Privacy Policy of Radostin Vasilev Law Firm

Information about the Personal Data Controller

Radostin Vasilev Law Firm, BULSTAT 177449375, is a law firm registered in accordance with the Bar Act. It is represented by attorney Lyudmil Aleksandrov Georgiev, registered with the Sofia Bar Association under personal number: 1500749610.

Personal Data Controller:

• Name: Radostin Vasilev Law Firm

• BULSTAT: 177449375

• Address: Sofia-city region, Stolichna Municipality, 1700 Sofia, 120 D Simeonovsko Shose Blvd., floor 5, office/apartment No. 10

• E-mail: vassilev.lawoffice@gmail.com

• Phone: (0876) 996776

This Privacy Policy aims to inform you how we process your personal data when providing legal services and when using our website.

Grounds and Purposes for the Processing of Personal Data

Radostin Vasilev Law Firm processes personal data only where there is a legal basis pursuant to Art. 6 and, where applicable, Art. 9 of Regulation (EU) 2016/679 (GDPR).

Processing is carried out on the following grounds:

• for the performance of a contract or for taking steps prior to entering into a contract;

• for compliance with legal obligations;

• for the protection of the legitimate interests of the firm or its clients;

• on the basis of expressly given consent, where required by law.

Processing When Providing Legal Services

In connection with the provision of legal assistance, we process personal data for the following purposes:

• identification of the client;

• preparation of contracts, opinions, complaints, statements of claim, and other legal documents;

• procedural representation before courts, state authorities, and institutions;

• performance of the assigned legal services;

• accounting and tax servicing;

• communication with the client.

Depending on the specific case, the following may be processed:

• full name;

• Personal Identification Number or Foreigner’s Personal Number;

• address;

• phone number;

• e-mail address;

• data from identity documents, where necessary;

• bank details;

• data contained in documents relating to the specific case;

• other data provided by the client or necessary for the protection of their rights and legitimate interests.

Processing Through the Website

When using the website, the following may be processed:

• IP address;

• data about the device used;

• information about the internet browser;

• date and time of the visit;

• information provided through contact forms.

These data are used for:

• operation and security of the website;

• responding to submitted inquiries;

• prevention of misuse;

• statistical analyses.

Processing Based on Consent

Where processing is not based on a contract, legal obligation, or legitimate interest, we process personal data only after your voluntary and explicit consent.

Such processing may be necessary, for example, for:

• sending newsletters;

• receiving news and publications;

• using certain types of cookies.

The consent provided may be withdrawn at any time by sending a notification to the indicated e-mail address.

Withdrawal has no effect on processing carried out before that time.

Retention Periods

Personal data are stored only for the period necessary to achieve the purposes of processing or for the periods provided for in the applicable legislation.

More specifically:

• client files - for the periods established in the applicable legislation and the rules governing the legal profession;

• accounting documents - in accordance with the Accountancy Act and the Tax and Social Security Procedure Code;

• data from inquiries - until the communication is completed, unless the law requires longer storage;

• data processed on the basis of consent - until its withdrawal.

Recipients of Personal Data

Where necessary and only to the extent necessary for the performance of legal services, personal data may be provided to:

• courts;

• prosecutor’s office;

• state and municipal authorities;

• notaries;

• bailiffs;

• expert witnesses;

• accountants;

• IT service providers;

• courier companies;

• other persons where this is necessary by law or for the protection of the client’s rights.

All recipients process the data in compliance with the applicable legislation.

Transfer of Data Outside the European Economic Area

As a rule, personal data are not transferred outside the European Economic Area.

If such transfer becomes necessary, it will be carried out only where appropriate safeguards provided for in Regulation (EU) 2016/679 are in place.

Protection of Personal Data

Radostin Vasilev Law Firm applies the necessary technical and organizational measures to protect personal data against:

• unauthorized access;

• loss;

• destruction;

• alteration;

• unauthorized disclosure.

Measures such as the following are applied:

• restricted access to information;

• encryption, where applicable;

• secure information systems;

• backup;

• internal rules for personal data protection;

• compliance with attorney-client confidentiality.

Your Rights

Pursuant to the GDPR, you have the right:

• to receive information regarding the processing of your personal data;

• to access your personal data;

• to request correction of inaccurate data;

• to request erasure (“the right to be forgotten”), where the legal prerequisites are met;

• to request restriction of processing;

• to data portability, where applicable;

• to object to processing;

• to withdraw consent given;

• not to be subject to a decision based solely on automated processing, where the law grants you such a right.

Requests may be submitted using the indicated contact details.

Complaint to the Supervisory Authority

If you believe that the processing of your personal data violates the applicable legislation, you have the right to lodge a complaint with:

Commission for Personal Data Protection

Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.

Phone: +359 2 915 35 18

Website: https://www.cpdp.bg

Changes to This Policy

Radostin Vasilev Law Firm reserves the right to amend this Privacy Policy in the event of changes in legislation, practice, or the manner of processing personal data.

The current version of the policy will always be published on the firm’s website.