Privacy Policy

I.Introduction

Sole-member law firm "Georgieva" (the "Firm", "we") respects the privacy of its clients and is committed to the protection of personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR), the Personal Data Protection Act and the applicable national legislation. The processing of personal data is carried out in compliance with the obligations of attorney-client privilege under the Bar Act as well.

II.Data Controller

The controller of personal data is Sole-member law firm "Georgieva". You may contact us regarding matters related to the protection of personal data via the contact details provided in the "Contacts" section below.

III.What personal data we collect

The Firm may collect and process the following categories of personal data:

• Names, address, telephone number and email address;
• Data related to the legal matters on which we provide services;
• Financial information related to payments;
• Other data necessary for the provision of the legal services.

IV.Purposes of the processing

Personal data is processed for the following purposes:

• Provision of legal services and representation in legal proceedings;
• Drafting of contracts, legal opinions and other documents;
• Compliance with regulatory requirements;
• Communication with clients and administration of the relationships with them.

V.Legal basis for the processing

The processing of personal data is carried out on the basis of:

• Performance of a contract or taking steps prior to entering into one;
• Compliance with legal obligations;
• Legitimate interest of the Firm;
• Consent of the data subject (where applicable).

VI.Sharing of personal data

The Firm does not disclose personal data to third parties, except where this is necessary for the fulfilment of legal or contractual obligations, or with the explicit consent of the client. In all cases, the sharing is carried out in compliance with attorney-client privilege.

VII.Data retention period

Personal data is stored for a period necessary for the fulfilment of the purposes for which it was collected, unless the applicable legislation requires a longer retention period.

VIII.Rights of data subjects

Clients and data subjects have the following rights:

• Right of access to their personal data;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure ("the right to be forgotten");
• Right to restriction of processing;
• Right to object to processing;
• Right to data portability;
• Right to lodge a complaint with a supervisory authority.

IX.Data security

The Firm applies appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or alteration.

X.Supervisory authority

If you believe that the processing of your personal data violates the applicable legislation, you have the right to lodge a complaint with the supervisory authority in the Republic of Bulgaria:

XI.Contacts

For questions related to the processing of personal data, you may contact us:

This Privacy Policy was last updated on 03.10.2026 and may be amended as necessary.