Personal data protection policy when using the website www.belegal.bg

This policy is intended to inform you how Law Firm “Belegal” (hereinafter referred to as “Belegal” or “we”) collects, uses, stores and protects your personal data in connection with the use of our website – www.belegal.bg (the “Website”) and the services provided through it.

I. Administrator of personal data

Personal data administrator is Law Firm “Belegal”, with registered office and management address: Sofia, Sredets District, 5 Angel Kanchev Str., 2nd floor.

Contacts:
Phone: 0886330855
E-mail: office@belegal.bg

II. Persons whose data we process

In the process of managing and maintaining our Website, providing the information published on it and the content in our corporate profiles on social networks, as well as when communicating with persons who contact us, we may process data for the following categories of data subjects:

Visitors to the Website and users of the information materials available through it.
Individuals who send us inquiries, requests, business proposals, alerts, complaints or other correspondence – whether by post, email, telephone or other communication channel.
Third parties whose data are contained in such inquiries, requests, proposals, signals or complaints received by us through various communication channels.
Individuals who interact with our corporate profiles and social media pages.

III. Categories of data collected

Data related to correspondence and communication
When you contact us – via the contact form on the Website, by e-mail, telephone, post or by interacting with our corporate profiles on social networks – we may process the following categories of data:

Name and surname
Telephone
Email address
Postal address, town
Profession and/or institution/organization you represent
Information about how you learned about us and our services
Data you voluntarily share in connection with your inquiry or request
Information about third parties contained in your enquiry/correspondence
Data related to the correspondence exchanged (eg date and time, IP address, channel used)
Additional information collected or generated in connection with the processing of your inquiry and its final result.

If your correspondence contains data regarding a request for legal services or assistance, this data will be processed in accordance with this Policy and the legal requirements for the processing of personal data relating to the provision of legal services and interactions with our clients and partners.

If you book an appointment through our website, you will be redirected to the external platform Calendly, where you provide the information required by that platform itself. In this case, the processing is also carried out according to the rules of Calendly, whose privacy policies apply.

Data when interacting in social networks
We maintain official profiles and pages on various social networks (e.g. Facebook, LinkedIn, Instagram, etc.) to promote our activities. When interacting with them (like, share, comment, etc.), depending on your privacy settings, we may receive information such as:

Name and Username
Profile picture, language, country, age range
List of friends or pages you follow/like
Information from your public activity on the relevant network

These social networks are operated by third parties and their data processing is not under our control. We recommend that you familiarize yourself with their privacy policies.

Automatically collected data when using the Website
Access to the Website is free and does not require registration. However, certain technical data necessary for the operation and security of the site are automatically collected during a visit, including:

Date and time of access
IP address
Server and system logs to identify technical issues and/or malicious activity
When applicable – data for making legal statements (for example, confirmation of familiarization with the Personal Data Protection Policy).

“Cookies” and similar technologies
To ensure the reliable and efficient functioning of the Website, we use “cookies” and similar technologies (web beacons, pixel tags, etc.). Detailed information about the types of cookies and how you can manage their settings is available in the “Cookies” section.

IV. Consent to processing

In cases where we ask you to provide us with your personal data, such as through the contact form on the Website, we clearly indicate the mandatory or voluntary nature of the provision of personal data relating to you. The provision of your data is entirely at your discretion, but refusal to provide data that is marked as mandatory may result, as the case may be, in our inability to communicate with you (e.g. if we do not have contact details to which to send a reply), inability to process or respond adequately to your inquiry, etc.

V. Purposes of processing

Your personal data is processed:

In order to respond to an inquiry made through the feedback form.
For the purposes of organizing and conducting a consultation in the way you choose (on site, online or by phone).
In order to prepare a subsequent contact and possibly conclude a contract for legal services.
In order to comply with legal obligations on the part of the Law firm.
For the purposes of the legitimate interests of the administrator or a third party.
For other purposes for which you have expressly consented.

Your personal data may be processed by the “Belegal” Law Firm for the following groups of purposes:

Fulfillment of legal obligations of the company;
Taking action at your request prior to entering into a contract;
Protection of the legitimate interests of the company or of third parties;
Purposes for which you have expressly consented.

1. Processing for the fulfillment of legal obligations

In these cases, we process data when:

we are required to provide information to competent government or judicial authorities;
we are obliged to cooperate with inspections by control authorities;
we need to document electronic statements related to compliance with legal requirements (for example, confirmation of familiarity with our privacy and cookie policies).

For these purposes, we can use personal data specified in p. III, items 1, 2 and 3.

2. Processing in connection with actions at your request before concluding a contract

This includes initially considering inquiries for legal services and contacting you to assess the possibility of providing assistance.

If the inquiry is from a natural person, the data is processed with a view to taking action before concluding a contract.
If the inquiry is on behalf of a legal entity, the data is processed on the basis of our legitimate interest – provision of legal services.

For these purposes, we can use data under Article III, Item 1.

3. Processing for legitimate interests related to maintaining the Website

These goals include:

administration and quality control of information services and resources;
ensuring the normal functioning of the Website;
support and security, including prevention of cyber attacks and malicious acts.

For these purposes, data are processed under Article III, Items 2 and 3.

4. Processing for legitimate interests related to communication

Objectives include:

possibility of correspondence with us through various channels (including online contact form);
interaction through our corporate profiles on social networks;
processing and promptly responding to initial and follow-up communications;
internal reporting and distribution of correspondence to responsible persons.

For these purposes, data are processed under Article III, Items 1, 2 and 3.

5. Processing for legitimate interests related to the protection of rights

Includes:

establishing, exercising or defending legal claims (including legal proceedings, complaints, reports);
protection of rights and interests of third parties – our employees, lawyers or users of the site;
administration of correspondence containing complaints and alerts.

For these purposes, data under Article III, Items 1, 2 and 3 may be used.

6. Processing based on consent

Where processing is based on your consent, the specific purposes are set out in the consent form. In these cases, we only process the data you have provided and only for the stated purposes.

VI. Legal basis

The processing of your personal data is carried out on the basis of:

Your consent, which you provide by ticking when submitting the contact form;
our legitimate interest to provide information and respond to your inquiries;
legal obligations of lawyers under the Law on the Bar and other legal acts.

VII. Storage period

“Belegal” stores your personal data only for a period necessary for the purposes of processing or provided by law.

Legal obligations – the data in documents and media are kept for the periods specified in the current legislation, unless a longer period is provided for in this policy.
Correspondence – data from inquiries, complaints and other communication are stored for up to 5 years from its completion.
Server and system logs – are kept for up to 1 year; statements and consent logs – up to 5 years or for the period specified in the “Cookies” section.
Processing based on consent – the data is stored until it is withdrawn or until the purposes for which it was given are achieved.
“Cookies” – storage periods are specified in our “Cookies” section.

In the event of a legal dispute, proceeding or requirement of a competent authority, the data may be stored until its final conclusion and up to 5 years thereafter.

VIII. Sharing of Personal Data

“Belegal” does not provide your personal data to third parties, except when this is necessary for:

fulfillment of legal obligations;
protecting our rights and legitimate interests;
using trusted service providers (eg Calendly) when reserving an appointment where their policies apply.

Your personal data may be provided to:

Subcontractors – personal data processors to whom we have assigned specific activities (e.g. website technical support or server infrastructure). They only have access to the data necessary to perform the task and are contractually bound to follow our instructions and process the data only for the stated purposes.
Business partners and suppliers – other controllers of personal data (for example, telecommunications companies, courier and transport services, notaries, private or state bailiffs), whose assistance is necessary to protect the interests of “Belegal” or third parties. We require them to strictly comply with the applicable legislation.
Competent state, municipal and judicial bodies – only when this is necessary to fulfill legal obligations or to protect the rights and legal interests of “Belegal” or third parties.

When providing personal data to third parties, including our business partners and service providers, it is possible that your data may be transferred to countries outside the European Union and the European Economic Area, where the level of protection may not be the same as that guaranteed under European legislation. In such cases, the transfer is carried out in compliance with the requirements of the applicable law – based on a decision of the European Commission for an adequate level of protection or, if there is none, by applying standard EU contractual clauses. If you wish, you can obtain a copy of these standard terms by contacting Belegal at the contact details set out in Section I.

IX. Cookies

This section describes the use of cookies and similar technologies when visiting our website. It aims to explain what cookies are, what types we use, what they are for and how you can manage their use.

What are cookies?

“Cookies” are small files that are stored on your device when you visit the website. They enable device recognition and improve navigation, security and user experience.

Why do we use cookies?

We use cookies to:

ensure the normal functioning of the site;
analyze traffic and its effectiveness;
improve the content and services we offer.

Types of cookies

Sessional – are stored temporarily during the stay of the site.
Permanent – remain for a certain period or until they are deleted by the user.
To third parties – for example Google Analytics cookies for traffic statistics and analysis. The information generated by them may be stored on servers outside the EU (for example in the USA).

What cookies do we use?

Currently, our site mainly uses analytical cookies to measure performance. They do not contain personally identifiable information.
Examples:

_ga – Google Analytics, for a unique visitor ID (term 2 years).
_gid – Google Analytics, for statistical data (term 1 day).
_gat – Google Analytics, to limit the frequency of requests (term 1 day).

Manage cookies

Cookies that are necessary for the site to function cannot be turned off. For the rest, you have a choice whether to accept them. You can manage or delete cookies through your browser settings. You will find more information at: www.allaboutcookies.org.

Your rights

You can request information about the cookies used or assistance in relation to them by contacting us at the contacts indicated on the site.

X. Your rights

As a data subject, you have the following rights guaranteed by applicable data protection legislation (including GDPR):

Right to information
You have the right to receive clear and comprehensible information about which of your personal data we process, for what purposes, on what legal basis and for what period.
Right of access
You have the right to receive confirmation as to whether we are processing your personal data, as well as access to the data itself and additional information about its processing.
Right to rectification
If you find that the personal data processed by us is inaccurate or incomplete, you have the right to request their correction or completion.
Right to erasure (“right to be forgotten”)
You have the right to request the deletion of your personal data where there are legal grounds for doing so – for example, if the data is no longer necessary for the purposes for which it was collected, or if you withdraw your consent.
Right to restriction of processing
In certain cases (for example, when disputing the accuracy of the data or when opposing the processing) you have the right to request the restriction of the processing of your data.
Right to object
You have the right at any time to object to the processing of your personal data when it is based on our legitimate interest or for direct marketing purposes.
Right to data portability
In certain cases, you have the right to receive your personal data in a structured, widely used and machine-readable format and to request their transfer to another controller.
Right of appeal
If you consider that the processing of your personal data violates the legislation on the protection of personal data, you have the right to submit a complaint to The Commission for Personal Data Protection (CPDP) or to another competent supervisory authority within the European Union. CPDP’s address: Sofia 1592, 2 Tsvetan Lazarov blvd

How to exercise your rights
You can exercise the above rights by contacting us at the contacts specified in this Policy. We will consider each request and respond within the time limits provided by law.

XI. Security

We apply technical and organizational measures to protect your personal data from unauthorized access, loss or disclosure.

XII. Policy changes

This policy may be updated periodically. The current version will always be published on the website.

Date last updated: 15.09.2025

PRIVACY POLICY

of the “Belegal” Law Firm

Law firm “Belegal”, with partners Adv. Elena Baleva, Adv. Atanasia Boradzhieva and Adv. Simona Belcheva (“the Partnership” / “we” / “us” / “our”), registered in the Unified Register of Law Firms at the Supreme Bar Council, acts as a personal data controller within the meaning of Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR).

We are aware of our responsibility to provide our clients and partners (“You” / “You” / “Your”) not only with quality legal services, but also to protect your information in the course of our joint work.

With this Policy for the protection of personal data (“Policy”), we wish to inform you about the way in which the attorneys from “Belegal” Law Firm process and protect your personal data within the framework of our joint relationship and/or in the course of providing legal services and assistance on our part.

1. DATA SUBJECTS

We process personal data of the following categories of natural persons (“Data Subjects”):

Individuals – clients of the Law firm Belegal;
Representatives of legal entities – customers or counterparties;
Potential and former customers;
Third parties about whom the client provides information or whose data is collected in connection with the provision of legal services, including but not limited to:

relatives, spouses, heirs, counterparties under contracts;
persons participating in judicial, administrative and other proceedings;
experts, translators, notaries, bailiffs, judges, prosecutors, etc.;
representatives and employees of legal entities – customers and counterparties;
counterparties, potential and former customers and partners of our customers;
other persons for whom the client provides data in connection with the provision of legal assistance;

Job candidates – when submitting documents through external platforms or on-site at our office.
In addition to the already listed categories, Belegal processes personal data for the following natural persons: participants in events organized by the Belegal or with our participation.

2. CATEGORIES OF PERSONAL DATA WE PROCESS

Depending on the specific situation, we may process:

Identification data – three names, social security number, date of birth, address, citizenship, identity card, passport, etc.;
Contact data – phone, email, correspondence address;
Data on education, professional qualification, workplace, position;
Data regarding contractual, legal or factual relationships in which we represent the client;
Financial and accounting data – IBAN, liabilities, payments, invoices, bank documents;
Data contained in correspondence, documents, evidence and other materials received from the client or third parties;
Special categories of personal data, when required to perform the assigned legal service:

Health data;
Data on ethnic or racial origin, religious or political affiliation (only if relevant to a specific case);
Data on convictions, offenses and penalties;
Data about sex life or sexual orientation – in defense of legal claims.

If necessary and according to the nature of the legal service, the Law firm can process:

Data from public records and online sources, including for customer pre-screening purposes;
Powers of attorney, power of attorney and authorization information;
History of contractual relations and changes in them, including termination and annexes;
Financial data: customer accounts, invoices, payment information, liabilities, rescheduling, etc.

Data processed when you apply for a job in the Law firm, we process the data provided by you only for the needs of the specific position. They may include: resume, cover letter, education data, professional experience, etc. You should not send copies of personal documents such as an ID card or passport.

3. PURPOSES OF PROCESSING

Your personal data is processed for the following purposes:

Customer identification;
Provision of legal advice, legal representation and assistance;
Preparation of legal documents (applications, complaints, opinions, contracts, etc.);
Representation before courts, administrative bodies and private legal entities;
Fulfillment of legal obligations – Under Measures Against Money Laundering Act (MAMLA); Personal Data Protection Act (PDPA); Administrative Procedure Code (APC); Bar Act (BA)
Protection of the legitimate interests of the Law firm and/or the client;
Recruitment (only on documents submitted outside the website);
Assistance in concluding transactions or settling disputes;
Keeping internal reporting, customer base and archive.

In addition to those listed, the Law firm may process data for:

Internal reporting and customer database maintenance;
Analysis and improvement of services provided and communication with customers.

4. LEGAL BASIS FOR PROCESSING

Execution of a contract or pre-contractual relations – Art. 6, §1, b. (b) GDPR;
Compliance with a legal obligation – Art. 6, §1, b. “in” the GDPR;
Legitimate interest – Art. 6, §1, b. “is” GDPR;
Consent of the subject – Art. 6, §1, b. “a” GDPR (where required);
For special categories of data – Art. 9 GDPR – only when this is imperative for the establishment, exercise or defense of legal claims or for the fulfillment of legal and professional obligations. This includes information about health, political views, religious affiliation and court decisions.
For data on convictions and violations – art. 10 GDPR – only when necessary for the lawyer’s activity.

5. PROVIDING DATA TO THIRD PARTIES

Your personal data may be shared with:

Competent state, judicial and administrative authorities – when required by law;
Counterparties and third parties – upon assignment by the client, including during negotiations, concluding transactions and resolving disputes;
Lawyers, notaries, bailiffs, experts, translators, etc. persons when this is necessary for the performance of the legal service;
Providers of IT and administrative services – in the presence of a contract and data protection guarantees;
Partners abroad – if the case requires the transfer of data outside the EU, only in the presence of appropriate guarantees.
The disclosure of personal data to third parties is carried out only when necessary and in compliance with attorney’s confidentiality. This includes:
– Foreign lawyers – in international cases;
– Accountants, auditors and IT providers with a confidentiality agreement;
– Assignment of receivables and legal actions for debt collection.

6. STORAGE PERIODS

Contract or case data – up to 5 years after termination/completion;
Data in accounting documents – up to 10 years;
Data of job candidates – up to 6 months after completion of selection;
Data related to a legal dispute – until its final conclusion and up to 5 years thereafter;
Longer terms – only if required by a regulatory act.
When you apply for a job in the Law firm, your data will be stored for up to 6 months after the end of the selection, unless you give consent for a longer period.

7. RIGHTS OF DATA SUBJECTS

You have the right to:

access your data;
request correction of inaccuracies;
request data deletion (“right to be forgotten”);
request restriction of processing;
objections to data processing;
receive your data in a structured and machine-readable format;
file a complaint with the Personal Data Protection Commission: www.cpdp.bg;
withdraw consent at any time.

8. SECURITY AND ATTORNEY CONFIDENTIALITY

We provide appropriate technical and organizational measures to protect your personal data. All lawyers and employees are bound by an obligation of confidentiality and legal professional secrecy under the Law on the Bar.

Disclosure of information to third parties is carried out only if there is a legal basis and in the volume necessary for the specific purpose.

Attorney’s books, files, electronic documents, computer equipment and other information carriers are inviolable and are not subject to review, copying, inspection and seizure.

Correspondence between the lawyer and his client, regardless of the way it is carried out, including electronically, is not subject to review, copying, inspection and seizure and cannot be used as evidence.

Conversations between a lawyer and his client cannot be eavesdropped or recorded. Any recordings made may not be used as evidence and are subject to immediate destruction.

The lawyer cannot be questioned in a procedural capacity regarding: his conversations and correspondence with a client; his conversations and correspondence with another attorney; the affairs of a client; facts and circumstances that he has learned in connection with the protection and assistance provided.

9. POLICY CHANGES

“Belegal” Law Firm reserves the right to update this Policy. In the event of a change, the new version will be available at our office and/or provided upon request.

Date last updated: 15.09.2025
Contact: office@belegal.com