pregenerated, while a website endpoint processes the contact form. There are no user accounts or document uploads. Fonts are local; no external maps or fonts are embedded. The analytics choice is stored separately in the browser.
In the local preview, a valid enquiry is saved in a private directory on the computer running the website, unavailable through public pages. The record contains the name, email, chosen recipient, selected practice, message, language, date and an identifier. It is not emailed to the lawyers. The form confirmation states this explicitly.
Local captures are for testing with fictional data. Records older than seven days are removed when starting through the local helper and before a new save; there is no continuous deletion service while the application is stopped. Request limiting may temporarily use the network address in process memory without adding it to the saved message. Do not enter real sensitive information in this test version.
Delivery through the website’s own SMTP will be configured later, after the domain is chosen. Recipients will be the lawyers’ addresses according to the form selection. The controller, providers, legal bases, retention and notice for the actual flow must be confirmed before activation.
GA4 is intentionally unconfigured. An empty ID means no tracker loads and no requests go to Google, even if the analytics option is accepted. The integration can start only after a real valid ID is configured and analytics consent is given.
Email and telephone are separate channels
An email link opens your email application; a telephone link opens the calling function. The website does not collect the contents of a message or conversation through those links. A message you send may contain your sender address, name, contact details and information you choose to include.
For first contact, a short description of the subject and a way to reply are enough. Don’t send medical files, identity documents, children’s data or criminal case details at this stage. The channel and documents needed can be agreed with the lawyer.
The specific purposes and legal bases for handling enquiries and any engagement, recipients and message retention periods must be confirmed by the controller. Accepting traffic analysis is not consent to processing a case file and is not required to make contact.
Local preference and optional analytics
The localStorage key popalaw.consent.v1 holds preference version 1, the analytics choice and the updatedAt timestamp. Its technical validity is 180 days. The cookies policy distinguishes this necessary storage from optional analytics.
Before GA4 is activated, information must be added about the actual settings, data measured, recipients, retention and any international transfers and safeguards. This draft does not name unconfirmed hosting or email providers or claim to have checked production service logs.
Data requests and information still needed
For data questions, use either contact above and explain that your enquiry concerns privacy. Depending on the processing and applicable conditions, requests may concern access, correction, erasure, restriction, objection or portability. Consent to optional analytics can be withdrawn in preferences.
A data protection concern may also be raised with the Romanian National Supervisory Authority for Personal Data Processing. An internal process for responses and checking a requester’s identity must be established before publication.
The actual providers, any technical logs, processing locations, data retention and deletion, legal bases for each purpose and any automated decision-making remain to be documented. This version is not a complete notice for a production service whose processing details have not yet been confirmed.