Privacy Policy

The term “personal data” referred to in this Website Privacy Policy means any information related to an individual who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data or an online identifier. 

Personal data also refers to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of an individual.

It also includes special categories of personal data (special category data) from which an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of a trade union, genetic data, biometric data, physical or mental health or condition, sex life or sexual orientation, as well as personal data relating to criminal convictions and offenses can be determined or inferred.

Information that is voluntarily provided 

Gabriela Ivanova collects personal data that Website Visitors provide voluntarily through the Website, for example, when: 

– Website visitors browse the Website contents; 

– Website visitors make inquiries via the Website, including completing online forms to contact Gabriela Ivanova, requesting online consultations, trainings, subscription plans or fee quotes, subscribing to the newsletter, etc. 

The information Gabriela Ivanova collects about Website Visitors includes the following: 

– Name; 

– Job title, level or function, role; 

– Company or organization; 

– Company data; 

– Contact information, including email address and telephone numbers; 

– Demographic information, such as industry, country, postcode, preferences and interests; 

– Information pertinent to fulfilling the services by Gabriela Ivanova to Website Visitors; 

– Any other personal data that Website Visitors voluntarily choose to provide to Gabriela Ivanova through the Website. 

Gabriela Ivanova does not intentionally collect sensitive category data, unless Website Visitors provide such data. While there may be free text boxes on the Website where Website Visitors are able to enter any information, Gabriela Ivanova does not intend to process sensitive information. Website Visitors are not required to provide, and should not disclose, sensitive personal information in the free text boxes. If Website Visitors choose to provide any sensitive personal information in this manner, Website Visitors acknowledge they consent to the collection and processing of this sensitive information.

Information that is automatically collected

To review the rules with regards to the automatic collection of personal data and use of digital tracking technologies please visit the IVANOVA Legal Solutions “Cookie Policy”.

Purposes for which personal data is collected 

Personal data about the Website visitors is collected for the following purposes: 

– To administer and manage the Website, including to confirm and authenticate the identity of Website Visitors, and prevent unauthorized access to restricted areas of the Website; 

– To personalize and enrich the browsing experience of Website Visitors by displaying content (including targeted advertising) that is more likely to be relevant and of interest to Website Visitors; 

– To analyze the data of Website Visitors and Website traffic information; 

– To capture webmetrics about the journey of Website Visitors within the Website; 

– To determine the company, organization, institution or agency that Website Visitors work for or with which Website Visitors are otherwise associated; 

– To develop the business of and services provided by IVANOVA Legal Solutions; 

– To understand how Website Visitors use the features and functions of the Website; 

– To conduct quality and risk management reviews; 

– To allow for newsletter subscription; 

– To allow for online consultations and submitting requests for subscription plans, trainings and fee quotes; 

– To allow services and information to be delivered effectively to Website Visitors; 

– Any other purpose for which Website Visitors provided information to Gabriela Ivanova. 

How is the collected personal data processed 

The Personal Data collected through the Website is primarily processed using computer and electronic means, adopting security measures aimed at reducing to a minimum the risks of destruction or loss, including accidental loss, of the data itself, unauthorized access or processing without consent, or processing that is not in conformity with the purposes of collection indicated in this Website Privacy Policy. 

In the capacity of administrator of personal data Gabriela Ivanova processes the personal data collected through the Website for a minimum duration in accordance with the specific processing purposes, as provided for in the applicable legislation and in accordance with the principle of storage limitation. 

In accordance with the requirements of the Lawyers Act personal data provided through the Website for the purpose of execution of agreements for legal assistance shall be stored for the duration of the agreement and 5 (five) years after its termination, unless provided otherwise by the applicable laws. 

Gabriela Ivanova discloses the personal data collected through the Website only as permitted by law and in the following cases: 

– Where this is appropriate for the purposes described in Section II above; 

– If required by applicable law; 

– In connection with a reorganization; 

– If Gabriela Ivanova believes that such disclosure is appropriate to enforce or apply terms of engagement, and other agreements or otherwise protect and defend Gabriela Ivanova’s rights, property or safety; 

– In order to comply with a judicial proceeding, court order or other legal obligation, or a regulatory or government inquiry; 

– With the Website Visitor’s consent. 

Please note that Gabriela Ivanova has a legal obligation to report suspicious transactions and other activity to relevant regulatory authorities under anti-money laundering, terrorist financing, insider dealing or related legislation. Gabriela Ivanova has also a legal obligation to report suspected criminal activity to the police and other law enforcement bodies. Gabriela Ivanova is not always permitted by law to inform the Website Visitors about this in advance of the disclosure, or at all. 

Third-party recipients of personal data include: 

– Professional advisors, such as law firms, tax advisors or auditors; 

– Insurers; 

– Regulatory and other professional bodies; 

– Public registries; 

– Providers of identity verification services; 

– The courts, police and law enforcement agencies; 

– Government departments and agencies; 

– Service providers; 

– Support providers.

Website Visitors have the following rights in relation to their personal data: 

– To access the personal data held by Gabriela Ivanova about them; 

– To have their personal data corrected, for example, if it is incomplete or incorrect; 

– To opt out of receiving marketing communications at any time; 

– To restrict or object to the processing of personal data or request erasing personal data (in certain circumstances and subject to applicable law); 

– To receive a copy of the personal data which they have provided to Gabriela Ivanova, in a structured, commonly used and machine-readable format (known as “data portability”) (in certain circumstances and subject to applicable law); 

– Where Website Visitors have provided personal data voluntarily, or otherwise consented to its use, the right to withdraw their consent; 

– The right to complain to a data protection authority (see Section VI below). 

If Website Visitors believe that their rights with regard to the processing of their personal data have been violated, they can file a complaint with the Bulgarian Commission for the Protection of Personal Data or with the competent administrative court. 

This Privacy Policy is in effect as of 1 December 2023. 

Please note that this Privacy Policy has been drawn up and is governed by the General Data Protection Regulation (Regulation 2016/679/EU of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as “the GDPR”). Insofar as the GDPR does not apply, this Website Privacy Policy shall be regulated by the laws of the Republic of Bulgaria. 

Changes in the applicable laws including the GDPR might require Gabriela Ivanova to amend this Website Privacy Policy from time to time. Gabriela Ivanova shall inform the Website Visitors of any such changes to the email address provided by the Website Visitors for receiving communications from Gabriela Ivanova. 

In case Website Visitors need any information or assistance with regards to the processing of their personal data or to exercise their legal rights as a data subject they can contact givanova@ivanovalegalsolutions.com. 

The application of this Website Privacy Policy and the processing of personal data carried by Gabriela Ivanova on the Website is subject to the supervision of the Commission for Personal Data Protection of the Republic of Bulgaria, address: No. 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria, website: https://www.cpdp.bg/en/, e-mail address: kzld@cpdp.bg. 

Depending on the place of residence Website Visitors might also be able to refer to another Data Protection Authority (DPA) within the European Union. A list of DPAs within the EU and their contact details is accessible at the following link: https://edpb.europa.eu/about-edpb/board/members_en.