Policy of the Law Firm "Yordanov and Yotova" for personal data protection

 

We process personal data:

 

Yordanov & Yotova Law Firm processes personal data as a personal data controller and as a personal data processor.

This is done in compliance with the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter referred to as the GDPR), as well as in compliance with the Personal Data Protection Act .

In order to comply with the strictest standards and to preserve your rights in the processing of personal data to the highest possible degree, we have strict internal rules and follow the procedures regulated by law. This policy aims to clarify the main issues related to the processing of personal data - for what purpose they are processed, what data are processed and for how long. From here you can find out how you can contact us and ask for protection of your personal data.

If you have questions that you can't find the answer to, you can contact us in the ways below.

 

Who are we?

Yordanov & Yotova Law Firm is a legal entity registered in the Sofia City Court, entered in the register of the Sofia Bar Association, with BULSTAT 177466104 and with registered office and address of management: Sofia 1000, 55 Sveti Naum Blvd., floor 1.

The law firm is represented jointly and severally by the lawyers Bogomil Georgiev Yordanov and Kamelia Nikolaeva Yotova.

 

How can you contact us?

There are many different ways to contact us. It is up to you which way you choose.

You can write to us by e-mail: office@lexgroup.bg.

You can call us at:

• 0890399993 - adv. Bogomil Yordanov;
• 0887163200 - adv. Kamelia Yotova

You can contact us and make an appointment in our office at: 1164 Sofia, 55 Sveti Naum Blvd.

Our website is https://lexgroup.bg/.

 

What is personal data?

The law firm shall keep secret any information that becomes known to it in connection with the performance of its activity. In doing so, we apply high standards to protect the confidentiality of information. In order to be able to carry out our activities, we process personal data, which may include sensitive information - such as health status, biometric data, information about convictions and more.

"Personal data" means any information relating to the identification of an individual, such as name, identification number, location data, online identifier or one or more characteristics specific to the physical, physiological, genetic, mental, intellectual, economic, cultural or social identity. of this individual. Personal data are, for example, your names, unique civil number or personal number of a foreigner, telephone, email and other data that can be used to identify an individual.

The name of the legal entities, their identification codes, the contact information with them - address, e-mail, telephone, etc. are not personal data.

 

Grounds for collection, processing and storage of personal data

Every natural and legal person has the right to protection before any state body, before the bodies of local self-government, before other natural and legal persons.

The right to protection is regulated in international treaties, in the law of the European Union, in the Constitution and the legislation of the Republic of Bulgaria.

The law firm and we - the lawyers in it, have the vocation and mission to help you exercise your right to defense, to deal with the various procedures provided by law in various life situations. In carrying out the protection and carrying out our activities, we process the personal data of:

• our customers and the people who made the inquiry, as well as the people who represent them;

• to third parties;

• of our contractors;

• to our employees, as well as to the persons who apply to us for internship or work;

• visitors to our site and

• the people who have subscribed to receive our e-newsletter.

 

Processing of personal data of customers, persons who have made an inquiry and persons who represent them

A client is any person who has concluded a contract with the law firm and has assigned him the implementation of legal protection and assistance.

In the same way as the personal data of the clients, the personal data of the persons who make an inquiry by phone or e-mail, who arrange a meeting in our office, etc. are processed.

In connection with the above, we process the personal data not only of our clients or of the persons who have made an inquiry, but also of the persons who represent them as proxies, managers, executive directors, procurators and others.

 

What data is collected for customers and those who have made an inquiry, as well as for the persons who represent them?

The amount of data collected depends on the specific assignment or request. We collect the information we need to be able to provide the necessary protection and assistance. The information collected may include, in addition to your name, address, telephone, email, as well as sensitive information such as health, conviction information, biometrics and more.

 

How do we collect personal data about customers and inquirers and their representatives?

Our customers, the persons making the inquiry, as well as the persons representing them, directly provide us with their personal data, including through the documents provided to us. In addition, in connection with our assigned cases, we may receive personal data from third parties, including government agencies, local governments, individuals and legal entities and others.

 

For what purpose do we process the personal data of clients and persons who have made inquiries for their representatives?

The law firm processes the personal data of its clients in order to fulfill its contractual obligations under the concluded contracts for the provision of legal protection and assistance.

The law firm processes the personal data of the persons who have made an inquiry, in order to conclude contracts for legal protection and assistance. From the moment of concluding the contract, there are pre-contractual relations in connection with which the law firm processes personal data.

For the purpose of concluding a contract and / or fulfilling the contractual obligations, the personal data of the persons representing our clients or the persons who have made an inquiry are also processed.

 

On what basis are the personal data of customers and inquirers, as well as their representatives, processed?

The basis for the processing of personal data are the existing pre-contractual relations or the performance of the contracts concluded with us. The basis for the processing of personal data may be the fulfillment of a legal obligation. Exceptionally, the legitimate interest of the law firm may be grounds for the processing of personal data.

 

To whom the personal data of the clients are provided and the persons making the inquiry, as well as their representatives?

The personal data of the clients are provided to the person, performing the accounting service of the company, for fulfillment of the obligations of the law firm under the tax, accounting, financial, etc. types of legislation. The person performing the system maintenance of the computers and the database of the law firm may also have access to the personal data of the clients. Access to the personal data of the clients may be granted to other persons in the performance of the obligations of the law firm under the concluded contracts or in the performance of obligations in law.

Except as noted above, the law firm does not intend to transfer your personal information to third parties.

 

For how long are the personal data of the clients, the persons who made the inquiry and the persons who represent them stored?

Pursuant to Art. 12 of the Accounting Act, for the purposes of fulfilling legal obligations of the law firm under the tax and accounting legislation, the personal data of the clients, the persons, who have made an inquiry and their representatives, shall be stored for a period of 10 years, as of January 1 of the reporting year. year following the reporting year in which the obligation became due.

The remaining documents, data and information, the storage of which is not necessary for the fulfillment of tax and accounting obligations, shall be stored for a period of 5 years, on the grounds of Art. 47 of the Bar Act, unless otherwise specified in the legislation.

 

Processing of personal data of third parties

In connection with the performance of its activities, in connection with the existence of pre-contractual relations or in the performance of concluded contracts, as well as in connection with the performance of legal obligations, the law firm processes personal data of third parties and persons representing them. as proxies, managers, executive directors, procurators, etc.

 

What data is collected for third parties?

The amount of data collected depends on the specific assignment or request. We collect the information we need to be able to provide the necessary protection and assistance. The information collected may include, in addition to name, address, telephone, e-mail, also sensitive information such as health, conviction information, biometric data, etc.

 

How do we collect personal data about third parties?

Our customers, the persons making the inquiry, as well as the persons representing them, provide us with personal data directly, including through the documents provided to us. In addition, in connection with our assigned cases, we may receive personal data from third parties, including government agencies, local governments, individuals and legal entities and others.

 

For what purpose do we process the personal data of third parties?

The law firm processes the personal data of third parties or their representatives in order to protect the legitimate interests of its clients or inquirers in connection with pre-contractual relations or to fulfill its contractual obligations under the concluded contracts for the provision of legal protection and assistance. .

 

On what grounds are the personal data of third parties and their representatives processed?

The basis for the processing of personal data are the existing pre-contractual relations or the performance of the contracts concluded with us. The basis for the processing of personal data may be the fulfillment of a legal obligation. Exceptionally, the legitimate interest of the law firm may be grounds for the processing of personal data.

 

To whom is the personal data of third parties and their representatives provided?

The personal data of third parties and their representatives are provided to other third parties in the performance of concluded contracts for legal protection and assistance - notaries, judicial authorities, before the executive authorities, including ministries, commissions, agencies, or others. natural and / or legal persons, in connection with the assigned protection. Access to the personal data of third parties and their representatives may also be granted to the person performing the system maintenance of the computers and the database of the law firm. Access to the personal data of third parties and their representatives may also be granted to other persons in the performance of the obligations of the law firm under the concluded contracts or in the performance of obligations in law.

 

For how long are the personal data of third parties and the persons who represent them stored?

Pursuant to Art. 47 of the Law on Advocacy, the personal data of third parties and their representatives shall be stored for a period of 5 years, unless otherwise specified in the legislation.

 

Processing of personal data of contractors and persons representing them

Our contractors are the persons with whom, in carrying out its activities, the law firm enters into a contractual relationship without being assigned legal protection and assistance.

In connection with the above, we process the personal data not only of our contractors, but also of the persons who represent them as proxies, managers, executive directors, procurators and others.

 

What data is collected for counterparties and the persons representing them?

In these cases, we collect the ordinary personal data that are necessary for the performance of the concluded contracts and for the performance of our obligations under the law.

 

How do we collect personal data about counterparties and their representatives?

Our contractors, as well as the persons representing them, directly provide us with their personal data. It is also possible to obtain information from public registers or government agencies. Internet platforms and / or information and data from correspondence, including electronic, may be used when concluding contracts.

 

For what purpose do we process the personal data of our counterparties and their representatives?

The law firm processes the personal data of its counterparties in order to conclude contracts or to fulfill its contractual obligations under already concluded contracts, as well as to fulfill obligations provided by law.

 

On what basis are the personal data of our contractors and their representatives processed?

The basis for the processing of personal data are the existing pre-contractual relations aimed at concluding a contract or for the performance of the contracts concluded with us. The basis for the processing of personal data may be the fulfillment of a legal obligation. Exceptionally, the legitimate interest of the law firm may be grounds for the processing of personal data.

 

To whom is the personal data of the contractors as well as their representatives provided?

The personal data of the contractors and their representatives are provided to the person performing the accounting services of the company, for fulfillment of the obligations of the law firm on the tax, accounting, financial, etc. types of legislation. Access to the personal data of the contractors and their representatives may also be granted to the person performing the systematic maintenance of the computers and the database of the law firm. Access to the personal data of the clients may be provided to other persons when fulfilling the obligations of the law firm under the concluded contracts (for example, banks, courier companies, post offices) or when fulfilling obligations under law (NRA), etc.

 

For how long are the personal data of the contractors and the persons who represent them stored?

Pursuant to Art. 12 of the Accounting Act, for the purposes of fulfilling legal obligations of the law firm under the tax and accounting legislation, the personal data of the contractors and their representatives shall be stored for a period of 10 years, starting from January 1 of the reporting year following the reporting year. , during which the obligation has become due.

 

Visitors to the site

The law firm does not collect personal data from visitors to the site to allow their individualization. To read the information collected by visitors to the site, you can read our Cookie Policy.

 

Processing of personal data of job / internship candidates

Candidates for work / internship send documents containing personal data. These personal data are processed in accordance with the General Regulation on Personal Data Protection and the Personal Data Protection Act.

 

What data is collected for job / internship candidates?

Only such personal data are collected and processed that allow individualization of the person and for assessment of his professional qualification, which is necessary for his inclusion in our team.

 

How do we collect personal data about job / internship candidates?

Persons who submit documents for work / internship, themselves send documents containing their personal data - CVs, diplomas, certificates, certificates of training, etc.

 

For what purpose do we process the personal data of job / internship candidates?

The law firm processes the personal data of the candidates for work / internship only for the purpose of personnel selection, human resources management, financial and accounting purposes and the general aspiration of both parties to conclude a contract.

 

On what grounds are the personal data of the candidates for work / internship processed?

The basis for the processing of personal data are pre-contractual relations for the purpose of concluding a contract for work / internship and the fulfillment of such concluded contracts, as well as the fulfillment of obligations of the law firm, provided by law.

 

To whom are the personal data of the candidates for work / internship provided?

Access to the personal data of the candidates for work / internship can be obtained by the person who maintains the computers and the database of the law firm. Upon concluding a contract, the personal data shall be provided to the person performing the accounting services of the law firm, as well as to the competent authorities in the performance of tax, accounting, insurance and other statutory obligations of the law firm.

 

For how long are the personal data of the candidates for work / internship stored?

Where no contract has been concluded, the personal data provided shall be kept for a period of 6 months after the completion of the selection procedure.

If a contract has been concluded, the provided personal data shall be stored within the terms provided by the legislation after its termination.

 

Processing of personal data of persons who have subscribed to receive our e-newsletter

What data is collected from people who have subscribed to receive our e-newsletter?

When subscribing to an e-newsletter, you provide us with your email. Additionally, you can provide us with your names, address and telephone number.

 

How do we collect personal information about the people who have subscribed to receive our e-newsletter?

Subscribers provide us with their personal data themselves, expressing their desire to receive our e-newsletter.

 

For what purpose do we process the personal data of the persons who have subscribed to receive our e-newsletter?

The law firm processes the personal data of these persons only in order to provide the information requested by them and in order to improve the legal services provided.

 

On what grounds are the personal data of the persons who have subscribed to receive the e-newsletter processed?

The basis for the processing of personal data in this case is the consent of the persons themselves.

 

To whom is the personal data of the persons who have subscribed to receive the e-newsletter provided?

Access to the personal data of these persons can be obtained by the person who maintains the computers and on the basis of the law firm's database. Access to this data may also be granted in the performance of legal duties.

 

For how long are the personal data of the persons who have subscribed to receive the e-newsletter stored?

The data is stored for the period in which the persons have subscribed. Upon termination of the subscription, their personal data shall not be processed or stored, except for the performance of an obligation under law.

 

How can people who have subscribed to the e-newsletter withdraw their consent?

This can be done in your preferred way:

• when using the form for this on the website of the law firm;

• when sending an email to office@lexgroup.bg

• by sending a letter with free text by mail with a return receipt to the address of the law firm.

• by submitting a letter with a free text on the spot to the law firm 's office or

• with a completed refusal form in the law firm's office.

 

Rights of data subjects

At any time while we are processing your personal data, you have the right to the following:

 

Right of access

 

What is the right of access?

You can request information whether your personal data is processed, what personal data is processed, in what way, on what grounds, for what period and whether it will be provided to third parties.

 

Can you be denied information?

 

You can be denied a clearly unfounded request or if this will affect the rights and freedoms of a third party. You can also receive a waiver in the performance of other legal obligations of the law firm.

 

What can happen as a result of your request?

 

You may be provided with the information you requested.

If there are grounds for refusal provided by law, the information will not be provided to you. You will then receive a refusal stating the reason for not providing you with information.

 

Right to correct personal data

 

What is this right?

 

This means that if your personal data is inaccurate or has changed, you can request that it be corrected. You can also request that your personal data be supplemented.

 

How can you request that your personal data be corrected?

 

You can request this by submitting a free text application, using the form for this from the law firm's website or by emailing us. office@lexgroup.bg.

 

In your request or request for correction of personal data it is necessary to indicate exactly which personal data and in what way you want them to be corrected. You also need to provide the necessary evidence for this, where available.

 

What can happen as a result of your request?

 

If there are grounds for correcting your personal data, they will be corrected.

If there is a reason for refusal, you will receive a refusal stating its reason.

 

Right to delete personal data

 

What is this right?

 

This right is also known as the right to be forgotten. This means that once your personal data is no longer needed for the purposes for which it was provided, you have the right to request that it be deleted.

 

When can you request the deletion of your personal data?

 

You have the right to request that your personal data be deleted if it is processed on the basis of your consent, which you withdraw and if you consider that the processing is illegal.

 

Can you be denied the deletion of your personal data?

 

You may be denied the deletion of your personal data if:

• they are processed on the basis provided by law;

• in the presence of grounds on public interest;

• your personal data is processed for the protection of legitimate interests and the satisfaction of legitimate claims;

• your personal data is processed for the purposes for which it was collected;

• if they are processed for statistical, scientific, research and other purposes;

• if your request is manifestly unfounded.

The exercise of the right of erasure may not affect the rights and freedoms of others.

 

What can happen as a result of your request?

 

If your request is granted, your personal data will be deleted.

If you are denied, you will be denied on the grounds.

 

Right to limit the processing of personal data

 

What is this right?

 

You have the right to request that the processing of your personal data be restricted. For example, you can request that they be stored for future relationships without being otherwise processed.

 

How will your personal data be processed when exercising the right of restriction?

 

In such cases, your personal data may be:

• stored;

• used to defend and enforce legal claims;

• used to protect an important public interest or a statutory obligation.

 

Can you be denied the restriction on the processing of your personal data?

 

If your request is granted, the processing of your personal data will be limited.

If you are denied, you will be denied on the grounds.

 

Right of withdrawal of consent

 

What is this right?

 

If you have given your consent to the processing of personal data for certain purposes, you have the right to withdraw that consent.

 

How can you exercise the right of withdrawal?

 

This can be done in your preferred way:

• when using the form for this on the website of the law firm;

• when sending an email to office@lexgroup.bg;

• by sending a letter with free text by mail with a return receipt to the address of the law firm.

• by submitting a letter with a free text on the spot to the law firm 's office or

• with a completed refusal form in the law firm's office.

 

Can you be denied your request?

 

Withdrawal of consent shall not affect the lawfulness of the processing of personal data provided on another valid legal basis, nor the lawfulness of the processing of such data on the basis of the given consent before it is withdrawn.

You may be denied your request if your personal data is processed:

• on the grounds provided by law;

• for the protection of the public interest;

• for the protection of legal claims;

• in fulfillment of an obligation provided by law, etc.

 

What can happen as a result of your request?

 

If your request is justified, your personal data will not be processed.

If your request is unfounded, you will receive a refusal stating the grounds for its decision.

 

Right to portability of personal data

 

What is this right?

 

You can request that your personal data be provided to you in a machine-readable format and that you transfer it, or that we request that we transfer it to another administrator. You have the right to request that your personal data be provided to you on paper or on electronic media in a standard file format (.pdf, .doc).

 

Can you be denied your request?

 

Your request can be granted when the personal data is provided with your consent, when they are processed on a contractual basis and when there is the technical possibility to do so.

 

What can happen as a result of your request?

 

If your request is granted, your personal data will not be processed by us, except for the performance of obligations under law. This right does not apply to the processing necessary for the performance of a task in the public interest. The exercise of the right of portability may not affect the rights and freedoms of others.

 

Right to object to the processing of personal data

 

What is this right?

 

You may object to the processing of your personal data for certain purposes.

 

Can you be denied your request?

 

You may object to the processing of your personal data when it is provided by you, with your consent, and when it is processed for statistical purposes or for research purposes.

 

What can happen as a result of your request?

 

If your request is granted, your personal data will not be processed by us, except for the performance of obligations under law. This right shall not apply to the processing necessary for the performance of a task in the public interest.

 

How can you exercise your rights?

 

How are rights exercised?

 

To exercise any of the above rights, you can submit a written request to the law firm.

 

How is the request submitted?

 

The request is submitted using the appropriate form or by submitting a request in free text.

 

Where to find an application or application to exercise your rights?

 

The forms can be found on the website of the law firm - https://lexgroup.bg/, as well as in the office of the law firm at the address: 1000 Sofia, 14 Agel Kanchev Str.

You can also submit an application in free text.

 

What should be written in the application in free text and what applies?

 

You need to indicate your names and address, contact by email, phone, what is your request, how do you prefer to be contacted, date and signature.

If you are acting as a proxy, you need to apply your power of attorney.

If you have evidence to support your claim, you need to attach it to the application.

 

Where to submit your request or application:

 

This can be done in your preferred way:

• when using the form for this on the website of the law firm;

• when sending an email to office@lexgroup.bg;

• by sending a letter with free text by mail with a return receipt to the address of the law firm.

• by submitting a letter with a free text on the spot to the law firm 's office or

• with a completed form in the office of the law firm at the address: Sofia 1000, 55 Sveti Naum Blvd.

 

How will you find out the result of your request or request?

We will send you a reply to the email or address you provided.

 

Is it possible to request additional documents or data?

In order to protect your rights and prevent abuses, as well as to clarify the situation, you may be asked for additional data and / or documents.

When will you receive an answer?

We strive to send a reply quickly, but given the specific situation, you can receive a reply within one month of submitting the last document.

 

What can you do if you are not happy with the answer?

If you are not satisfied with the answer received and if you believe that your rights have been violated, you have the right to file a complaint to the Commission for Personal Data Protection.

Commission for Personal Data Protection

Address: Sofia 1592, Blvd. Tsvetan Lazarov ”№ 2

Information and Contact Center - tel. 02 / 91-53-518

Reception - working hours 9:00 - 17:30

E-mail: kzld@cpdp.bg

Website: www.cpdp.bg.

 

The Commission will examine your complaint and rule with a decision, which it will send to you.

 

If you are not satisfied with the Commission's decision, you have the right to appeal to the court under the Code of Administrative Procedure.

 

 

Apart from the above, you have the right to seek protection of your rights before the relevant administrative court or before the Supreme Administrative Court under the Administrative Procedure Code.

 

You cannot go to court when there is pending proceedings before the Commission for the same infringement or its decision on the same infringement has been appealed and no court decision has entered into force.

 

Withdrawal form of consent
Request exercise of rights