Privacy Policy

Introduction

We, Bogdanova Law Firm (Mileslava Legal), are committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains what data we collect, how we use it, and how we ensure its protection in accordance with Regulation (EU) 2016/679 (GDPR), as well as how we use cookies on our website.

Please note that it is not possible to provide legal services without processing personal data! If you refuse to provide us with your data, we will not be able to assist you with the legal services you need.

According to Article 45, Paragraph 1 of the Bulgarian Bar Act, every attorney-at-law is obliged to keep confidential the information provided by the client without time limitation. All information you provide to us is protected by the attorney-client privilege.

What data do we collect?

We collect personal data that you voluntarily provide when using our services or contacting us through our website. This may include:

Full name, personal identification number (PIN)
Contact information (email address, phone number, address)
Data related to the legal services you request (including full information about your legal case)
Data required to conduct an assessment under the Anti-Money Laundering Act, including but not limited to, identity documents and bank information
Visual images (photo, video) when recording training sessions and other public events

How do we use your data?

We use the personal data you provide only for the following purposes:

Provision of legal services: Your data will be used to provide legal consultations and perform other legal services you request;
Sending information about upcoming legislative changes, legal alerts, and upcoming training and events: If you agree to receive news and information regarding legislative changes and upcoming training sessions, we will use your data to send such messages. This will only be done with your consent.

Legal grounds for data processing

We process your personal data only when a valid legal basis exists:

Performance of a contract: We process your data to fulfill our obligations under the contract for providing legal services;
Legal obligations: In some cases, we process your personal data to comply with legal requirements, such as tax and financial obligations, anti-money laundering, and reporting duties;
Consent: Your data may be processed to receive current information and notifications about our activities when you have given explicit consent;
Our legitimate interests: We may also process data based on legitimate interests, such as optimizing the provision of our services and improving the functionality of our website.

Retention period for data

The Bar Act requires us to retain case-related information for a period of 5 years. In compliance with the Accounting Act, we are required to store tax documents for a period of 10 years. If we process your personal data based on your explicit consent, we will securely delete it immediately once you withdraw your consent.

Sharing data with third parties

We do not share your personal data with third parties unless absolutely necessary. When providing legal services, we may need to share your personal data with the relevant court and/or public authority. We may also be required to provide your personal data to other parties when required by law (for example, the opposing party in your legal case).
When conducting joint training or events with our partners, we will share your personal data provided during registration. You will be informed before registration so that you can decide whether you wish to share your data.
Your personal data may also be shared with our subcontractors, such as accountants and IT who provide the operation of our systems. In these cases, we will always apply appropriate technical and organizational measures to protect your data.

Your rights

In accordance with the General Data Protection Regulation, you have the following rights regarding your personal data:

Right of access to your personal data;
Right to rectify inaccurate or incomplete data;
Right to erase data ("right to be forgotten");
Right to restrict processing;
Right to data portability;
Right to object to data processing.

To exercise these rights or if you have any questions about the processing of your personal data, please contact us using the provided contact details. If due to legal requirements we may not be able to fulfill your request, we will inform you accordingly.

If you believe your rights regarding personal data protection have been violated, we will be happy to discuss your concerns. Of course, you also have the right to file a complaint with the Commission for Personal Data Protection.

Use of Cookies

Our website uses cookies to provide a better and more personalized user experience. Cookies are small text files stored on your device when you visit our website. They help us recognize your device and gather information about your usage of the website.

What cookies do we use?

Essential cookies: These are necessary for the functioning of the website and cannot be disabled in our system. They are usually set only in response to actions you take, such as a request for services, setting privacy preferences, or filling out forms.
Analytical cookies: These are used to collect information on how you use the website, such as which pages you visit and whether you receive error messages. These cookies do not collect personal data and are used solely to improve website performance.
Functional cookies: These allow the website to remember your preferences, such as language, and provide personalized features.

How to manage cookies?
Most browsers automatically accept cookies, but you can change your browser settings to reject them or receive a notification when a cookie is set. If you disable cookies, some features of the website may be limited.

Changes to the Privacy Policy
We reserve the right to update this Privacy Policy to reflect changes in our practices and legislation. Any changes will be posted on our website with an updated date.

If you have any questions regarding this Privacy Policy or wish to exercise your rights regarding your personal data, contact us here.

Last updated: 3 February 2025