IVANOVA LEGAL SOLUTIONS
Privacy policy
This policy explains how Gabriela Stanimirova Ivanova, attorney-at-law, processes personal data submitted through the website and how you can exercise your rights.
Controller and contact
The controller is Gabriela Stanimirova Ivanova, attorney-at-law, registered with Sofia Bar Association under No. 1600762610, BULSTAT No. 176026301. Contact: givanova@ivanovalegalsolutions.com.
Data and how inquiries are sent
The form prepares an email in your email application; it does not automatically send the inquiry. The office receives the name, contact details, company, area of interest and message when you send the email. Technical operation may involve IP addresses, browser information, requests and security logs. Do not use the general form to send personal identification numbers (EGN), health data, children’s data, documents or confidential case details. A secure channel will be agreed first if needed. An inquiry does not create an attorney–client relationship.
Purposes and legal grounds
Inquiries are processed to respond and take steps at your request before an engagement; an agreed engagement is processed to perform it. Professional, accounting and other applicable legal obligations provide a separate basis. Technical data supports operation, security and abuse prevention based on the legitimate interest in protecting the website and communications. Google Analytics is activated only after your consent to statistics; it is used to understand aggregated website visits, traffic sources and page use. Optional external video loads after your active choice and consent.
Service providers and recipients
Hosting is provided through ChatGPT Sites / OpenAI and authorised technical infrastructure providers. Email communications use Microsoft Outlook / Microsoft 365. If you consent to statistics, Google Analytics / Google processes technical and usage data for that purpose. These providers may process data necessary for their respective services. Correspondence is accessible to the attorney and authorised persons as needed for their work and subject to confidentiality. Data may be disclosed to competent authorities where legally required. Data is not sold.
External video — YouTube / Google
The embedded player does not load automatically. It is activated only by “Load video from YouTube” and uses youtube-nocookie.com. After your choice, YouTube / Google receives technical data, including IP address and browser information, and may use cookies or similar technologies under its policies. Privacy-enhanced mode does not mean that no data is processed. You can remove the player using the unload button or by leaving the page; this does not undo processing already performed. Reloading the page requires a new choice.
Retention periods
Inquiries that do not lead to an engagement are kept for the time needed to respond and conclude related correspondence. Longer retention may be necessary to meet a legal obligation or establish, exercise or defend legal claims. Engagement documents and accounting records follow applicable professional, tax and accounting retention requirements. Technical logs are retained according to operational, security and troubleshooting needs and the providers’ applicable terms.
Transfers outside the EEA
International providers may process data outside the European Economic Area. Where applicable, transfers must rely on an adequacy decision or appropriate safeguards, including standard contractual clauses and supplementary measures where necessary. Contact the controller at givanova@ivanovalegalsolutions.com for information about the applicable mechanism and a copy of safeguards for the processing concerned.
Your rights and contact
Subject to applicable law, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Consent may be withdrawn at any time without affecting the lawfulness of earlier processing. Write to givanova@ivanovalegalsolutions.com; identity verification may be required. You may complain to the Bulgarian Commission for Personal Data Protection. Inquiry data is provided voluntarily, but insufficient contact details or description may prevent a response.
Updated: 4 October 2026
Data categories and retention periods
Inquiry data includes identification and contact details, company information and the content of the message. Website technical data may include IP-related information, browser type and the consent preference required for secure operation. Inquiries that do not result in an engagement are kept only for the period needed to respond and follow up. Engagement, accounting and statutory records are retained for the periods required by the applicable professional, tax and accounting rules.
Automated decisions and children
The website does not use automated decision-making or profiling that produces legal or similarly significant effects. It is not intended to collect information from children. If you believe a child has submitted personal information, please contact the office so it can be assessed and, where appropriate, removed.