Privacy Policy

The data controller is Ivanov & Yonkova Law Firm, entered in the register of law firms kept by the Sofia Bar Council, under no. 2100055610, UIC 177334661, with registered address: 40 Knyaz Boris I Street, app. 1, Sofia, Bulgaria.

Contact details: doychin.ivanov@iylawfirm.com, tsveta.yonkova@iylawfirm.com, +359 888 36 95 76, +359 878 70 03 76.

Through the enquiry form we process the data you provide yourself: name, company name (where given), e-mail address, telephone number, the area of law selected, and the content of the description you enter.

When you contact us by e-mail or telephone, we process the data contained in your message, including anything you include voluntarily.

When you visit the website, technical data necessary for its operation and security is processed — IP address, browser and device type, and the date and time of the request. This data is processed by our hosting provider in its server logs for the purposes of operating and securing the website.

Please do not include in your enquiry data concerning health, criminal proceedings or other sensitive circumstances, nor detailed data about third parties, before contact with us has been established. A general description of the question is sufficient for an initial assessment.

We process enquiry data in order to review it and respond, including to assess whether we can take the matter on and whether a conflict of interest exists. The legal basis is your consent, given when submitting the enquiry, and the taking of steps at your request prior to entering into a contract.

We process technical data in order to ensure the operation and security of the website. The legal basis is our legitimate interest in the site functioning correctly and being protected from misuse.

Where an enquiry leads to an engagement, processing continues on the basis of the engagement agreement and of the statutory obligations arising under the Bulgarian Bar Act and anti-money-laundering legislation.

We do not use your data for automated decision-making, including profiling, and we do not use it for direct marketing.

Enquiries that do not lead to an engagement are retained for 6 months from the last correspondence, after which they are deleted. This period allows us to identify a repeat approach on the same matter and to check for a conflict of interest.

Where an enquiry leads to an engagement, the data is retained within the client file in accordance with the applicable requirements for keeping and storing it. Data held in the client file is retained for 5 years from the end of the engagement, in accordance with anti-money-laundering legislation.

Technical logs are retained by our hosting provider for a limited period and are not used by us for any other purpose.

Your personal data is not disclosed to third parties, save in the cases listed below.

Access is available to the attorneys and staff of the firm who need it to perform their duties and who are bound by a duty of confidentiality.

The data is processed by our technical service providers acting as processors: Netlify, Inc. (website hosting) and SuperHosting.BG Ltd (e-mail services). Appropriate contractual arrangements are in place with each of them, including in respect of any transfer of data outside the European Economic Area.

Data is disclosed to public authorities where required by law and subject to attorney professional secrecy.

You have the right of access to your personal data and to a copy of it; to rectification of inaccurate data; to erasure; to restriction of processing; to data portability, where processing is based on consent or on a contract and is carried out by automated means; and to object to processing based on legitimate interest.

Where processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

The exercise of these rights may be restricted to the extent necessary to comply with attorney professional secrecy and with statutory obligations to retain certain data.

Requests are to be sent to the contact details below. We respond within one month of receipt; this period may be extended where the request is complex or where there are many requests, in which case we will inform you. [VERIFY — the period and the conditions for extension follow the GDPR.]

The website uses cookies that are necessary for its operation — for example to remember the chosen language and your cookie preference. These are set without consent, as the site cannot function correctly without them.

With your consent, the website also uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The service is loaded only if you have selected "Accept" in the cookie banner. Until then it is not loaded and sets no cookies.

Google Analytics sets the cookies _ga and _ga_<identifier>, which recognise returning visits and compile statistics on the use of the website: number of visitors, pages viewed, the source of the visit, approximate location based on a truncated IP address, and device and browser type. We do not collect data through this service that directly identifies you.

The legal basis is your consent under Article 6(1)(a) of Regulation (EU) 2016/679. The data is retained for 14 months.

Google acts as a processor on our behalf. Where data is transferred outside the European Economic Area, protection is ensured by the European Commission's standard contractual clauses and by Google LLC's certification under the EU–U.S. Data Privacy Framework. We do not use Google Analytics for advertising, remarketing or profiling.

The map on the Contacts page is loaded from Google Maps and is also displayed only after an explicit action by you.

You may withdraw your consent at any time via the "Cookie settings" link at the bottom of every page. On withdrawal, the Google Analytics cookies are deleted and tracking stops. Withdrawal does not affect the lawfulness of processing carried out beforehand. You may also delete cookies already set through your browser settings.

If you consider that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the Commission for Personal Data Protection.

Contact details of the Commission: [VERIFY — address, telephone, e-mail and website to be taken from the current publication at cpdp.bg].

You also have the right to bring proceedings before the competent court.

For questions relating to the processing of your personal data and to exercise your rights, you may contact us at doychin.ivanov@iylawfirm.com or tsveta.yonkova@iylawfirm.com, or at 40 Knyaz Boris I Street, app. 1, Sofia.

This policy may be amended. The current version is always available on this page, with the date of the last amendment shown at the top.