Effective from 21 July 2026
1. This Policy governs the processing of personal data by Sachanski & Dulevski Attorneys at Law, BULSTAT 181609412, registered office: 5 Bogomil Raynov St, entrance A, floor 1, apt. 4, Sofia 1618, Vitosha District (“the Firm”, “we”), as a controller under Article 4(7) of Regulation (EU) 2016/679 (“GDPR”).
2. Data Protection Officer (DPO): Daniela Petkova Sachanska — phone: +359 887 81 36 40; correspondence address: 5 Bogomil Raynov St, entrance A, floor 1, apt. 4, Sofia 1618; email: danielasachanska@gmail.com. Data subjects may contact the DPO on any matter relating to the processing of their personal data and the exercise of their rights under the GDPR.
3. This Policy applies to processing via the website (“the Site”) and in the course of the Firm’s professional activity of providing legal defence and assistance.
We process personal data of: Site visitors (cookies and similar technologies); persons who submit enquiries via the contact form, email or phone; clients and their representatives; counterparties and third parties in instructed matters; and contractors and their employees — in each case only as necessary for the purposes described below. Special categories of data (e.g. health data) are processed only where necessary for a specific matter and under Article 9(2) GDPR. We do not knowingly collect personal data of persons under 18 via the Site.
We process personal data to: respond to enquiries (Art. 6(1)(b) and (f)); provide legal defence and assistance (Art. 6(1)(b) and (f), and Art. 9(2)(f) where applicable); comply with legal obligations (Art. 6(1)(c)); establish, exercise or defend legal claims (Art. 6(1)(f)); and, only with consent, for Site analytics via analytical cookies (Art. 6(1)(a)). We do not use personal data for direct marketing and do not carry out automated decision-making, including profiling, within the meaning of Article 22 GDPR.
Information shared by clients and persons seeking legal assistance is protected by attorney–client privilege under Article 45 of the Bulgarian Bar Act. The duty of confidentiality is perpetual and may limit disclosures even when data subject rights are exercised by persons other than the client.
We do not sell personal data. Data may be disclosed to courts, arbitration bodies, public authorities, notaries, enforcement officers and counterparties as necessary for a matter or required by law; to processors (hosting, Site maintenance, accounting) under Article 28 GDPR safeguards; and to banks in connection with payments.
As a rule we process data within the EEA. Transfers to third countries may occur in connection with analytical tools or an international matter, always in accordance with Chapter V GDPR.
You have the rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent under the GDPR. Requests may be limited where satisfying them would breach attorney–client privilege or affect clients’ rights. Requests should be sent to the DPO. We respond within one month (extendable by two months in complex cases). You may lodge a complaint with the Commission for Personal Data Protection (www.cpdp.bg, kzld@cpdp.bg) or seek judicial remedy.
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration.
We may update this Policy. The current version is published on the Site with the date of the last update.
This Privacy Policy is effective from 21 July 2026.