Concordia Law Firm collects and processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119/1 of 4 May 2016), hereinafter referred to as “the Regulation”.
Contact details for Advokatsklaw firm “Concordia:
Country.
Address. Sofia, ul. 4A “San Stefano”, ground floor
E-mail: law.concordia@gmail.com
Website: www.concordialegal.bg
What is personal data?
The Law Firm shall keep confidential any information which comes to its knowledge in connection with the conduct of its business.
“Personal Data” means any information that identifies an individual – names, personal identification number, date of birth, location data, address, telephone number, email, your image, etc.
Basis and purpose for collecting, processing and storing personal data
- We process your personal data on the basis of a contract for legal services and assistance. This contract may be formal (in writing) or informal (in oral form). For the purposes of concluding and performing the legal services contract, the personal data of our clients and/or third parties, such as the persons who represent them (attorneys, managers, executive directors, procurators, etc.) are processed. In this case, it is the concluded contract for legal services and assistance that is the basis for processing the data.
- We process your personal data on the basis of your request via the contact form. When making an enquiry it is obligatory to provide your name, contact telephone number and/or email. If more information involving your personal data or the personal data of third parties is required to provide the legal service you require, the same will be further requested.
The purpose for which we process your personal data is in connection with the legal services we provide. When providing legal services to our clients and to persons who have made an enquiry via the online consultation contact form, we process the personal data of:
- clients, as well as the persons who represent them (proxies, managers, executive directors, procurators, etc.);
- to third parties in the event that their personal data is provided;
The provision of personal data is voluntary in order to use certain legal services provided by us. In some cases we will not be able to provide the service that has been requested if the necessary information is not provided to us.
Processing of personal data of persons who have made an enquiry via the online consultation contact form
The amount of personal data collected depends on the specific request and legal service to be performed. We collect the information that is necessary to enable us to provide the necessary defence and legal assistance. The information collected may include, in addition to your name, ID number, permanent or current address, telephone number, email address, sensitive information such as health, conviction information, biometric data, etc.
The following organisations/persons may receive the personal data:
Recipients of personal data are the natural or legal person, public authority, agency or other body to which the personal data are disclosed. These may be:
- Individuals or legal entities on assignment of the Law Firm’s clients in connection with the execution of a contract for the provision of legal services;
- Competent public authorities in fulfillment of an obligation stipulated by law or upon the assignment of the Law Firm’s clients, including courts, notaries, private/state bailiffs, the Registry Agency, the NRA, the National Social Security Institute, etc.
- The person performing the accounting services of the Law Firm;
Period and method of data storage:
The personal data of individuals, clients of the Law Firm, are processed until the termination of the contract for legal services, and for a certain period after that – within which additional rights and obligations may arise for the parties.
Pursuant to Article 12 of the Accountancy Act, for the purposes of fulfilling the law firm’s legal obligations under tax and accounting legislation, the personal data of clients, enquirers and their representatives shall be kept for a period of 10 years from 1 January of the accounting year following the accounting year in which the obligation became due.
The remaining documents, data and information, the storage of which is not necessary for the fulfilment of tax and accounting obligations, shall be stored for a period of 5 years on the basis of Article 47 of the Law on the Bar, unless another period is specified in the legislation.
Transfer of data to a third country or international organisation:
Concordia Law Firm does not transfer personal data to a third country or to an international organization.
The rights of each data subject are as follows:
At any time while we are storing or processing personal data, each data subject has the following rights:
- request a copy of their personal data and the right to access it at any time;
- request your personal data in a form convenient for transfer to another data controller, or request that we transfer the personal data;
- request the Law Firm to correct, without undue delay, inaccurate personal data as well as data that are no longer up to date;
- request that personal data be erased without undue delay on any of the following grounds:
- the personal data are no longer necessary for the purposes for which they were collected
- when consent to their processing is withdrawn;
- where the subject has objected to the processing;
- where the processing is unlawful;
- where the personal data must be erased in order to comply with a legal obligation under EU or Member State law that applies to us as a data controller;
- where the personal data have been collected in connection with the provision of information society services.
We may refuse to delete personal data for the following reasons:
- in the exercise of the right to freedom of expression and the right to information;
- to comply with a legal obligation on our part or to perform a task of public interest;
- for public health reasons;
- for archiving purposes in the public interest, scientific or historical research or statistical purposes, in so far as erasure is likely to render impossible or seriously impede the achievement of the purposes of such processing;
- for the establishment, exercise or defence of legal claims.
- request the Law Firm to restrict the processing of personal data, in which case the data will only be stored and not processed when:
- the accuracy of the personal data is contested by the data subject, for a period which allows the controller to verify the accuracy of the personal data;
- the processing is unlawful, but the data subject does not wish the personal data to be erased but requests instead that their use be restricted;
- the controller no longer needs the personal data for processing purposes but the data subject requires them for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing pursuant to Article 21(1), pending verification whether the legitimate grounds of the controller override the interests of the data subject.
- to withdraw their consent to the processing of personal data at any time by a separate request addressed to the Law Firm;
- object to certain types of processing, such as direct marketing (unsolicited advertising messages);
How can data subjects exercise their rights?
This can be done in your preferred way:
- using the contact form on the law firm’s website;
- by sending an email to law.concordia@gmail.com
- Sending a letter to. Send a letter to. “Address: Sofia, 4A San Stefano Street, ground floor;
We will send you a reply to your email or address within one month.
Lodging a complaint with a supervisory authority
You have the right to lodge a complaint directly with the supervisory authority, the Data Protection Commission:
Address. “Prof. No. 2 Tsvetan Lazarov
Information and Contact Centre – tel. 02/91-53-518
E-mail: kzld@cpdp.bg
Website: www.cpdp.bg
The law firm is obliged to comply with certain legal obligations, for example, to implement anti-money laundering measures under the Anti-Money Laundering Measures Act.
Automated decision-making, including profiling
Concordia Law Firm does not use automated decision making.Changes to the Privacy Policy
Concordia Law Firm reserves the right to change this Privacy Policy.

