PRIVACY POLICY

    SECTION I.

    GENERAL INFORMATION

    This Privacy Policy has been prepared in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council. Its purpose is to inform you about your rights, the purposes of processing, and the ways in which we collect, use, process, and store your personal data, as well as other matters related to your personal data in connection with the operation of https://law-tax.bg (hereinafter referred to as “the Website”).

    SECTION II.

    DATA ABOUT THE CONTROLLER

    Your data is processed by the Law Firm ‘Savov’, with the BULSTAT code: 177178850, with its registered office and registered address in the city of Sofia, 1000, Sredets district, 36 Alabin Str., floor 5. Law Firm “Savov” performs the functions of the controller of your personal data within the meaning of Regulation (EU) 2016/679 (hereinafter referred to as the “Administrator”).

    If you have any further questions or need additional information, you can contact the person responsible for data protection at the following email address: office@law-tax.bg.

    SECTION III.

    TERMS USED

    For the proper interpretation and application of this Privacy Policy, the terms and expressions defined below shall have the following meanings:

    Personal Data – means any information about an identified or identifiable natural person (“Data Subject”).

    Data subject – means a natural person who is identified or can be identified based on certain information (i.e. the person to whom the data relates).

    Data controller – is a natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data (in this case, the Administrator).

    SECTION IV.

    PRINCIPLES

    The Administrator shall fulfil its commitment to the protection of personal data and their confidentiality by adopting the following principles:

    • Use personal data of individuals only in a lawful and transparent manner to fulfill legitimate purposes, without collecting more data than is necessary;
    • Retains personal data only for the period for which it is needed; and
    • Protects personal data with appropriate security measures.

    SECTION V.

    RELATED DOCUMENTS

    We encourage you to review all of the documents we enclose with this Privacy Policy.

    This Policy applies together with the Terms and Conditions, which you can find posted at law-tax.en. Terms used in this policy have the definitions given in those terms and conditions.

    An integral part of this policy is the Cookie Policy published on law-tax.bg.

    SECTION VI.

    DATA SUBJECTS

    According to the needs of its activity, the Administrator processes the data of:

    • natural persons – users of the Website services;
    • businesses – representatives, employees and customers of the businesses with whom the Administrator communicates in relation to enquiries made to it via the contact form on the Website.

    SECTION VII.

    PURPOSES OF DATA PROCESSING AND TYPES OF DATA

    The purpose of processing your personal data is related to ensuring the functioning of our website law-tax.bg and responding to your inquiries sent through our contact form.

    The personal data we process for the purpose of the functioning of the Website are:

    • IP address;
    • Details of consent given to use cookies, consent to terms and conditions and privacy policies.

    The personal data that we process when you make an enquiry using the contact form on the Website are:

    • Name of enquirer;
    • Email.

    We may receive additional data that you have voluntarily provided when making your enquiry to us, e.g. telephone number, details of the company you work for, etc.

    SECTION VIII.

    PERSONS WITH ACCESS TO YOUR DATA

    Only the Administrator’s team and our trusted suppliers and partners who carry out certain activities on our behalf (e.g. IT support and other technical services) have access to your personal data. Lawyers from our law firm can only access information provided via the contact form in order to respond to your enquiry.

    SECTION IX.

    LEGAL BASIS

    The Administrator will only process your personal data if there is a valid legal basis, as required by the General Data Protection Regulation (GDPR). When visiting the Website, cookies are used which may collect certain information, including personal data such as IP address. The processing of this information is necessary for the normal technical maintenance, security and optimization of the Website and is carried out on the basis of the legitimate interest of the Administrator. For all other categories of cookies, such as third party cookies, the processing is based on your consent, which can be withdrawn at any time via your browser settings.

    When you make an enquiry to us via the contact form, we process the personal data you provide (including name, email, telephone and message content) in order to consider and respond to your enquiry. Depending on its content, the processing may be based on different legal grounds. If the enquiry relates to the parameters of a future contract or to an already concluded contract for legal services, the data is processed on the basis of the need to perform the contract or to take steps at your request prior to its conclusion. If your communication contains a comment, recommendation or complaint, the processing is carried out on the basis of the Controller’s legitimate interest in maintaining a high level of service, protecting its reputation and maintaining effective communication with clients. Where the communication relates to the exercise of your rights in relation to personal data, processing is carried out on the basis of a legal obligation. In cases where none of the above grounds apply but you voluntarily provide certain information, processing is carried out on the basis of your consent, which you may withdraw at any time.

    SECTION X.

    DATA RETENTION PERIOD

    Your personal data will be stored and processed for periods of time appropriate to the nature of the data and the applicable legal basis:

    Where we process data on the basis of the legitimate interest of the Administrator – for example, to maintain the Website, carry out communication, improve services or protect rights and interests – the data will be retained until the relevant interest no longer exists.

    In cases where processing is based on your explicit consent – e.g. when sending an enquiry that does not relate to a contractual relationship – personal data is retained until consent is withdrawn. It can be withdrawn at any time via your browser settings or by sending an email to the Administrator.

    If your enquiry relates to a legal service contract – whether concluded or imminent – your data is processed on the basis of necessity for the performance of the contract and is stored until the expiry of the statutory time limits. By virtue of our professional obligations as lawyers, we keep data on closed cases for up to 5 years after closure. In the case of accounting or tax documents, the retention period is up to 10 years from the last payment, and in the case of audits or inspections this may be extended to 10 years after completion.

    Where the communication made relates to the exercise of your rights in relation to the personal data – including requests for access, correction, restriction, objection or erasure – we process the data you provide on the basis of our legal obligation under applicable data protection law. The data relating to such requests will be retained until the final conclusion of their processing.

    After the expiry of the relevant time limits, the data is destroyed securely in order to prevent unauthorised access or unlawful use. If necessary, the time limits may be extended – for example in the event of an inspection by the Data Protection Commission, the Consumer Protection Commission or another competent authority – and the data will be kept until the final conclusion of the proceedings, but no longer than two years thereafter.

    SECTION XI.

    CONSUMER RIGHTS

    You have the following rights guaranteed by Bulgarian and European data protection legislation:

    Right of access:

    You have the right at any time to request information about your personal data that we process. We will provide you with the requested information through an appropriate means of communication.

    Right to rectification:

    You have the right to ask us to update/correct your personal data if the personal data we hold is inaccurate (for example, if you no longer use the email address provided to us).

    Right to restriction of processing:

    You have the right to ask the Administrator to restrict the processing of your personal data in the following circumstances:

    • If you object to certain processing that is carried out as a result of the legitimate interest of the Administrator, the Administrator will restrict the processing of that data while the legitimate interest check lasts;
    • If you claim that your personal data is incorrect, the Administrator must restrict all processing of that data while the verification of the correctness of the personal data is ongoing;
    • If the processing is unlawful, you may object to the erasure of the personal data and instead request a restriction on the use of your personal data;
    • If the Administrator no longer needs the personal data but it is necessary for you in connection with legal claims.

    Right to erasure:

    You have the right to request the erasure of your personal data when it is no longer necessary for the purposes for which it is processed, and after the expiry of the period for which the data is stored.

    Right to portability:

    You have the right to receive your personal data that you have provided to us and that we process in a structured and commonly used format. You have the right to request that we transfer your data to a third party if this is technically feasible.

    Right to object:

    You may only object to the processing of your personal data on the basis of our legitimate interest (without any other basis for processing – for example, processing to improve the functioning of the Website). If you choose to make such an objection, we will review your request and respond to you accordingly and within one month, unless a longer period is technologically necessary. 

    We take the protection and confidentiality of your personal data seriously and responsibly, which is why we have put in place measures and processes for its proper processing and storage. You may contact us with any further request or enquiry by email at office@law-tax.bg.

    You can lodge a complaint with the Data Protection Commission to protect your rights and legitimate interests in relation to the processing of your personal data by sending an email to: kzld@cpdp.bg

    SECTION XII.

    CHANGES TO PRIVACY POLICIES

     

    Any changes that may be made to this policy in the future will be posted on our Website law-tax.bg.

    Privacy Policy Effective Date: 06/24/2025.