- Why should you become aware of the policy of personal data processing and protection, which is applied by Dobrev &Lyutskanov Law Firm?
The law firm processes personal data in its capacity as controller of personal data and processor of personal data on behalf of other controllers. This means that we may gold your personal data, such as name, address, telephone number, e-mail, etc.
In the pursuit of our commitment to ensure maximum guarantees for the protection of your personal data, we have drawn up our internal rules and follow stringent control procedures with regard to the processing of personal data in accordance with the General Data Protection Regulation (GDPR). The objective of this policy is to clarify all major issues related to our processing of personal data, i.e. for what purposes, on what grounds, and within what time frame we process personal data. Here you can check your rights relating to the personal data we process and the ways to contact us so that to exercise these rights.
If you cannot find the answer to any of your questions about the processing of personal data within the framework of this policy or you need further information, please do not hesitate to contact us in any of the following ways:
Dobrev & Lyutskanov Law Firm
25, Khan Krum Street, 1000 Sofia
Tel. 02/980 38 76
Fax: 08/980 62 71
- Why and how does Dobrev & Lyutskanov Law Firm process personal data?
The law firm and the lawyers in its team perform their function set out in the Constitution of the Republic of Bulgaria to assist the protection of the rights and legitimate interests of individuals and legal entities. In order to carry out this function we need to process the personal data of our clients and third parties. These data include some sensitive information, such as financial and health status, trade union membership, biometric data, or details of ethnic origin.
All these data are necessary to provide the best possible protection. In many cases, if we have no access to them, the services we provide would not be adequate to the client’s needs or they might even prove impossible.
When performing this function, we adhere to the highest standards of confidentiality, which conform to or exceed the requirements of the Bar Act and the Code of Conduct of lawyers.
Personal data may be processed also in connection with the activities that are needed to provide protection of our clients with technical support, contracts with lawyers and staff, etc. These relationships are not regulated in the Bar Act but we apply the same care and high standards to the protection of personal data in their implementation as well.
We do not engage in profiling and we do not use automated decision-making procedures which might affect your rights in the processing of your personal data.
However, it might become necessary to provide access to a limited amount of your personal data to a third party, such as our accounting office or the software maintenance team. In these cases, we guarantee that the third parties we involve will apply the same high standards of personal data protection.
We might process your personal data on behalf of a client. In such cases, this policy has a limited scope of application, as it covers only your rights. Should you have any further questions, we undertake to transmit them to our client and to ensure that you will receive the reply within the statutory time limits.
III. What does the term “personal data” include?
The law firm applies its high standards of confidentiality to any information that becomes known to us in the course of our activities. Nevertheless, this policy is focused specifically on the protection of personal data and the guarantees for the rights of the data subjects.
The personal data within the scope of this policy include any information relating to a specific natural person and may include a name, address or contact details. In some cases, the personal data that we process might be insufficient to identify the person, such as e-mail address, records of our CCTV system, or details of the visits to our website. As far as such data is concerned, we apply the same protection standards which are applicable to any other information but, with a view to exercising the rights outlined below, we would need your assistance to identify you.
The information about contacts with legal entities, e.g. name, address for correspondence, office telephone numbers, e-mail addresses and others, does not represent personal data and therefore the rules under Section V do not apply to such information.
- For what purposes do we process personal data?
When the law firm sets out the objectives of the personal data processing policy, the following purposes are taken into consideration:
- In relation to the legal services assigned to us – the law firm provides legal services on the basis of individual contracts with each client. For the purposes of the conclusion and performance of the legal services contract, we process the personal data of our clients and/or the persons who represent them (attorneys, managers, executive directors, administrators, etc.).
In this case, the legal grounds for the processing of data lie precisely in the performance of the contract within the framework of which the processing in relation to the provision of certain information and/or services prior to the conclusion of the contract are also included.
For this purpose, we will process the personal data of our client until the termination of the contract and for a certain period of time afterwards, as some additional rights and obligations might occur under the contract subsequently. Typically, this period of time is six years after the termination of the contract. Still, it might be longer in some cases due to the following reasons:
- warranty periods, non-disclosure terms, time frame for additional services to be provided under the contract;
- representation in court proceedings – terms for the implementation of extraordinary defence means other than appeals, such as repeal proceedings, appeals under the European Convention for the Protection of Human Rights and Fundamental Freedoms.
The legal grounds for the processing of your personal data can be found in the existence of the contract for the provision of legal services.
- In relation to contracts for the provision of goods/services which are concluded by the law firm
- For the purposes of existing employment agreement, full-time service agreements and internship agreements
- To fulfill obligations laid down by law – the law firm has obligations prescribed by the law to keep accounts and to implement measures against money laundering. Your personal data will be used with a view to the fulfillment of our obligations under the Accountancy Act and the Act on the Measures against Money Laundering, as well as all statutory provisions which are in force within the territory of the Republic of Bulgaria as of the time of processing.
In accordance with Article 12 of the Accountancy Act, the following information is stored on hard copy and/or electronic records for the following periods of time: accounting ledgers and financial reports, including documents concerning tax control, audits and follow-up financial inspections – ten years; all other documents containing accounting information – three years. The Act on the Measures against Money Laundering obligates the law firm to keep data until it is no longer necessary to prove compliance with the requirements to identify the beneficial owner of the client or any other details of a specific operation.
- To protect the legitimate interests of the law firm – we might need your personal data to prove compliance with the statutory requirements before the relevant control authorities and in relation to the settlement of claims filed by or against the law firm.
- For the purposes of providing summarized legal information, legislative amendments and solutions of legal issues – in these cases, insofar as we send our newsletter and communications via e-mail, we ask for your explicit consent to have your personal data processed.
When your personal data is processed on the basis of your consent, you are entitled to withdraw it at any point of time. Then we will immediately discontinue the data processing for the relevant purposes but this will not affect the processing on other grounds, e.g. when we have a contractual or legal obligation to do so. You can always object to the processing of your personal data for the purposes of providing information on our part and then we will immediately discontinue the relevant provision of information.
In some cases, other purposes might warrant the processing of your personal data and then we will inform you explicitly.
- What are your rights in relation to the personal data that we process?
You have the following rights at any point of time when we process your personal data:
- To obtain information on what personal data concerning you we process and for what purposes
Generally, we provide this information when we conclude contracts with our counterparties but you can make inquiries into this matter at any time.
- To request rectification of untrue or inaccurate personal data concerning you
- To request erasure of your personal data
When there are no grounds to continue the processing of your personal data, you may request, at any point of time, erasure of all the information concerning you, which we store. If we have terminated our partnership relations and we have no statutory obligation to store this information, it will be erased.
- To request storage of your personal data without processing in any other way
If there exist no grounds to continue the processing of your personal data but you do not want it to be erased, e.g. in view of possible future partnership, you may request us, at any point of time, to stop any other form of processing and only store your personal data. In this case, we may process your data only on the basis of your consent or by virtue of law.
- To request access to your personal data
You may always ask for a copy of all your data which we process. In this case, you should specify whether we can provide the data on a hard copy or electronic means in a standard file format (.pdf, .doc).
- To object to the processing of your personal data
When we process your personal data for the purposes of protecting the interests of the law firm, you may object to the processing at any time. The processing will be discontinued immediately in case it is done for the purpose of sending commercial communications or similar information. If the processing is intended to protect another legitimate interest of ours, we will assess whether we are in a position to discontinue the processing or not.
In view of the exercise of any of these rights, please send us the form that you have filled in either on a hard copy or via e-mail. Follow the links specified in this policy to find the forms.
Even if your request is not given in the form, we will consider it provided that we can identify you and understand which of these rights you exercise. Please indicate your contact details, e-mail or a telephone number, in case we need some clarifications on your request.
Your request will be examined within a month. The time limit might be extended by up to two months in case we encounter difficulties in the fulfillment of your request and we undertake to inform you of the extension within a month of the date on which your request was received.
Your request may be rejected in any of the following cases:
- if we cannot identify you;
- if we do not process your personal data;
- if there exist legal obstacles to its fulfillment;
- if we have a legitimate interest which is substantial enough to reject your request;
- if you have filed many requests for the exercising one and the same right within a short span of time, or if your request has already been satisfied and you have not indicated any circumstances, which necessitate its repeated satisfaction.
Notwithstanding all this, you may request information on how we store your personal data at any point of time. We undertake to reply to your questions without undue delay.
If you believe that we infringe upon your rights, you may appeal to the Commission for Personal Data Protection which supervises our processing of personal data.
Commission for Personal Data Protection
Address: 2, Prof. Tsvetan Lazarov Blvd., 1592 Sofia
Call centre – tel. 02/91-53-518
Working hours – 09.00 – 17.30