§Legal information

Privacy Policy

Back to the home page

Last updated: 19 July 2026

1. Data controller

The data controller is Attorney Katerina Atanasova, practising through Atanasova Law Office, a member of the Sofia Bar Association, at 19 Angel Karaliychev St., Apt. 11, Sofia, Bulgaria.

For privacy questions or to exercise your rights, contact legal@atanasovalaw.com or +359 888 493 500.

2. Scope

This policy applies when you visit this website or contact the office using the published email address, telephone number or postal address. The website provides no user accounts, online payments, newsletter or contact form.

3. Data we process

  • Website visits: technical data required to deliver and protect the page, such as IP address, request date and time, browser and device type, requested resources and technical logs.
  • Web analytics: Cloudflare Web Analytics provides aggregate metrics about visits, viewed pages and performance, without analytics cookies and, according to the provider, without individual tracking.
  • Map loading: your browser connects directly to Google Maps and Google may receive your IP address, technical device data and map interaction information.
  • Enquiries: your name, contact details, message and information you voluntarily provide about the matter.
  • Legal instructions: data needed for identification, conflict checks, protection of your rights, contract performance and legal and professional duties. Depending on the matter, this may include special-category or proceedings-related data.

4. Purposes and legal bases

  • responding to enquiries and pre-contractual steps – Article 6(1)(b) GDPR;
  • providing instructed legal services – Article 6(1)(b) GDPR;
  • legal, accounting and professional duties – Article 6(1)(c) GDPR;
  • website security, abuse prevention and legal claims – Article 6(1)(f) GDPR;
  • aggregate statistics and performance improvement through Cloudflare Web Analytics – legitimate interests under Article 6(1)(f) GDPR, to the extent GDPR applies;
  • displaying the office location through an interactive map – legitimate interest under Article 6(1)(f) GDPR.

Special-category data may be processed where necessary to establish, exercise or defend legal claims under Article 9(2)(f) GDPR. Information relating to legal services is protected by professional confidentiality.

5. Recipients

Data is disclosed only where necessary to hosting, email, support, analytics and mapping providers; courts, authorities, notaries, enforcement officers, translators, experts and other participants in instructed work; or competent authorities where required by law. Personal data is neither sold nor used for marketing profiling.

6. External providers and international transfers

The website uses Cloudflare for delivery, protection and aggregate web analytics. Cloudflare Web Analytics uses no analytics cookies and, according to the provider, does not collect or use visitors’ personal data. Google Maps loads when the contact section is reached. Data may be processed outside the EEA under applicable Chapter V GDPR safeguards. See Cloudflare’s Privacy Policy and Google’s Privacy Policy.

7. Retention

  • technical logs are retained briefly for security and diagnostics;
  • enquiries not leading to instructions are generally retained for up to 6 months unless longer retention is needed for conflict checks, legal claims or a legal duty;
  • matter files are retained as required by law, professional rules and relevant limitation periods;
  • aggregate Cloudflare Web Analytics metrics are retained according to the provider’s settings and retention periods.

8. Your rights

Subject to the GDPR, you may request access, correction, erasure, restriction, where applicable portability, object to legitimate-interest processing and withdraw consent for the future. We may request information to verify identity. Rights may be limited by legal duties, professional secrecy or the establishment, exercise or defence of legal claims.

You may complain to the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, www.cpdp.bg, or seek judicial relief.

9. Security and automated decisions

We apply appropriate organisational and technical measures. The website does not make automated decisions producing legal or similarly significant effects.

10. Changes

This policy may be updated when the website, providers or applicable requirements change. The current version and update date will be published here.