Privacy Policy

This policy explains how we process your personal data when you use the da-law.eu website or contact us.

Last updated:

Contents

Data Controller

Еднолично адвокатско дружество Арсенова (Arsenova Law Firm), BULSTAT 181134620, entered in the register of the Sofia Bar Association under No. 2400076710, represented by attorney-at-law Desislava Arsenova.

Address: 48–50 Trakia St., 1527 Sofia, Bulgaria.

Email: office@da-law.eu, telephone: +359 889 288 166.

Data We Process

When you write to us through the contact form:

  • name;
  • email address;
  • telephone number;
  • the content of your message and anything you choose to share in it;
  • the consent you have given, the date and time of submission and the language of the page.

When you use the website:

  • technical data needed to protect the form against automated requests (IP address, browser and device data), processed by the Cloudflare Turnstile service;
  • aggregate visit data (pages viewed, device type, approximate country), collected by Cloudflare Web Analytics and Ahrefs Web Analytics without cookies;
  • Google Analytics data, only if you have consented to analytics cookies (see the Cookie Policy).

Please do not send sensitive data (for example, health data) through the form unless it is necessary for your matter. We can discuss the details of your case at a meeting.

  • Responding to your enquiry and assessing whether we can take on the matter: taking steps at your request before entering into a contract (Art. 6(1)(b) of Regulation (EU) 2016/679, the GDPR) and your consent (Art. 6(1)(a) GDPR).
  • Providing legal services if we enter into a contract: performance of the contract (Art. 6(1)(b) GDPR).
  • Protecting the website and the form against spam and abuse: our legitimate interest (Art. 6(1)(f) GDPR).
  • Aggregate cookieless visit statistics (Cloudflare Web Analytics and Ahrefs Web Analytics): our legitimate interest in maintaining and improving the website (Art. 6(1)(f) GDPR).
  • Google Analytics: only with your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
  • Compliance with legal obligations (for example, under the Bar Act, the Accountancy Act and the Measures Against Money Laundering Act): Art. 6(1)(c) GDPR.

The information you entrust to us is protected by professional secrecy under the Bar Act and the Code of Ethics for Lawyers. Sending an enquiry does not create a lawyer–client relationship; that relationship arises only once a contract has been concluded.

Recipients and Processors

We do not sell your data or share it for advertising. We use service providers that process it on our behalf and on our instructions:

  • Cloudflare, Inc. – website hosting, protection (Turnstile), cookieless statistics and the database of contact form messages, which is stored in the European Union;
  • Make (Celonis) – automated forwarding of contact form messages to our business mailbox, using a region in the European Union;
  • the provider of our business email – for receiving enquiries and corresponding with you;
  • Google Ireland Limited – Google Analytics, only if you have given consent;
  • CookieYes Limited – the cookie consent management platform, which keeps a record of your choice;
  • Ahrefs Pte. Ltd. – cookieless visit statistics.

Data may also be disclosed to public authorities where required by law.

Transfers outside the European Union

Some providers are established outside the EU (Cloudflare and Google in the United States, CookieYes in the United Kingdom and Ahrefs in Singapore). Data is transferred outside the EU only with appropriate safeguards: a European Commission adequacy decision (including the EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

Retention Periods

  • Enquiries that do not lead to a contract: up to three years from receipt, after which they are deleted.
  • Client data: for the term of the contract and thereafter for the periods required by law (for example, for accounting records and anti-money laundering documents).
  • Google Analytics data: up to 14 months.

How We Protect Your Data

We apply technical and organisational measures in line with the principles of ISO/IEC 27001: encrypted connections (HTTPS), access restricted to the people working on your enquiry, encrypted communication and a retention and deletion policy.

Your Rights

Under the GDPR, you have the right:

  • of access to your personal data;
  • to rectification of inaccurate or incomplete data;
  • to erasure (the “right to be forgotten”) where we are not required by law to keep the data;
  • to restriction of processing;
  • to object to processing based on legitimate interests;
  • to data portability;
  • to withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, write to us at office@da-law.eu. We will reply within one month.

You have the right to lodge a complaint with the Commission for Personal Data Protection: 2 Prof. Tsvetan Lazarov Blvd., 1592 Sofia, Bulgaria, www.cpdp.bg.

Cookies

How we use cookies and how to manage your consent is explained in the Cookie Policy.

Changes to This Policy

We may update this policy, for example when the services we use change. The current version and the date of the last change are published on this page.