The rules published herein disclose our policy (“Policy”) concerning the personal data, which we collect through the website www.jennygancheva.com (“Website”) in connection with the usage of the Website, its services, content and resources. The collection, processing and storing of personal data of the Users of the Services shall be carried out by Evgeniya Gancheva Law Office (“Administrator”, “Controller”, “We”, “Us”) in its capacity of a personal data controller.
Entry into effect: May 25 2018
Please read this Policy carefully before accessing the Website or its Services. If you disagree with any of the terms, you should not access the Website or its Services in any way or form.
“Administrator” is a Lawyer’s Office, represented by Evgeniya Gancheva, member of Sofia Bar Association, with a registered address at Sofia, 1000, 8, Alabin St., Floor 4, Office 3.
2. Validity and effect
This Policy determines what happens to your personal data that you provide through the Website.
The use of the Website and its services and resources requires the provision of your consent with the hereby Policy. This Policy is always available here.
The collection, processing and storage of your personal data is done in compliance with the Bulgarian Personal data protection Act and the applicable Bulgarian and European legislation.
We reserve our right to make amendments to this Policy at any given time at our own discretion. The new versions will be published on the Website. You will be notified for the changes on the email address provided by you when sending an enquiry.
In case you disagree with the changes you should notify us in writing, after which your data stored will be deleted.
“Personal data” are all data, which contains identifiable information (e.g. name, address, telephone number, email, etc.). Before we collect and process your personal data we must receive your explicit, freely given, specific, informed and unambiguous consent.
The Policy published herein is applicable and valid only for users of the services of the Administrator, available through the Website. This Policy does not apply to social networks, other websites, platforms or companies, which the Administrator does not control but which give a link to or are connected directly or indirectly with the provided Services. You should be informed that those websites, platforms and companies have their own policies for the protection of personal data, for which we are not liable. You should become acquainted with the privacy policies of those other websites, platforms and companies before providing your personal data to them.
3. Data we collect about you
You have the right to access the Website without providing your personal data. However, the access to the services of the Website requires the provision of personal data, e.g. when sending an inquiry using the contact form.
Data provided by you
When sending an inquiry using the contact form you will be asked to provide information, which is necessary solely for the purpose of using the services and resources of the Website. The collection of this data is carried out in compliance with the applicable privacy measures.
The use of the Website requires for you to be above the age of 16.
To send a successful inquiry you will be required to fill certain fields marked as mandatory.
When sending an inquiry you will be asked to provide your:
First and last name;
Skype name or other username – when sending an inquiry regarding the service “Online consultations”.
Some categories of data you provide us with during the process of using the Website services are not able to identify you directly on their own, but can be linked to a physical person by using additional information, provided by you, therefore these categories will be handled as data regarding a physical personal who can be identified.
Providing us with optional data during the process of using the Website services, like phone number, web address and additional information regarding your inquiry, is entirely on the user’s discretion.
The user is liable for the provided contact information and other data, which are incorrect, false or are regarding third persons (in any case whenever those third persons did not give their consent), as well as for all kinds of illegal or malicious processing of personal data and information.
We do not collect personal data which:
Reveal racial or ethnic background; Reveal political, religious or philosophic beliefs;
Reveal membership in political parties or organizations or other religious, philosophical, political or syndicate structures; Are regarding the user’s health or sex life or the human genome; Are provided by users under the age of 16 without the consent of their parents or legal guardians. The Administrator will delete all information provided by or regarding users who are under the age of 16 and did not receive the consent of their parents or legal guardians for the use of the Website, its services and content.
Data we collect automatically
Each time you visit the Website, we will automatically collect the following data:
We collect device-specific information (such as your hardware model, operating system version, and unique device identifiers.
When you use the Website, we may collect and process information about your actual location. We use various technologies to determine location, including IP address, GPS, Wi-Fi access points and cell towers.
Information we collect during the usage of the Website
Information regarding other websites, which link to the Website, as well as such which the Website links to, date and hour of visit, visit duration, loading speed of the Website and other data regarding your interaction with the Website.
Cookies do not typically contain any information that personally identifies a user, but personal information that we store about you may be linked to the information stored in and obtained from cookies.
This website uses the following types of cookies:
“session cookies” which are erased when the user closes the browser;
“persistent cookies” which remain on the user’s computer/device for a pre-defined period of time;
“first-party cookies” which are set by the web server of the visited page and share the same domain;
4. For what purposes do we process your personal data?
We need the collected personal data to provide you with quality services and to provide timely technical and other assistance upon request.
We use the provided data as follows:
To provide the normal functioning of all services of the Website, including but not limited to: sending an inquiry using the contact form on the Website, for contacting the Administrator;
To improve permanently the quality of our products and services by receiving your proposals, advices and ideas for improvement of the existing and the launching of new products and services through our Website;
To send to you news, e-bulletins, promotions, interesting and useful information and other notifications. If you wish to opt-out from receiving such notifications forms us or our partners, you should notify us at any time by contacting us via contact form;
To invite you to take part in questionnaires and surveys of the opinion of users about the quality and the satisfaction with the offered Services and our website;
For other purposes not forbidden by law regarding the quality provision of all current and future services and resources on the Website.
In case of a change in the purposes, we will inform you and require your explicit consent for the processing of your personal data in accordance with the new purposes.
5. Who has access to your personal data?
Your personal data will not be transferred to third parties, unless
we have your express authorization for this;
the third parties in question provide support to us, under an agreement, for the supply of our products or the provision of our services to you;
it is required by law or when requested by a public authority;
when this is necessary to protect the rights, property and security of users of the Website or other public interest; or
in connection with the sale of a business, our company or its assets, subject to confidentiality obligations.
Our employees and consultants will have access to your personal data for the purposes of managing the Website, but are bound by a confidentiality obligation regarding the data to which they have access as part of the relevant IT base operations.
Our employees and consultants are duly informed of the importance of the compliance with such confidentiality legal duty and are liable for the compliance with that obligation.
In addition, we may disclose your personal data where such disclosure is necessary for compliance with a legal obligation to which we are subject, or in order to protect your vital interests or the vital interests of another natural person. We may also disclose your personal data where such disclosure is necessary for the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.
6. Your rights
Under the legislation in force, you are entitled to object, at any time and free of charge, to the processing of your personal data, by sending us a written request or by notifying us via contact form.
You are entitled to be informed every time before your personal data is transferred for the first time to third parties for the purposes of direct marketing, or when they are used on behalf of third parties. You are also entitled to object to this transfer or use, at any time and free of charge.
You are entitled to receive access upon notification to the personal data we store about you in a structured, commonly used and machine-readable format, by sending us a written request or by notifying us via contact form.
You are entitled to request the portability of your personal data to another data controller by sending us a written request or by notifying us via contact form.
If any of the data we have about you is incorrect or inaccurate, you may correct it by changing the information on your profile, by sending us a written request or by notifying us via contact form.
You are also entitled to request the complete erasure of your personal data by sending us a written request or by notifying us via contact form.
You may also request a restriction on the processing of your personal data with regard to specific actions on collection, processing or transferring by sending us a written request or by notifying us via contact form.
You are also entitled to request that third parties are notified about the rectification, erasure or restriction on the processing of your data so that these third parties comply with the respective request made by you.
In addition, you are entitled to file a complaint with the controlling authority which in Bulgaria, is the Commission for personal data protection (CPDP) with address: 1592 Sofia, 2 “Tsvetan Lazarov” Blvd.
7. Personal data storage and retention period
The data we collect about you will be stored on servers located within the European Union.
We shall store the personal data provided by you for a period not longer than necessary for the accomplishment of the abovementioned purposes or until the termination of the Services and/or the Website.
By exception, we are entitled to further retention of the personal data where it is necessary, for exercising the right of freedom of expression and information, for compliance with a legal obligation, for the performance of a task carried out in the public interest or in the exercise of official authority vested in us in our capacity of Controller, on the grounds of public interest in the area of public health, for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, or for the establishment, exercise or defence of legal claims.
8. Technical and organizational security measures. Risks
Being a personal data controller, we shall take all required technical and organizational measures in order to protect the data from accidental or illegal destruction or from accidental loss, from unauthorized access, amendment or distribution, as well as other illegal forms of processing.
Measures are consistent with the modern technological achievements and ensure level of protection, which corresponds to the risks associated with the processing and the type of the data, which must be protected.
All the information we receive from you will be stored on secure servers and we will implement technical and organizational measures that are suitable and necessary for your personal data to be protected with an appropriate level of security that will guarantee, in particular, the confidentiality and integrity of the data and prevent the destruction, the accidental or unlawful loss or changes, or the unauthorized disclosure or access of data.
In cases where we have supplied an access code to the Website, you acknowledge and accept that it is your responsibility to keep this code secret and confidential. We will never ask you to share this code with other people.
Notwithstanding the measures implemented to protect your data, you should be aware that the transfer of data through the Internet or other open networks is never completely secure and there is the risk that your data will be seen and used by unauthorised third parties.
For additional information, complaints or requests for exercising of your legal rights, you can contact us at:
address: 1000 Sofia, 8, Alabin St., floor 4, office 3;
phone / fax: +3592 8510703
contact form here
This policy enters into effect on 25 May 2018 and is in compliance with the requirements of Regulation (EU) 2016/679 of the European parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).