Toneva & Todorova

Privacy and Cookies Policy

  1. Details of the personal data controller

    Toneva & Todorova Law Firm, BULSTAT 177252068, registered under file case No. 11/2018 of the City Court of Sofia, having its registered seat at address of management at 40 Makedonia Blvd., fl.5, ap. 17, Sofia, is a data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter the “Regulation”) and the Bulgarian Personal Data Protection Act (hereinafter the “PDPA”). 

    The website https://ttlaw.bg/ is owned and managed by Toneva & Todorova Law Firm in full compliance with the Regulation and the PDPA.

    Contact details of data controller

    Names: Daniela Ivanova Ilieva-Toneva

    Tel: 02/4273177

    E-mail: office@ttlaw.bg

  2. Personal data. Principles of processing. Legal grounds

    Personal data means any information relating to an identified natural person or natural person that is identifiable on the basis of such information.

    Toneva & Todorova Law Firm processes and submits personal data to third parties only upon proper legal ground, including explicit and voluntary provided consent by virtue of the Regulation and/or on other legal ground for processing, provided in the Regulation and the PDPA. It is possible that under a law or in case of a court/arbitral/enforcement/security proceedings and/or upon request of a competent authority Toneva & Todorova Law Firm discloses personal data, as well as in case that such disclosure is needed for the purposes of national security, law enforcement or other cases provided for in the law. 

    Toneva & Todorova Law Firm may also disclose personal data when such disclosure is reasonably necessary for protecting Toneva & Todorova Law Firm’s legitimate interests. Toneva & Todorova Law Firm processes personal data in strict compliance with the principle of minimization of the data processed whereby data is processed only for specific, reasonable and legitimate purposes (need-to-know principle).

  3. Data processing purposes

    Toneva & Todorova Law Firm processes personal data of users of the website of the Law Firm, when an inquiry has been submitted by user – potential or current client of the Law Firm – through the website contact form, by email or by telephone. The purpose of processing of personal data by Toneva & Todorova Law Firm is to render legal assistance of a client with regard to a client’s inquiry for provision of certain legal services.

  4. Categories of processed personal data

    Toneva & Todorova Law Firm collects the following categories of personal data from the following data subjects:

    – For natural persons, who have submitted an inquiry, Toneva & Todorova Law Firm processes the personal data, which have been voluntary submitted by the data subject through the contact form, the telephone conversation or other type of correspondence with the Law Firm.

    When users send inquiries to Toneva & Todorova Law Firm through the contact form at the website or through e-mail, or telephone,  then it is presumed that the users have given their free, explicit and informed consent for processing of the personal data which is voluntarily included by them in their inquiries to Toneva & Todorova Law Firm.

  5. Cookies

    Cookies are small files with information sent from the web server and stored in the user’s Internet browser (for example, information on the selected language, connection time, visited websites) or on the hard drive, and then returned from the Internet browser to the server whenever access to this server is obtained by visiting the relevant website.

    Toneva & Todorova Law Firm ‘s website may use cookies in order to distinguish a group of users from other users and in order to provide a better experience and to improve its website. The acceptance of this Policy regarding cookies is done by respective clicking by the user on the pop-up message at Toneva & Todorova Law Firm’s website and if the user continues to use the Toneva & Todorova Law Firm’s website. If the user does not agree to the Policy regarding cookies, he/she should immediately stop the use of Toneva & Todorova Law Firm ‘s website.

    By giving a consent to the placing of cookies users are enabling Toneva & Todorova Law Firm to provide the best possible experience and service. Users may, if they wish, deny consent to the placing of cookies; however certain features of Toneva & Todorova Law Firm’s website may not function fully or as intended.

    Every user may disable in his/her Internet browser the storing of cookies, as well as may delete the already stored cookies at any moment. Every user who wishes to proceed that way shall make the necessary changes in the settings of his/her browser and/or shall contact the browser’s provider for assistance. Toneva & Todorova Law Firm shall not be liable and shall be held harmless in case that the Internet browser used by the user does not allow to control the enabling/disabling of cookies, their blocking or the deletion of already stored cookies. If the user disables the cookies or deletes the already stored ones, then it is possible that the normal functioning of the website is technically disrupted for that user.

  6. Security measures

    Toneva & Todorova Law Firm takes sufficient technical and organizational measures to protect the personal data it processes from theft, misuse, unauthorized access, unauthorized disclosure, unauthorized deletion and any other unauthorized processing or disposal with such data.

    When users submit inquiries to Toneva & Todorova Law Firm through the website contact form, by email or telephone, Toneva & Todorova Law Firm may provide the personal data of such users to: 1) lawyers from its team; 2) external consultants of the Law Firm with regard to protection of its legitimate interests, 3) public authorities in case of exercising of their functions as well as for the purposes of the respective procedures before such authorities. 

    In the cases where Toneva & Todorova Law Firm provides personal data to third parties, Toneva & Todorova Law Firm applies mechanisms, including inter alia contractual ones, which guarantee that such data is processed and protected in compliance with the applicable laws.

  7. Time limits for storing of data

    Toneva & Todorova Law Firm complies with the principle of storing data only for the time necessary for completing the purpose for which such data has been collected, unless the applicable laws require a longer storage period for such data.

    Toneva & Todorova Law Firm deletes and erases personal data related to submitted inquiries for legal services immediately after expiry of the statutory time limits for investigations by administrative authorities and for imposition of legal sanctions.

  8. Personal data rights

    Pursuant to the Regulation and the PDPA data subjects have the following rights at all times: (1) right of access to their personal data processed by Toneva & Todorova Law Firm; (2) right of rectification of incorrect personal data, right of erasure (in case there is proper legal basis for that), right to restriction and blocking of processing of personal data processed by Toneva & Todorova Law Firm (in case there is proper legal basis for that); (3) right to data portability under the conditions provided for in the Regulation; (4) right to object at any time to the processing of their personal data when there is proper legal basis for that; (5) right to file a complaint with the Bulgarian Personal Data Protection Commission in case where the data subject considers that his/her rights related to data protection have been breached.    

    Toneva & Todorova Law Firm may refuse to grant requests for exercising of rights on a ground provided for in the Regulation and/or the PDPA, including in case of unreasonably repeating requests, requests that require unproportionate efforts and/or costs for the controller, as well as when the respective request is manifestly unfounded or when such request puts in danger or breaches the confidentiality and rights of other data subjects.