Privacy Policy

SIMEONOV LAW FIRM, simeonovlawfirm.com
Effective from 27 July 2026

This Policy explains how SIMEONOV LAW FIRM processes personal data when you use the website simeonovlawfirm.com, submit an enquiry, request and pay for a Service, attend a consultation or receive legal protection and assistance.

1. Data Controller

Unless another attorney-at-law or law firm is identified in an Individual Agreement, the data controller is:

Attorney-at-Law Simeon Marinov Simeonov, member of the Blagoevgrad Bar Association, personal number 1000047027 in the Unified Bar Register, using the professional designation SIMEONOV LAW FIRM.
Sofia Office: 2 Chernomen Street, 1505 Sofia, Bulgaria
Varna Office: 43 Dragoman Street, 9000 Varna, Bulgaria
Telephone: +359 897 929 087
Contact form: the Contacts page of the Website
BULSTAT: 177640366

2. Personal Data We Process

Depending on the particular enquiry or engagement, we may process:

• names, personal identification number or foreigner’s identification number, identity-document details, address and contact details;
• information concerning authority to represent, company, position and beneficial ownership;
• information, documents, correspondence and evidence relating to the legal matter;
• contractual, financial, payment and invoicing information;
• data concerning opposing parties, witnesses, employees, relatives and other persons involved in or mentioned in the matter;
• special categories of personal data, including health data, where necessary for the establishment, exercise or defence of legal claims;
• data concerning criminal convictions, offences and proceedings where relevant and where processing is permitted;
• technical data generated when the Site is used, including IP address, browser, device, date and time of access, system logs and cookie preferences.

Please do not send passwords, full payment-card details or unnecessary sensitive documents before the Law Office has expressly requested them.

3. Purposes and Legal Bases

We process personal data for the following purposes:

1. responding to enquiries, conducting conflict-of-interest checks, identifying the Applicant and preparing an offer — for taking steps prior to entering into an agreement and for protecting the legitimate interests of the Law Office and the Applicant;
2. concluding and performing an agreement for legal protection and assistance, conducting consultations, preparing documents, providing representation, administering a Subscription and communicating with the Client — for the performance of an agreement;
3. complying with accounting, tax, professional and other legal obligations;
4. establishing, exercising or defending legal claims, including where special categories of personal data or data concerning offences are processed;
5. preventing fraud, protecting information systems, collecting fees due and defending against complaints and claims — on the basis of legitimate interests;
6. sending optional marketing communications or using non-essential analytical and advertising cookies — only on the basis of valid consent where such consent is required.

Consent is not the principal legal basis for processing data relating to a legal matter. Withdrawal of consent does not affect processing which is necessary for the performance of an agreement, compliance with a legal obligation, preservation of professional secrecy or the establishment, exercise or defence of legal claims.

4. Professional Secrecy and Recipients

Information provided in connection with legal assistance is handled in accordance with professional secrecy and the applicable professional rules.

Where necessary and legally permitted, data may be disclosed to:

• attorneys-at-law, legal assistants and employees who are bound by confidentiality obligations;
• courts, administrative authorities, notaries, enforcement agents and other competent institutions;
• opposing parties and their representatives, to the extent necessary for the protection of the Client’s interests;
• expert witnesses, translators, local or foreign attorneys-at-law, accountants and other specialists;
• providers of hosting, email, archiving, videoconferencing and information-technology services;
• Stripe and other participants in the payment process where card payments are made;
• insurers, professional bodies and legal advisers in connection with a claim or investigation.

Card payments are processed within Stripe’s secure environment. The Law Office does not store the full card number or card security code. Stripe also processes certain data in accordance with its own privacy rules. Certain technical service providers may process data outside the European Economic Area where an applicable legal transfer mechanism is in place.

5. Retention Periods

Personal data are retained only for as long as necessary for the relevant purpose, taking into account:

• the duration of the agreement and the legal matter;
• applicable accounting, tax and professional retention periods;
• applicable limitation periods and the need to defend against claims;
• the need to conduct future conflict-of-interest checks;
• the obligation to preserve professional secrecy.

Enquiries which do not result in an engagement are generally retained for up to two years. Minimum information concerning the parties and the subject matter may be retained for a longer period for conflict-of-interest checks and the defence of legal claims. Where a dispute, investigation or legal obligation arises, the data may be retained until its final resolution or expiry.

6. Your Rights

Subject to the conditions of the GDPR, you have the right to request:

• information about and access to your personal data;
• rectification of inaccurate or incomplete data;
• erasure where there is no legal basis for further retention;
• restriction of processing;
• data portability where that right applies;
• objection to processing based on legitimate interests;
• withdrawal of consent previously given;
• submission of a complaint to the Bulgarian Commission for Personal Data Protection or to a competent court.

The rights of access or erasure may be restricted where disclosure or deletion would prejudice professional secrecy, the rights of another Client or third party, a legal obligation, a conflict-of-interest check or the establishment, exercise or defence of legal claims.

Requests should be sent via the contact form on the Website or by post to the office addresses. The Law Office may request additional information to verify identity and protect confidential data.

7. Cookies and Security

The Site may use strictly necessary cookies for essential functionality, security, forms and payments. Non-essential analytical, functional or advertising cookies shall be activated only after consent has been given where required by law and may be managed through the cookie-settings panel. Details are set out in the Cookie Policy.

The Law Office applies reasonable technical and organisational measures to protect personal data, but internet communications cannot be guaranteed to be absolutely secure. If you suspect that an email account has been compromised, that you have received a fraudulent message or that data have been disclosed unlawfully, please notify us immediately by telephone.

This Policy may be updated following changes in the law, the Services or the technical providers used. The current version shall be published on simeonovlawfirm.com.