We use the information you submit through the website to respond to your enquiry, arrange a consultation, and maintain the operation and security of the website. Below we explain what data we process, who may receive it, and what rights you have.
Who controls the data
The data controller is Cabinetul Avocatului "Colenco Aureliu", IDNO 44819029. The controller operates this website under the Colenco Legal brand and determines how enquiries submitted through it are handled. You can contact us at counsel@colenco.legal, by phone at +373 60 770 787, or at Strada Mihai Eminescu 70, of. P106, Chișinău, Moldova.
What data we process
When you submit the form, we process your name, phone number, message, optional email address, language and minimal page context. Name, phone number and message are required to submit the form; email is optional. The IP address and request information are processed transiently for connection, protection and abuse prevention, but are not retained in a separate website access log.
Purposes and legal grounds
We use enquiry data to respond, assess whether and how we can assist, arrange a consultation, protect the website from misuse and comply with applicable legal duties. Depending on the situation, processing may be based on your request before entering into a service relationship, your consent, our legitimate interest in securing and administering the website, or a legal obligation. If you voluntarily include special-category data or information about an offence, it is processed only as necessary to assess the enquiry and establish, exercise or defend legal claims.
Without a name, phone number and message the form cannot be submitted and we cannot respond through this channel. The website does not make decisions producing legal or similarly significant effects on you solely by automated means.
Providers and third-party services
The browser sends form data only to the colenco.legal server hosted by HOSTKEY B.V. The transactional email service Brevo (Sendinblue SAS) delivers form submissions, after which the message is stored in the business service Google Workspace (Google). Messages sent directly to the domain address are also delivered directly to Google Workspace.
Optional services are enabled only in line with your choices: Google Analytics and Yandex Metrica for visit statistics; Microsoft Clarity and Yandex Metrica with Webvisor for assessing ease of use; and Google and Meta for measuring promotion results and presenting more relevant information about our services. If both ease-of-use assessment and promotion are allowed, Microsoft Clarity shares data with Microsoft Ads for campaign and conversion measurement and repeated presentation of service information. Google Tag Manager is used only to manage permitted services. The ease-of-use category includes the basic Yandex Metrica functions required by Webvisor. Under the Clarity terms, Microsoft and the practice are independent controllers. Joint responsibility with Meta may apply only to the limited Pixel collection and transmission phase, after which Meta acts independently.
Google Maps belongs to the separate stored “Interactive map” category. If you select “Accept” or enable this category in the site settings, the map is loaded lazily when you approach it on the page. If this category is disabled, the “Show map” button grants, including after selecting “Decline”, one-time permission to load the map on the current page only; navigating away or reloading requires another action.
When the map loads, your browser establishes a direct connection with Google. Google may receive your IP address, browser and device information, and information about the requested place or page, and may use its own cookies or similar technologies in accordance with the Google Privacy Policy and the Google Maps/Google Earth Additional Terms of Service.
Your choices are stored in the necessary colenco_site_settings cookie for up to 180 days. The cookie contains the settings version, save time, interface language and category states, but not information entered in the enquiry form. You can change or withdraw your choices through “Site settings” in the footer.
To demonstrate a valid permission, the server retains for up to 911 days (the maximum 180-day choice lifetime plus two calendar years, including an allowance for a possible leap day) a minimal pseudonymous history of its grant, change and withdrawal: a hash of the random choice identifier, server time, the version and language of the displayed text, and the permitted categories. It does not include IP address, User-Agent, URL or form data. A simple refusal that was not preceded by permission is not retained in this history.
HOSTKEY and Brevo host the processing relevant to this website in the European Economic Area. Google, Meta, Microsoft and, until it is actually disabled, Yandex may also process data in other countries. Where applicable, published contractual safeguards and standard contractual clauses are used; you may ask the controller for information about a particular transfer or an available copy of its safeguards.
Retention and security
An enquiry that does not become a client matter is deleted from the final mailbox 12 months after the last substantive contact, unless a dispute or another duty requires longer retention. If a client matter begins, its documents are moved to a separate professional environment and retained under the rules applicable to legal practice. If a message cannot be submitted to Brevo immediately, it remains in an encrypted queue for no more than 24 hours and is deleted after acceptance or expiry. Content-free delivery statuses are retained for 30 days, Brevo logs for no more than one month without content previews, and server privacy backups for no more than 30 days.
GA4 user and event data are retained for 14 months after the identifier's latest activity; Meta states a maximum of two years for Event Data; Clarity session playbacks are available for 30 days, while click/heatmap data and marked recordings are available for up to 9 months. Yandex Metrica data are processed until use ends and the counter is deleted under the applicable DPA. We use reasonable organisational and technical measures, but no online transmission can be guaranteed completely secure.
Your rights
You may request information about your data and, where applicable, ask for access, correction, deletion, restriction, portability, objection or withdrawal of consent. Withdrawal does not affect processing already performed lawfully. We may need to verify your identity and may retain information where the law or professional duties require it. You also have the right to lodge a complaint with the CNPDCP.
Updates
We may update this notice when our services or legal requirements change. The current version was updated on 19 August 2026.
Contacts
Cabinetul Avocatului "Colenco Aureliu"
IDNO: 44819029
Trading as: Colenco Legal
Tel.: +373 60 770 787
Website: colenco.legal