Privacy Policy

 

Last updated: 19.02.2026

  1. General Provisions

This Privacy Policy governs the manner in which the Personal Data Controllers (attorney Mitko Dimitrov, attorney Hristina Petkova‑Gencheva, and junior attorney Annabel Dimitrova), hereinafter referred to as “Dimitrov Law Office”/“the Law Office”/“the Attorneys,” process personal data in connection with the provision of legal services, the maintenance and operation of the website, communication with clients and visitors, as well as compliance with legal obligations. The Law Office conducts its activities in accordance with Regulation (EU) 2016/679 (GDPR), the Personal Data Protection Act, and the Bar Act, all of which require a high level of protection, confidentiality, and professional secrecy.

As a law office, we process information that is often sensitive by nature, related to personal, family, property‑law, commercial, administrative, or criminal matters. Therefore, the protection of personal data is a fundamental principle of our work.

  1. Personal Data Controller

The personal data controllers are: attorney Mitko Dimitrov; attorney Hristina Petkova‑Gencheva; and junior attorney Annabel Dimitrova.

For contact with the personal data controllers, the following details may be used:
tel. +359 878 522 188 – Mitko Dimitrov attorney-at-law;
tel. +359 899 379 851 – Hristina Petkova‑Gencheva attorney-at-law;
tel. +359 8794 55 528 – Annabel Dimitrova junior attorney-at-law;
email: dimitrov.kantora@gmail.com

Address: Gabrovo, 8 Evtim Dabev St., 3rd floor

The Law Office determines the purposes and means of processing personal data and is responsible for their lawfulness, fairness, and transparency.

  1. Categories of Personal Data and Sources of Information

In the course of its professional activity, the Law Office processes personal data of clients, potential clients, website visitors, individuals submitting inquiries through the contact form, as well as individuals posting comments on the website. Data of counterparties, representatives of legal entities, and persons whose data are contained in documents provided by clients or collected in connection with a specific legal matter are also processed. The processed information may include identification data, contact details, data from identity documents, information regarding facts and circumstances related to legal relationships or proceedings, financial data, as well as special categories of personal data (including sensitive personal data) when necessary for establishing, exercising, or defending legal rights and interests.

  1. Data Provided Through the Contact Form and Electronic Communication

When using the website’s contact form, the Law Office processes the name, telephone number, email address, and the content of the inquiry, including any information voluntarily shared by the user. This data is used solely to respond to the inquiry, to take steps prior to entering into a legal services agreement, or to provide additional information requested by the individual. The data is not used for marketing purposes and is not disclosed to third parties unless required by law or necessary for the protection of legal interests.

  1. Processing of Data in Connection with the Provision of Legal Services

The Law Office provides legal services in a wide range of areas, including subscription‑based legal services, property law and real estate transactions, contract law, family and inheritance law, tort liability, unjust enrichment, commercial law, labor and social security law, protection against domestic violence, administrative law and administrative procedure, condominium management, enforcement proceedings, criminal law, and criminal procedure.

In connection with these activities, the Law Office processes data necessary for client identification, document preparation, legal representation, protection of rights and legitimate interests, and compliance with legal obligations. The processed information may include names, personal identification numbers, addresses, identity document details, the content of contracts, notarial deeds, court documents, expert reports, medical records, correspondence, and other materials provided by the client or collected during the provision of legal services.

  1. Processing of Special Categories of Data

The Law Office may process special categories of data (including sensitive personal data) when necessary for establishing, exercising, or defending legal rights and interests. This includes data on health, ethnic origin, religious beliefs, sexual orientation, as well as data related to criminal charges and convictions. Such data is processed strictly in accordance with the principle of minimization and only when absolutely necessary for providing legal protection or assistance.

  1. Processing of Data in Criminal Proceedings

In the field of criminal law and criminal procedure, the Law Office processes information related to charges, investigations, witness statements, expert reports, evidence, materials from pre‑trial and court proceedings, and any other data necessary for building a defense strategy. This information is protected by attorney‑client privilege and is used solely for the purpose of defending the client.

  1. Processing of Data in Family and Inheritance Matters

In family and inheritance law, the Law Office may process data regarding marital status, children, income, health condition, social reports, property information, inheritance relations, and other personal and family‑related data. This information is handled with particular care due to its sensitivity and importance for protecting the client’s interests.

  1. Processing of Data in Property, Contract, and Commercial Law Matters

When providing services related to real estate, property rights, contractual relations, commercial transactions, corporate structures, and subscription‑based legal services, the Law Office processes data contained in contracts, notarial deeds, certificates, corporate documents, correspondence, and other materials necessary for fulfilling the assigned tasks.

  1. Processing of Data in Labor and Social Security Law Matters

In this area, the Law Office processes data related to employment relationships, disciplinary proceedings, workplace accidents, social security rights, income, medical documents, and other materials necessary for protecting the client’s rights.

  1. Processing of Data in Domestic Violence Cases

In proceedings under the Domestic Violence Protection Act, the Law Office processes data regarding personal relationships, health conditions, psychological states, witness statements, social reports, and other sensitive circumstances. This information is handled with strict confidentiality.

  1. Processing of Data in Administrative Proceedings and Condominium Management

In administrative law and administrative procedure, the Law Office processes data contained in administrative acts, complaints, applications, correspondence with institutions, and other documents. In the area of condominium management, data of owners, users, managers, and other individuals involved in building management is processed.

  1. Processing of Data in Enforcement Proceedings

In enforcement cases, the Law Office processes data related to debtors, creditors, property, bank accounts, writs of execution, attachments, liens, and other materials necessary for protecting the client’s interests.

  1. Data Processed Through the Online Calculator

If the website provides an online calculator, the Law Office may process the data entered by the user when it constitutes personal information. This data is used solely to provide calculations and is not stored longer than necessary for this function.

  1. Data Automatically Collected When Visiting the Website

When visiting the website, technical data such as IP address, device type, browser, security logs, and cookies are collected. This data is used to maintain security, improve functionality, and for statistical purposes.

  1. Data from Social Networks

The Law Office may maintain profiles on social networks such as Facebook, Instagram, or LinkedIn. Data processing on these platforms is carried out in accordance with the policies of the respective providers. The Law Office processes information received through social networks solely for communication and informational purposes.

  1. Retention Periods

Retention periods depend on the type of data and the purposes of processing. Contract and accounting data is stored for the periods required by law. Case‑related data is stored in accordance with the Bar Act. Data from the contact form is stored for up to twelve months unless a contractual relationship is initiated.

  1. Confidentiality and Attorney‑Client Privilege

All data provided to the Law Office is protected by attorney‑client privilege. Information is not disclosed to third parties except when necessary for client protection or when required by law. Access to personal data is granted only to attorneys and staff bound by professional confidentiality.

  1. Rights of Data Subjects

Data subjects have the right to access, rectification, erasure, restriction of processing, objection, data portability, and the right to lodge a complaint with the Commission for Personal Data Protection. The Law Office reviews all requests in good faith and within the time limits set by the GDPR.

Data subjects may lodge a complaint with the Commission for Personal Data Protection if they believe their personal data is being processed in violation of applicable law.

The Commission may be contacted at:
Address: Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.
Email: kzld@cpdp.bg.
Website: www.cpdp.bg.

  1. Security Measures

The Law Office applies technical and organizational measures to protect personal data, including encrypted connections, access control, secure servers, backups, antivirus protection, and internal rules for information processing.

  1. Changes to the Policy

This Policy may be updated in case of changes in legislation or the internal processes of the Law Office. The current version is always available on the website.