(last updated 30.09.2025)

Contents

1. Who are we?
2. What personal data does the Company process?
   1. Customers
   2. Job applicants
   3. Visitors to the Company
   4. Website visitors and users of the contact form
3. On what basis does the Company process your personal data?
   1. Customers
   2. Job applicants
   3. Visitors to the Company
   4. Website visitors and users of the contact form
4. For what purposes will the Company use your data?
   1. Customers
   2. Job applicants
   3. Company visitors
   4. Website visitors and users of the contact form
5. How long does the Company store your personal data?
   1. Customers
   2. Job applicants
   3. Visitors to the Company
   4. Website visitors and users of the contact form
6. With whom may the Company share your personal data?
7. Is data transferred to other countries?
8. How does the Company ensure the completeness of the data?
9. How does the Company protect personal data?
10. Your rights regarding your personal data
11. How to exercise your rights?
12. How to contact the Company regarding this data protection information?

1. Who are we?

We are Andrey Delchev & Partners Law Firm, BULSTAT 175470730, with registered office and address of management:
Republic of Bulgaria, Sofia, postal code 1124, Sredets district, Yavorov Quarter, 6 Gogol Street,
email: office@eurolex.bg,
telephone: +359 2 40 191 60, represented by the manager Andrey Mitkov Delchev
(hereinafter referred to as the “Company”).

With this policy, we provide information about how we process and protect your personal data.
Please read this policy carefully to understand how, for what purposes, and under what conditions
we process your personal data, and what your rights are in relation to such processing.

2. What personal data does the Company process?

2.1. Customers

• Information about you: first name, middle name, last name, personal identification number;
• Contact information: email address, postal address, telephone number;
• Any personal data related to you, including special categories of data, the processing of which is necessary for the performance of the contract concluded with you.

2.2. Job applicants

• Information about you: first name, middle name, last name, personal identification number;
• Contact information: email address, postal address, telephone number;
• Professional experience and qualifications: CVs, work experience, skills, diplomas, certificates;
• Information related to job performance evaluation: appraisals, assessments, training completed, disciplinary data;
• Any other data you choose to provide with your job application.

2.3. Visitors to the Company

The Company processes video images through a video surveillance (CCTV) system.

2.4. Website visitors and users of the contact form

We may automatically collect information about your use of the Website, such as IP address or device identifier.
This data is stored only for the duration of the visit session.

The Website uses cookies. Cookies are small files stored on your browser or device when consent is given.
Consent is not required for mandatory cookies necessary for the functioning of the Website.
Blocking all cookies may affect website functionality.
More information is available in our Cookie Policy published on the Website.

Through the contact form, we may process your first name, last name, telephone number, email address,
and any other information you voluntarily provide.

3. On what basis does the Company process your personal data?

3.1. Customers

Processing is necessary for the performance of a contract concluded with you or for taking steps at your request prior to concluding a contract.
After contract completion, processing may be based on the Company’s legitimate interest in exercising or defending legal claims.

3.2. Job applicants

Processing is voluntary and based on your consent.
You may withdraw your consent at any time without affecting prior lawful processing.

If your application is successful, additional data may be requested for employment purposes.
Failure to provide such data may prevent contract conclusion.

3.3. Visitors to the Company

Processing is based on the Company’s legitimate interest in ensuring security and safety at its premises.

3.4. Website visitors and users of the contact form

Processing is based on legitimate interest in website administration and security.
Non-essential cookies are used based on consent.
Contact form data is processed based on consent and, in some cases, legitimate interest.

4. For what purposes will the Company use your data?

4.1. Customers

• Performance of contractual obligations or pre-contractual steps;
• Compliance with legal obligations such as accounting and anti-money laundering legislation.

4.2. Job applicants

• Evaluation of applications;
• Selection of candidates;
• Communication with applicants.

4.3. Company visitors

• Ensuring security via CCTV recordings;
• Protection of personal data processing;
• Physical access control;
• Crime prevention and detection.

4.4. Website visitors and users of the contact form

For website administration, management, quality control, responding to enquiries,
and protecting the Company’s legal rights and interests.

5. How long does the Company store your personal data?

Personal data subject to statutory retention periods is stored according to applicable law unless longer retention is stated here.

5.1. Customers

Up to 5 years after contract termination, unless otherwise required by law.

5.2. Job applicants

Up to 3 months after completion of the recruitment process unless consent is given for longer retention.

5.3. Visitors to the Company

Up to 2 months from the date of recording.

5.4. Website visitors and users of the contact form

Session data is stored for the duration of the session.
Contact form correspondence is stored for up to 5 years.

6. With whom may the Company share your personal data?

• Partners and contractors;
• Service providers under contractual confidentiality obligations;
• Public authorities when legally required;
• Lawyers, consultants, and auditors.

7. Is data transferred to other countries?

Data is not transferred outside the EEA unless adequate protection exists, consent is given, or transfer is contractually necessary.

8. How does the Company ensure the completeness of the data?

Reasonable steps are taken to ensure accuracy. Please notify us of any changes.

9. How does the Company protect personal data?

Security measures include restricted access, passwords, firewalls, access controls, and organizational safeguards.

10. Your rights regarding your personal data

• Right of access and copy;
• Right to correction and restriction;
• Right to withdraw consent;
• Right to object and to erasure;
• Right to data portability.

You may lodge a complaint with the Bulgarian Commission for Personal Data Protection
(Sofia 1592, 2 Prof. Tsvetan Lazarov Blvd.;
email: kzld@cpdp.bg)
or initiate legal proceedings.

11. How to exercise your rights?

You may submit requests by email, post, or in person.
Responses are provided within one month.
Identity verification may be required.

12. How to contact the Company regarding this data protection information?

Republic of Bulgaria, Sofia, postal code 1124, Sredets district, Yavorov Quarter, 6 Gogol Street
Email: office@eurolex.bg
Telephone: +359 2 40 191 60