PRIVACY POLICY
Last Update: 05/25/2026
This Privacy Policy has been developed in accordance with Art. 13 and Art. 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), and aims to inform you about how your personal data is processed.
Data about the administrator and contact information
Attorney Ida Ruseva Golemanova is a member of the Sofia Bar Association, with personal ID No. 1800743010, registered in the BULSTAT Register under code 180373197, with address: Sofia 1000, 15 Han Asparuh Str., fl. 5, email ida@golemanova.com.
purposes, grounds and periods for processing personal data
Your personal data is processed to carry out the activities provided for in the Bar Act, the Legal Aid Act, and other regulatory acts, as follows:
Clients
Clients are all persons to whom legal services are provided under a legal services agreement. Clients are also considered to be all other persons with whom the attorney is in pre-contractual relations, as well as persons who have made an inquiry to the office.
The personal data collected is determined by the type of specific legal services provided to them. This is usually ordinary personal data, such as identification data, contact details.
Depending on the specific case and only provided that this is assigned by the client, data on employment or professional status, civil status data, sensitive data such as health status, racial or ethnic origin, political or trade union affiliation, etc. may be processed.
These data are processed on the basis of Art. 6, para. 1, lit. "b" of the General Data Protection Regulation, namely for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject prior to entering into a contract, on the basis of Art. 6, para. 1, lit. "c" of the General Data Protection Regulation, namely compliance with a legal obligation, as law firms are obliged to keep an archive, on the basis of Art. 6, para. 1, lit. "f" of the General Data Protection Regulation, namely protection of the legitimate interests of the controller, expressed in legal defense in case of claims,
and also on the basis of Art. 9, para. 2, lit. "f" of the General Data Protection Regulation - for the purpose of establishing, exercising, or defending legal claims.
Periods for processing personal data
Pursuant to Art. 47, para. 1 of the Bar Act, the lawyer is obliged to keep case papers for a period of 5 years from their completion.
Personal data collected in the course of legal consulting services are stored for a period of 5 years from the provision of the service.
Personal data of potential clients who have not requested the provision of legal services are stored for up to 1 month from the end of the correspondence.
Job or internship applicants
The personal data of job or internship applicants that are processed are identification data, contact details, education and professional experience data, data on competences and skills.
The data are collected from the submitted resume, diploma for higher education, student book, certificates of participation in seminars or training completed, or other documents certifying the educational and qualification degree of the candidate, submitted by them at their discretion to prove their eligibility for the respective position.
The legal basis on which these personal data are processed is Art. 6, para. 1, lit. "b" of the General Data Protection Regulation, namely steps taken by the data subject to enter into a contract. It is possible that the basis for processing is Art. 6, para. 1, lit. "a" of the General Data Protection Regulation, namely consent to process personal data for the purpose of participating in a new selection process.
The storage period of personal data of the candidate is 6 months from the completion of the selection procedure. In case the candidate has provided explicit consent, their personal data may be processed for a longer period, for the purpose of participating in subsequent selection procedures. In this case, the storage period cannot be longer than the period for which the candidate has provided consent.
Categories of personal data recipients
Your personal data may be provided to the following categories of recipients:
To other attorneys, for the purpose of providing the assigned legal services, where the client's consent is present;
To trusted external consultants, for the purpose of providing comprehensive services, with the client's approval;
To courier companies and postal operators – for the purposes of carrying out correspondence with the natural persons - data subjects;
To state authorities and bodies entrusted with public functions, within the scope of their powers, for the purposes of fulfilling legal obligations (Ministry of Interior, State Agency for National Security, Sofia Bar Association, Supreme Bar Council, etc.);
To a court or arbitration, for the purposes of providing procedural representation in judicial proceedings, as well as for the purposes of collecting receivables under agreements for legal services.
The personal data of clients or their representatives are not disclosed to another country or international organization.
Your rights
As a data subject, you have the right to receive confirmation and/or detailed information, including a copy of the personal data processed about you (right of access).
Furthermore, you may object to the collection and further processing of your personal data, as well as request that it be rectified (updated) or erased (when we do not have a valid legal basis for its processing).
You also have the right to request restriction of processing, i.e., to require the controller to process it only for specific purposes when it cannot be erased due to a legal obligation.
In cases where your personal data is processed on the basis of a legitimate interest, you have the right to object to the processing.
All rights can be exercised in a free-text format using the contact details provided in this policy.
If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, tel. 02/91-53-518, email: kzld@cpdp.bg and/or another supervisory authority.
Any change to this Policy will be promptly indicated on the website golemanova.com.
April 2026