+359 886 308 851

CALL NOW

Call now

+359 886 308 851

PRIVACY POLICY

  1. General provisions

This Privacy Policy ("Policy") is intended to inform you how Attorney-at-Law Boris Krastevich ("Attorney-at-Law") collects, uses, stores and protects the personal data of visitors to his website and of his clients, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and applicable Bulgarian law.

  1. Personal Data Controller

The data controller is:

  1. Advocate Boris Krastevich, Reg. № 1800710510 at the Sofia Bar Association
  2. Address. Sofia, p. k. 1618, ul. 21, app. 22
  3. Phone: +359886308851
  4. Email: office@krastevich.bg 
  5. Website: krastevich.bg 
  1. What personal data is processed

The Advocate only processes data that is necessary for the provision of its services or for the normal functioning of the website, including:

  1. Name and surname
  2. Phone number
  3. Email address
  4. IP address
  5. Information provided via the contact forms on the website
  6. Data relating to a specific legal case (including possibly sensitive data where necessary for the provision of the legal aid)
  1. Purposes and legal grounds for processing

Your personal data is processed for:

  1. Provision of legal services - on the basis of the performance of a contract or taking steps at your request before entering into a contract.
  2. Administrative and accounting purposes - based on the fulfilment of statutory obligations (Law on the Bar, Law on Accounting, Law on Measures against Money Laundering, etc.).
  3. Improving the functionality of the website and communication with users - based on the legitimate interest of the Lawyer.
  4. Marketing and newsletters - only with your explicit consent.
  5. Method of data processing

The personal data collected through the website of the Advocate are mainly processed through electronic and information systems, with appropriate technical and organizational protection measures. The aim is to minimise the risk of destruction, loss (including accidental), unauthorised access, use without justification or processing that is not consistent with the purposes for which the data was collected and set out in this Policy.

  1. Data retention period

The lawyer shall keep the personal data:

  1. For the duration of the legal services contract and up to 6 years after its termination, unless the law requires a different period.
  2. Data processed on the basis of consent shall be stored until the consent is withdrawn.
  3. Cookie data - in accordance with the [Cookie Policy] of the Advocate.
  4. Disclosure of personal data

The lawyer may disclose data only when necessary and permissible by law:

  1. The Lawyer's subcontractors (e.g. IT support, accountants).
  2. To partner law firms, as well as local and international legal networks, as necessary to perform the service, with your knowledge and/or consent.
  3. To competent authorities where required to do so by law, including the police, prosecutors and courts, and where there are reasonable grounds to believe that such disclosure is necessary and justified for:
  • Conducting investigations, preventing or taking action in relation to suspected illegal activities or assisting national control authorities;
  • Preparing and organizing defenses against claims or demands from third parties, as well as protecting the security of the website and the Advocate's activities;
  • Exercise or protect the rights, property and safety of the Lawyer, its clients or third parties.
  1. Your rights

You have the right:

  1. To obtain information about what personal data is processed and for what purposes.
  2. Request correction or deletion of data.
  3. To ask the Lawyer to store your personal data without otherwise processing it
  4. Request restriction of processing.
  5. To object to processing.
  6. To withdraw consent to processing.
  7. To obtain your personal data.
  8. File a complaint with the Personal Data Protection Commission.

Where the Lawyer processes your personal data for the purpose of protecting its legitimate interests, you have the right to object to such processing at any time. If the processing is carried out for the purpose of sending commercial communications or other similar information, it will be terminated. Where the processing serves the protection of another legitimate interest of the Lawyer, an assessment will be made as to whether termination is possible.

To exercise any of the above rights, you may submit a written request, either on paper or by email. The request will be considered under the following conditions:

  • you can be identified; and 
  • it is clear from the text which right you wish to exercise. 

Please provide contact details - email and/or phone number if further clarification is required.

The lawyer will consider your request within one month. If, due to complexity or other good reasons, it cannot be fulfilled within this time limit, the Advocate may extend the time limit by up to two additional months and will notify you of the extension within one month of receipt of the request.

Your request may be rejected in the following cases:

  • In the presence of a legal obstacle to its implementation;
  • If the Lawyer does not process your personal data;
  • If your identification cannot be made;
  • Where there is a sufficiently substantial legitimate interest to justify refusal;
  • If you have made multiple requests to exercise the same right within a short period of time, or if the request has already been granted and no new factual circumstances have arisen requiring its re-execution.

Notwithstanding the above, you have the right to request information about how your personal data is stored at any time.

Contact the Data Protection Commission:

  • Address. Sofia, Bulgaria
  • Website: krastevich.bg
  • E-mail: office@krastevich.bg
  • Phone: +359 886 308 851
  1. Data security

The lawyer shall implement technical and organisational measures to protect the data against unauthorised access, loss or unlawful disclosure.

The processing of personal data takes place within the European Union. In the event that a transfer of data outside the European Economic Area is necessary, this will only be done if:

  • the State concerned is duly recognised as providing an adequate level of protection, or
  • the recipient is bound by EU standard contractual clauses or other applicable mechanisms to ensure data security.

This Policy complies with and applies in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679). In the event of conflicts or inconsistencies between the provisions of this Policy and the legal framework of Bulgarian legislation, the relevant provisions of the Policy shall be deemed to be automatically superseded by the relevant provisions of the applicable legislation governing the relevant matter. For all matters not expressly addressed in the Policy, the applicable Bulgarian law shall apply.

  1. Changes to the Policy

The Advocate reserves the right to update this Policy and any changes will be posted on the Advocate's website.

📞