Book a Meeting

Privacy Policy

PRIVACY POLICY

Last updated: October 2026

1. Introduction

Law Firm “Ivanchov & Partners” respects the privacy of the users of its website and is committed to protecting their personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”), the Bulgarian Personal Data Protection Act, and other applicable legislation.

This Policy describes what personal data we collect, for what purposes, on what legal basis, for how long we retain it, and what rights you have in relation to it.

2. Data Controller

The data controller is:

Law Firm “Ivanchov & Partners”

UIC/BULSTAT: 177515520

Address: 44 Vasil Levski Blvd., 1142 Sofia, Bulgaria

Phone: +359 2 995 0908

Email: office@ivanchov.eu

For any questions regarding the protection of your personal data, you may contact us using the contact details above.

3. What Personal Data We Process

Depending on how you interact with the Website, we may process the following categories of personal data:

  • Data voluntarily provided through a contact form or a request for consultation: name, email address, phone number, the content of the inquiry, and any other information you choose to share;
  • Data related to job or internship applications (if such functionality is offered on the Website): name, contact details, CV, cover letter and other information provided by the applicant;
  • Technical data collected automatically when you visit the Website: IP address, browser type and version, operating system, date and time of visit, pages visited, referring address — processed mainly through cookies and similar technologies in accordance with our Cookie Policy;
  • Data related to a newsletter/subscription (if applicable): email address and name.

The Firm does not knowingly collect special categories of personal data (e.g. data concerning health, religious beliefs, etc.) through the Website, unless voluntarily provided by you as part of an inquiry and strictly necessary for the purposes of a potential legal consultation.

4. Purposes and Legal Basis for Processing

We process your personal data on the following grounds and for the following purposes:

  • Performance of pre-contractual steps and response to inquiries (Art. 6(1)(b) GDPR) — to respond to questions, requests for consultation or proposals submitted through the Website;
  • Legitimate interest of the Firm (Art. 6(1)(f) GDPR) — for the administration, maintenance and improvement of the security and functionality of the Website, for statistical analysis of visits, and for protection against misuse;
  • Consent (Art. 6(1)(a) GDPR) — where applicable, for example for sending a newsletter or using optional analytics/marketing cookies; consent may be withdrawn at any time;
  • Compliance with a legal obligation (Art. 6(1)(c) GDPR) — where processing is necessary to fulfil obligations under the Bulgarian Bar Act, the Measures Against Money Laundering Act, or other applicable legislation, including in connection with the establishment of an attorney–client relationship.

5. Retention Period

We retain your personal data only for as long as necessary to achieve the purposes for which it was collected, unless a longer period is required or permitted by law:

  • Data from inquiries that did not result in an attorney–client relationship — up to 12 months from the last contact, unless you request earlier deletion;
  • Data related to an established attorney–client relationship — in accordance with the periods provided for in the Bulgarian Bar Act, the Accountancy Act and applicable tax legislation (typically between 5 and 10 years after completion of the relevant engagement);
  • Data from cookies — in accordance with the periods specified in the Cookie Policy;
  • Data from job applications — up to 6 months after completion of the relevant selection procedure, unless the applicant consents to a longer retention period for future opportunities.

6. Recipients of Personal Data

We do not sell or transfer your personal data to third parties for their own marketing purposes. Access to your data may be granted to the following categories of recipients, to the extent necessary for the purposes set out above:

  • Hosting, technical support and website development providers, acting as data processors under an agreement with the Firm;
  • Web analytics service providers (e.g. Google Analytics or similar tools), to the extent the relevant cookies are activated;
  • Email and communication service providers;
  • Competent state authorities — where required by law or by a duly issued act of a court or other competent authority.

7. Transfer of Data Outside the EU/EEA

Should any of the providers referred to above process data outside the European Union or the European Economic Area, the Firm will ensure that such transfer is carried out subject to appropriate safeguards within the meaning of Chapter V of the GDPR — for example, on the basis of a European Commission adequacy decision or standard contractual clauses.

8. Your Rights

Under the GDPR, you have the following rights in relation to your personal data:

  • Right of access — to obtain confirmation as to whether your personal data is being processed and a copy of it;
  • Right to rectification — to request correction of inaccurate or incomplete data;
  • Right to erasure (“the right to be forgotten”) — where the relevant legal grounds apply;
  • Right to restriction of processing — in certain circumstances;
  • Right to data portability — to receive your data in a structured, commonly used and machine-readable format;
  • Right to object — to processing based on legitimate interest, including for direct marketing purposes;
  • Right to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out prior to withdrawal;
  • Right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (CPDP), address: 2 “Prof. Tsvetan Lazarov” Blvd., 1592 Sofia, website: www.cpdp.bg, if you believe that the processing of your data infringes applicable law.

To exercise any of these rights, you may contact us using the contact details set out in Section 2. We will respond to your request within the statutory time limit, generally not exceeding one month.

9. Data Security

The Firm implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, tailored to the nature of the data and the risks associated with its processing.

10. Automated Decision-Making

The Firm does not carry out automated individual decision-making, including profiling, that produces legal effects concerning data subjects or significantly affects them within the meaning of Art. 22 of the GDPR.

11. Amendments to this Policy

This Policy may be updated from time to time to reflect changes in our practices or in applicable legislation. We recommend that you review this page periodically for the most current version.

12. Contact

If you have any questions regarding this Policy or the processing of your personal data, please contact us at:

  • Address: 44 Vasil Levski Blvd.
    1142 Sofia, Bulgaria
  • Phone: +359 2 995 0908
  • Email: office@ivanchov.eu