(effective May 25, 2018)

This Privacy Policy describes how AD Simeonova & Karagyozov (“Apex Lawyers”, “we”, “us”, “our”) collects and processes personal data in the course of providing legal services and operating the law firm. We are located at 41 Hristo Botev Blvd., 5th fl., Unit 16, Sofia 1606, Bulgaria. Our registration number with the Sofia Bar Association is 140063111, and our Bulstat number is 177252424.

​This Privacy Policy applies to our website at apexlawyers.bg and all of its visitors. It also applies to those we serve within a lawyer-client relationship.

​Please read the Privacy Policy carefully as this it is legally binding when you use our services. We reserve the right to change this policy at any time, and we will take reasonable steps to advise affected individuals of any material changes, if required.

​Apex Lawyers is a business law firm based in Sofia, Bulgaria that offers legal services to a wide range of clients. We are the “data controller” of your information. Our lawyers have a professional and ethical obligation to keep confidential all information we receive within a lawyer-client relationship.

​Effective May 25, 2018, all businesses, including lawyers and law firms, must comply with the General Data Protection Regulation (“GDPR”). The GDPR will replace current data privacy law, giving more rights to individuals and more obligations to organizations processing their personal data.

If you have any questions about this privacy policy or how we collect or process your personal data, you can contact us at any time.

1. What is Personal Data?

“Personal Data” means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;

2. Personal Data We May Collect from You

We collect your personal information (a) directly from you, (b) through our interactions with us, including when you contact or request information from us using the form provided on our website or when you report a problem with our services, and (c) when you make your personal data public (for example, when you make a public post on Facebook). We may also obtain data about you from third parties.

We may collect and use the following personal data about you:

• your full name, date of birth and job title;
• contact information, such as your residential or mailing address, e-mail address and phone number;
• billing and financial information (for example, your billing address and bank account details);
• information relevant to your legal matter;
• email and other online communication;
• personal data created or generated by us in the course of providing legal services (e.g. interview notes or records of your instructions), which may include special categories of personal data and information about others such as the beneficial owners, partners, directors of a client or prospective client, other parties to a transaction or lawsuit and their legal counsel or adviser, or witnesses;
• any other personal data that you voluntarily choose to provide to us;

We may also collect additional identification information from you to comply with “Know Your Client” and/or anti-money laundering regulations.

3. Our Purposes for Collecting and Processing Personal Information

We collect and process personal data for the primary purpose of providing you with professional legal services and representation, including for the following purposes:

• to verify your identity;
• to assess whether we can act for you, including to avoid conflicts of interest;
• to establish and manage lawyer-client relationships, provide legal advice and services;
• to communicate with you (e.g. to obtain instructions or respond to your request for advice or information) and confirm your instructions;
• billing and accounting purposes;
• comply with any applicable law or court order, or the requirements of a regulatory authority (e.g. a personal data protection authority);
• to establish and maintain clients mailing lists;
• to share personal information with third parties for the purpose of providing legal services and representation in the context of litigation or other proceedings or business transactions (e.g. opposing parties, mediators, lenders, opposing or foreign counsel or advisors, witnesses, courts, and experts);
• to evaluate credit standing;
• to meet our insurance requirements;
• to protect the rights or safety of us or third parties, including to enforce our retainer agreements with you;
• to invite you to Apex Lawyers functions;
• to carry out any other purpose to which you consent; and
• as permitted by, and to comply with, legal requirements.​

4. What is Our Legal Basis for Processing Your Personal Data?

The personal data that we process may be necessary:

• for entry into, or performance of any agreements with you. This applies to the majority of the processing described in this policy;
• to comply with legal and regulatory obligations (e.g. “Know Your Client” and conflicts checks or similar obligations, accounting and record keeping);
• for the legitimate interest of us or others, where these are not overridden by your interests or fundamental rights and freedoms.

​In limited circumstances, where the legal bases for processing set out above do not apply, we may process your personal data with your consent. If we are relying on your consent to process your personal data, you have the right to withdraw your consent at any time.

5. When and How We Share Your Personal Data with Others

We may share your personal data with third parties where required by law, where it is necessary to perform our agreement with you, or where we have a legitimate interest in doing so. Such third parties may include:

• regulatory authorities;
• our advisors, such as accountants and lawyers;
• professional indemnity insurers;
• our processors to whom we outsource certain services, such as computer back-up or email hosting services;
• postal services providers;
• any party as needed in connection with legal proceedings (for example, when we retain foreign counsel on your behalf) or as required by law;

6. Your Rights under the Privacy Law

Under certain circumstances, by law you have the right to:

• request a copy of your personal data;
• correct any inaccurate or incomplete personal data we hold about you;
• request that we erase your personal data;
• request that we restrict the processing of your data;
• have your personal data transferred to another party;
• object to certain types of processing of your personal data by us;
• withdraw your consent; and
• the right to file a complaint with the supervisory authority.

7. How to Contact Us

If you have any questions, concerns or a complaint regarding the processing of your personal data, please contact us at office@apexlawyers.bg or at the following address: 41 Hristo Botev Blvd., 5th fl., Unit 16, Sofia 1606, Bulgaria.

8. Filing a Complaint

If you have any concerns regarding the treatment of your privacy, you may report it directly to the relevant supervisory authority. You may contact the Bulgarian Personal Data Protection Commission at the following address: 2 Prof. Tzvetan Lazarov St., Sofia 1592, email: kzld@cpdp.bg.