Ivailo Marinov Marinov, attorney at law, member of the Sofia Bar Association under personal No. 1300754610, practising under the name ImmLaw, BULSTAT UIC 180440500, with office address 1–3 Hubavka St., 1st floor, 1111 Sofia, Bulgaria.
Email: office@immlaw.bg
Telephone: +359 887 694 517
Address: 1–3 Hubavka St., 1st floor, 1111 Sofia, Bulgaria
The controller has not appointed a data protection officer, as it is not required to do so under Article 37 GDPR. For any data protection matter, please use the contact details above.
- responding to enquiries received through the contact form, by email or by telephone;
- taking steps at your request prior to entering into an engagement agreement;
- ensuring the security and proper functioning of the website;
- complying with legal obligations.
The processing of client and counterparty data in the course of providing legal services is described in the separate Privacy Notice under Articles 13 and 14 GDPR.
- data you provide: name, organisation, email, telephone, the practice area selected and the content of your message;
- technical data when you visit the website: IP address, browser and device type, date and time of the visit;
- cookie data, as described in the Cookie Policy.
Processing takes place on different grounds, depending on its nature:
- Article 6(1)(b) GDPR — steps taken at your request prior to entering into a contract;
- Article 6(1)(f) GDPR — legitimate interest in responding to enquiries and in the security of the website;
- Article 6(1)(c) GDPR — compliance with legal obligations;
- Article 6(1)(a) GDPR — consent, for cookies that are not strictly necessary.
Service providers — hosting, email and IT providers, and providers of video conferencing and electronic signature services, acting as processors on our behalf under a written agreement.
Public authorities — where we are required by law to provide information. Before doing so, we check that the proper procedure has been followed and that the authority is entitled to request the information.
We do not sell personal data or share it with third parties for marketing purposes.
We keep data until the purposes for which it was collected have been achieved:
- enquiries that do not lead to an engagement — up to 12 months after the last correspondence;
- technical data — up to 6 months;
- data processed on the basis of consent — until consent is withdrawn.
Where an enquiry leads to an engagement, data is kept in accordance with the Privacy Notice under Articles 13 and 14 GDPR. In certain cases data may be kept beyond these periods — for example where court or administrative proceedings are pending.
You may ask us for access to your personal data, its rectification or erasure, or restriction of its processing. You have the right to object to processing and the right to data portability.
We will consider your request and respond within one month of receiving it. Where necessary, this period may be extended by a further two months, in which case we will inform you. Requests are handled and fulfilled under the conditions of Regulation (EU) 2016/679.
Where we process your personal data on the basis of your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.
You may exercise your rights by email, by letter to the office address or in person at the office.
Where a request is made remotely, we may ask for additional identification details to make sure that it has genuinely been made by you and not by a third party.
You have the right to lodge a complaint with the Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg.
Without prejudice to that right, we are available to discuss any case in which you believe your data protection rights have been infringed.
Providing data through the contact form is voluntary. Without your name and email, however, we cannot respond to your enquiry.
Your personal data will not be transferred to countries outside the European Union and the European Economic Area. If we use a service provider in a third country, transfers will take place only subject to appropriate safeguards under Chapter V GDPR.
You will not be subject to automated decision-making, including profiling.