The domain must be at least 60 days old from the date of registration, it is not required to be expired, or it is in the "Awaiting deletion" or "recovery" quarantine. Usually the registrars block the domain for transfer, so it must be unblocked.
The order is made based on the CPP code from the website or from the 'client area' if the client already has an account.
The old registry checks the CPP code and the status of the domain for transfer. If everything is in order, yes send to the email of the Administrative Contact instructions for approving the transfer, otherwise you receive an email with a description of the problem.
DNS (Domain Name Service) servers are installed and configured on special equipment, with hardware resources that allow them to face a very large number of requests for solutions of the domains for which they were configured. The resolution of a field consists in the connection between a domain entered in the browser and the IP of the equipment providing the services that domain (email, web hosting, ftp, and others). Nameservers must be configured correctly so that the domain is resolved correctly.
The whois protection is addressed to those who want to keep the anonymity of the purchased domain and not only that. For normally registered domains, anyone can see the domain owner, email address, phone number, home address, etc. With this service, all details are hidden. Of course you will will effectively protect against spam, as domain harvesting is one of the techniques used for collecting email addresses used for spam. In the case of .ro domains, there is no whois protection valid. The ROTLD registration policy provides for hiding data only for registered .ro domains on the natural person, for those registered on the legal person the data are not hidden.