Privacy Policy

This Privacy Policy is intended to inform you how Tokushev and Partners Law Office collects, processes, stores and protects the personal data of visitors to the website https://advokati.analyserinsights.com, as well as of persons who contact us for legal consultation or other assistance. The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR), the Bulgarian Personal Data Protection Act (PDPA) and the Bulgarian Bar Act.

By accessing and using the website, you confirm that you are familiar with this Privacy Policy. Please read it carefully.

1. Data Controller

The controller of personal data is:

Tokushev and Partners Law Office
Address: 24 Graf Ignatiev Street, floor 1, 1000 Sofia, Bulgaria
E-mail: office@tokushev-lawoffice.com
Phone: +359 2 980 1251
Website: https://advokati.analyserinsights.com

For all questions related to personal data protection, you may contact us at the e-mail address indicated above.

2. What Personal Data We Collect

When you visit the website and contact us, we may collect the following categories of personal data:

2.1. Data Provided Voluntarily by You

When filling in the contact form on the website, sending an e-mail or making a phone call, we may collect: names, e-mail address, telephone number, and other information you provide at your own initiative in the free text field (description of a legal issue, enquiry, etc.).

Important: We recommend that during your initial enquiry via the contact form or by e-mail you do not include sensitive personal information or detailed data about specific legal matters. Such information is best discussed within a personal consultation, where attorney-client privilege applies.

2.2. Technical Data Collected Automatically

When you visit the website, certain technical data may be automatically collected: IP address, browser type and version, operating system, language settings, date and time of access, pages visited, referrer URL and duration of the visit. These data are collected through cookies and analytics tools and are used for statistical purposes, traffic analysis and improvement of the website’s functionality.

3. Purposes of Processing Personal Data

The collected personal data are processed for the following purposes:

• responding to enquiries submitted via the contact form, by e-mail or by telephone;
• conducting subsequent communication and potentially concluding a legal defence and assistance agreement;
• providing legal services and performing contractual obligations;
• compliance with legal obligations, including obligations under the Bulgarian Bar Act, the Measures Against Money Laundering Act (MAMLA), and tax and accounting legislation;
• statistical analysis of website traffic and improvement of its functionality;
• protection of the legitimate interests of the controller, including in legal disputes.

Tokushev and Partners Law Office does not use personal data for direct marketing, profiling or automated decision-making and does not provide personal data to third parties for advertising purposes.

4. Legal Basis for Processing

The processing of personal data is carried out on one or more of the following legal bases under Article 6(1) of the GDPR:

• Consent (Article 6(1)(a)) – when submitting an enquiry via the contact form or accepting cookies;
• Performance of a contract (Article 6(1)(b)) – when a legal defence and assistance agreement has been concluded;
• Compliance with a legal obligation (Article 6(1)(c)) – for the performance of obligations under MAMLA, tax legislation, etc.;
• Legitimate interest (Article 6(1)(f)) – to ensure the normal functioning and security of the website, and for protection in legal disputes.

5. Attorney-Client Privilege

Tokushev and Partners Law Office strictly observes the obligation to preserve attorney-client privilege under Article 45 of the Bulgarian Bar Act. All information provided by clients in connection with legal consultation or procedural representation is protected by attorney-client privilege and may not be disclosed to third parties without the client’s explicit consent, except in cases provided for by law.

Attorney-client privilege is absolute and does not lapse with the termination of the legal assistance agreement. It covers all facts and circumstances that have become known to us during or on the occasion of the exercise of attorney activities.

6. Recipients of Personal Data

Tokushev and Partners Law Office does not sell, lease or provide your personal data to third parties without control. Personal data may be provided to the following categories of recipients, only to the extent necessary:

• providers of technical services – website hosting, server and e-mail maintenance, in compliance with data protection requirements;
• state and municipal authorities, courts, notaries – when necessary for the performance of the legal assistance agreement or pursuant to law;
• accounting and audit companies – for accounting and tax reporting purposes, in compliance with statutory confidentiality requirements.

Where data are provided to service providers based outside the European Economic Area (EEA), appropriate safeguards under Chapter V of the GDPR apply (standard contractual clauses or European Commission adequacy decision).

7. Retention Period of Personal Data

Personal data are kept for a period which is necessary to achieve the purposes for which they were collected:

• Data from enquiries (contact form, e-mail) that did not result in the conclusion of a contract – up to 6 months from receipt;
• Data of clients under concluded legal defence and assistance agreements – for the term of the agreement and 5 years after its termination (in view of limitation periods under Bulgarian law);
• Accounting and tax documents – in accordance with the periods under the Accounting Act and the Tax and Social Insurance Procedure Code (up to 10 years);
• Data under MAMLA – 5 years in accordance with the Measures Against Money Laundering Act;
• Technical data (cookies, logs) – up to 26 months or until withdrawal of consent.

After the expiry of the relevant period, personal data are deleted or anonymised.

8. Cookies

The website https://advokati.analyserinsights.com uses cookies – small text files stored on your device when visiting the site. They serve for the normal operation of the website and for traffic analysis.

8.1. Types of Cookies We Use

• Strictly necessary cookies – ensure the basic functionality of the website (navigation, access to secure areas). They cannot be disabled as the website cannot function without them.
• Analytical cookies – we use Google Analytics to collect anonymised statistical information about visits and use of the website (number of visits, pages visited, session duration, geographic region). IP addresses are anonymised.
• Third-party cookies – the website may contain embedded content from third parties (e.g. Google Maps for our location) which may place their own cookies.

8.2. Cookie Management

On your first visit to the site you will be asked for your consent for the use of cookies, except for strictly necessary ones. You can change your cookie settings at any time via your browser settings. Disabling certain cookies may affect the functionality of the website.

9. Your Rights as a Data Subject

In accordance with the GDPR and the PDPA, you have the following rights with regard to your personal data:

• Right of access (Article 15 GDPR) – to obtain confirmation whether your personal data are being processed and to request a copy;
• Right to rectification (Article 16 GDPR) – to request correction of inaccurate or incomplete data;
• Right to erasure (Article 17 GDPR) – to request deletion of your data when they are no longer necessary for the purposes for which they were collected, or when you withdraw your consent;
• Right to restriction of processing (Article 18 GDPR) – to request restriction in certain circumstances;
• Right to data portability (Article 20 GDPR) – to receive your data in a structured, commonly used and machine-readable format;
• Right to object (Article 21 GDPR) – to object to processing based on legitimate interest;
• Right to withdraw consent – at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise these rights, you may contact us at office@tokushev-lawoffice.com or at the office address. We will respond to your request within 30 days.

In certain cases, the right to erasure may be restricted – for example, where retention of the data is necessary for compliance with a legal obligation, for the exercise or defence of legal claims, or where the data are protected by attorney-client privilege.

10. Right to Lodge a Complaint

If you consider that the processing of your personal data infringes the GDPR or the PDPA, you have the right to lodge a complaint with the supervisory authority:

Commission for Personal Data Protection (CPDP)
Address: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria
Telephone: 02 / 915 35 18
Website: www.cpdp.bg
E-mail: kzld@cpdp.bg

11. Security of Personal Data

Tokushev and Partners Law Office applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration or unlawful disclosure. These measures include SSL encryption of communication with the website, restricted access to personal data to authorised persons only, and regular updating of software solutions.

Despite the measures taken, no system for transmission or storage of data can guarantee absolute security. In the event of a security breach which may cause a high risk to your rights and freedoms, we will notify you without undue delay in accordance with Article 34 of the GDPR.

12. Links to External Websites

The website https://advokati.analyserinsights.com may contain links to external websites (e.g. the Supreme Administrative Court, the Commercial Register, etc.). This Privacy Policy applies only to our website. We are not responsible for the privacy policies and practices of third-party sites and we recommend that you familiarise yourself with their terms before providing personal data.

13. Changes to the Privacy Policy

Tokushev and Partners Law Office reserves the right to update this Privacy Policy at any time, in order to reflect changes in legislation, supervisory practice or our data processing practices. The updated version is published on this page with the date of last change indicated. We recommend that you review this page periodically.