Dear Clients,

In relation with the Regulation (EU) 2016/679 (General Data Protection Regulation) we would like to inform you about the following:

The Law Firm “Valova and Angelova” has the capacity of “Controller” under the General Data Protection Regulation regarding the personal data of data subjects (the Clients – individuals/physical persons only), which processes in relation with the legal services provided. If the Clients sign a contract for legal services directly with the lawyers, then the lawyers are separate Controllers from the law company.

“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

“Personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction

Each client – data subject shall be provided with a separate privacy notice with a detailed explanation of the subject’s rights under the GDPR and process of its realization in the law company. In the privacy declaration the data subject shall be informed about the purpose of data processing, about the term of processing, about the types of personal data processing, recipients of personal data (if any), etc.

Should the personal data are delivered to other processors or controllers, the Law firm is concluding an explicit data processing agreement as the data subject shall be informed about the agreement.

If the personal data are delivered to the court for the purpose of litigation services, the court is processing the data in accordance with its own privacy policy and the lawyers have no control over the processing. However, the Law firm, resp. the lawyers are deleting all personal data from the documents, which are not necessary for the respective case.

The Law firm “Valova and Angelova” has undertaken all necessary technical and organizational measures for protection of personal data.

The Data subjects have the following rights under the GDPR:

- right of access to your personal data at any time - requests for access must be made in writing and addressed to the e-mail Е-мейл адресът e защитен от спам ботове. or to the postal address- Republic of Bulgaria, town of Sofia, 8 St. Sofia Str., 507 office.

The request could be in free form but it must include all the details that will help the Controller to find your personal data.

- right of correction of inaccurate or outdated personal data: The request for correction of personal data must be filed in written and addressed to the e-mail Е-мейл адресът e защитен от спам ботове. or to the following postal address- Republic of Bulgaria, town of Sofia, 8 St. Sofia Str., 507 office. The access can be granted to archived data, but not to deleted data.

-right to ask the data controller to restrict the processing of your personal data (for example, correction may be requested when the name, address or other information about the data subject is incorrect or when there is a change in the information already provided). For these purposes, you must submit a separate request /application, in which the current personal data shall be indicated. The request for correction of personal data must be submitted in writing - free text containing all data /case, names, etc./, which will help to identify your data, and to be addressed to the e-mail Е-мейл адресът e защитен от спам ботове.  or to the postal address- Republic of Bulgaria, town of Sofia, 8 St. Sofia, 507 office

In that case the data will only be stored / archived but not processed. If the controller refuses to restrict your personal information, the refusal shoul be in writing and motivated with the legitimate reason for such deny.

- right to request that your personal data should be erased without undue delay. The controller may refuse to delete the personal data for the following reasons: A) exercising the right to freedom of expression and the right to information; (B) to comply with a legal obligation on the part of the controller or to carry out a task of public interest or in the exercise of official authority conferred on the controller; (C) for reasons of public interest in the field of public health; (D) for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, insofar as erasure is likely to make it impossible or seriously obstructing the attainment of the purposes of such processing; or for the establishment, exercise or protection of legal claims.

For deletion, you need to submit a request /application on the following e-mail Е-мейл адресът e защитен от спам ботове. or to the postal address- Republic of Bulgarian, town of Sofia, 8 St. Sofia, 507 office

When preconditions exist, the data is deleted from wherever it is stored. If the preconditions for deletion are not met, you will be notified in advance as the notification should be motivated.

-if personal data needs to be used for a new purpose not covered by this notice, you will be given a new data protection notice and, when and where necessary, your prior consent for the new processing will be required.

- In any case of high risk for the protection of your personal data, you will be notified.

- You have the right to appeal against the processing of your personal data to the competent supervisory authority - Commission for Data Protection, address: Sofia 1592, 2 Tzvetan Lazarov Str., www.cpdp.bg