PERSONAL DATA PROTECTION POLICY

OF LAW FIRM "GEORGIEV, IVANOV, ALEXANDROVA and KALISTRATOV"

 

 

This Personal Data Protection Policy (Policy) of Georgiev, Ivanov, Aleksandrova & Kalistratov (Law Firm) has been developed in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of The Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, Regulation 2016/679) and the Bulgarian Law on Personal Data Protection (LPDP).

 

The Policy aims to provide You with relevant information on the matters regarding the type of personal data collected and processed by the Law Firm, the purposes and means of the processing, to which third parties such data may be disclosed, as well as to inform You on Your rights regarding the processing of Your personal data according to Regulation 2016/679 and the LPDP.

 

We at the Georgiev, Ivanov, Aleksandrova & Kalistratov Law Firm process your personal data in accordance with the requirements of Bulgarian and European legislation, observing the principles of legality, transparency, good faith, accuracy, integrity and confidentiality of personal data, reducing the data to minimum, limitation of storage and limitation of the purposes for which they are used.

 

What is personal data?

Personal data is any information relating to a specific individual and based on which such individual can be identified and distinguished from other individuals (e.g. name and surname of the person, identification number (PIN, personal number of a foreigner), permanent and current address, email address, identity document number, Internet Protocol (IP) address, location data, etc.).

 

When is personal data processing lawful?

• When You have given Your explicit consent to the processing;
• When Your personal data is necessary for the performance of a contract, to which You are a party, or when in order to take steps at Your request prior to entering into a contract;
• When it is necessary for compliance with a legal obligation to which the controller is subject;
• When processing is necessary in order to protect Your vital interests or such interests of another individual;
• When processing is necessary for the performance of a task carried out in the public interest;
• When processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that such interests are not overridden by Your interests or fundamental rights and freedoms.

What does “controller” mean?

“Controller” basically means the person who determines why and how Your personal data shall be processed.

 

Who are we?

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" is a legal entity entered in the Register of law firms at the Sofia City Court (CSC) with Decision No. 1 of 03.08.2020 d. under f.d. No. 26/2020 and in the Unified Register of Law Firms of the Higher Bar Council under No. 2700060410, with BULSTAT code 177448896, with headquarters and management address: Sofia 1000, Triaditsa district, 98A Knyaz Boris I street, 3rd floor.

 

The Law Firm processes personal data and is therefore a controller in various cases (when You provide such data to us in order to respond to Your inquiry, to draw up legal documents such as complaints, statements of claims, etc., to represent You before third parties and so on).

 

How can You contact us with questions regarding the protection of Your personal data?

You can contact Georgiev, Ivanov, Aleksandrova & Kalistratov Law Firm regarding all questions regarding the protection of your personal data in the following ways:

• At the following address: Sofia 1000, Triaditsa Region, 98A Knyaz Boris I Str., 3rd floor;
• By phone: 02/488 6777;
• E-mail:: office@levalex.com
• Through the contact form on our website:www.levalex.com..

 

Personal data subjects

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" collects and processes personal data of:

• our clients (including persons with whom we have pre-contractual relations and persons who have sent us an inquiry), their legal representatives and/or proxies, as well as persons for contact with clients;
• legal representatives, proxies, procurators, shareholders, general managers, members of management bodies of legal entities – clients and/or contractors of our clients;
• individuals – contractors of our clients;
• individuals – participants in court and out-of-court proceedings;
• job applicants;
• other individuals when necessary for the fulfilment of our contractual or legal obligations.

What categories of personal data do we process, for what purpose and on what grounds?

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" processes the following categories of personal data: names of persons, social security number or other identification number, permanent and current address, e-mail address, telephone number, identity document data (type, number, date and place of issue, validity, issuing authority), citizenship, bank account details and other personal data that may be necessary depending on the specific case (e.g. mine, place of work, education, family ties, marital status, property/financial status , participations in companies, etc.).

 

We need to collect and process Your personal data for the following purposes:

• Correspondence with You for the conclusion of legal services agreement(s) and subsequently – for the due fulfilment of our obligations undertaken by virtue of such agreement(s) (Article 6, paragraph 1, item “b” of Regulation 2016/679);
• In order to fulfil our legal obligations – e.g., identification of clients for the purposes of money laundering prevention (Article 6, paragraph 1, item “c” of Regulation 2016/679);
• In order to protect our legitimate interests, if necessary – e.g., in case of non-performance of the legal services agreement on Your part (Article 6, paragraph 1, item “e” of Regulation 2016/679).

Job applicants

In order to select the individuals who apply for a job with us, we collect and process the following categories of personal data: full name, contact details, date of birth, education, professional qualification, experience and other information provided voluntarily by the applicant.

We need the said personal data in order to be able to assess whether the candidate is suitable for the position and, if necessary, to take the necessary steps for the conclusion of a contract at the request of the person applying for a job (Article 6, paragraph 1, b. "B" of Regulation 2016/679).

In addition, the Law Firm may check for the existence of publicly available information about the applicant, as well as for information that the applicant himself or herself has published on the Internet (e.g. in his/her profile on LinkedIn or other social media).

 

Personal data collected through our website

The personal data You provide to us through our online contact form includes name and surname, e-mail address and telephone number. We need such data so that we can contact You and answer Your inquiry (Article 6, paragraph 1, item "b" of Regulation 2016/679).

When You visit our website, the following data is automatically collected: the Internet Protocol (IP) of the device from which You access the website, type of the device, browser type, date and time of visits, etc.

 

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" may also process other personal data when an obligation to do so is provided for in a regulatory act. We collect and process sensitive personal data, such as race, religion, political affiliation, etc. only with your express consent or under the conditions provided for in art. 9 of Regulation 2016/679.

 

Personal data retention

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" stores your personal data for the duration of the contract for the provision of legal services concluded with you and for a period not longer than 10 years thereafter for the purpose of execution of our legal obligations, settlement of possible future disputes, etc., unless a longer term is provided for in the current legislation.

 

In cases where personal data has been provided to us but no legal services agreement has been concluded, this data shall be retained for a period of no longer than 2 months as of the completion of the correspondence.

 

The personal data of job applicants is retained for a period of 6 months after the completion of the selection procedure. With Your prior consent, this period may be extended with a view to participating in future selection procedures. In the latter case, You are entitled to withdraw Your consent for the processing at any time and ask us to delete Your personal data.

 

When the personal data we have collected is no longer needed for the purposes mentioned, we will delete it or destroy it in another reliable way.

 

Personal data disclosure

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" may provide your personal data to:

• attorneys, employees and associate members of the Law Firm – for the purposes of responding to inquiries and providing the assigned legal services;
• of counsels and other trusted external consultants for the purposes of providing complex services – only after Your preliminary consent;
• credit institutions – for the purposes of payment of remunerations;
• courier companies and postal operators – in order to contact You when necessary;
• state and municipal authorities and authorities charged with public functions – when this is necessary for the fulfilment of contract or legal obligations of the Law Firm;
• court or arbitration court – for the provision of legal representation in legal proceedings, as well as when necessary for the collection of receivables of the Law Firm;
• persons other than the abovementioned, when necessary – only after obtaining Your prior consent when such is required.

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" may provide your personal data to other countries or international organizations when necessary, in which case all the requirements of the applicable legislation are complied with.

Personal data received by job applicants is not subject to disclosure to any third parties.

 

Your rights

As a data subject, You have the following rights:

• Right of access – You have the right to receive information on whether we process Your personal data and what types of such data we process, as well as for what purpose and to whom we may disclose it, free of charge;
• Right of rectification – when Your personal data is incorrect, inaccurate or incomplete;
• Right to object– You can object to the processing of Your personal data when it is based on our legitimate interest, and You believe that we do not have such;
• Right to restriction of the processing – You have the right to ask us to restrict the processing of Your personal data (i.e., to process it only for specific purposes) when we are not able erase it due to a legal obligation; when You contest its accuracy (for a period of time that will enable us to verify the accuracy of the personal data); when You consider the processing illegal, but You oppose the erasure of the personal data and request the restriction of its use instead, etc.;
• Right to erasure (“right to be forgotten”) – You can request that we erase Your personal data when it is no longer necessary in relation to the purposes for which it has been collected or otherwise processed; when You no longer wish for it to be processed, provided that we have no other valid legal basis to continue the processing; when it has been unlawfully processed, etc.;
• Right to data portability – You have the right to receive the personal data which concerns You and which You have provided to us in an accessible format when its processing is based on Your consent or a contract obligation. You also have the right to request that Your personal data be transferred directly from us to another controller, when technically possible.

How can You exercise Your rights?

You can exercise all of the abovementioned rights by sending us a written request at the physical or the e-mail address as specified in this Policy. We will consider Your request without undue delay and will notify You of the actions taken.

 

If You believe that Your personal data protection rights have been violated, You are also entitled to file a complaint with the Commission for Personal Data Protection:

• Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.;
• Phone: 02/915 3 518;
• E-mail: kzld@cpdp.bg;
• Website: cpdp.bg.

Amendments to the Personal Data Protection Policy

Law firm "Georgiev, Ivanov, Aleksandrova & Kalistratov" reserves the right to change and update this Privacy Policy at any time. Any change will be promptly indicated on the website of the Law Society, and in the event of a significant change, you will be notified by email and/or phone.

 

Last updated: 01/16/2023