Privacy notice
Last updated: 13 November 2026
About this translation
Who is responsible for your data
The controller of the personal data processed on dosaro.lumosstudio.ro is Lumos Studio, individual (not yet registered as a business), at Roman, Neamț County, Romania. Email: hello@lumosstudio.ro. Phone: +40 743 353 143.
You can write to the address above at any time with any question about your data.
What we process, why, and for how long
We only process the data we need. The table below lists all of it.
| Activity | Data | Purpose | Legal basis | Retention |
|---|---|---|---|---|
| Hosting and security | IP address, browser type, requested page, date and time | delivering the site, security and preventing abuse | legitimate interest (Art. 6(1)(f) GDPR) | a short period set by the hosting provider |
| Emails you send us | your name, email address and the message | replying to your message | legitimate interest (Art. 6(1)(f)) or steps before a contract (Art. 6(1)(b)) | for the conversation and up to 24 months after the last message |
| Searching for a case | The term you search for (a case number or a name) is sent to the courts’ portal to get the result. We do not link the search term to your IP address and we do not keep a history of your searches. Searching by name returns cases in all areas, including criminal ones, as published on the portal. | To show you the result of your search. | Legitimate interest (Art. 6(1)(f) GDPR): easy access to information already published officially. | The search term is not saved. |
| A copy of the cases searched for | The case data as published on the portal: number, court, subject, stage, hearings and rulings, the parties (name and capacity) and the appeals. | To show the case quickly, keep it up to date and still show it when the courts’ portal is down. | Legitimate interest (Art. 6(1)(f) GDPR). | 90 days after the last search, then deleted. |
| A summary of the case without names | The court, the subject area, the stage, the main dates, the number of hearings and the kind of ruling. The summary does not contain the names or other data of the parties. | Statistics on how long cases take and how they proceed. | Legitimate interest (Art. 6(1)(f) GDPR). | Kept, because it contains no names. |
| Abuse prevention | A code computed from the IP address, the day and the kind of search (with a secret value added). The IP address itself is not stored. | To stop bulk downloading of data and misuse of the site (a daily search limit). | Legitimate interest (Art. 6(1)(f) GDPR): protecting the site and the people named in cases. | 24 hours. |
| A data deletion request | Your name, your email address, the case numbers (if you give them) and the reason. | To handle your request and tell you what we did. | Legal obligation (Art. 6(1)(c) GDPR): exercising your rights. | While the request is handled and then as long as needed to prove that we replied. |
We do not sell your data and do not use it for advertising or profiling.
Who receives your data
We use providers that process data on our behalf under data processing agreements. We do not pass your data to anyone else unless the law requires it.
| Provider | What it does | Where | Their policy |
|---|---|---|---|
| Vercel Inc. | website hosting and delivery | USA (with EU data centres where available) | https://vercel.com/legal/privacy-policy |
| Supabase Inc. | database, sign-in and file storage | data is stored in an EU region | https://supabase.com/privacy |
| Cloudflare, Inc. | spam protection (Turnstile) | USA | https://www.cloudflare.com/privacypolicy/ |
| OpenStreetMap / furnizor de hărți | showing maps (the visitor's IP address reaches the map server) | EU / United Kingdom | https://osmfoundation.org/wiki/Privacy_Policy |
Transfers outside the European Economic Area
Some providers are outside the EEA. Transfers rely on the EU–US Data Privacy Framework (for certified providers) and/or the standard contractual clauses approved by the European Commission. You can ask us for a copy of the safeguards.
Cookies and browser storage
The details are on the cookies and storage page.
Your rights
You have the right to:
- find out what data we hold about you and get a copy (access);
- have incorrect data corrected;
- have your data erased (the “right to be forgotten”);
- restrict how we use your data;
- receive your data in a common format and pass it to someone else (portability), where we process it under a contract or consent;
- object to processing based on legitimate interest;
- withdraw consent at any time, without affecting what happened before.
Write to hello@lumosstudio.ro. We reply within one month at most. We may ask for proof of identity so we do not hand your data to an impostor.
If you are not satisfied
You have the right to lodge a complaint with the supervisory authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP), B-dul G-ral. Gheorghe Magheru nr. 28-30, Sector 1, cod poștal 010336, București, https://www.dataprotection.ro, anspdcp@dataprotection.ro. We would appreciate the chance to fix the problem first.
Security
We use encrypted connections (HTTPS), limit access to data and choose providers with recognised security measures. No method is 100% safe; if an incident affects you, we will tell you and the authority where the law requires it.
Changes
When we change how we process data, we update this page and the date above.